last executing test programs: 16m22.465302986s ago: executing program 32 (id=1649): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x6, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) mlockall(0x2) r3 = shmget$private(0x0, 0x400000, 0x8, &(0x7f000000e000/0x400000)=nil) shmctl$SHM_LOCK(r3, 0xb) shmat(r3, &(0x7f0000ffd000/0x1000)=nil, 0x7000) shmctl$SHM_UNLOCK(r3, 0xc) 10m19.42980334s ago: executing program 33 (id=2804): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r1, 0x0, 0x15, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r3, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) r6 = dup(r5) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r6, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @empty, 0x7}], 0x1c) dup(r5) close_range(r0, 0xffffffffffffffff, 0x0) 10m4.186855598s ago: executing program 5 (id=2857): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x4, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x6) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PBUF_RING(0xffffffffffffffff, 0x17, &(0x7f0000000300)={&(0x7f0000002000)={[{&(0x7f00000013c0)="b3fce0a10aeaa8e3fb1b38a6e6b0fac013a2fcc4cb56e0313ac670216ea9e1ecfe9e6e8d6ef8fd77d706e665ca7c56f42c09bb6a44d8dcf8ce7241d445dc9a4e747e98ef3d1fbbeaa137536129dafe36095df9e972dcc8e9617a", 0x5a, 0x1}, {&(0x7f00000002c0)="b93d4dac63200c1116e7130f327468fd3a27d8e7", 0x14, 0x3}, {0x0, 0x0, 0x2}, {&(0x7f0000001700)="74d8e7c454c6e39a54bffa78f1d778d3f1844cc6cf8db325c7898f9736f5f2190ef9a53a6947a0cfe5fe9ff3c05e4233c15202f2e571cf3aac2eca8f262f30011e50fba018e33518bbb8d916e7153147c5a0c7b69fb98e0be466ddf78a75cb7206b40bc9e197278292bcf55d5b5e9a626127237ac63da56d310dc35d79ab24c28689e6cf1abf94dc2c89de7a304bb8ec390bc311c057cb51f33b579ddf6c3140", 0xa0, 0x3}, {&(0x7f00000018c0), 0x0, 0x1}]}, 0x5, 0x1}, 0x1) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, 0x0, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000000)="adcd1a9a3fc36e961ed00fe41b0cd695", 0x20) r5 = accept4$alg(r4, 0x0, 0x0, 0x0) sendmmsg$alg(r5, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000001000)=[{&(0x7f0000000100)="a92e81d0991808e33c2330164cf023", 0xf}], 0x1, 0x0, 0x0, 0x880}], 0x1, 0x80001) recvmmsg(r5, &(0x7f0000004480)=[{{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000001080)=""/4096, 0x1000}], 0x1}, 0xffff}], 0x1, 0x10041, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000000b80)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000001400)}, {&(0x7f0000000700)="ec76b3b81f8baf00b118df1ac0454d8196ee3376807e72c0", 0x18}], 0x2}}], 0x1, 0x404c041) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) 10m2.239684155s ago: executing program 5 (id=2860): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='huge=always,huge=within_size,nr_blocks=5']) chdir(&(0x7f0000000140)='./file0\x00') r0 = fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x2) sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = syz_open_dev$MSR(0x0, 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) vmsplice(0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x1) ioctl$RTC_ALM_READ(r0, 0x80247008, &(0x7f0000000000)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000380), 0x1000a) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r2, 0x0) 10m1.91833272s ago: executing program 5 (id=2863): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$HCIINQUIRY(r0, 0x800448d4, &(0x7f0000000040)={0x1, 0x2, '\x00', 0xff, 0x3}) 10m0.822260069s ago: executing program 5 (id=2867): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, 0x0, 0xe821651e0a1b45fc) r1 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) r2 = socket$inet6(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)) sendto$inet6(r2, 0x0, 0x0, 0x800, 0x0, 0x0) close(r1) syz_open_procfs$namespace(0xffffffffffffffff, 0x0) r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, 0x0, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r3, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, 0x0, 0x0) bind$bt_hci(r4, &(0x7f0000000140)={0x1f, 0xffff, 0x2}, 0x6) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r5, 0x400448ca, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_SET_NODE_ADDR(r6, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4004050}, 0x24000000) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f00c00e}, 0x0) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="a70000000000000000000000000000009500200000000000"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000200)='contention_end\x00', r7, 0x0, 0x5}, 0x18) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000840)={0x20, 0x0, 0x2, 0x70bd29, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0xb28, 0xe}}}}}, 0x20}, 0x1, 0x0, 0x0, 0x800}, 0x80c0) write(r0, &(0x7f0000000040)="07000000010001", 0x7) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) 10m0.656685946s ago: executing program 5 (id=2869): mknodat$loop(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x1000, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x8000}}) read$FUSE(r0, &(0x7f00000062c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000004200)={0x50, 0x0, r1, {0x7, 0x29, 0x0, 0x80000}}, 0x50) syz_fuse_handle_req(r0, &(0x7f00000042c0)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000feff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000970700000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000160000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000eeffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e1ff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001900000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100", 0x2000, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x0, 0x400000000000, {0x0, 0x7}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x42, 0x0) umount2(0x0, 0xb) r2 = syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0xec25, 0x8, 0x1, 0x40000333}, &(0x7f0000000dc0)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r2, 0x847ba, 0x0, 0xe, 0x0, 0x0) 9m58.065303137s ago: executing program 5 (id=2874): openat(0xffffffffffffff9c, 0x0, 0x42, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8ff20c2c10f0093d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r0}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x8}, 0x94) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)={0x44, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @loopback}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x10040057}, 0x240008c4) sendmsg$IPSET_CMD_LIST(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)={0x1c, 0x7, 0x6, 0x401, 0x0, 0x0, {0x5, 0x0, 0xa}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20004055}, 0x48000) syz_read_part_table(0x59d, &(0x7f0000000000)="$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") r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0xff, 0x7fff7ffc}]}) close_range(r3, 0xffffffffffffffff, 0x0) 9m42.814448501s ago: executing program 34 (id=2874): openat(0xffffffffffffff9c, 0x0, 0x42, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8ff20c2c10f0093d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r0}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x8}, 0x94) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)={0x44, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @loopback}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x10040057}, 0x240008c4) sendmsg$IPSET_CMD_LIST(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)={0x1c, 0x7, 0x6, 0x401, 0x0, 0x0, {0x5, 0x0, 0xa}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20004055}, 0x48000) syz_read_part_table(0x59d, &(0x7f0000000000)="$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") r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0xff, 0x7fff7ffc}]}) close_range(r3, 0xffffffffffffffff, 0x0) 8m45.513834918s ago: executing program 6 (id=3038): syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000740)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) r3 = syz_io_uring_setup(0x497, &(0x7f00000000c0)={0x0, 0x900f, 0x100, 0x4, 0x162}, &(0x7f0000000400)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f0000000040)=@IORING_OP_TEE={0x21, 0x1, 0x0, @fd, 0x0, 0x0, 0x0, 0x8, 0x1}) io_uring_enter(r3, 0x3517, 0x173d, 0x42, 0x0, 0x0) 8m39.208841478s ago: executing program 6 (id=3056): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000710423000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4000000) socket$nl_xfrm(0x10, 0x3, 0x6) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) r4 = socket$kcm(0x10, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r4, 0x1, 0x10, 0x0, 0xfffffffffffffce2) recvmsg$unix(r5, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x2122) sendmsg$NFT_MSG_GETOBJ(r0, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000800)={0x1a8, 0x13, 0xa, 0x3, 0x0, 0x0, {0xa, 0x0, 0x5}, [@NFTA_OBJ_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x4}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_OBJ_USERDATA={0x63, 0x8, "a310c64ee021b713a5a3b3354f0f50768e83aa324044cb2cc87033fd758727cc92c40a7b2881609467d00d276b849e4d8ba439877655be3709fa8f54def4cee1cab98a60e8ce600216048eb1fdec6b5d6473b216cb1798c52b8e31c99c9100"}, @NFTA_OBJ_USERDATA={0xf4, 0x8, "cf9720f9b1cc0b51237e40f8ce51b1f90ca46bc6bbdbdfbb2c1e8bc6f44102f510b1435625fbbc2dfe41e8ad44ef6f7c6ebeae93a6b647d1615b8f35f6bcef0fea4f8439fd0c8cec14a4b21bc41f8cd61f0527566019c04fad6b26752bd932375356a3450cb51bb083a7e87f4e0fd99996450ae84470cf6750880814e5b2a413f41e00321cfbc36d5668e508c82ba669825c6125f285a95e21db8ef98219bff738d594a09e61bbcc807f748312848396ede2c103f588270a1daf128f9446915bb65195fa19912312bb5646f00453dd97b90cc85ee78d9e1149b8e6149eaafa97c7418d0a643b40d801aa27cf59d787c8"}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz0\x00'}]}, 0x1a8}, 0x1, 0x0, 0x0, 0x20008010}, 0x4000001) recvmsg$unix(r5, &(0x7f0000000600)={0x0, 0x0, 0x0}, 0x14006) sendmsg$NFT_MSG_GETCHAIN(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x14, 0x4, 0xa, 0x301, 0x0, 0x0, {0xa, 0x0, 0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x4000) sendmsg$NFNL_MSG_CTHELPER_GET(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x4c, 0x1, 0x9, 0x201, 0x0, 0x0, {0x2, 0x0, 0x7}, [@NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x2}}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x13}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x3}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x4}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x3}, @NFCTH_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x4c}, 0x1, 0x0, 0x0, 0x810}, 0x4004040) 8m36.667870871s ago: executing program 6 (id=3063): openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000040)) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f00000000c0)={0x40000039}) 8m35.198185567s ago: executing program 6 (id=3066): syz_mount_image$fuse(0x0, &(0x7f0000001480)='./file0\x00', 0x1c25, 0x0, 0x0, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000002140)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r0, &(0x7f0000004180)="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", 0x2000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x90, 0x0, 0xffffffffffffffff, {0xffffffffffffffff, 0x0, 0x101, 0x0, 0x100, 0x10000000, {0x40, 0xd08, 0x0, 0x100, 0x0, 0x0, 0x7, 0x0, 0x122, 0x6000, 0x10000, 0x0, r2, 0x902}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r0, &(0x7f0000000440)={0x50, 0x0, r1, {0x7, 0x29, 0x0, 0xffffffff80000000, 0xfffc, 0x2, 0x6b, 0x2, 0x0, 0x0, 0x10, 0x933}}, 0x50) ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x800c0910, 0x200000000005) 8m33.757894478s ago: executing program 6 (id=3070): bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) connect$bt_rfcomm(0xffffffffffffffff, 0x0, 0x0) r3 = syz_open_dev$sndpcmp(&(0x7f0000000300), 0x1, 0x203) ioctl$SNDRV_PCM_IOCTL_HW_REFINE_OLD(r3, 0xc1004110, &(0x7f0000000000)={0x0, [0x2, 0x8, 0xb], [{0x0, 0xffffffff}, {0x2, 0xffffffff}, {0x0, 0xfffb}, {}, {0x4}, {}, {}, {0x7}, {0x0, 0xffffffff}, {0x0, 0x1}, {0x9, 0xffffffff}], 0x10}) r4 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040), 0x182800, 0x0) ioctl$RTC_AIE_ON(r4, 0x7001) ioctl$RTC_AIE_OFF(r4, 0x7002) syz_clone3(0x0, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="4c0000001000ffff25bd7000fddbdf2500000000", @ANYRES32=0x0, @ANYBLOB="320a050023080000240012800b0001006272696467650000140002800600090006000000991d87f5c54806085200ea37000005"], 0x4c}, 0x1, 0x0, 0x0, 0x20004000}, 0x40000) 8m31.749722588s ago: executing program 6 (id=3074): sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$unix(0x1, 0x2, 0x0) sendmsg$unix(r3, 0x0, 0x20008840) setsockopt$SO_TIMESTAMP(r3, 0x1, 0x1d, &(0x7f0000000080)=0x7, 0x4) 8m16.481884615s ago: executing program 35 (id=3074): sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$unix(0x1, 0x2, 0x0) sendmsg$unix(r3, 0x0, 0x20008840) setsockopt$SO_TIMESTAMP(r3, 0x1, 0x1d, &(0x7f0000000080)=0x7, 0x4) 6m36.195485594s ago: executing program 7 (id=3391): prlimit64(0x0, 0xe, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x29a1, &(0x7f0000000740)={0x0, 0xf807, 0x10100, 0x1, 0x20002f5, 0x0, r1}, &(0x7f0000003700)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r0, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r2, 0x2ded, 0x4004, 0x0, 0x0, 0x0) r5 = syz_open_dev$mouse(&(0x7f0000000180), 0x0, 0x2) readv(r5, &(0x7f0000000980)=[{&(0x7f0000000000)=""/58, 0x3a}], 0x1) 6m33.253925133s ago: executing program 7 (id=3400): bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) connect$bt_rfcomm(0xffffffffffffffff, 0x0, 0x0) r3 = syz_open_dev$sndpcmp(&(0x7f0000000300), 0x1, 0x203) ioctl$SNDRV_PCM_IOCTL_HW_REFINE_OLD(r3, 0xc1004110, &(0x7f0000000000)={0x0, [0x2, 0x8, 0xb], [{0x0, 0xffffffff}, {0x2, 0xffffffff}, {0x0, 0xfffb}, {}, {0x4}, {}, {}, {0x7}, {0x0, 0xffffffff}, {0x0, 0x1}, {0x9, 0xffffffff}], 0x10}) r4 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040), 0x182800, 0x0) ioctl$RTC_AIE_ON(r4, 0x7001) ioctl$RTC_AIE_OFF(r4, 0x7002) syz_clone3(0x0, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB="320a050023080000240012800b0001006272696467650000140002800600090006000000991d87f5c54806085200ea3700000500110001000000"], 0x4c}, 0x1, 0x0, 0x0, 0x20004000}, 0x40000) 6m31.10650209s ago: executing program 7 (id=3402): r0 = openat$uinput(0xffffffffffffff9c, 0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x200000005c832, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2) r1 = userfaultfd(0x801) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$MSR(0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xc, 0x0, 0x0) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x4}) ioctl$UFFDIO_COPY(r1, 0xc028aa03, &(0x7f0000000000)={&(0x7f0000800000/0x800000)=nil, &(0x7f0000199000/0x800000)=nil, 0x800000}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = io_uring_setup(0x1684, &(0x7f0000000080)={0x0, 0xce3d, 0x8000, 0x10, 0x2}) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r2, 0x10, 0x0, 0x0) syz_open_dev$evdev(0x0, 0x7, 0x42001) write$input_event(r0, 0x0, 0x0) 6m20.627842407s ago: executing program 7 (id=3425): syz_init_net_socket$rose(0xb, 0x5, 0x0) sched_setaffinity(0x0, 0xfffffffffffffe02, &(0x7f00000002c0)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) ioctl$vim2m_VIDIOC_G_FMT(0xffffffffffffffff, 0xc0285628, &(0x7f0000000080)={0x3, @win={{0x2}, 0x0, 0x0, &(0x7f0000000040), 0x0, 0x0, 0x40}}) r1 = creat(&(0x7f0000000580)='./file1\x00', 0x0) r2 = fanotify_init(0xf00, 0x1) fanotify_mark(r2, 0x105, 0x40009975, r1, 0x0) fallocate(r0, 0x0, 0x1000000, 0x3) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r0, 0x0) 6m17.346246987s ago: executing program 7 (id=3429): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='mounts\x00') r1 = epoll_create(0x4) mknod(&(0x7f0000000140)='./file0\x00', 0xc000, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000000)={0x20000009}) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff}) r4 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi4\x00', 0x0, 0x0) ioctl$COMEDI_DEVCONFIG(r4, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(r4, 0x40946400, &(0x7f00000000c0)={'dt2801\x00', [0x4f27, 0x7, 0x1, 0x16, 0x5, 0x5, 0x8, 0x80000003, 0xa, 0xfd, 0x2, 0x1, 0x4b, 0x1, 0x6, 0x7, 0xb, 0x7f, 0x3, 0x40000003, 0xc9, 0x5, 0x3, 0x20001e58, 0x9, 0xe66, 0x3, 0x995cffc, 0x4085, 0x0, 0xffffff53]}) connect$unix(r3, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$MAP_CREATE(0x0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0, 0xa0}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) socket(0x10, 0x3, 0x0) 6m16.270171824s ago: executing program 7 (id=3431): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x4, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000840)=@abs={0x0, 0x0, 0x4e20}, 0x9) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_udp_encap(r2, 0x11, 0x64, &(0x7f0000000000)=0x2, 0x4) 6m0.238837344s ago: executing program 36 (id=3431): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x4, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000840)=@abs={0x0, 0x0, 0x4e20}, 0x9) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_udp_encap(r2, 0x11, 0x64, &(0x7f0000000000)=0x2, 0x4) 5m48.987161854s ago: executing program 8 (id=3489): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="08030000000000001c0012000c000100626f6e64000000000c00"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=ANY=[@ANYBLOB="9c00000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="00120000009404006c0012800b00010062726964676500005c0002800c001e00000000000000000005002a00ff0000000500260001000000050019000000000008001a00d80300000c001f0000000000000000000500240000000000050024000100000008001a0007000000050007000700000008000a00", @ANYRES32=r2], 0x9c}}, 0x40) 5m45.766373675s ago: executing program 8 (id=3499): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800, &(0x7f0000000700), 0xff, 0x49b, &(0x7f0000001040)="$eJzs3MtvVNUfAPDvnbY8fjzaHyIKglbQSHy0tKCycKFGExeamOgCl7UtiAzU0JoIabQYg0tD4t64NPEvcOfGqAtj4lYTl4aEaGNCcTXmvugwnSltaTvS+XyS6ZxzH3PO9957Zs69p/cG0LH60z9JxPaI+DUievPsrQv0529zs9OjN2anR5Oo1d74M8mWuz47PVouWq63rcgcrkRUPkni+WRhuZMXLp4ZqVbHzxf5wamz7w1OXrj41OmzI6fGT42fGz5+/NjRoWefGX56VeJM47q+78OJ/XtfeevKa6Mnrrz9w9dptfYcyOfXx3FbN5oE1ER/utX+qmUa5z26jLrfDXbUpZPuNlaEZemKiHR39WTtvze6Yn7n9cbLH7dec/P6VBBYM+lv0yIteaYGbGBJtLsGQHuUP/Tp+W/5Wqeux3/CtRciNhXpudnp0bmb8XdHpZjes4bl90fEiZl/vkhfsdzrEAAAK5D1bZ5s1v+rxJ7sPR/r2FmMofRFxP8jYldE3BMRuyPi3ohs2fsi4v585VrvEsvvb8gv7P9Urjat8ypJ+3/P1fX95uriL976uorcjiz+nuTk6er4kWKbHI6ezWl+aJEyvn3pl89azavv/6WvtPyyL1hU4Gp3wwW6sZGpkdXaCNcuRezrbhZ/cnMkID0C9kbEvuV99M4ycfrxr/a3Wuj28S9iFcaZal9GPJbv/5loiL+ULD4+ObglquNHBsujYqEff778eqvy7yj+VXDt4AN5Yn7/NyzR+3eSj9f2RLU6fn5y+WVc/u3Tluc0Kz3+NyVvZmPWP72TT/tgZGrq/FDEpuTVLF+e02XTh+fXLfPl8unxf/hQ8/a/q1gnjT/dSulBfCAiHoyIh4q6PxwRByPi0CLxf//iI+8uEn8SSbRv/1+KGGv6/Xfz+O9L6sfrV5DoOvPdN61GzOv3fy1ptf+PxUz2XZvLvv9uY6kVvMPNBwAAAHeFSkRsj6QykKf7t0elMjCQ/w//7vhfpToxOfXEyYn3z43l9wj0RU+lvNLVW3c9dCiZKT4xzw8X14rL+UeL68afd23N8gOjE9WxNscOnW7bre0/yvaf+qOr3bUD1pz7taBzNbb/SpvqAay/pfz+OxeAjenW9r8l/bO1XXUB1pfzf+hczdr/Rw15/X/YmBY+AOj3Jo+sAzYi/X/oXNo/dC7tHzpSfif8lVjJff0rT5Q3C6z8c7Ys+Q7/TkmUT7xYy7K2xvyUqLQ95A5KpC1mfQudf4YKAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADA3ezfAAAA//+5XeWQ") socket$netlink(0x10, 0x3, 0x0) socket(0x11, 0x800000003, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) socket(0x10, 0x803, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e25}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r3, 0xaf01, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = eventfd2(0x5, 0x80800) socket$unix(0x1, 0x5, 0x0) ioctl$VHOST_SET_VRING_KICK(r3, 0x4008af20, &(0x7f00000000c0)={0x0, r4}) sched_setaffinity(0x0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x143142, 0x40) 5m44.145141326s ago: executing program 8 (id=3500): socket$nl_generic(0x10, 0x3, 0x10) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000015c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(0xffffffffffffffff, &(0x7f00000000c0)={0x50, 0x0, 0x0, {0x7, 0x2b, 0xfffffffd, 0x34044504, 0x0, 0xfffe, 0x6, 0xfffffffe, 0x0, 0x0, 0x100, 0x80}}, 0x50) write$FUSE_INTERRUPT(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x2, &(0x7f0000000180)=@gcm_256={{0x303}, "0587a06a93f2aad4", "9b84f987950ff3df25fa8f46983d34157e047d27ae4a66a6d15608a32cbaa5bc", '\x00', "be0ea450d5a50003"}, 0x38) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000600)=ANY=[], 0x48) r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x9d, 0xea, 0x78, 0x40, 0x18b4, 0xfffb, 0xdc7b, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x1, 0x0, 0x0, 0xa0, 0x1f, 0x71}}]}}]}}, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000008c0)={0x1c, &(0x7f0000000000)={0x0, 0x0, 0x1, "01"}, 0x0, 0x0}) r1 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) ioctl$I2C_RDWR(r1, 0x707, &(0x7f0000000a40)={&(0x7f0000000140)=[{0x18, 0x4000, 0x0, &(0x7f00000001c0)}], 0x1}) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) 5m41.829602545s ago: executing program 8 (id=3511): syz_mount_image$xfs(&(0x7f0000000040), &(0x7f0000009740)='./file0\x00', 0x4000000, &(0x7f0000000200)={[{@pquota}, {@discard}, {@swalloc}, {@grpid}, {@logbufs={'logbufs', 0x3d, 0x3}}, {@noalign}, {@inode64}, {@grpquota}]}, 0x1, 0x97ee, &(0x7f0000012f40)="$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") mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000380), 0x0, &(0x7f0000000400)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r0 = openat$dir(0xffffffffffffff9c, 0x0, 0x101000, 0x16d) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r1, 0x8004587d, &(0x7f0000000080)={@desc={0x1, 0x0, @desc2}}) getdents64(r0, 0x0, 0x0) 5m38.848276499s ago: executing program 8 (id=3516): syz_usb_connect(0x0, 0x2d, &(0x7f0000000b80)={{0x12, 0x1, 0x0, 0x69, 0xdd, 0x34, 0x40, 0xccd, 0x93, 0x235a, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x6c, 0xe0, 0x8d, 0x0, [], [{{0x9, 0x5, 0x2}}]}}]}}]}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x24000000) 5m37.650276187s ago: executing program 8 (id=3520): r0 = syz_open_dev$video(&(0x7f0000000040), 0x7, 0x0) ioctl$VIDIOC_G_AUDIO(r0, 0x80345621, 0x0) 5m36.627634998s ago: executing program 37 (id=3520): r0 = syz_open_dev$video(&(0x7f0000000040), 0x7, 0x0) ioctl$VIDIOC_G_AUDIO(r0, 0x80345621, 0x0) 23.975514768s ago: executing program 9 (id=5096): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) sendmsg$AUDIT_DEL_RULE(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000740)=ANY=[@ANYBLOB="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"], 0x420}, 0x1, 0x0, 0x0, 0x800}, 0x40) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x4, 0xe, &(0x7f0000000880)=ANY=[@ANYBLOB="b702000000000000bfa300000000000007030000f0ffffff7a0af0ff0200000079a4f0ff00000000b706000000000081ad64020000000000450404000100ff0f1704000001130a00b7050000010000006a0af2fe000000008500000012000000b700000000000000950000000000000000e154cd8445974b26c933f7ffffffffe4fbffffff55bb2007ee51050512b5b42128aa090a79507df79f298129daa7a6b2f91af50342115e17392ac627c87881c000006146001e04aeacea799a22a2fa798b5adc43eb27d53319d0ad229e5752548300000000dbc2777df150b7cdd77b85b941092314fd085f028f2ed1a4535550614e09d6378198a6097a670838337af2abd55a87ac0394b2f92ffab7d153d62058d0a413b2173619ccf55520f22c9ca8b6712f3024b7041b1df65b3e1b9bf115646d14ce53d13d0ccacda1ef0900094fa737c28b99938512c816fdcceaede3faedc51d29a47fc813a2ec00f4c7a53ac271d6d7f4ea6bf97f2f33e2ea2e534300bcb3fdc4b4861004eefbda7f54f82a804da4f85db47a4a69bf9bc5fa96ee293fbd165a5a68488e40b030166565a097b1b44b451de736bb6d43db8db03d4b7745fef1d04ec633dee254a6d491b849a5a7"], 0x0}, 0x94) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$bt_hci(r0, 0x84, 0x80, &(0x7f0000000a40)=""/4067, &(0x7f00000000c0)=0xfe3) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00'}) write$tun(r1, &(0x7f0000000280)={@val={0x6f01, 0x800}, @val={0x1, 0x0, 0x27, 0x0, 0x27}, @mpls={[], @ipv4=@tcp={{0x6, 0x4, 0x0, 0x0, 0xfd5e, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffff20, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x5, 0xb, 0x0, 0x700, 0x0, 0x18, {[@window={0x9, 0xfffffffffffffec4}, @timestamp={0x5, 0x2, 0xffffff07}, @generic={0x0, 0x2, "d588380003c1"}]}}}}}}, 0xfd6c) 22.665102506s ago: executing program 9 (id=5100): r0 = accept(0xffffffffffffffff, 0x0, &(0x7f0000000500)) setsockopt$inet6_group_source_req(r0, 0x29, 0x2c, &(0x7f0000000540)={0x8, {{0xa, 0x4e21, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}, 0x7ff}}, {{0xa, 0x4e24, 0x50, @loopback, 0x8cfb}}}, 0x108) r1 = socket$unix(0x1, 0x2, 0x0) bind$unix(r1, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r2 = socket$unix(0x1, 0x2, 0x0) r3 = socket$unix(0x1, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x1f00) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x8, &(0x7f0000005c00)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffffffffffffff7e}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x13, r5, 0x0) connect$unix(r3, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmmsg(r3, &(0x7f0000002dc0), 0x307017fdb7a66cb, 0x3ec0) connect$unix(r2, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, 0x3a, 0x301, 0x70bd25, 0xfffffffc, {0x8}}, 0x14}, 0x1, 0x0, 0x0, 0x448d3}, 0x0) syz_genetlink_get_family_id$SEG6(&(0x7f0000000080), 0xffffffffffffffff) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000240), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'wpan4\x00', 0x0}) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r6, &(0x7f0000000400)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000003c0)={&(0x7f0000000300)={0x40, r7, 0x100, 0x70bd27, 0x25dfdbfb, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0x28}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r8}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5, 0x36, 0x1}]}, 0x40}, 0x1, 0x0, 0x0, 0x24044005}, 0x2c040001) ppoll(&(0x7f0000000200)=[{r2, 0x6600}], 0x1, 0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) connect$unix(r2, &(0x7f0000000340)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) 20.180435533s ago: executing program 9 (id=5111): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[], 0x34}, 0x1, 0x0, 0x0, 0x801}, 0x4000000) syz_usb_connect(0x5, 0x24, &(0x7f0000002040)=ANY=[@ANYBLOB="12010000fe76181004160780a6af011703010902120001000000000904"], 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000000380), 0x3, 0xbc01) ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(r0, 0x80dc5521, &(0x7f0000000180)=""/135) ioctl$SOUND_MIXER_READ_RECSRC(0xffffffffffffffff, 0x80044dff, &(0x7f0000000100)) 17.940890244s ago: executing program 9 (id=5121): syz_open_dev$hidraw(&(0x7f0000000080), 0x0, 0x418000) syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000090000082502000000000000000109025c00020100f92a0904000001020900000524060001053408fa6e0d240f0100000000000d000a0006471a010000190581"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000000)={0x38, 0x0, 0x4, 0x8001, 0x0, 0xb49, 0x200000000002, 0x7, 0x8, 0x5}, 0x0) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) 13.820470896s ago: executing program 9 (id=5137): syz_open_procfs(0x0, &(0x7f0000000380)='maps\x00') r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000004c0)={'bond0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="440000001000010025bd7000fadbdf2500000000", @ANYRES32=r1, @ANYBLOB="138000002b9201002400128009000100626f6e6400000000140002800800", @ANYRES64=r0], 0x44}, 0x1, 0x0, 0x0, 0x40448e0}, 0x4000) 12.549897393s ago: executing program 9 (id=5143): socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b34, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r2, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, r3, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_HWPT_ALLOC$NONE(r2, 0x3b89, &(0x7f0000000180)={0x28, 0x1, r4, r3, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_HWPT_ALLOC$TEST(r2, 0x3b89, &(0x7f0000000200)={0x28, 0x0, r4, r5, 0x0, 0x0, 0xdead, 0x4, &(0x7f0000000240)}) ioctl$IOMMU_HWPT_INVALIDATE$TEST(r2, 0x3b8d, &(0x7f0000000280)={0x20, r6, &(0x7f0000000480)=[{0x1, 0x1}, {0x0, 0x2}], 0xdeadbeef, 0x8, 0x200000b9}) 10.312748545s ago: executing program 1 (id=5155): r0 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581", @ANYBLOB="f7", @ANYRESDEC], 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r2, 0x0, 0x0) syz_usb_connect$lan78xx(0x3, 0x3f, &(0x7f00000000c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) r3 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d24"], 0x0) r4 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_control_io(r3, 0x0, 0x0) read$char_usb(r4, 0x0, 0x0) read$char_usb(r1, 0x0, 0x0) syz_usb_ep_write(r0, 0x81, 0x8, &(0x7f0000000080)="00012c615bc20000") syz_usb_disconnect(r0) syz_usb_connect(0x0, 0x3f, 0x0, 0x0) syz_usb_connect$cdc_ncm(0x0, 0x72, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) 8.310119592s ago: executing program 4 (id=5163): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002000)={0x18, 0xb, &(0x7f0000000640)=ANY=[], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r0, 0x0, 0xd}, 0x18) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_SET(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x34}}, 0x0) 8.277275875s ago: executing program 2 (id=5164): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)={0x50, 0x2, 0x6, 0x5, 0x0, 0x0, {0x0, 0x0, 0xffff}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_NETMASK={0x5, 0x14, 0x54}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x50}}, 0x20008000) 8.049655114s ago: executing program 3 (id=5165): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000007c0)=ANY=[@ANYRES32=r3, @ANYRES32=r2, @ANYBLOB='&'], 0x10) sendmsg$inet(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000bc0)=[{&(0x7f0000000080)='}', 0x1}], 0x1}, 0x2400c0b5) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r3}, 0x0, &(0x7f00000002c0)=r0}, 0x20) sendmsg$inet(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0xfdef}], 0x1}, 0x11) 8.048492064s ago: executing program 4 (id=5166): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)=@newsa={0x160, 0x10, 0x713, 0x70bd26, 0x0, {{@in6=@ipv4={'\x00', '\xff\xff', @multicast2}, @in=@dev={0xac, 0x14, 0x14, 0x35}, 0x4e22, 0x1, 0x0, 0x3, 0x2, 0x0, 0x0, 0x3a, 0x0, 0xffffffffffffffff}, {@in6=@remote, 0x0, 0x32}, @in6=@local, {0x0, 0x0, 0x8, 0xa, 0x6, 0x0, 0x0, 0x3}, {0x0, 0x0, 0x2, 0xfffffffffffffff8}, {0xc, 0x0, 0x2}, 0x70bd29, 0x0, 0x2, 0x1, 0x0, 0x64}, [@algo_aead={0x67, 0x12, {{'rfc4543(gcm(aes))\x00'}, 0xd8, 0x80, "316f74eeac053deb73fc018493cc121927a9bca207141b9a451c00"}}, @tfcpad={0x8, 0x16, 0x4}]}, 0x160}, 0x1, 0x0, 0x0, 0xc0}, 0x0) 7.915868486s ago: executing program 2 (id=5167): socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r1, 0x1, 0x4c, &(0x7f0000000000), 0x4) sendmsg$inet(r0, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) recvmsg$unix(r1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4a, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x9323, 0xfffffffffffffffe, 0x0, 0x2}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff, 0x2}, 0x0, 0x0) close(0x4) 7.806915586s ago: executing program 4 (id=5168): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f0000008040)=[{{0x0, 0x0, 0x0}}], 0x1, 0x20008090) ppoll(&(0x7f0000000040)=[{r1, 0x4}], 0x1, 0x0, 0x0, 0x0) 7.782094671s ago: executing program 3 (id=5169): sendmsg$AUDIT_DEL_RULE(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000740)=ANY=[@ANYBLOB="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"], 0x420}, 0x1, 0x0, 0x0, 0x800}, 0x40) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000600)={{0x14}, [@NFT_MSG_NEWRULE={0x74, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2, 0x0, 0xfffe}, [@NFTA_RULE_EXPRESSIONS={0x10, 0x4, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, @dup={{0x8}, @void}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x44, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @meta={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_META_DREG={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x10}]}}}, {0x1c, 0x1, 0x0, 0x1, @masq={{0x9}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_MASQ_REG_PROTO_MIN={0x8, 0x2, 0x1, 0x0, 0x8}]}}}]}]}], {0x14}}, 0x9c}, 0x1, 0x0, 0x0, 0x24040800}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x4, 0xe, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], 0x0}, 0x94) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$bt_hci(r0, 0x84, 0x80, &(0x7f0000000a40)=""/4067, &(0x7f00000000c0)=0xfe3) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00'}) write$tun(r1, &(0x7f0000000280)={@val={0x6f01, 0x800}, @val={0x1, 0x0, 0x27, 0x0, 0x27}, @mpls={[], @ipv4=@tcp={{0x6, 0x4, 0x0, 0x0, 0xfd5e, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffff20, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x5, 0xb, 0x0, 0x700, 0x0, 0x18, {[@window={0x9, 0xfffffffffffffec4}, @timestamp={0x5, 0x2, 0xffffff07}, @generic={0x0, 0x2, "d588380003c1"}]}}}}}}, 0xfd6c) 7.690387345s ago: executing program 2 (id=5170): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/consoles\x00', 0x0, 0x0) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000400007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='sched_switch\x00', r5}, 0x10) setsockopt$inet_tcp_int(r3, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r3, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe3}]}, 0x10) sendto$inet(r3, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(r3, &(0x7f0000004a80)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000007c0)="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", 0x16d}], 0x1}}], 0x1, 0x400c0) setsockopt$sock_int(r3, 0x1, 0x8, 0x0, 0x0) sendto$inet(r3, &(0x7f0000000580)="17", 0x1d4c, 0x10048095, 0x0, 0x0) 7.672944679s ago: executing program 0 (id=5171): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002a20702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000280)='kfree\x00', r0}, 0x18) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000b00)={0x28, 0x40, 0x107, 0x70bd2b, 0x0, {0x4, 0x7c}, [@nested={0x8, 0x142, 0x0, 0x1, [@typed={0x4, 0x7}]}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x48815}, 0xc020) 7.526160573s ago: executing program 4 (id=5172): socket$nl_netfilter(0x10, 0x3, 0xc) socket(0x5, 0x3, 0x3d) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000006c0)=ANY=[], 0x33fe0}}, 0x40010) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x80082, 0x0) pipe(&(0x7f0000000140)) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$rds(0x15, 0x5, 0x0) bind$rds(r4, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r4, &(0x7f00000001c0)={&(0x7f0000000080)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000440)=[{&(0x7f0000000880)=""/4092, 0xffc}], 0x1, 0x0, 0x0, 0x20000800}, 0x0) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x8000002, 0xfffffffa, @rand_addr, 0x5}, 0x1c) sendto$inet6(r3, &(0x7f0000000080)='D', 0x1, 0x404c814, 0x0, 0x0) r5 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000180)={'wlan1\x00'}) sendmsg$nl_route_sched(r5, 0x0, 0x880) r6 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r6, 0xc01864c6, &(0x7f0000000100)={0x0, 0x0, 0x800}) socket$kcm(0x2, 0xb, 0x2) r7 = syz_open_dev$video(&(0x7f0000000280), 0x101, 0xab02) ioctl$VIDIOC_S_INPUT(r7, 0xc0045627, &(0x7f0000000180)=0x1) 6.678340772s ago: executing program 2 (id=5173): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) r0 = socket(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'veth1_to_batadv\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000001c00110c0000001400000f00070000", @ANYRES32=r2, @ANYBLOB="800202000a0002"], 0x48}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000140), 0x4924b68, 0x0) 6.562900768s ago: executing program 0 (id=5174): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="10000000040000000800000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008900000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, &(0x7f0000000000), &(0x7f0000000040)=r1}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r1, 0x2000000, 0xe, 0x0, &(0x7f0000000180)="c9f7b98600"/14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(r2, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0xf27235cb8dee9c5c}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x28, 0x3, 0x6, 0x5, 0x0, 0x0, {0x0, 0x0, 0x7}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x8010}, 0x14) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000004c0)={'wlan1\x00'}) socket$netlink(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r3, &(0x7f0000000180)={0xa, 0x4001, 0x1, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x45}}, 0x3f}, 0x1c) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)={0x20, r5, 0x1, 0x70bd25, 0x0, {0x7}, [@MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x80}, 0x8) 6.485649183s ago: executing program 1 (id=5175): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) writev(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000000140)="89e7ee0c7cdad9b4b47380c988cafbe863ca162afbdb9ceacc04d25983c69fa21c815735a1597b3eb59cb760d833def78e56a9", 0x33}, {&(0x7f0000000100)="f15e327d935bdfeb", 0x8}], 0x2) 6.31508472s ago: executing program 2 (id=5176): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) r3 = socket(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r5) getsockname$packet(r5, &(0x7f0000000680)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r6, @ANYBLOB="01000000010000001c0012000c00010062726964"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@newqdisc={0x2c, 0x24, 0x5820a61ca228651, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000780)=@newtfilter={0x34, 0x28, 0x575ac7824d421509, 0x70bd2a, 0x4, {0x0, 0x0, 0x0, r6, {0xffe0}, {0x1}, {0x4, 0x3d}}, [@filter_kind_options=@f_basic={{0xa}, {0x4}}]}, 0x34}}, 0x40) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=@delchain={0x24, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0x0, 0x1}}}, 0x24}}, 0x10) 6.237557698s ago: executing program 3 (id=5177): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000015c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0xb0, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x88, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}]}}}, {0x50, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x40, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_BITWISE_DATA={0x1c, 0x7, 0x0, 0x1, [@NFTA_DATA_VALUE={0x15, 0x1, "4ef35d87dec8ebfe7be74ab641f8d8563c"}]}, @NFTA_BITWISE_OP={0x8, 0x6, 0x1, 0x0, 0x3}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x124}}, 0x0) 5.834149313s ago: executing program 2 (id=5178): openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) r2 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000200), 0x80, 0x0) ioctl$SNDRV_PCM_IOCTL_DRAIN(r2, 0x4144, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$sock_inet_SIOCGIFDSTADDR(r1, 0x8917, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000005340)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004000}, 0x2000c880) syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000020000082505a3a440000102030109023b000101"], 0x0) syz_open_dev$loop(0x0, 0x2, 0x0) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000000)={0xfc, {"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", 0x1000}}, 0x1006) r3 = syz_open_dev$vim2m(&(0x7f0000000000), 0x1, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r3, 0xc100565c, &(0x7f0000000140)={0x0, 0x40, 0x4, {0x2, @raw_data="3d924b8271394fa4ec01eb92492ff84715d1a004d08b012a7cafe27a5f313d31bbdae50511ca5be6bfe92437ed0d21b5180e375be56b3b9306d7dbb26bf9f22de7ac7681cca450055250217bdf1113b4258293ba4efed33147bda8454dd115bd5ba066ba06f2854cc96db9a98055cbde9fd084a1223ada91ed2e832907a01ab5ee65f997b617f73d1aa5a6dfc47acdc5eb834f8e448469d235e4380cbcc3310200970349a3c1374ffec96177b67caa0656f9664277cadb8597e7d911ad1da457ef9744b0993c57a7"}}) ioctl$vim2m_VIDIOC_PREPARE_BUF(r3, 0xc058565d, &(0x7f00000003c0)=@fd={0x0, 0x2, 0x4, 0x100000, 0xf86, {0x0, 0x2710}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "f06e902d"}, 0x0, 0x4, {}, 0x5c000000}) r4 = openat$nvram(0xffffffffffffff9c, &(0x7f0000002400), 0x2000, 0x0) r5 = socket$inet(0x2, 0x1, 0x100) setsockopt$sock_int(r5, 0x1, 0x2, &(0x7f0000000040)=0x7f, 0x4) write$tun(r2, &(0x7f0000000240)=ANY=[@ANYBLOB="02a6ac"], 0x3) bind$inet(r5, &(0x7f0000e15000)={0x2, 0x4e20, @multicast2}, 0x10) r6 = socket$inet(0x2, 0x1, 0x0) bind$inet(r6, &(0x7f0000e15000)={0x2, 0x4e20, @multicast2}, 0x10) listen(r6, 0x7) listen(r5, 0x0) pread64(r4, 0x0, 0x0, 0x80800020) keyctl$session_to_parent(0x12) 5.796070971s ago: executing program 3 (id=5179): bpf$MAP_CREATE(0x0, 0x0, 0x50) socket$netlink(0x10, 0x3, 0xb) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) keyctl$set_reqkey_keyring(0xf, 0xfffffffb) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x88002, 0x0) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) preadv(r3, &(0x7f0000000040)=[{&(0x7f0000000300)=""/4096, 0x1000}], 0x1, 0x1, 0x30bc6288) 4.516018696s ago: executing program 0 (id=5180): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)={0x50, 0x2, 0x6, 0x5, 0x0, 0x0, {0x0, 0x0, 0xffff}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_NETMASK={0x5, 0x14, 0x54}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x50}}, 0x20008000) 4.515646791s ago: executing program 3 (id=5181): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$rds(0xffffffffffffffff, 0x0, 0x8) unshare(0x28000600) r2 = syz_io_uring_setup(0x88f, &(0x7f0000000300)={0x0, 0x1aee2, 0x0, 0x9, 0xbfdffffc}, &(0x7f00000000c0)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, r2, 0x0, &(0x7f0000000040)='./file0\x00', 0x50, 0x183000, 0x12345}) read$FUSE(0xffffffffffffffff, 0x0, 0x0) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) io_uring_enter(r2, 0x47f6, 0x40, 0x2, 0x0, 0x0) 4.410450355s ago: executing program 1 (id=5182): socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r1, 0x1, 0x4c, &(0x7f0000000000), 0x4) sendmsg$inet(r0, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) recvmsg$unix(r1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4a, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x9323, 0xfffffffffffffffe, 0x0, 0x2}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff, 0x2}, 0x0, 0x0) close(0x4) 4.132106887s ago: executing program 0 (id=5183): sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x5) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe3}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(r0, &(0x7f0000004a80)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000007c0)="16ecaaaeb69ec105e9dd534f1bd77f8051db33a07055391264d230088248daa370b0bc75883a507be52e9744ca1479096e0a1d347324d779b5fe3167e722437570ee9c472c6399c49d1473a32016f512dee12a2f9dc3bd6060001c8139ae43a3cbf08d05c66712c9a0b2994264c8614da6c0251fdeb06bcb94139d6b3df7bd60ac9d53ac834c97388aa638bb50457e57f90b3e8e11975ebd2c81a2a13cb5dc9b7fae4411137ad278cf52dd8d32de5b07a396cd19a242b247d2ca16ce1a663064abfc1ba416f7b1fc251409afd53815f775ab04810637bd8c9b2606a8512ee5622829a369d77900cf", 0xe8}], 0x1}}], 0x1, 0x400c0) sendto$inet(r0, &(0x7f0000000580)="17", 0x1d4c, 0x10048095, 0x0, 0x0) 3.987294979s ago: executing program 1 (id=5184): r0 = accept(0xffffffffffffffff, 0x0, &(0x7f0000000500)) setsockopt$inet6_group_source_req(r0, 0x29, 0x2c, &(0x7f0000000540)={0x8, {{0xa, 0x4e21, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}, 0x7ff}}, {{0xa, 0x4e24, 0x50, @loopback, 0x8cfb}}}, 0x108) r1 = socket$unix(0x1, 0x2, 0x0) bind$unix(r1, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r2 = socket$unix(0x1, 0x2, 0x0) r3 = socket$unix(0x1, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x1f00) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x8, &(0x7f0000005c00)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffffffffffffff7e}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x13, r5, 0x1000) connect$unix(r3, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmmsg(r3, &(0x7f0000002dc0), 0x307017fdb7a66cb, 0x3ec0) connect$unix(r2, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, 0x3a, 0x301, 0x70bd25, 0xfffffffc, {0x8}}, 0x14}, 0x1, 0x0, 0x0, 0x448d3}, 0x0) syz_genetlink_get_family_id$SEG6(&(0x7f0000000080), 0xffffffffffffffff) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000240), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'wpan4\x00', 0x0}) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r6, &(0x7f0000000400)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000003c0)={&(0x7f0000000300)={0x40, r7, 0x100, 0x70bd27, 0x25dfdbfb, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0x28}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r8}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5, 0x36, 0x1}]}, 0x40}, 0x1, 0x0, 0x0, 0x24044005}, 0x2c040001) ppoll(&(0x7f0000000200)=[{r2, 0x6600}], 0x1, 0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) connect$unix(r2, &(0x7f0000000340)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) 3.598312297s ago: executing program 0 (id=5185): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/consoles\x00', 0x0, 0x0) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000400007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='sched_switch\x00', r5}, 0x10) setsockopt$inet_tcp_int(r3, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r3, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe3}]}, 0x10) sendto$inet(r3, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(r3, &(0x7f0000004a80)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000007c0)="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", 0x16d}], 0x1}}], 0x1, 0x400c0) setsockopt$sock_int(r3, 0x1, 0x8, 0x0, 0x0) sendto$inet(r3, &(0x7f0000000580)="17", 0x1d4c, 0x10048095, 0x0, 0x0) 2.356417476s ago: executing program 4 (id=5186): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000000380)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000200)='veno', 0xfe01) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000)=[@mss, @sack_perm, @window={0x3, 0x7}, @mss={0x2, 0xfff}, @window={0x3, 0x0, 0x401}, @window], 0x20000000000000e4) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0x8dcacfa1c6c2afd6, 0xc9100120, 0x0, 0xfffffffffffffd25) 1.047750709s ago: executing program 1 (id=5187): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB], 0xe0}}, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)=[{0x0}], 0x1}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="740000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="2b030040000000004c0012800b00010067656e65766500003c0002800800010001000000140007000000000000000005000000000000000108000f"], 0x74}}, 0x24005000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=@newqdisc={0x24, 0x24, 0x8, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x5}, {0xffff, 0xffff}, {0xfff3, 0x6}}}, 0x24}}, 0x8040) r1 = socket$netlink(0x10, 0x3, 0x0) socket$kcm(0x21, 0x2, 0x2) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) 913.416328ms ago: executing program 4 (id=5188): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r2) getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x4000800) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=@delchain={0x48, 0x64, 0xf31, 0xfffffffe, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xfff3}, {0xfff3, 0xffff}, {0xa, 0x1b}}, [@filter_kind_options=@f_flower={{0xb}, {0x18, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x14, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0xc, 0x2, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x1}]}, @TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x4}]}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40054}, 0x4804) 598.300414ms ago: executing program 3 (id=5189): r0 = socket$inet6(0xa, 0x2, 0x0) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000f80)={0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x4, 0xffffffffffffffff, 0x500}, 0x38) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x17, &(0x7f0000004240)=0x2, 0x4) recvmmsg(r0, &(0x7f0000000d80)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=""/243, 0xf3}, 0xf338}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x5c}, 0xd}], 0x3fffe16, 0x2, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r2 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r2, &(0x7f0000000040)={0x28, 0x0, 0x2710, @local}, 0x10) socket$packet(0x11, 0x3, 0x300) r3 = socket(0x2, 0x2, 0x1) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'bridge0\x00'}) listen(r2, 0x0) connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000640)={0x28, 0x0, 0x2710, @local}, 0x10) socket(0x2, 0x80805, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) shutdown(0xffffffffffffffff, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xf, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b7000000"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={0x0, r4}, 0x18) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x2, 0x8000000000, 0x8, 0x8000000000000000}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x3, 0x0, 0x0, 0x7fffffff, 0xfffffffffffffffc}, 0x0, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000001, &(0x7f0000000300)={0xa, 0x4e20, 0x5, @mcast1}, 0x1c) 233.78914ms ago: executing program 1 (id=5190): openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000580)='cgroup.controllers\x00', 0x0, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@empty, @in6=@mcast2, 0x0, 0x8, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x1, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x40800000000000, 0x800000000000002}}}, 0xb8}}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001100)=@migrate={0xa0, 0x21, 0x1, 0x0, 0x0, {{@in6=@private2={0xfc, 0x2, '\x00', 0x1}, @in6=@dev={0xfe, 0x80, '\x00', 0x3a}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0xa0, 0x2e}}, [@migrate={0x50, 0x11, [{@in=@loopback=0xa010101, @in=@loopback, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, @in6=@loopback, 0x3c, 0x4, 0x0, 0x0, 0xa, 0xa}]}]}, 0xa0}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 0s ago: executing program 0 (id=5191): keyctl$clear(0x5, 0xffffffffffffffff) add_key$user(&(0x7f0000000380), &(0x7f0000000000)={'syz', 0x0}, &(0x7f0000000080)='W', 0x1, 0xfffffffffffffffe) r0 = add_key$user(&(0x7f00000001c0), &(0x7f00000005c0), &(0x7f0000000140)="0f000000c3b6817c453ab4cf1735196b2ea9000000f7ff000017607de36f61e21108ca0e7530f3e21d6f26f4068ba4488ad6a8fe37158b33589672c31a4d980becfe4d1000"/83, 0x53, 0xfffffffffffffffd) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = add_key$user(&(0x7f0000000100), &(0x7f00000002c0)={'syz', 0x3}, &(0x7f0000000300)="ed38e97b0e1ab7f827f2b460b898c6e595796e3a866c578bab933e3d12baf0432c7874f4c11cff720542d3dcfc3fc9e3f02173109d17806354e32982442cef1303b07e7f3ca02ef77a1cd147c5985781e6dcafcb6263be85eb3f5cb4352457b76b107958fc9e", 0x66, 0xffffffffffffffff) r2 = add_key$user(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x1}, &(0x7f0000000440)="cc1cdb743be8083f6cbcb38af4f2d297719b966c00765973fe3393a860db15b160", 0x21, 0xfffffffffffffffb) keyctl$dh_compute(0x17, &(0x7f0000000480)={r1, r2, r0}, 0x0, 0xfffffffffffffdd2, 0x0) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)={0x50, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}]}, 0x50}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000000000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r5, 0x0, 0x0) recvmmsg(r5, 0x0, 0x0, 0x20, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000300)={'geneve1\x00', 0x0}) sendto$packet(r6, &(0x7f00000002c0), 0x0, 0x4, &(0x7f0000000140)={0x11, 0x86dd, r8, 0x1, 0x0, 0x6, @multicast}, 0x14) ioctl$EXT4_IOC_GET_ES_CACHE(r7, 0xc020662a, &(0x7f0000000340)={0x1, 0x87c5, 0x3, 0x7, 0x2, 0x0, [{0x4, 0x80000001, 0xfff, '\x00', 0x2}, {0xa, 0xf, 0x1000, '\x00', 0x8}]}) syz_open_dev$dri(&(0x7f0000000240), 0x0, 0x0) gettid() setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) r9 = socket$packet(0x11, 0x3, 0x300) r10 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000240)={'netdevsim0\x00', 0x0}) r12 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r12, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000000c0)=@newlink={0x44, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macsec={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACSEC_ENCRYPT={0x5, 0xf, 0x1}]}}}, @IFLA_LINK={0x8, 0x5, r11}]}, 0x44}}, 0x800) setsockopt$packet_fanout(r9, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8002}, 0x4) kernel console output (not intermixed with test programs): luetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1356.365087][ T6026] bond0 (unregistering): Released all slaves [ 1356.382121][ T52] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1356.390111][ T52] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1356.398662][ T52] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1356.406685][ T52] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1356.684037][ T6026] hsr_slave_0: left promiscuous mode [ 1356.713008][ T6026] hsr_slave_1: left promiscuous mode [ 1356.728783][ T6026] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1356.743964][ T6026] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1357.698105][ T6026] team0 (unregistering): Port device team_slave_1 removed [ 1357.767251][ T6026] team0 (unregistering): Port device team_slave_0 removed [ 1358.354076][T21966] batman_adv: batadv0: Local translation table size (136) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:2a [ 1358.462083][ T5837] Bluetooth: hci5: command tx timeout [ 1359.433645][T22000] netlink: 68 bytes leftover after parsing attributes in process `syz.2.3685'. [ 1360.531404][ T5837] Bluetooth: hci5: command tx timeout [ 1360.727668][T21516] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1360.773190][T21956] chnl_net:caif_netlink_parms(): no params data found [ 1361.419443][T21516] 8021q: adding VLAN 0 to HW filter on device team0 [ 1362.161991][ T6172] bridge0: port 1(bridge_slave_0) entered blocking state [ 1362.169258][ T6172] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1362.265397][T21956] bridge0: port 1(bridge_slave_0) entered blocking state [ 1362.273276][T21956] bridge0: port 1(bridge_slave_0) entered disabled state [ 1362.289333][T21956] bridge_slave_0: entered allmulticast mode [ 1362.306228][T21956] bridge_slave_0: entered promiscuous mode [ 1362.317199][T21956] bridge0: port 2(bridge_slave_1) entered blocking state [ 1362.341459][T21956] bridge0: port 2(bridge_slave_1) entered disabled state [ 1362.341721][T21956] bridge_slave_1: entered allmulticast mode [ 1362.360479][T21956] bridge_slave_1: entered promiscuous mode [ 1362.382383][T21666] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1362.413983][ T60] bridge0: port 2(bridge_slave_1) entered blocking state [ 1362.414118][ T60] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1362.415249][T21666] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1362.443211][T22055] netlink: 68 bytes leftover after parsing attributes in process `syz.2.3697'. [ 1362.611239][ T5837] Bluetooth: hci5: command tx timeout [ 1362.749327][T21666] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1362.774396][T22059] /dev/nullb0: Can't lookup blockdev [ 1362.808745][T21666] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1362.937879][T21956] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1362.989435][T21956] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1363.393547][T21956] team0: Port device team_slave_0 added [ 1363.555182][T21956] team0: Port device team_slave_1 added [ 1364.054929][T21956] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1364.079139][T21956] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1364.145854][T21956] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1364.197528][T21956] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1364.218736][T21956] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1364.275296][T21956] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1364.383825][T19993] bridge_slave_1: left allmulticast mode [ 1364.408385][T19993] bridge_slave_1: left promiscuous mode [ 1364.423979][T19993] bridge0: port 2(bridge_slave_1) entered disabled state [ 1364.448923][T19993] bridge_slave_0: left allmulticast mode [ 1364.459406][T19993] bridge_slave_0: left promiscuous mode [ 1364.476802][T19993] bridge0: port 1(bridge_slave_0) entered disabled state [ 1364.699376][ T5837] Bluetooth: hci5: command tx timeout [ 1365.482024][T19993] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1365.498863][T19993] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1365.512171][T19993] bond0 (unregistering): Released all slaves [ 1365.670097][T21956] hsr_slave_0: entered promiscuous mode [ 1365.677228][T21956] hsr_slave_1: entered promiscuous mode [ 1365.684809][T21956] debugfs: 'hsr0' already exists in 'hsr' [ 1365.691966][T21956] Cannot create hsr debugfs directory [ 1365.737387][T19993] hsr_slave_0: left promiscuous mode [ 1365.749841][T19993] hsr_slave_1: left promiscuous mode [ 1365.774130][T19993] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1365.792920][T19993] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1365.840579][T22119] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3708'. [ 1365.858863][T22119] netlink: 24 bytes leftover after parsing attributes in process `syz.9.3708'. [ 1366.258168][T19993] team0 (unregistering): Port device team_slave_1 removed [ 1366.328968][T19993] team0 (unregistering): Port device team_slave_0 removed [ 1367.630484][T22147] tipc: Enabling of bearer rejected, failed to enable media [ 1367.889191][T22165] netlink: 'syz.2.3713': attribute type 12 has an invalid length. [ 1369.490929][T21666] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1369.725960][T21666] 8021q: adding VLAN 0 to HW filter on device team0 [ 1369.783935][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 1369.791140][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1369.941102][T21516] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1370.480617][T19993] bridge0: port 2(bridge_slave_1) entered blocking state [ 1370.487915][T19993] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1370.778502][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 1370.788100][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 1370.800715][T21666] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1370.897442][T22197] netdevsim netdevsim9: Direct firmware load for þ failed with error -2 [ 1370.920733][T22197] netdevsim netdevsim9: Falling back to sysfs fallback for: þ [ 1371.046839][T21516] veth0_vlan: entered promiscuous mode [ 1371.125991][T21516] veth1_vlan: entered promiscuous mode [ 1371.232299][T21956] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1371.269375][T21956] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1371.336421][T21956] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1371.369746][T21956] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1371.489390][T21516] veth0_macvtap: entered promiscuous mode [ 1371.569941][T21516] veth1_macvtap: entered promiscuous mode [ 1371.662714][T21666] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1371.773790][T21516] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1371.835629][T21516] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1371.918091][ T13] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1371.945312][ T13] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1372.036458][ T13] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1372.089027][ T13] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1372.522349][T21956] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1372.620571][T21666] veth0_vlan: entered promiscuous mode [ 1372.718272][ T6172] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1372.738843][T21666] veth1_vlan: entered promiscuous mode [ 1372.752745][ T6172] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1372.873507][T21956] 8021q: adding VLAN 0 to HW filter on device team0 [ 1373.058405][T18237] bridge0: port 1(bridge_slave_0) entered blocking state [ 1373.065662][T18237] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1373.079715][T18237] bridge0: port 2(bridge_slave_1) entered blocking state [ 1373.086943][T18237] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1373.166701][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1373.190444][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1373.235891][T21666] veth0_macvtap: entered promiscuous mode [ 1373.265664][T21666] veth1_macvtap: entered promiscuous mode [ 1373.436321][T21666] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1373.455620][T22243] gfs2: not a GFS2 filesystem [ 1374.687048][T21666] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1374.895613][ T13] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1374.924841][ T13] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1375.043448][ T13] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1375.078984][ T13] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1376.161207][T22266] netlink: 68 bytes leftover after parsing attributes in process `syz.9.3732'. [ 1376.495414][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1376.531068][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1376.946835][T20013] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1377.006514][T20013] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1377.135272][T21956] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1377.401118][T21956] veth0_vlan: entered promiscuous mode [ 1377.447723][T21956] veth1_vlan: entered promiscuous mode [ 1377.593271][T21956] veth0_macvtap: entered promiscuous mode [ 1377.677733][T21956] veth1_macvtap: entered promiscuous mode [ 1377.866387][T21956] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1378.144651][T22295] netlink: 24 bytes leftover after parsing attributes in process `syz.9.3740'. [ 1378.156718][T21956] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1378.372639][ T6172] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1378.406931][ T6172] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1378.461683][ T6172] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1378.512898][ T6172] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1378.990293][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1378.998284][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1379.645832][ T60] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1379.701293][ T60] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1381.366855][T22326] netlink: 68 bytes leftover after parsing attributes in process `syz.2.3747'. [ 1381.380286][T21507] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 1381.581835][T21507] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 1381.640542][T21507] usb 4-1: config 0 has no interface number 0 [ 1381.733742][T21507] usb 4-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 1381.750866][T21507] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1381.759044][T21507] usb 4-1: Product: syz [ 1381.780787][T21507] usb 4-1: Manufacturer: syz [ 1381.789412][T21507] usb 4-1: SerialNumber: syz [ 1381.826507][T21507] usb 4-1: config 0 descriptor?? [ 1382.062207][T21507] usb 4-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 1382.105675][T21507] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1382.113934][T22335] sctp: [Deprecated]: syz.9.3748 (pid 22335) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1382.113934][T22335] Use struct sctp_sack_info instead [ 1382.155290][T21507] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 1382.180581][T21507] usb 4-1: media controller created [ 1382.296382][T21507] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1382.475931][T21507] i2c i2c-1: ec100: i2c rd failed=-32 reg=33 [ 1382.552821][T22343] netlink: 128 bytes leftover after parsing attributes in process `syz.0.3751'. [ 1382.577477][T22343] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3751'. [ 1382.663811][T21507] usb 4-1: USB disconnect, device number 25 [ 1383.188509][T22356] gfs2: not a GFS2 filesystem [ 1383.259471][ T52] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1383.275105][ T52] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1383.284613][ T52] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1383.306121][ T52] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1383.316469][ T52] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1383.968133][T22375] netlink: 68 bytes leftover after parsing attributes in process `syz.1.3760'. [ 1384.920113][T22383] tipc: Started in network mode [ 1384.925477][T22383] tipc: Node identity fe2b17e49247, cluster identity 4711 [ 1385.002479][T22383] tipc: Enabled bearer , priority 0 [ 1385.029506][T22374] syzkaller0: entered promiscuous mode [ 1385.045570][T22374] syzkaller0: entered allmulticast mode [ 1385.216590][T22374] tipc: Resetting bearer [ 1385.387583][T22372] tipc: Resetting bearer [ 1385.427114][ T5837] Bluetooth: hci1: command tx timeout [ 1385.513818][T22372] tipc: Disabling bearer [ 1385.613500][T22357] chnl_net:caif_netlink_parms(): no params data found [ 1386.364514][T22418] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3767'. [ 1386.393780][T22357] bridge0: port 1(bridge_slave_0) entered blocking state [ 1386.426669][T22357] bridge0: port 1(bridge_slave_0) entered disabled state [ 1386.450645][T22357] bridge_slave_0: entered allmulticast mode [ 1386.482315][T22357] bridge_slave_0: entered promiscuous mode [ 1386.537759][T22357] bridge0: port 2(bridge_slave_1) entered blocking state [ 1386.586215][T22357] bridge0: port 2(bridge_slave_1) entered disabled state [ 1386.633282][T22357] bridge_slave_1: entered allmulticast mode [ 1386.693272][T22357] bridge_slave_1: entered promiscuous mode [ 1386.975920][ T5930] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 1387.165682][T22357] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1387.167316][T22427] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3769'. [ 1387.198806][T22357] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1387.213864][ T5930] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 1387.227413][ T5930] usb 1-1: config 0 has no interface number 0 [ 1387.262760][ T5930] usb 1-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 1387.282129][ T5930] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1387.306809][ T5930] usb 1-1: Product: syz [ 1387.335105][ T5930] usb 1-1: Manufacturer: syz [ 1387.350341][ T5930] usb 1-1: SerialNumber: syz [ 1387.374729][T22357] team0: Port device team_slave_0 added [ 1387.383502][ T5930] usb 1-1: config 0 descriptor?? [ 1387.407249][T22357] team0: Port device team_slave_1 added [ 1387.503813][ T5837] Bluetooth: hci1: command tx timeout [ 1387.594460][ T5930] usb 1-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 1387.610802][ T5930] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1387.622581][ T5930] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 1387.631084][ T5930] usb 1-1: media controller created [ 1387.661972][ T5930] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1387.670721][T22357] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1387.677681][T22357] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1387.734411][T22357] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1387.859008][ T5930] i2c i2c-1: ec100: i2c rd failed=-32 reg=33 [ 1387.968065][T22357] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1388.009359][T22357] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1388.079384][ T5930] usb 1-1: USB disconnect, device number 7 [ 1388.111782][T22357] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1388.458350][T22440] gfs2: not a GFS2 filesystem [ 1389.463471][T22357] hsr_slave_0: entered promiscuous mode [ 1389.513768][T22357] hsr_slave_1: entered promiscuous mode [ 1389.550526][T22357] debugfs: 'hsr0' already exists in 'hsr' [ 1389.572169][ T5837] Bluetooth: hci1: command tx timeout [ 1389.578174][T22357] Cannot create hsr debugfs directory [ 1389.636661][T22447] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3774'. [ 1390.046652][T22457] netlink: 64 bytes leftover after parsing attributes in process `syz.0.3779'. [ 1390.148424][T22457] team0: No ports can be present during mode change [ 1390.757736][T22357] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1390.939476][T22461] Set syz1 is full, maxelem 6117 reached [ 1391.429411][T22475] netlink: 68 bytes leftover after parsing attributes in process `syz.0.3785'. [ 1391.502601][T22357] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1391.791577][ T5837] Bluetooth: hci1: command tx timeout [ 1392.471398][T22357] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1393.198369][T22357] bond0: (slave netdevsim0): Releasing backup interface [ 1393.475295][T22357] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1393.531663][T22493] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3791'. [ 1394.034475][T22357] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1394.064286][T22357] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1394.080118][T22504] TCP: TCP_TX_DELAY enabled [ 1394.087674][T22357] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1394.153646][T22357] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1394.332340][T22519] netlink: 68 bytes leftover after parsing attributes in process `syz.0.3799'. [ 1394.613613][T22357] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1394.674141][T22357] 8021q: adding VLAN 0 to HW filter on device team0 [ 1394.720847][ T5950] bridge0: port 1(bridge_slave_0) entered blocking state [ 1394.728236][ T5950] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1394.763525][ T5950] bridge0: port 2(bridge_slave_1) entered blocking state [ 1394.770774][ T5950] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1394.950955][T22527] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3801'. [ 1394.959932][T22527] openvswitch: netlink: Flow actions attr not present in new flow. [ 1397.683532][T22357] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1398.561306][T22571] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3814'. [ 1398.615314][T22576] netlink: 68 bytes leftover after parsing attributes in process `syz.9.3813'. [ 1399.286345][T22587] gfs2: not a GFS2 filesystem [ 1400.029177][T22357] veth0_vlan: entered promiscuous mode [ 1400.075352][T22357] veth1_vlan: entered promiscuous mode [ 1400.177707][T22357] veth0_macvtap: entered promiscuous mode [ 1400.233284][T22357] veth1_macvtap: entered promiscuous mode [ 1400.317451][T22357] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1400.355075][T22357] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1400.421221][T19993] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1400.449042][T19993] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1400.487936][T19993] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1400.517641][ T6026] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1400.684849][ T6172] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1400.700060][ T6172] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1400.828584][ T6172] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1400.856130][ T6172] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1402.506927][ T9445] syz_tun (unregistering): left promiscuous mode [ 1402.868082][T22639] bond1: option resend_igmp: invalid value (2878) [ 1402.910601][T22639] bond1: option resend_igmp: allowed values 0 - 255 [ 1402.945596][T22639] bond1 (unregistering): Released all slaves [ 1403.169365][ T52] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1403.180150][ T52] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1403.189152][ T52] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1403.198643][ T52] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1403.209235][ T52] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1403.220010][T22650] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3837'. [ 1403.501759][T22655] tipc: Started in network mode [ 1403.516941][T22655] tipc: Node identity 9af81f8372d5, cluster identity 4711 [ 1403.534508][T22655] tipc: Enabled bearer , priority 0 [ 1403.557125][T22655] syzkaller0: entered promiscuous mode [ 1403.580665][T22655] syzkaller0: entered allmulticast mode [ 1403.706653][T22659] tipc: Resetting bearer [ 1403.792967][T22654] tipc: Resetting bearer [ 1403.841331][T22654] tipc: Disabling bearer [ 1405.033259][T22670] comedi comedi3: Buffer allocation failed [ 1405.548923][ T52] Bluetooth: hci0: command tx timeout [ 1405.865198][T22661] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1406.079183][T22661] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1406.185185][T22682] netlink: 292 bytes leftover after parsing attributes in process `syz.3.3847'. [ 1406.288169][T22661] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1406.939743][T22661] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1407.336737][T22647] chnl_net:caif_netlink_parms(): no params data found [ 1407.474452][ T6026] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1407.571021][ T5837] Bluetooth: hci0: command tx timeout [ 1407.708641][ T6026] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1407.957650][T19993] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1407.995124][T19993] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1408.233812][T22647] bridge0: port 1(bridge_slave_0) entered blocking state [ 1408.264333][T22647] bridge0: port 1(bridge_slave_0) entered disabled state [ 1408.290890][T22647] bridge_slave_0: entered allmulticast mode [ 1408.300001][T22647] bridge_slave_0: entered promiscuous mode [ 1408.349947][T22647] bridge0: port 2(bridge_slave_1) entered blocking state [ 1408.470312][T22647] bridge0: port 2(bridge_slave_1) entered disabled state [ 1408.477667][T22647] bridge_slave_1: entered allmulticast mode [ 1408.506800][T22647] bridge_slave_1: entered promiscuous mode [ 1408.757461][T22647] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1408.816564][T22647] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1409.114746][T22647] team0: Port device team_slave_0 added [ 1409.164023][T22647] team0: Port device team_slave_1 added [ 1409.445410][T22647] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1409.470181][T22647] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1409.536105][T22717] IPVS: persistence engine module ip_vs_pe_ not found [ 1409.559532][T22647] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1409.604178][T22647] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1409.625344][T22647] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1409.653825][ T5837] Bluetooth: hci0: command tx timeout [ 1409.717538][T22647] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1409.762590][T22720] netlink: 'syz.3.3858': attribute type 13 has an invalid length. [ 1409.934759][T22724] loop9: detected capacity change from 0 to 512 [ 1409.995009][T22724] EXT4-fs error (device loop9): ext4_orphan_get:1392: inode #15: comm syz.9.3859: inode has both inline data and extents flags [ 1410.042743][T22647] hsr_slave_0: entered promiscuous mode [ 1410.049627][T22724] EXT4-fs error (device loop9): ext4_orphan_get:1395: comm syz.9.3859: couldn't read orphan inode 15 (err -117) [ 1410.083400][T22647] hsr_slave_1: entered promiscuous mode [ 1410.123751][T22647] debugfs: 'hsr0' already exists in 'hsr' [ 1410.129533][T22647] Cannot create hsr debugfs directory [ 1410.138378][T22724] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1410.560601][T22733] ptrace attach of "./syz-executor exec"[21516] was attempted by "./syz-executor exec"[22733] [ 1411.732692][ T5837] Bluetooth: hci0: command tx timeout [ 1412.203636][T22739] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3861'. [ 1412.212772][T22739] openvswitch: netlink: Flow actions attr not present in new flow. [ 1413.400013][T22647] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1413.482950][T22747] batadv_slave_1: entered promiscuous mode [ 1413.506495][T22746] batadv_slave_1: left promiscuous mode [ 1413.598324][T22647] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1413.739719][T22647] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1413.792199][T22751] netlink: 'syz.3.3867': attribute type 3 has an invalid length. [ 1413.799975][T22751] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3867'. [ 1413.901582][T22647] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1414.307825][T22647] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1414.327958][T22647] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1414.354789][T20272] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1414.376549][T22647] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1414.416192][T22647] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1414.421092][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1414.433298][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1414.442288][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1414.816001][T22647] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1414.898264][ T5930] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1414.917221][T22754] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1414.927754][T22647] 8021q: adding VLAN 0 to HW filter on device team0 [ 1415.438061][ T6026] bridge0: port 1(bridge_slave_0) entered blocking state [ 1415.445328][ T6026] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1415.492071][T22754] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1415.618073][ T5901] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1415.643617][ T6026] bridge0: port 2(bridge_slave_1) entered blocking state [ 1415.650887][ T6026] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1416.670576][T18263] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1417.111492][T18263] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1417.213466][T22785] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3874'. [ 1417.213681][T22786] syzkaller0: entered promiscuous mode [ 1417.233624][T22785] openvswitch: netlink: Flow actions attr not present in new flow. [ 1417.248285][T22786] syzkaller0: entered allmulticast mode [ 1417.951844][T22647] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1418.131783][ T5930] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1418.140459][ T5930] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1418.177796][T22647] veth0_vlan: entered promiscuous mode [ 1418.229850][T22647] veth1_vlan: entered promiscuous mode [ 1418.369963][T22647] veth0_macvtap: entered promiscuous mode [ 1418.408354][T22647] veth1_macvtap: entered promiscuous mode [ 1418.480403][T22647] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1418.516359][T22805] loop1: detected capacity change from 0 to 512 [ 1418.533898][T22647] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1418.558240][T22805] EXT4-fs error (device loop1): ext4_orphan_get:1392: inode #15: comm syz.1.3883: inode has both inline data and extents flags [ 1418.592608][ T13] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1418.609673][ T13] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1418.617866][T22805] EXT4-fs error (device loop1): ext4_orphan_get:1395: comm syz.1.3883: couldn't read orphan inode 15 (err -117) [ 1418.638106][ T13] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1418.660750][ T13] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1418.697210][T22805] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1418.781284][T20910] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1419.026987][T22811] ptrace attach of "./syz-executor exec"[20272] was attempted by "./syz-executor exec"[22811] [ 1419.155349][ T5950] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1419.180073][ T6023] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1419.193883][ T5950] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1419.450221][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1419.496175][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1419.731052][T20910] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1420.220208][T18263] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1421.358275][T22831] netlink: 64 bytes leftover after parsing attributes in process `syz.2.3888'. [ 1421.386701][T22831] team0: No ports can be present during mode change [ 1421.396177][T22832] delete_channel: no stack [ 1421.426438][ T6023] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1422.450672][ T6023] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1422.640952][T22846] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3893'. [ 1422.660229][T22846] veth1_to_batadv: entered promiscuous mode [ 1422.692276][T22846] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3893'. [ 1422.760668][T22848] netlink: 'syz.9.3894': attribute type 5 has an invalid length. [ 1422.774140][ T5930] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1423.454011][T21666] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1423.492332][ T6023] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1423.765318][T22872] x_tables: duplicate underflow at hook 2 [ 1424.161380][T22882] netlink: 'syz.1.3908': attribute type 10 has an invalid length. [ 1424.221122][T22882] 8021q: adding VLAN 0 to HW filter on device team0 [ 1424.223560][T22885] siw: device registration error -23 [ 1424.244057][T22882] bond0: (slave team0): Enslaving as an active interface with an up link [ 1424.531414][T18263] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1424.563265][T22891] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 1424.598893][T22891] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 1424.605847][T22891] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 1424.612806][T22891] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 1424.619624][T22891] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 1424.626496][T22891] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 1425.259475][T22901] loop1: detected capacity change from 0 to 512 [ 1425.389024][T22901] EXT4-fs error (device loop1): ext4_orphan_get:1392: inode #15: comm syz.1.3913: inode has both inline data and extents flags [ 1425.530330][T22901] EXT4-fs error (device loop1): ext4_orphan_get:1395: comm syz.1.3913: couldn't read orphan inode 15 (err -117) [ 1425.587131][T22901] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1426.076308][T22905] ptrace attach of "./syz-executor exec"[21956] was attempted by "./syz-executor exec"[22905] [ 1427.220578][T22918] netlink: 'syz.9.3918': attribute type 9 has an invalid length. [ 1427.228370][T22918] netlink: 'syz.9.3918': attribute type 6 has an invalid length. [ 1427.280787][T22918] netlink: 'syz.9.3918': attribute type 7 has an invalid length. [ 1427.288653][T22918] netlink: 'syz.9.3918': attribute type 8 has an invalid length. [ 1427.867074][T22924] Bluetooth: MGMT ver 1.23 [ 1427.868299][T22926] loop9: detected capacity change from 0 to 512 [ 1427.892100][T21507] net_ratelimit: 638 callbacks suppressed [ 1427.892126][T21507] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1427.939730][T22926] EXT4-fs error (device loop9): ext4_iget_extra_inode:5074: inode #15: comm syz.9.3921: corrupted in-inode xattr: e_value size too large [ 1428.035975][T22926] EXT4-fs error (device loop9): ext4_orphan_get:1395: comm syz.9.3921: couldn't read orphan inode 15 (err -117) [ 1428.054623][T21666] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1428.086345][T22926] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1428.293437][T20272] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1428.371431][T18801] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1428.415428][T22939] netlink: 'syz.3.3925': attribute type 1 has an invalid length. [ 1428.444389][T22939] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3925'. [ 1428.506158][T22945] netlink: 24 bytes leftover after parsing attributes in process `syz.9.3926'. [ 1428.830861][T22953] delete_channel: no stack [ 1429.087355][T21507] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1429.549319][T18801] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1429.624710][T22959] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3932'. [ 1429.749668][T22963] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3934'. [ 1429.759144][T22963] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3934'. [ 1429.786295][T22963] erspan0: entered promiscuous mode [ 1429.814305][T22963] gretap0: entered promiscuous mode [ 1429.838118][T22963] debugfs: 'hsr1' already exists in 'hsr' [ 1429.865276][T22963] Cannot create hsr debugfs directory [ 1430.005033][T22973] netlink: 'syz.2.3938': attribute type 4 has an invalid length. [ 1430.144189][T21507] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1430.365038][T22986] netlink: 24 bytes leftover after parsing attributes in process `syz.9.3944'. [ 1430.917329][T22993] delete_channel: no stack [ 1431.681303][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1432.222833][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 1432.229422][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 1432.610999][ T5930] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1432.634813][T23016] fuse: Invalid rootmode [ 1432.711628][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1433.546811][T23036] delete_channel: no stack [ 1434.334655][T18263] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1434.941993][T23046] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1434.951030][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1434.990471][T23046] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1435.022439][T23045] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1435.034431][T18263] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1435.068563][T23045] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1435.106596][T23045] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1435.299780][T23056] vcan0: tx drop: invalid sa for name 0xfffffffffffffffd [ 1435.412457][ T5930] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1435.420710][ T5930] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1436.516974][T23082] xt_hashlimit: size too large, truncated to 1048576 [ 1437.440627][T23097] netlink: 32 bytes leftover after parsing attributes in process `syz.9.3983'. [ 1438.010901][T23112] fuse: Bad value for 'rootmode' [ 1439.521054][T23139] tipc: Started in network mode [ 1439.526029][T23139] tipc: Node identity 42ba1b44cc85, cluster identity 4711 [ 1439.552142][T23139] tipc: Enabled bearer , priority 0 [ 1439.581387][T23139] syzkaller0: entered promiscuous mode [ 1439.590982][T23139] syzkaller0: entered allmulticast mode [ 1439.665640][T23139] tipc: Resetting bearer [ 1439.685363][T23145] netlink: 132 bytes leftover after parsing attributes in process `syz.3.4004'. [ 1439.696762][T23138] tipc: Resetting bearer [ 1439.732433][T23138] tipc: Disabling bearer [ 1439.844484][T23150] netlink: 'syz.9.4006': attribute type 11 has an invalid length. [ 1439.980871][T23154] fuse: Bad value for 'rootmode' [ 1439.990601][T23153] net_ratelimit: 6 callbacks suppressed [ 1439.990626][T23153] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1440.028592][T23153] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1440.047552][T23153] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1440.075304][T23151] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1440.103951][T23151] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1440.260339][ T6023] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1440.426688][T23171] xfrm0: entered promiscuous mode [ 1440.443374][T23171] xfrm0: entered allmulticast mode [ 1440.625920][T23178] netlink: 32 bytes leftover after parsing attributes in process `syz.4.4017'. [ 1440.658932][T23178] netlink: 32 bytes leftover after parsing attributes in process `syz.4.4017'. [ 1442.146428][T23194] fuse: Unknown parameter 'use00000000000000000000' [ 1442.162214][ T6023] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1442.173214][T20910] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1442.321361][T20910] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1443.185900][T18263] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1443.706724][T23246] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4032'. [ 1443.955170][T23253] fuse: Unknown parameter 'use00000000000000000000' [ 1444.531309][T17730] Bluetooth: hci3: command 0x0406 tx timeout [ 1444.695828][T23274] netlink: 20 bytes leftover after parsing attributes in process `syz.9.4044'. [ 1444.710813][ T5930] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 1444.746747][T23274] ip6gre1: entered promiscuous mode [ 1444.921841][T23274] ip6gre1: entered allmulticast mode [ 1445.031502][ T5930] usb 2-1: Using ep0 maxpacket: 8 [ 1445.039151][ T5930] usb 2-1: config 0 has an invalid interface number: 55 but max is 0 [ 1445.047996][ T5930] usb 2-1: config 0 has no interface number 0 [ 1445.082691][ T5930] usb 2-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1445.100194][ T5930] usb 2-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 1445.131427][ T5930] usb 2-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1445.143973][ T5930] usb 2-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 1445.154480][T23286] netlink: 64 bytes leftover after parsing attributes in process `syz.0.4031'. [ 1445.158591][ T5930] usb 2-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 1445.200235][T23286] team0: No ports can be present during mode change [ 1445.230537][ T5930] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1445.258272][T21507] net_ratelimit: 1 callbacks suppressed [ 1445.258299][T21507] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1445.273438][T23292] fuse: Unknown parameter 'use00000000000000000000' [ 1445.276126][ T5930] usb 2-1: config 0 descriptor?? [ 1445.316907][ T5930] ldusb 2-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 1445.330833][T20910] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1445.535089][ T5930] usb 2-1: USB disconnect, device number 2 [ 1445.545771][ T5930] ldusb 2-1:0.55: LD USB Device #0 now disconnected [ 1445.651370][T21507] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1446.378973][T18263] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1447.300927][T23332] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 1447.411330][T18263] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1447.656233][T23340] syzkaller0: entered promiscuous mode [ 1447.681425][T23340] syzkaller0: entered allmulticast mode [ 1448.499807][T21507] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1448.690481][ T5930] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1448.840334][T20910] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 1448.859761][T23358] ip6_tunnel: non-ECT from fc00:0000:0000:0000:0000:0000:0000:0000 with DS=0x3 [ 1449.040316][T20910] usb 1-1: Using ep0 maxpacket: 8 [ 1449.080773][T20910] usb 1-1: config 0 has an invalid interface number: 55 but max is 0 [ 1449.095042][T20910] usb 1-1: config 0 has no interface number 0 [ 1449.115519][T20910] usb 1-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1449.163644][T20910] usb 1-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 1449.213009][T20910] usb 1-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1449.226308][T23368] netlink: 60 bytes leftover after parsing attributes in process `syz.1.4079'. [ 1449.262471][T20910] usb 1-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 1449.337619][T20910] usb 1-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 1449.392678][T20910] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1449.414995][T20910] usb 1-1: config 0 descriptor?? [ 1449.440928][T20910] ldusb 1-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 1449.570813][T21507] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1449.616991][T23368] svc: failed to register nfsdv3 RPC service (errno 111). [ 1449.637746][T23368] svc: failed to register nfsaclv3 RPC service (errno 111). [ 1449.669880][T23381] tipc: Enabled bearer , priority 0 [ 1449.681943][T20910] usb 1-1: USB disconnect, device number 8 [ 1449.696205][T20910] ldusb 1-1:0.55: LD USB Device #0 now disconnected [ 1449.708594][T23379] tipc: Disabling bearer [ 1450.611143][T18263] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1451.276785][T23424] netlink: 32 bytes leftover after parsing attributes in process `syz.3.4101'. [ 1451.329794][T23424] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1451.411271][ T5930] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1451.660830][ T6023] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1451.731273][ T5930] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1452.370894][T23443] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 1452.608667][T23450] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1452.670775][T23450] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1452.692084][T21507] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1452.700246][T20910] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1453.967552][T23484] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4125'. [ 1454.447016][T23494] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4130'. [ 1454.728122][T23499] netlink: 36 bytes leftover after parsing attributes in process `syz.9.4132'. [ 1455.517587][T23507] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4135'. [ 1455.811994][T18263] net_ratelimit: 7 callbacks suppressed [ 1455.812020][T18263] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1455.870239][T12927] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 1455.903631][T23516] netlink: 24 bytes leftover after parsing attributes in process `syz.9.4140'. [ 1456.033353][T12927] usb 5-1: Using ep0 maxpacket: 8 [ 1456.045302][T12927] usb 5-1: config 0 has an invalid interface number: 55 but max is 0 [ 1456.091796][T12927] usb 5-1: config 0 has no interface number 0 [ 1456.099174][T12927] usb 5-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1456.123113][T12927] usb 5-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 1456.135756][T12927] usb 5-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1456.159723][T12927] usb 5-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 1456.229162][T12927] usb 5-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 1456.255776][T12927] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1456.308506][T12927] usb 5-1: config 0 descriptor?? [ 1456.357566][T12927] ldusb 5-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 1456.362426][T23528] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 1456.443609][T23530] netlink: 12 bytes leftover after parsing attributes in process `syz.9.4145'. [ 1456.496568][T23532] netlink: 'syz.2.4146': attribute type 31 has an invalid length. [ 1456.598078][T12927] usb 5-1: USB disconnect, device number 8 [ 1456.649384][T12927] ldusb 5-1:0.55: LD USB Device #0 now disconnected [ 1456.851008][T18263] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1457.858884][T12927] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1457.919856][T18263] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1458.303130][T23562] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4157'. [ 1458.572282][T23569] netlink: 64 bytes leftover after parsing attributes in process `syz.1.4159'. [ 1458.629228][T23569] team0: No ports can be present during mode change [ 1458.935448][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1459.084572][T23572] syzkaller0: entered promiscuous mode [ 1459.100183][T23572] syzkaller0: entered allmulticast mode [ 1459.455084][T23590] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4168'. [ 1459.640604][T23588] delete_channel: no stack [ 1459.810835][T20910] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 1459.904005][ T5837] Bluetooth: hci4: command 0x0406 tx timeout [ 1459.960566][T20910] usb 3-1: Using ep0 maxpacket: 8 [ 1459.970836][T20910] usb 3-1: config 0 has an invalid interface number: 55 but max is 0 [ 1459.984001][T20910] usb 3-1: config 0 has no interface number 0 [ 1459.986938][T21507] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1459.998585][T20910] usb 3-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1460.026391][T20910] usb 3-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 1460.051143][T20910] usb 3-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1460.090188][T20910] usb 3-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 1460.124137][T20910] usb 3-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 1460.157889][T20910] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1460.203676][T20910] usb 3-1: config 0 descriptor?? [ 1460.266414][T20910] ldusb 3-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 1460.379977][T23605] fuse: Unknown parameter 'user_id00000000000000000000' [ 1460.468236][T20910] usb 3-1: USB disconnect, device number 9 [ 1460.488161][T20910] ldusb 3-1:0.55: LD USB Device #0 now disconnected [ 1460.561846][T23607] netlink: 64 bytes leftover after parsing attributes in process `syz.0.4175'. [ 1461.014432][T20910] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1461.208869][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1462.226296][T18263] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1462.296986][T12927] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1463.072649][T23607] team0: No ports can be present during mode change [ 1463.494873][T23637] delete_channel: no stack [ 1463.612608][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1463.707608][T23648] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1463.715977][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1463.760375][T20910] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 1463.937217][T20910] usb 3-1: Using ep0 maxpacket: 8 [ 1463.953484][T20910] usb 3-1: config 0 has an invalid interface number: 55 but max is 0 [ 1463.998085][T20910] usb 3-1: config 0 has no interface number 0 [ 1464.023809][T20910] usb 3-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1464.050459][T12927] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1464.075435][T20910] usb 3-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 1464.119758][T20910] usb 3-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1464.158087][T20910] usb 3-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 1464.186980][T20910] usb 3-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 1464.206477][T20910] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1464.265598][T20910] usb 3-1: config 0 descriptor?? [ 1464.295020][T20910] ldusb 3-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 1464.510928][T21507] usb 3-1: USB disconnect, device number 10 [ 1464.552797][T21507] ldusb 3-1:0.55: LD USB Device #0 now disconnected [ 1464.698621][T18263] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1464.713962][T23668] syzkaller0: entered promiscuous mode [ 1464.735145][T23668] syzkaller0: entered allmulticast mode [ 1464.753505][T23670] netlink: 64 bytes leftover after parsing attributes in process `syz.1.4200'. [ 1465.433802][T23688] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1466.153367][T23682] net_ratelimit: 93 callbacks suppressed [ 1466.153402][T23682] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1466.296031][ T6023] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1467.100736][T20910] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1467.356947][ T6023] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1468.384551][T18263] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1468.734629][T23670] team0: No ports can be present during mode change [ 1468.979379][T23715] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 1469.417245][ T6023] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1469.728463][T23740] fuse: Bad value for 'fd' [ 1470.140738][T20910] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1470.378982][T23750] netlink: 64 bytes leftover after parsing attributes in process `syz.1.4230'. [ 1470.459770][ T6023] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1470.469610][T23750] team0: No ports can be present during mode change [ 1470.499099][T23756] xt_hashlimit: size too large, truncated to 1048576 [ 1470.765940][T23759] delete_channel: no stack [ 1471.240423][T23763] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 1471.498579][ T6023] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1471.892398][T12927] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1472.205533][T23788] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4242'. [ 1472.554451][ T6023] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1472.601185][T23792] fuse: Bad value for 'fd' [ 1473.702496][T12927] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1473.768542][T18263] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1474.298427][T23815] syzkaller0: entered promiscuous mode [ 1474.681770][T23821] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1474.701192][T23815] syzkaller0: entered allmulticast mode [ 1474.719229][T23821] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1474.777018][T18263] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1474.804603][T23821] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1475.987127][T23838] xt_hashlimit: size too large, truncated to 1048576 [ 1476.564481][T23857] net_ratelimit: 368 callbacks suppressed [ 1476.564508][T23857] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1476.579352][T23857] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1476.588467][T23857] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1476.605312][T23857] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1476.614002][T23857] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1476.622585][T23857] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1476.642833][T23857] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1476.651715][T23857] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1476.660210][T23857] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1476.668924][T23857] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1477.739190][T23863] netlink: 44 bytes leftover after parsing attributes in process `syz.3.4263'. [ 1478.796195][T23877] : renamed from bond_slave_0 (while UP) [ 1480.239114][T23893] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4276'. [ 1480.368254][T23889] syzkaller0: entered promiscuous mode [ 1480.374075][ T5837] Bluetooth: hci5: command 0x0406 tx timeout [ 1480.408168][T23889] syzkaller0: entered allmulticast mode [ 1481.297821][T23906] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4280'. [ 1481.377333][T23905] delete_channel: no stack [ 1481.579638][ T24] net_ratelimit: 93 callbacks suppressed [ 1481.579666][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1482.611653][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1482.909164][T23916] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 1483.491401][T12927] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1483.651306][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1484.724682][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1485.733006][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1486.022659][T23936] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 1486.059067][T23936] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 1486.065971][T23936] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 1486.072904][T23936] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 1486.583426][T23936] net_ratelimit: 1663 callbacks suppressed [ 1486.583455][T23936] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 1486.596176][T23936] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 1486.603017][T23936] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 1486.609832][T23936] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 1486.616694][T23936] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 1486.623565][T23936] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 1486.630449][T23936] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 1486.637262][T23936] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 1486.644147][T23936] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 1486.651375][T23936] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 1488.452914][T23941] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4294'. [ 1489.153733][T23976] netlink: 36 bytes leftover after parsing attributes in process `syz.2.4308'. [ 1489.217815][T23976] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4308'. [ 1489.453246][T23976] netlink: 36 bytes leftover after parsing attributes in process `syz.2.4308'. [ 1489.463221][T23976] netlink: 36 bytes leftover after parsing attributes in process `syz.2.4308'. [ 1490.995245][T23993] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4312'. [ 1491.053045][T23992] syzkaller0: entered promiscuous mode [ 1491.079402][T23992] syzkaller0: entered allmulticast mode [ 1491.621394][T23998] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4315'. [ 1491.970661][ T6023] net_ratelimit: 445 callbacks suppressed [ 1491.970689][ T6023] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1492.195693][T23989] ptrace attach of "./syz-executor exec"[21956] was attempted by "./syz-executor exec"[23989] [ 1492.349439][T24013] netlink: 64 bytes leftover after parsing attributes in process `syz.4.4320'. [ 1492.371166][T24013] team0: No ports can be present during mode change [ 1492.588221][T24015] loop2: detected capacity change from 0 to 512 [ 1492.650612][T24015] EXT4-fs error (device loop2): ext4_orphan_get:1392: inode #15: comm syz.2.4321: inode has both inline data and extents flags [ 1492.681429][T24015] EXT4-fs error (device loop2): ext4_orphan_get:1395: comm syz.2.4321: couldn't read orphan inode 15 (err -117) [ 1492.993429][T24015] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1493.011295][T21507] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1493.650526][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1493.670770][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 1493.677298][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 1493.763426][T12927] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1493.957428][T24034] xt_hashlimit: size too large, truncated to 1048576 [ 1494.051126][ T6023] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1495.090653][T21507] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1495.538177][T24051] netlink: 20 bytes leftover after parsing attributes in process `syz.9.4332'. [ 1496.130795][T18263] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1496.145310][T22647] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1496.780887][T20910] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1497.178638][T18263] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1498.434746][T21507] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1499.047735][T20910] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1499.057762][T18801] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1499.100725][T18237] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1499.110254][T21507] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1499.135955][T20910] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1499.309146][T24101] loop3: detected capacity change from 0 to 512 [ 1499.405015][T24101] EXT4-fs error (device loop3): ext4_orphan_get:1392: inode #15: comm syz.3.4349: inode has both inline data and extents flags [ 1499.612583][T18263] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1499.630558][T24101] EXT4-fs error (device loop3): ext4_orphan_get:1395: comm syz.3.4349: couldn't read orphan inode 15 (err -117) [ 1499.734640][T24101] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1499.853209][T24114] xt_hashlimit: size too large, truncated to 1048576 [ 1500.073564][T24120] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1500.709773][T18263] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1500.723042][T24143] netlink: 32 bytes leftover after parsing attributes in process `syz.4.4356'. [ 1500.760178][T24143] veth1_to_batadv: entered promiscuous mode [ 1500.778583][T24145] netlink: 32 bytes leftover after parsing attributes in process `syz.0.4359'. [ 1501.897449][T21507] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1502.480548][T24176] net_ratelimit: 1 callbacks suppressed [ 1502.480575][T24176] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 1502.938726][ T6023] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1503.445463][T24191] netlink: 32 bytes leftover after parsing attributes in process `syz.4.4375'. [ 1503.453134][T24193] netlink: 8 bytes leftover after parsing attributes in process `syz.9.4377'. [ 1503.688074][T24195] tipc: Started in network mode [ 1503.707448][T24195] tipc: Node identity 3e8aa15918ad, cluster identity 4711 [ 1503.726691][T24195] tipc: Enabled bearer , priority 0 [ 1503.747737][T24195] syzkaller0: entered promiscuous mode [ 1503.753363][T24195] syzkaller0: entered allmulticast mode [ 1503.851354][T24195] tipc: Resetting bearer [ 1503.940009][T24194] tipc: Resetting bearer [ 1503.981339][ T6023] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1504.093837][T24194] tipc: Disabling bearer [ 1504.176408][T21956] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1505.023627][ T6023] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1505.142224][T24231] netlink: 32 bytes leftover after parsing attributes in process `syz.9.4393'. [ 1505.175126][T18801] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1505.187002][T24232] netlink: 32 bytes leftover after parsing attributes in process `syz.9.4393'. [ 1505.220314][T24234] netlink: 'syz.0.4394': attribute type 4 has an invalid length. [ 1505.368252][T24240] loop4: detected capacity change from 0 to 512 [ 1505.415288][T24240] EXT4-fs error (device loop4): ext4_orphan_get:1392: inode #15: comm syz.4.4397: inode has both inline data and extents flags [ 1505.487862][T24246] fuse: Bad value for 'fd' [ 1505.576638][T24244] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1505.586313][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1505.755983][T24240] EXT4-fs error (device loop4): ext4_orphan_get:1395: comm syz.4.4397: couldn't read orphan inode 15 (err -117) [ 1505.970910][ T5837] Bluetooth: hci1: command 0x0406 tx timeout [ 1506.118878][T24240] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1506.177712][T18263] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1506.955253][T24268] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1506.964399][T24268] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1507.666862][T24262] net_ratelimit: 94 callbacks suppressed [ 1507.666891][T24262] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1507.742015][T18263] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1507.832935][T24273] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4410'. [ 1507.885671][T24276] netlink: 32 bytes leftover after parsing attributes in process `syz.3.4411'. [ 1507.897879][T24276] netlink: 32 bytes leftover after parsing attributes in process `syz.3.4411'. [ 1508.212009][T20910] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1508.371218][T20910] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1508.729451][T24289] pimreg: entered allmulticast mode [ 1508.770611][T18263] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1508.967764][T24292] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1508.992864][T24297] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4417'. [ 1509.018622][T20910] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1509.324880][T24292] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1509.348107][T24304] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 1509.482839][T24292] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1509.736884][T18263] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1509.779295][T20013] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1509.799100][ T6023] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1509.849066][T24292] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1510.967426][T20013] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1511.117309][T20013] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1511.150246][T20013] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1511.231539][T23219] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1511.588763][T22357] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1512.168202][T24340] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1512.835378][T24360] loop2: detected capacity change from 0 to 512 [ 1512.865756][T24360] EXT4-fs error (device loop2): ext4_orphan_get:1392: inode #15: comm syz.2.4442: inode has both inline data and extents flags [ 1512.887996][T24360] EXT4-fs error (device loop2): ext4_orphan_get:1395: comm syz.2.4442: couldn't read orphan inode 15 (err -117) [ 1512.912292][T24360] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1512.916131][T24364] fuse: Bad value for 'fd' [ 1513.173753][T20910] net_ratelimit: 5 callbacks suppressed [ 1513.173780][T20910] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1513.208181][T24366] netlink: 68 bytes leftover after parsing attributes in process `syz.3.4445'. [ 1513.417753][T21507] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1513.946154][T24371] netlink: 24 bytes leftover after parsing attributes in process `syz.9.4444'. [ 1514.032385][T24371] netlink: 'syz.9.4444': attribute type 2 has an invalid length. [ 1514.060572][T24371] netlink: 12 bytes leftover after parsing attributes in process `syz.9.4444'. [ 1514.177608][T22647] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1514.340433][T24377] netlink: 'syz.4.4448': attribute type 10 has an invalid length. [ 1514.450612][T21507] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1514.503709][T24377] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 1514.575918][T24386] tipc: Enabled bearer , priority 0 [ 1514.646525][T24379] tipc: Disabling bearer [ 1515.127628][T24405] fuse: Bad value for 'fd' [ 1515.276949][T24411] netlink: 44 bytes leftover after parsing attributes in process `syz.9.4460'. [ 1515.329987][T24413] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4459'. [ 1515.490513][T18263] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1515.619104][T24420] netlink: 68 bytes leftover after parsing attributes in process `syz.0.4463'. [ 1515.850497][T24426] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4466'. [ 1516.030602][T24428] tipc: Enabled bearer , priority 0 [ 1516.157490][T24427] tipc: Disabling bearer [ 1516.217126][T20910] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1516.326062][T24449] fuse: Bad value for 'fd' [ 1516.530491][T18263] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1516.735440][T24459] netlink: 32 bytes leftover after parsing attributes in process `syz.9.4477'. [ 1516.940491][T24464] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 1517.495570][T24479] fuse: Bad value for 'fd' [ 1517.579770][T18263] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1517.603953][T24482] tipc: Enabled bearer , priority 0 [ 1517.666278][T24482] tipc: Resetting bearer [ 1517.873603][T24481] tipc: Disabling bearer [ 1518.071388][T24496] netlink: 32 bytes leftover after parsing attributes in process `syz.4.4494'. [ 1518.543879][T24515] fuse: Bad value for 'fd' [ 1518.610422][T21507] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1518.618576][ T5930] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1518.963361][T24532] tipc: Enabled bearer , priority 0 [ 1519.028172][T24532] tipc: Resetting bearer [ 1519.104138][T24531] tipc: Disabling bearer [ 1519.263475][T18801] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1519.273977][ T5930] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1519.639524][T24547] netlink: 'syz.9.4512': attribute type 1 has an invalid length. [ 1519.650349][T18263] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1519.664265][T24547] netlink: 352 bytes leftover after parsing attributes in process `syz.9.4512'. [ 1519.688107][T24547] netlink: 'syz.9.4512': attribute type 1 has an invalid length. [ 1519.713038][T24547] netlink: 352 bytes leftover after parsing attributes in process `syz.9.4512'. [ 1519.777043][T24556] tipc: Enabled bearer , priority 0 [ 1519.799723][T24556] syzkaller0: entered promiscuous mode [ 1519.811298][T24556] syzkaller0: entered allmulticast mode [ 1519.957898][T24563] tipc: Resetting bearer [ 1520.009926][T24569] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4523'. [ 1520.030959][T24553] tipc: Resetting bearer [ 1520.091586][T24553] tipc: Disabling bearer [ 1520.690541][T18263] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1521.735421][T18263] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1522.293096][ T5930] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1522.424813][T24629] team_slave_0: entered promiscuous mode [ 1522.431158][T24629] team_slave_1: entered promiscuous mode [ 1522.512392][T24629] vlan2: entered promiscuous mode [ 1522.545474][T24629] team0: entered promiscuous mode [ 1522.770449][T21507] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1523.134621][T24648] netlink: 68 bytes leftover after parsing attributes in process `syz.2.4548'. [ 1523.300617][T24651] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 1523.590565][T24661] netlink: 'syz.1.4555': attribute type 4 has an invalid length. [ 1523.682811][T24661] netlink: 'syz.1.4555': attribute type 4 has an invalid length. [ 1523.811365][T21507] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1524.212738][T24671] bridge0: port 2(bridge_slave_1) entered disabled state [ 1524.221555][T24671] bridge0: port 1(bridge_slave_0) entered disabled state [ 1524.646784][T24671] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1524.710731][T24671] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1524.970299][T24721] xt_hashlimit: size too large, truncated to 1048576 [ 1525.012058][T21507] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1525.456277][ T5930] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1525.488169][T24711] syzkaller0: entered promiscuous mode [ 1525.506610][T24711] syzkaller0: entered allmulticast mode [ 1525.567269][T20013] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1525.619947][T20013] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1525.745105][T24735] netlink: 24 bytes leftover after parsing attributes in process `syz.9.4566'. [ 1525.912934][T20013] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1525.957454][T20013] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1526.057709][T24720] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1527.632046][T24703] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1527.928838][T24769] tipc: Started in network mode [ 1527.939078][T24769] tipc: Node identity e6c809156c0e, cluster identity 4711 [ 1527.948696][T24769] tipc: Enabled bearer , priority 0 [ 1528.028739][T24765] tipc: Disabling bearer [ 1528.406923][T24776] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4580'. [ 1528.530890][T18801] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1528.756549][ T5901] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1528.868153][T20426] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1529.216971][T24784] tipc: Enabling of bearer rejected, failed to enable media [ 1529.566928][T24794] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4587'. [ 1529.811511][T24720] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1530.059487][T24806] tipc: Enabled bearer , priority 0 [ 1530.114181][T24805] tipc: Disabling bearer [ 1530.153956][T24815] xt_hashlimit: size too large, truncated to 1048576 [ 1530.832502][T24832] tipc: Enabling of bearer rejected, failed to enable media [ 1530.851172][T24720] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1531.567819][T24848] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4605'. [ 1531.593973][T18801] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1531.857629][T24855] netlink: 36 bytes leftover after parsing attributes in process `syz.0.4607'. [ 1531.891893][ T5901] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1532.216528][T24861] tipc: Enabled bearer , priority 0 [ 1532.273662][T24856] tipc: Disabling bearer [ 1532.514052][T24871] xt_hashlimit: size too large, truncated to 1048576 [ 1532.915585][T24881] tipc: Enabling of bearer rejected, failed to enable media [ 1532.937512][T24720] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1533.084547][T24885] tipc: Enabled bearer , priority 0 [ 1533.279339][T24885] syzkaller0: entered promiscuous mode [ 1533.295497][T24885] syzkaller0: entered allmulticast mode [ 1533.305305][T24885] tipc: Resetting bearer [ 1533.425717][T24883] tipc: Resetting bearer [ 1533.609246][T24903] netlink: 24 bytes leftover after parsing attributes in process `syz.9.4626'. [ 1533.972694][T24703] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1534.625305][T18801] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1534.892958][T24883] tipc: Disabling bearer [ 1535.000444][T24911] tipc: Enabling of bearer rejected, failed to enable media [ 1535.020276][T24713] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1535.038873][T24720] tipc: Node number set to 3895271299 [ 1535.609312][T24933] xt_hashlimit: size too large, truncated to 1048576 [ 1536.055795][T24720] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1536.948408][T24962] tipc: Started in network mode [ 1536.970455][T24962] tipc: Node identity 82c25463256d, cluster identity 4711 [ 1536.996538][T24962] tipc: Enabled bearer , priority 0 [ 1537.347447][T24713] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1537.429136][T24961] tipc: Disabling bearer [ 1537.650346][T20910] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1538.034625][T24987] tipc: Enabled bearer , priority 0 [ 1538.072231][T24987] syzkaller0: entered promiscuous mode [ 1538.095965][T24987] syzkaller0: entered allmulticast mode [ 1538.144687][T24987] tipc: Resetting bearer [ 1538.185360][T24985] tipc: Resetting bearer [ 1538.321460][T24985] tipc: Disabling bearer [ 1538.370505][T24703] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1538.451999][T20910] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1539.640669][T24703] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1540.109525][T25023] wg1 speed is unknown, defaulting to 1000 [ 1540.122757][T25023] wg1 speed is unknown, defaulting to 1000 [ 1540.156371][T25023] wg1 speed is unknown, defaulting to 1000 [ 1540.179468][T25025] xt_TCPMSS: Only works on TCP SYN packets [ 1540.233890][T25023] infiniband syz: RDMA CMA: cma_listen_on_dev, error -98 [ 1540.349658][T25023] wg1 speed is unknown, defaulting to 1000 [ 1540.359875][T25027] tipc: Enabling of bearer rejected, failed to enable media [ 1540.409214][T25023] wg1 speed is unknown, defaulting to 1000 [ 1540.446264][T25023] wg1 speed is unknown, defaulting to 1000 [ 1540.480734][T25023] wg1 speed is unknown, defaulting to 1000 [ 1540.518319][T25023] wg1 speed is unknown, defaulting to 1000 [ 1540.566801][T25023] wg1 speed is unknown, defaulting to 1000 [ 1540.606404][T25023] wg1 speed is unknown, defaulting to 1000 [ 1540.675981][T25023] wg1 speed is unknown, defaulting to 1000 [ 1540.690668][T20910] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1540.698858][ T5901] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1540.723224][T25023] wg1 speed is unknown, defaulting to 1000 [ 1540.861748][T25044] netlink: 148 bytes leftover after parsing attributes in process `syz.4.4671'. [ 1540.900470][T25044] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4671'. [ 1540.938934][T25044] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4671'. [ 1541.243881][T25051] fuse: Bad value for 'fd' [ 1541.361205][T25057] netlink: 32 bytes leftover after parsing attributes in process `syz.9.4674'. [ 1541.731968][ T5901] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1542.057217][T25083] tipc: Enabling of bearer rejected, failed to enable media [ 1542.202000][T25091] fuse: Bad value for 'fd' [ 1542.270281][T25087] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4690'. [ 1542.658767][T25106] netlink: 32 bytes leftover after parsing attributes in process `syz.9.4694'. [ 1542.676127][T25108] trusted_key: syz.2.4696 sent an empty control message without MSG_MORE. [ 1543.009627][T24713] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1543.222645][T25122] netlink: 68 bytes leftover after parsing attributes in process `syz.9.4699'. [ 1543.241314][T25122] netlink: 40 bytes leftover after parsing attributes in process `syz.9.4699'. [ 1543.427911][T25124] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4702'. [ 1543.568522][T25132] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4705'. [ 1543.745901][ T5933] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1544.071222][T24703] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1544.164981][T25148] IPv6: Can't replace route, no match found [ 1544.323951][ T5933] IPVS: starting estimator thread 0... [ 1544.351586][T25150] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 1544.420221][T25153] IPVS: using max 22 ests per chain, 52800 per kthread [ 1544.984651][T25173] xt_hashlimit: size too large, truncated to 1048576 [ 1545.106508][T24703] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1546.137234][T24713] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1546.215991][T25207] syzkaller0: entered promiscuous mode [ 1546.236135][T25207] syzkaller0: entered allmulticast mode [ 1546.487195][T25225] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 1546.580868][T25229] __nla_validate_parse: 2 callbacks suppressed [ 1546.580895][T25229] netlink: 20 bytes leftover after parsing attributes in process `syz.9.4742'. [ 1546.781517][ T5933] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1547.189244][T24713] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1548.054986][ T5933] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1548.212570][T24720] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1549.075134][T25229] netlink: 12 bytes leftover after parsing attributes in process `syz.9.4742'. [ 1549.257058][T24720] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1549.327022][T25264] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4751'. [ 1549.642101][T25279] netlink: 16 bytes leftover after parsing attributes in process `syz.9.4755'. [ 1549.886709][T25287] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4760'. [ 1550.068912][ T5933] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1550.306911][T24720] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1550.315798][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1550.327144][ T5933] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1550.340319][T24703] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1550.646636][T25307] netlink: 28 bytes leftover after parsing attributes in process `syz.9.4766'. [ 1550.684356][T25305] netlink: 272 bytes leftover after parsing attributes in process `syz.1.4767'. [ 1551.124205][T25323] netlink: 8 bytes leftover after parsing attributes in process `syz.9.4774'. [ 1551.819628][T25339] netlink: 'syz.1.4781': attribute type 4 has an invalid length. [ 1551.840132][T25339] netlink: 152 bytes leftover after parsing attributes in process `syz.1.4781'. [ 1551.871195][T25339] .`: renamed from bond0 [ 1551.899079][T25345] netlink: 44 bytes leftover after parsing attributes in process `syz.3.4783'. [ 1551.921286][T25345] netlink: 44 bytes leftover after parsing attributes in process `syz.3.4783'. [ 1551.951546][T25346] tipc: Enabling of bearer rejected, failed to enable media [ 1552.673427][T25372] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 1552.921548][T25381] xt_hashlimit: size too large, truncated to 1048576 [ 1553.013806][T25386] IPVS: set_ctl: invalid protocol: 135 172.20.20.187:20003 [ 1553.139295][T25393] netlink: 32 bytes leftover after parsing attributes in process `syz.2.4801'. [ 1553.724716][T25403] tipc: Enabling of bearer rejected, failed to enable media [ 1555.651095][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 1555.657868][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 1556.270935][T25438] netlink: 32 bytes leftover after parsing attributes in process `syz.9.4816'. [ 1556.380235][T25440] xt_hashlimit: size too large, truncated to 1048576 [ 1556.954129][T25454] tipc: Enabling of bearer rejected, failed to enable media [ 1560.634035][T25490] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4833'. [ 1561.022018][T25501] xt_hashlimit: size too large, truncated to 1048576 [ 1561.277766][T25512] tipc: Enabling of bearer rejected, failed to enable media [ 1563.740479][T25551] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4850'. [ 1564.968014][T25555] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 1566.060547][T25570] xt_hashlimit: size too large, truncated to 1048576 [ 1568.121108][T25592] wg1 speed is unknown, defaulting to 1000 [ 1568.306555][T25594] tipc: Enabling of bearer rejected, failed to enable media [ 1568.555335][T25600] syzkaller1: entered promiscuous mode [ 1568.566609][T25600] syzkaller1: entered allmulticast mode [ 1568.582256][T25604] netlink: 32 bytes leftover after parsing attributes in process `syz.9.4866'. [ 1568.602973][T25604] netlink: 32 bytes leftover after parsing attributes in process `syz.9.4866'. [ 1568.807554][T25609] lo: Master is either lo or non-ether device [ 1569.111386][T25619] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4873'. [ 1570.689616][T25631] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4875'. [ 1571.624062][T25639] xt_hashlimit: size too large, truncated to 1048576 [ 1571.750748][T25643] netlink: 44 bytes leftover after parsing attributes in process `syz.1.4881'. [ 1571.786150][T25643] netlink: 44 bytes leftover after parsing attributes in process `syz.1.4881'. [ 1572.047741][T25650] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4884'. [ 1573.024510][T25665] syzkaller0: entered promiscuous mode [ 1573.040188][T25665] syzkaller0: entered allmulticast mode [ 1576.236886][T25687] netlink: 44 bytes leftover after parsing attributes in process `syz.9.4897'. [ 1576.266549][T25688] netlink: 44 bytes leftover after parsing attributes in process `syz.9.4897'. [ 1576.323264][T25693] tipc: Enabled bearer , priority 0 [ 1576.576728][T25711] xt_hashlimit: size too large, truncated to 1048576 [ 1576.621070][T25698] tipc: Resetting bearer [ 1576.658141][T25691] tipc: Disabling bearer [ 1576.707187][T25716] netlink: 32 bytes leftover after parsing attributes in process `syz.2.4906'. [ 1577.253596][T25700] delete_channel: no stack [ 1578.821326][T25765] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4924'. [ 1578.947180][T25770] xt_hashlimit: size too large, truncated to 1048576 [ 1580.621007][T25802] netlink: 28 bytes leftover after parsing attributes in process `syz.9.4934'. [ 1581.657503][T25823] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4941'. [ 1581.957591][T25817] syzkaller0: entered promiscuous mode [ 1583.925271][T25817] syzkaller0: entered allmulticast mode [ 1584.615330][T25837] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 1585.532996][T25857] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4951'. [ 1587.937753][T25889] netlink: 24 bytes leftover after parsing attributes in process `syz.9.4961'. [ 1588.573673][T25899] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4965'. [ 1588.626905][T25902] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4966'. [ 1589.924415][ T5933] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 1590.590420][T25926] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4975'. [ 1590.651113][T25930] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4977'. [ 1590.850125][ T5933] usb 1-1: Using ep0 maxpacket: 8 [ 1590.862221][ T5933] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 1590.905926][ T5933] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1590.946637][ T5933] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1590.956676][T25936] syzkaller0: entered promiscuous mode [ 1590.978130][T25936] syzkaller0: entered allmulticast mode [ 1590.988400][ T5933] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1591.031335][ T5933] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1591.080404][ T5933] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1591.116780][ T5933] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1591.307998][T25952] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4986'. [ 1591.317345][T25952] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4986'. [ 1591.340306][T25952] geneve2: entered promiscuous mode [ 1591.345590][T25952] geneve2: entered allmulticast mode [ 1591.365967][T25952] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4986'. [ 1591.380196][ T5933] usb 1-1: GET_CAPABILITIES returned 0 [ 1591.385724][ T5933] usbtmc 1-1:16.0: can't read capabilities [ 1591.430151][T20426] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 1591.450151][T18801] usb 10-1: new high-speed USB device number 4 using dummy_hcd [ 1591.481668][T25956] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4987'. [ 1591.590366][T20426] usb 3-1: Using ep0 maxpacket: 8 [ 1591.601411][T20426] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1591.623040][T25912] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1591.634147][T18801] usb 10-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 1591.650521][T20426] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 1591.665343][T18801] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1591.670747][T25912] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1591.674337][T18801] usb 10-1: Product: syz [ 1591.687512][T18801] usb 10-1: Manufacturer: syz [ 1591.692759][T20426] usb 3-1: New USB device found, idVendor=0af0, idProduct=6751, bcdDevice=75.8b [ 1591.710927][T20426] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1591.719078][T18801] usb 10-1: SerialNumber: syz [ 1591.731797][ T5933] usb 1-1: USB disconnect, device number 9 [ 1591.739478][T20426] usb 3-1: SerialNumber: syz [ 1591.772478][T20426] usb 3-1: config 0 descriptor?? [ 1591.795231][T20426] hso 3-1:0.0: Can't find BULK IN endpoint [ 1592.019738][ T5901] usb 3-1: USB disconnect, device number 11 [ 1592.873930][T18801] lan78xx 10-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 1592.887996][T18801] lan78xx 10-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 1592.940181][T20426] usb 4-1: new full-speed USB device number 26 using dummy_hcd [ 1593.164233][T20426] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1593.190076][T20426] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1593.211707][T20426] usb 4-1: New USB device found, idVendor=1345, idProduct=3008, bcdDevice= 0.00 [ 1593.255685][T20426] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1593.351463][T20426] usb 4-1: config 0 descriptor?? [ 1593.665081][T25993] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5001'. [ 1593.804523][T20426] sony 0003:1345:3008.0004: unknown main item tag 0x0 [ 1593.836152][T20426] sony 0003:1345:3008.0004: unknown main item tag 0x0 [ 1593.858964][T20426] sony 0003:1345:3008.0004: unknown main item tag 0x0 [ 1593.875465][T20426] sony 0003:1345:3008.0004: unknown main item tag 0x0 [ 1594.080097][T20426] sony 0003:1345:3008.0004: unknown main item tag 0x0 [ 1594.087167][T20426] sony 0003:1345:3008.0004: unknown main item tag 0x0 [ 1594.101589][T20426] sony 0003:1345:3008.0004: unknown main item tag 0x0 [ 1594.109030][T20426] sony 0003:1345:3008.0004: unknown main item tag 0x0 [ 1594.117250][T20426] sony 0003:1345:3008.0004: unknown main item tag 0x0 [ 1594.124407][T20426] sony 0003:1345:3008.0004: unknown main item tag 0x0 [ 1594.158551][T20426] sony 0003:1345:3008.0004: hiddev0,hidraw0: USB HID vff.fd Device [HID 1345:3008] on usb-dummy_hcd.3-1/input0 [ 1594.185764][T20426] sony 0003:1345:3008.0004: failed to claim input [ 1594.224347][T20426] usb 4-1: USB disconnect, device number 26 [ 1594.540547][ T5901] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 1594.867157][ T5901] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 1594.988027][ T5901] usb 5-1: config 0 has no interface number 0 [ 1595.112990][ T5901] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1595.140593][ T5901] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1595.160073][ T5901] usb 5-1: config 0 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1595.189092][ T5901] usb 5-1: New USB device found, idVendor=28bd, idProduct=0042, bcdDevice= 0.00 [ 1595.198782][ T5901] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1595.226669][ T5901] usb 5-1: config 0 descriptor?? [ 1596.334236][ T5901] input: HID 28bd:0042 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.1/0003:28BD:0042.0005/input/input8 [ 1596.380831][ T5933] usb 2-1: new full-speed USB device number 3 using dummy_hcd [ 1596.398518][T18801] lan78xx 10-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x000000f4. ret = -EPROTO [ 1596.423806][T18801] lan78xx 10-1:1.0 (unnamed net_device) (uninitialized): Failed to init LTM with error -EPROTO [ 1596.453689][T18801] lan78xx 10-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 1596.467227][ T5901] uclogic 0003:28BD:0042.0005: input,hidraw0: USB HID v0.00 Keypad [HID 28bd:0042] on usb-dummy_hcd.4-1/input1 [ 1596.474671][T18801] lan78xx 10-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 1596.500836][ T5901] usb 5-1: USB disconnect, device number 9 [ 1596.548070][T18801] lan78xx 10-1:1.0: probe with driver lan78xx failed with error -71 [ 1596.567776][T26034] netlink: 8 bytes leftover after parsing attributes in process `syz.9.5015'. [ 1596.592203][ T5933] usb 2-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.32 [ 1596.607833][T18801] usb 10-1: USB disconnect, device number 4 [ 1596.623913][ T5933] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1596.707794][ T5933] usb 2-1: config 0 descriptor?? [ 1596.728619][ T5933] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 1596.844869][T26036] syzkaller0: entered promiscuous mode [ 1596.855884][T26036] syzkaller0: entered allmulticast mode [ 1596.917588][T26040] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5017'. [ 1596.961436][ T5933] gp8psk: usb in 128 operation failed. [ 1596.970813][ T5933] gp8psk: usb in 137 operation failed. [ 1596.983536][ T5933] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 1597.024956][T26045] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5020'. [ 1597.041117][ T5933] dvb-usb: Genpix SkyWalker-1 DVB-S receiver error while loading driver (-19) [ 1597.324503][ T5933] usb 2-1: USB disconnect, device number 3 [ 1597.640211][T24703] usb 10-1: new high-speed USB device number 5 using dummy_hcd [ 1598.000188][T24703] usb 10-1: Using ep0 maxpacket: 32 [ 1598.199000][T24703] usb 10-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 1598.212926][T24703] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1598.223815][T24703] usb 10-1: Product: syz [ 1598.228368][T24703] usb 10-1: Manufacturer: syz [ 1598.253570][T24703] usb 10-1: SerialNumber: syz [ 1598.636892][T24703] usb 10-1: config 0 descriptor?? [ 1598.674332][T24703] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 1598.814059][T26077] tipc: Enabled bearer , priority 0 [ 1598.857248][T26076] tipc: Disabling bearer [ 1598.865861][T26081] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5033'. [ 1598.960217][T24678] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 1599.024850][T24713] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 1599.125094][T24678] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1599.140191][T24678] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1599.156399][T24678] usb 1-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 1599.165922][T24678] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1599.192257][T24713] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1599.211920][T24713] usb 3-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 1599.213336][T24678] usb 1-1: config 0 descriptor?? [ 1599.228412][T26093] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5039'. [ 1599.230195][T24713] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1599.289036][T24713] usb 3-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1599.303765][T24713] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 1599.317377][T24713] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1599.334865][T24713] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1599.354480][T24713] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1599.370447][T24713] usb 3-1: Product: syz [ 1599.382777][T24713] usb 3-1: Manufacturer: syz [ 1599.397406][T26079] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 1599.407511][T24713] cdc_wdm 3-1:1.0: skipping garbage [ 1599.416179][T24713] cdc_wdm 3-1:1.0: skipping garbage [ 1599.424882][T24713] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 1599.432525][T24713] cdc_wdm 3-1:1.0: Unknown control protocol [ 1599.686008][T24678] hid_parser_main: 150 callbacks suppressed [ 1599.686041][T24678] cm6533_jd 0003:0D8C:0022.0006: unknown main item tag 0x0 [ 1599.699270][T24678] cm6533_jd 0003:0D8C:0022.0006: unknown main item tag 0x0 [ 1599.706556][T24678] cm6533_jd 0003:0D8C:0022.0006: unknown main item tag 0x0 [ 1599.724434][T24678] cm6533_jd 0003:0D8C:0022.0006: hiddev1,hidraw0: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.0-1/input0 [ 1599.800130][ T5933] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 1599.849511][T26079] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1599.858523][T26079] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1599.869352][T24678] usb 3-1: USB disconnect, device number 12 [ 1599.897376][T18801] usb 1-1: USB disconnect, device number 10 [ 1599.950161][ T5933] usb 5-1: Using ep0 maxpacket: 32 [ 1599.958176][ T5933] usb 5-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1599.969017][ T5933] usb 5-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 1599.984089][ T5933] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1599.993734][ T5933] usb 5-1: New USB device found, idVendor=1b1c, idProduct=1c08, bcdDevice= 0.00 [ 1600.003831][ T5933] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1600.015940][ T5933] usb 5-1: config 0 descriptor?? [ 1600.446339][ T5933] corsair-psu 0003:1B1C:1C08.0007: item fetching failed at offset 2/5 [ 1600.467044][ T5933] corsair-psu 0003:1B1C:1C08.0007: probe with driver corsair-psu failed with error -22 [ 1600.600228][T24678] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 1600.646930][ T5901] usb 5-1: USB disconnect, device number 10 [ 1600.750223][T24713] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 1600.834471][T24678] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF6, changing to 0x86 [ 1600.847591][T24678] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid maxpacket 65535, setting to 1024 [ 1600.859879][T24678] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x86 has invalid maxpacket 1024 [ 1600.870468][T24678] usb 3-1: New USB device found, idVendor=abcd, idProduct=cdee, bcdDevice= 5.b9 [ 1600.879575][T24678] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1600.895181][T24678] usb 3-1: config 0 descriptor?? [ 1600.901783][T26079] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 1600.908234][T26113] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5047'. [ 1600.913033][T24678] gspca_main: spca561-2.14.0 probing abcd:cdee [ 1600.922726][T24713] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1600.937510][T24713] usb 1-1: New USB device found, idVendor=1532, idProduct=010e, bcdDevice= 0.00 [ 1600.954894][T24713] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1600.967368][T24713] usb 1-1: config 0 descriptor?? [ 1601.113164][T24678] spca561 3-1:0.0: probe with driver spca561 failed with error -22 [ 1601.126586][T24678] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 1601.134018][T24678] usb 3-1: MIDIStreaming interface descriptor not found [ 1601.156928][T24703] gspca_stk1135: reg_w 0x300 err -71 [ 1601.163956][T24703] gspca_stk1135: serial bus timeout: status=0x00 [ 1601.181342][T24703] gspca_stk1135: Sensor write failed [ 1601.192153][T24703] gspca_stk1135: serial bus timeout: status=0x00 [ 1601.198683][T24703] gspca_stk1135: Sensor write failed [ 1601.204111][T24678] usb 3-1: USB disconnect, device number 13 [ 1601.212163][T24703] gspca_stk1135: serial bus timeout: status=0x00 [ 1601.218607][T24703] gspca_stk1135: Sensor read failed [ 1601.232155][T24703] gspca_stk1135: serial bus timeout: status=0x00 [ 1601.238694][T24703] gspca_stk1135: Sensor read failed [ 1601.244743][T24703] gspca_stk1135: Detected sensor type unknown (0x0) [ 1601.252770][T24703] gspca_stk1135: serial bus timeout: status=0x00 [ 1601.259600][T24703] gspca_stk1135: Sensor read failed [ 1601.266988][T24703] gspca_stk1135: serial bus timeout: status=0x00 [ 1601.274389][T24703] gspca_stk1135: Sensor read failed [ 1601.279881][T24703] gspca_stk1135: serial bus timeout: status=0x00 [ 1601.312011][T24703] gspca_stk1135: Sensor write failed [ 1601.317416][T24703] gspca_stk1135: serial bus timeout: status=0x00 [ 1601.324317][T24703] gspca_stk1135: Sensor write failed [ 1601.329716][T24703] stk1135 10-1:0.0: probe with driver stk1135 failed with error -71 [ 1601.372704][ T5901] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 1601.380798][T24703] usb 10-1: USB disconnect, device number 5 [ 1601.540701][ T5901] usb 4-1: Using ep0 maxpacket: 16 [ 1601.551940][ T5901] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1601.567453][ T5901] usb 4-1: config 159 has an invalid interface number: 195 but max is 0 [ 1601.577306][ T5901] usb 4-1: config 159 has no interface number 0 [ 1601.584956][ T5901] usb 4-1: config 159 interface 195 altsetting 5 bulk endpoint 0x1 has invalid maxpacket 16 [ 1601.596448][ T5901] usb 4-1: config 159 interface 195 has no altsetting 0 [ 1601.607714][ T5901] usb 4-1: New USB device found, idVendor=17e9, idProduct=b889, bcdDevice=ec.5c [ 1601.610260][ T5915] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 1601.617968][ T5901] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1601.643278][ T5901] usb 4-1: Product: syz [ 1601.648191][T24713] razer 0003:1532:010E.0008: hidraw0: USB HID v0.00 Device [HID 1532:010e] on usb-dummy_hcd.0-1/input0 [ 1601.660375][ T5901] usb 4-1: Manufacturer: syz [ 1601.665509][ T5901] usb 4-1: SerialNumber: syz [ 1601.682300][T26117] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 1601.800163][ T5915] usb 5-1: Using ep0 maxpacket: 16 [ 1601.809994][ T5915] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1601.845781][ T5915] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1601.869205][ T5915] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1601.905849][ T5933] usb 1-1: USB disconnect, device number 11 [ 1601.930003][T26117] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1601.933358][ T5915] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1601.941603][T26117] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1601.967878][ T5915] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1601.998201][ T5915] usb 5-1: config 0 descriptor?? [ 1602.301888][ T5901] udl 4-1:159.195: [drm] Unrecognized vendor firmware descriptor [ 1602.310506][ T5901] [drm:udl_init] *ERROR* Selecting channel failed [ 1602.335164][ T5901] [drm] Initialized udl 0.0.1 for 4-1:159.195 on minor 2 [ 1602.343979][ T5901] [drm] Initialized udl on minor 2 [ 1602.355453][ T5901] udl 4-1:159.195: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 1602.369206][ T5901] udl 4-1:159.195: [drm] Cannot find any crtc or sizes [ 1602.389647][T24703] udl 4-1:159.195: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 1602.400163][T24713] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 1602.420663][ T5901] usb 4-1: USB disconnect, device number 27 [ 1602.441224][T24703] udl 4-1:159.195: [drm] Cannot find any crtc or sizes [ 1602.463477][ T5915] microsoft 0003:045E:07DA.0009: unknown main item tag 0x0 [ 1602.489654][ T5915] microsoft 0003:045E:07DA.0009: ignoring exceeding usage max [ 1602.602886][T24713] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1602.799730][ T5915] microsoft 0003:045E:07DA.0009: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.4-1/input0 [ 1602.812872][ T5915] microsoft 0003:045E:07DA.0009: no inputs found [ 1602.819228][ T5915] microsoft 0003:045E:07DA.0009: could not initialize ff, continuing anyway [ 1602.874526][T24713] usb 3-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 1602.884136][ T5915] usb 5-1: USB disconnect, device number 11 [ 1602.927126][T24713] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1603.197396][T24713] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 1603.262390][T24713] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 1603.610686][T24713] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1603.643704][T24713] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1603.700078][T24713] usb 3-1: Product: syz [ 1603.710950][T24713] usb 3-1: Manufacturer: syz [ 1603.757876][T24713] cdc_wdm 3-1:1.0: skipping garbage [ 1603.776798][T24713] cdc_wdm 3-1:1.0: skipping garbage [ 1603.800850][T24713] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 1603.827288][T24713] cdc_wdm 3-1:1.0: Unknown control protocol [ 1603.985013][T26130] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1603.994423][T26130] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1604.007970][T26130] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1604.017316][T26130] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1604.060166][ T5901] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 1604.191342][T24713] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 1604.211085][ T5901] usb 2-1: Using ep0 maxpacket: 16 [ 1604.219120][ T5901] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1604.232473][T24703] usb 3-1: USB disconnect, device number 14 [ 1604.241319][ T5901] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1604.258190][ T5901] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1604.272008][ T6023] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 1604.282983][ T5901] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1604.293308][ T5901] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1604.306745][ T5901] usb 2-1: config 0 descriptor?? [ 1604.371220][T24713] usb 1-1: Using ep0 maxpacket: 32 [ 1604.383122][T24713] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1604.404335][T24713] usb 1-1: config 7 has an invalid interface number: 187 but max is 0 [ 1604.422871][T24713] usb 1-1: config 7 has no interface number 0 [ 1604.430334][ T6023] usb 4-1: Using ep0 maxpacket: 8 [ 1604.436399][T24713] usb 1-1: config 7 interface 187 has no altsetting 0 [ 1604.452354][ T6023] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 1604.462893][ T6023] usb 4-1: config 0 has no interface number 0 [ 1604.471577][ T6023] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1604.488430][T24713] usb 1-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice=5a.bb [ 1604.500283][T24713] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1604.509051][ T6023] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1604.520505][T24713] usb 1-1: Product: syz [ 1604.524962][T24713] usb 1-1: Manufacturer: syz [ 1604.529971][ T6023] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1604.539430][T24713] usb 1-1: SerialNumber: syz [ 1604.554205][ T6023] usb 4-1: config 0 descriptor?? [ 1604.580889][ T6023] iowarrior 4-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 1604.670113][ T5915] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 1604.750548][ T5901] microsoft 0003:045E:07DA.000A: unknown main item tag 0x0 [ 1604.758024][ T5901] microsoft 0003:045E:07DA.000A: unknown main item tag 0x0 [ 1604.766901][ T5901] microsoft 0003:045E:07DA.000A: unknown main item tag 0x0 [ 1604.775322][ T5901] microsoft 0003:045E:07DA.000A: unknown main item tag 0x0 [ 1604.783248][ T5901] microsoft 0003:045E:07DA.000A: unknown main item tag 0x0 [ 1604.791087][ T5901] microsoft 0003:045E:07DA.000A: unknown main item tag 0x0 [ 1604.798697][ T5901] microsoft 0003:045E:07DA.000A: unknown main item tag 0x0 [ 1604.806341][T24713] usb 1-1: Cannot retrieve CPort count: -32 [ 1604.812906][T24713] usb 1-1: Cannot retrieve CPort count: -32 [ 1604.819127][ T5901] microsoft 0003:045E:07DA.000A: unknown main item tag 0x0 [ 1604.830234][ T5915] usb 5-1: Using ep0 maxpacket: 8 [ 1604.833378][T24713] es2_ap_driver 1-1:7.187: probe with driver es2_ap_driver failed with error -32 [ 1604.842103][ T5915] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1604.848069][ T5901] microsoft 0003:045E:07DA.000A: unknown main item tag 0x0 [ 1604.859300][ T5915] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 1604.864402][T24713] usb 1-1: USB disconnect, device number 12 [ 1604.877986][ T5901] microsoft 0003:045E:07DA.000A: unknown main item tag 0x0 [ 1604.877994][ T5915] usb 5-1: New USB device found, idVendor=16d0, idProduct=10a9, bcdDevice=30.52 [ 1604.895663][ T5915] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1604.906617][ T5901] input: HID 045e:07da as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:045E:07DA.000A/input/input9 [ 1605.121649][ T5901] microsoft 0003:045E:07DA.000A: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.1-1/input0 [ 1605.152100][ T5915] usb 5-1: Product: syz [ 1605.156967][ T5915] usb 5-1: Manufacturer: syz [ 1605.161644][ T5915] usb 5-1: SerialNumber: syz [ 1605.168161][ T5901] usb 2-1: USB disconnect, device number 4 [ 1605.178509][ T5915] usb 5-1: config 0 descriptor?? [ 1605.407122][T26175] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1605.423350][T26175] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1605.438792][T26192] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5078'. [ 1605.442735][T26175] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1605.471111][T26175] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1605.690641][T26175] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1605.870653][T26175] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1605.921010][ T5915] usb 5-1: USB disconnect, device number 12 [ 1607.217704][ T5901] usb 4-1: USB disconnect, device number 28 [ 1608.268621][T26242] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5095'. [ 1608.580595][T24713] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 1608.947226][T24713] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1608.978909][T24713] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1609.009495][T24713] usb 3-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.00 [ 1609.047968][T24713] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1609.069242][T24713] usb 3-1: config 0 descriptor?? [ 1609.320892][T26244] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1609.388294][T26244] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1609.639727][T24713] arvo 0003:1E7D:30D4.000B: hidraw0: USB HID v0.00 Device [HID 1e7d:30d4] on usb-dummy_hcd.2-1/input0 [ 1609.661226][T18801] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 1609.675312][T26267] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1610.032376][T18801] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1610.047856][T18801] usb 5-1: New USB device found, idVendor=1532, idProduct=010e, bcdDevice= 0.00 [ 1610.071297][T18801] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1610.073674][T26244] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1610.766697][T18801] usb 5-1: config 0 descriptor?? [ 1610.923157][T26244] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1611.004434][T26244] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1611.040742][T26244] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1611.075846][T24713] usb 3-1: USB disconnect, device number 15 [ 1611.552737][T18801] razer 0003:1532:010E.000C: failed to enable macro keys: -71 [ 1611.672097][T18801] razer 0003:1532:010E.000C: hidraw0: USB HID v0.00 Device [HID 1532:010e] on usb-dummy_hcd.4-1/input0 [ 1612.143050][T24713] usb 10-1: new high-speed USB device number 6 using dummy_hcd [ 1612.495996][T24713] usb 10-1: Using ep0 maxpacket: 16 [ 1612.533963][T24713] usb 10-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 1612.545144][T18801] usb 5-1: USB disconnect, device number 13 [ 1612.581829][T24713] usb 10-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 1612.630508][T24713] usb 10-1: Product: syz [ 1612.647125][T24713] usb 10-1: Manufacturer: syz [ 1612.657236][T24713] usb 10-1: SerialNumber: syz [ 1612.673156][T24713] usb 10-1: config 0 descriptor?? [ 1612.931482][T24713] usb 10-1: USB disconnect, device number 6 [ 1614.195555][T18801] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 1614.342551][T24713] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 1615.101820][ T5933] usb 10-1: new high-speed USB device number 7 using dummy_hcd [ 1615.122969][T18801] usb 2-1: too many configurations: 9, using maximum allowed: 8 [ 1615.146795][T18801] usb 2-1: config 0 has no interfaces? [ 1615.157028][T18801] usb 2-1: config 0 has no interfaces? [ 1615.166254][T18801] usb 2-1: config 0 has no interfaces? [ 1615.173496][T18801] usb 2-1: config 0 has no interfaces? [ 1615.180977][T18801] usb 2-1: config 0 has no interfaces? [ 1615.191337][T18801] usb 2-1: config 0 has no interfaces? [ 1615.198199][T18801] usb 2-1: config 0 has no interfaces? [ 1615.210210][T24713] usb 5-1: Using ep0 maxpacket: 16 [ 1615.211624][T18801] usb 2-1: config 0 has no interfaces? [ 1615.221928][T24713] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1615.236319][T24713] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1615.258243][T24713] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1615.263389][T18801] usb 2-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 1615.276440][T24713] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1615.276483][T24713] usb 5-1: Product: syz [ 1615.276511][T24713] usb 5-1: Manufacturer: syz [ 1615.284683][ T5933] usb 10-1: Using ep0 maxpacket: 8 [ 1615.299916][T24713] usb 5-1: SerialNumber: syz [ 1615.321826][ T5933] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1615.353816][T18801] usb 2-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 1615.371549][ T5933] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1615.418878][T18801] usb 2-1: Product: syz [ 1615.448348][ T5933] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 1615.460096][T18801] usb 2-1: Manufacturer: syz [ 1615.464757][T18801] usb 2-1: SerialNumber: syz [ 1615.502227][ T5933] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 1615.514586][ T5933] usb 10-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 1615.525112][T18801] usb 2-1: config 0 descriptor?? [ 1615.534361][ T5933] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1615.537579][T24713] usb 5-1: 0:2 : does not exist [ 1615.576655][ T5933] hub 10-1:1.0: bad descriptor, ignoring hub [ 1615.581425][T24713] usb 5-1: 5:0: failed to get current value for ch 0 (-22) [ 1615.605202][ T5933] hub 10-1:1.0: probe with driver hub failed with error -5 [ 1615.619501][ T5933] cdc_wdm 10-1:1.0: skipping garbage [ 1615.625612][ T5933] cdc_wdm 10-1:1.0: skipping garbage [ 1615.630488][T24713] usb 5-1: USB disconnect, device number 14 [ 1615.637394][ T5933] cdc_wdm 10-1:1.0: cdc-wdm0: USB WDM device [ 1615.655831][ T5933] cdc_wdm 10-1:1.0: Unknown control protocol [ 1615.757114][ T5933] usb 2-1: USB disconnect, device number 5 [ 1615.830213][ T6023] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 1615.840213][T24678] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 1615.952561][T26337] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5130'. [ 1615.990833][ T6023] usb 4-1: Using ep0 maxpacket: 32 [ 1615.998453][T24678] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1616.008970][T24678] usb 1-1: New USB device found, idVendor=1532, idProduct=010e, bcdDevice= 0.00 [ 1616.043704][T24678] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1616.066516][T26338] netlink: 92 bytes leftover after parsing attributes in process `syz.2.5130'. [ 1616.075544][ T6023] usb 4-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 1616.075624][ T6023] usb 4-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 1616.087557][ T5933] usb 10-1: USB disconnect, device number 7 [ 1616.106660][T24678] usb 1-1: config 0 descriptor?? [ 1616.216468][ T6023] usb 4-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1616.241173][ T6023] usb 4-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 1616.265211][ T6023] usb 4-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 1616.294212][ T6023] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1616.312975][ T6023] usb 4-1: Product: syz [ 1616.320203][ T6023] usb 4-1: Manufacturer: syz [ 1616.324837][ T6023] usb 4-1: SerialNumber: syz [ 1616.339284][ C1] imon 4-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 1616.353524][ T6023] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:155.0/input/input10 [ 1616.550416][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 1616.556799][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 1616.580256][ T6023] imon 4-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 1616.597856][ T6023] (id 0x00) [ 1616.854819][ T6023] rc_core: IR keymap rc-imon-pad not found [ 1616.868832][ T6023] Registered IR keymap rc-empty [ 1616.890245][ T6023] imon 4-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 1616.926508][T24678] razer 0003:1532:010E.000D: failed to enable macro keys: -71 [ 1616.943935][T24678] razer 0003:1532:010E.000D: hidraw0: USB HID v0.00 Device [HID 1532:010e] on usb-dummy_hcd.0-1/input0 [ 1616.959108][ T6023] imon 4-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 1617.003042][T24678] usb 1-1: USB disconnect, device number 13 [ 1617.035194][ T6023] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:155.0/rc/rc0 [ 1617.072360][ T6023] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:155.0/rc/rc0/input11 [ 1617.088780][ T6023] imon 4-1:155.0: iMON device (15c2:ffdc, intf0) on usb<4:29> initialized [ 1617.216237][ T6023] usb 4-1: USB disconnect, device number 29 [ 1619.040359][T26365] netlink: 8 bytes leftover after parsing attributes in process `syz.9.5137'. [ 1619.076341][T26365] bond0: Unable to set up delay as MII monitoring is disabled [ 1619.163070][T26370] netlink: 44 bytes leftover after parsing attributes in process `syz.0.5140'. [ 1619.195467][T26374] netlink: 44 bytes leftover after parsing attributes in process `syz.0.5140'. [ 1619.547584][T26391] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1621.940591][ T5901] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 1622.742173][ T5901] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1622.822893][ T5901] usb 2-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 1622.843963][T26422] netlink: 44 bytes leftover after parsing attributes in process `syz.4.5158'. [ 1622.863189][ T5901] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1622.885844][T26422] netlink: 44 bytes leftover after parsing attributes in process `syz.4.5158'. [ 1622.935682][ T5901] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 1622.960232][ T5901] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 1622.988033][ T5901] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1623.007499][ T5901] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1623.025783][ T5901] usb 2-1: Product: syz [ 1623.041846][ T5901] usb 2-1: Manufacturer: syz [ 1623.071934][ T5901] cdc_wdm 2-1:1.0: skipping garbage [ 1623.099373][ T5901] cdc_wdm 2-1:1.0: skipping garbage [ 1623.136529][ T5901] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 1623.170287][ T5901] cdc_wdm 2-1:1.0: Unknown control protocol [ 1623.423975][T26414] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1623.460547][T26414] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1623.503809][T26414] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1623.564961][T26414] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1623.603021][T26430] syzkaller0: entered promiscuous mode [ 1623.673797][T26430] syzkaller0: entered allmulticast mode [ 1623.824548][ T5915] usb 2-1: USB disconnect, device number 6 [ 1625.351405][T26459] netlink: 44 bytes leftover after parsing attributes in process `syz.2.5173'. [ 1625.369269][T26453] netlink: 44 bytes leftover after parsing attributes in process `syz.2.5173'. [ 1625.595531][T26465] tipc: Enabling of bearer rejected, failed to enable media [ 1625.609228][T26467] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5176'. [ 1625.682874][T26471] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5176'. [ 1627.750114][T24678] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 1628.110802][T24678] usb 3-1: Using ep0 maxpacket: 8 [ 1628.319591][T24678] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1628.346744][T24678] usb 3-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 1629.278843][T24678] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a3, bcdDevice= 0.40 [ 1629.289127][T24678] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1629.338843][T24678] usb 3-1: Product: syz [ 1629.411558][T24678] usb 3-1: Manufacturer: syz [ 1629.416207][T24678] usb 3-1: SerialNumber: syz [ 1631.042784][T26505] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5187'. [ 1631.073376][T26505] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5187'. [ 1631.243090][T26508] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5188'. [ 1631.289780][T26505] geneve2: entered promiscuous mode [ 1631.393559][T26505] geneve2: entered allmulticast mode [ 1631.703484][T20323] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1631.865095][T20323] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1631.895087][ C1] ------------[ cut here ]------------ [ 1631.900881][ C1] ODEBUG: free active (active state 0) object: ffff888056053890 object type: timer_list hint: rose_t0timer_expiry+0x0/0x150 [ 1631.914839][ C1] WARNING: CPU: 1 PID: 12 at lib/debugobjects.c:612 debug_print_object+0x1a2/0x2b0 [ 1631.924197][ C1] Modules linked in: [ 1631.928436][ C1] CPU: 1 UID: 0 PID: 12 Comm: kworker/u8:0 Not tainted syzkaller #0 PREEMPT(full) [ 1631.937784][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1631.947892][ C1] Workqueue: iou_exit io_ring_exit_work [ 1631.953504][ C1] RIP: 0010:debug_print_object+0x1a2/0x2b0 [ 1631.959358][ C1] Code: fc ff df 48 89 fa 48 c1 ea 03 80 3c 02 00 75 54 41 56 48 8b 14 dd a0 8a f0 8b 4c 89 e6 48 c7 c7 20 7f f0 8b e8 ff 7b d0 fc 90 <0f> 0b 90 90 58 83 05 f6 dd d7 0b 01 48 83 c4 18 5b 5d 41 5c 41 5d [ 1631.979115][ C1] RSP: 0018:ffffc90000a08a18 EFLAGS: 00010282 [ 1631.985239][ C1] RAX: 0000000000000000 RBX: 0000000000000003 RCX: ffffffff817b1cd8 [ 1631.993261][ C1] RDX: ffff88801d2a5ac0 RSI: ffffffff817b1ce5 RDI: 0000000000000001 [ 1632.001292][ C1] RBP: 0000000000000001 R08: 0000000000000001 R09: 0000000000000000 [ 1632.009367][ C1] R10: 0000000000000000 R11: 0000000000000001 R12: ffffffff8bf085c0 [ 1632.017926][ C1] R13: ffffffff8b9021e0 R14: ffffffff8a4bf300 R15: ffffc90000a08b18 [ 1632.025975][ C1] FS: 0000000000000000(0000) GS:ffff888124b06000(0000) knlGS:0000000000000000 [ 1632.034980][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1632.041624][ C1] CR2: 0000200000dc5000 CR3: 00000000767b0000 CR4: 0000000000350ef0 [ 1632.049618][ C1] Call Trace: [ 1632.052949][ C1] [ 1632.055799][ C1] ? __pfx_rose_t0timer_expiry+0x10/0x10 [ 1632.061518][ C1] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 1632.067358][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1632.073074][ C1] debug_check_no_obj_freed+0x4b7/0x600 [ 1632.078675][ C1] ? __pfx_debug_check_no_obj_freed+0x10/0x10 [ 1632.084848][ C1] kfree+0x291/0x6d0 [ 1632.088776][ C1] ? rose_timer_expiry+0x53f/0x630 [ 1632.093957][ C1] ? rose_timer_expiry+0x53f/0x630 [ 1632.099093][ C1] rose_timer_expiry+0x53f/0x630 [ 1632.104186][ C1] ? __pfx_rose_timer_expiry+0x10/0x10 [ 1632.109670][ C1] call_timer_fn+0x19a/0x620 [ 1632.114328][ C1] ? __pfx_call_timer_fn+0x10/0x10 [ 1632.119460][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1632.125180][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1632.130875][ C1] ? mark_held_locks+0x49/0x80 [ 1632.135692][ C1] ? __pfx_rose_timer_expiry+0x10/0x10 [ 1632.141227][ C1] __run_timers+0x6ef/0x960 [ 1632.145778][ C1] ? __pfx___run_timers+0x10/0x10 [ 1632.150871][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1632.156563][ C1] run_timer_base+0x114/0x190 [ 1632.161299][ C1] ? __pfx_run_timer_base+0x10/0x10 [ 1632.166525][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1632.172235][ C1] run_timer_softirq+0x1a/0x40 [ 1632.177021][ C1] handle_softirqs+0x219/0x8e0 [ 1632.181863][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 1632.187183][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1632.192889][ C1] __irq_exit_rcu+0x109/0x170 [ 1632.197690][ C1] irq_exit_rcu+0x9/0x30 [ 1632.202009][ C1] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 1632.207673][ C1] [ 1632.210652][ C1] [ 1632.213594][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1632.219599][ C1] RIP: 0010:rcu_is_watching+0x19/0xc0 [ 1632.225045][ C1] Code: 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 55 53 65 ff 05 b3 e7 ff 11 e8 9e 42 bd 09 48 c7 c3 a8 d2 a2 93 <89> c5 83 f8 07 0f 87 82 00 00 00 48 8d 3c ed e0 2e cd 8d 48 b8 00 [ 1632.244814][ C1] RSP: 0018:ffffc900001175e0 EFLAGS: 00000296 [ 1632.250951][ C1] RAX: 0000000000000001 RBX: ffffffff93a2d2a8 RCX: 00000000f251cc2a [ 1632.258944][ C1] RDX: ffffffff816bf3cd RSI: ffffffff8bf07940 RDI: ffffffff8bf07980 [ 1632.266979][ C1] RBP: ffffc900001176b0 R08: 25a8901442f27bf1 R09: 0000000000000000 [ 1632.275015][ C1] R10: 0000000000000000 R11: 0000000000000001 R12: ffffffff81a7e2a0 [ 1632.283062][ C1] R13: ffffc90000117668 R14: 0000000000000000 R15: ffff88801d2a5ac0 [ 1632.291105][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1632.297330][ C1] ? unwind_next_frame+0xbd/0x20a0 [ 1632.302540][ C1] unwind_next_frame+0xa3b/0x20a0 [ 1632.307607][ C1] ? kthread+0x3c5/0x780 [ 1632.311928][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1632.318140][ C1] arch_stack_walk+0x94/0x100 [ 1632.322923][ C1] ? kthread+0x3c5/0x780 [ 1632.327215][ C1] stack_trace_save+0x8e/0xc0 [ 1632.332004][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 1632.337431][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1632.343175][ C1] ? kasan_save_stack+0x42/0x60 [ 1632.348073][ C1] ? kasan_save_stack+0x33/0x60 [ 1632.353037][ C1] kasan_save_stack+0x33/0x60 [ 1632.357764][ C1] ? kasan_save_stack+0x33/0x60 [ 1632.362732][ C1] ? kasan_record_aux_stack+0xa7/0xc0 [ 1632.368145][ C1] ? kmem_cache_free+0x15e/0x6c0 [ 1632.373162][ C1] ? __io_req_caches_free+0x19e/0x5c0 [ 1632.378583][ C1] ? io_ring_exit_work+0x387/0x10f0 [ 1632.383860][ C1] ? process_one_work+0x9cf/0x1b70 [ 1632.389002][ C1] ? worker_thread+0x6c8/0xf10 [ 1632.393845][ C1] ? kthread+0x3c5/0x780 [ 1632.398176][ C1] kasan_record_aux_stack+0xa7/0xc0 [ 1632.403467][ C1] kmem_cache_free+0x15e/0x6c0 [ 1632.408285][ C1] ? __io_req_caches_free+0x19e/0x5c0 [ 1632.413784][ C1] ? __io_req_caches_free+0x19e/0x5c0 [ 1632.419199][ C1] __io_req_caches_free+0x19e/0x5c0 [ 1632.424515][ C1] io_ring_exit_work+0x387/0x10f0 [ 1632.429582][ C1] ? do_raw_spin_lock+0x12c/0x2b0 [ 1632.434717][ C1] ? __pfx_io_ring_exit_work+0x10/0x10 [ 1632.440247][ C1] ? __lock_acquire+0xb8a/0x1c90 [ 1632.445238][ C1] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 1632.451134][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1632.456811][ C1] ? debug_object_deactivate+0x1ec/0x3a0 [ 1632.462557][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1632.468223][ C1] ? rcu_is_watching+0x12/0xc0 [ 1632.473088][ C1] process_one_work+0x9cf/0x1b70 [ 1632.478080][ C1] ? __pfx_process_one_work+0x10/0x10 [ 1632.483538][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1632.489214][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1632.494942][ C1] ? assign_work+0x1a0/0x250 [ 1632.499565][ C1] worker_thread+0x6c8/0xf10 [ 1632.504257][ C1] ? __pfx_worker_thread+0x10/0x10 [ 1632.509406][ C1] kthread+0x3c5/0x780 [ 1632.513557][ C1] ? __pfx_kthread+0x10/0x10 [ 1632.518187][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1632.523903][ C1] ? rcu_is_watching+0x12/0xc0 [ 1632.528716][ C1] ? __pfx_kthread+0x10/0x10 [ 1632.533368][ C1] ret_from_fork+0x675/0x7d0 [ 1632.537979][ C1] ? __pfx_kthread+0x10/0x10 [ 1632.542653][ C1] ret_from_fork_asm+0x1a/0x30 [ 1632.547490][ C1] [ 1632.550569][ C1] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1632.557864][ C1] CPU: 1 UID: 0 PID: 12 Comm: kworker/u8:0 Not tainted syzkaller #0 PREEMPT(full) [ 1632.567176][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1632.577252][ C1] Workqueue: iou_exit io_ring_exit_work [ 1632.582927][ C1] Call Trace: [ 1632.586212][ C1] [ 1632.589065][ C1] dump_stack_lvl+0x3d/0x1f0 [ 1632.593864][ C1] vpanic+0x640/0x6f0 [ 1632.597892][ C1] ? debug_print_object+0x1a2/0x2b0 [ 1632.603112][ C1] panic+0xca/0xd0 [ 1632.606872][ C1] ? __pfx_panic+0x10/0x10 [ 1632.611345][ C1] ? check_panic_on_warn+0x1f/0xb0 [ 1632.616505][ C1] check_panic_on_warn+0xab/0xb0 [ 1632.621487][ C1] __warn+0xf6/0x3c0 [ 1632.625394][ C1] ? debug_print_object+0x1a2/0x2b0 [ 1632.630619][ C1] report_bug+0x3c3/0x580 [ 1632.634976][ C1] ? debug_print_object+0x1a2/0x2b0 [ 1632.640200][ C1] handle_bug+0x184/0x210 [ 1632.644573][ C1] exc_invalid_op+0x17/0x50 [ 1632.649114][ C1] asm_exc_invalid_op+0x1a/0x20 [ 1632.653996][ C1] RIP: 0010:debug_print_object+0x1a2/0x2b0 [ 1632.659894][ C1] Code: fc ff df 48 89 fa 48 c1 ea 03 80 3c 02 00 75 54 41 56 48 8b 14 dd a0 8a f0 8b 4c 89 e6 48 c7 c7 20 7f f0 8b e8 ff 7b d0 fc 90 <0f> 0b 90 90 58 83 05 f6 dd d7 0b 01 48 83 c4 18 5b 5d 41 5c 41 5d [ 1632.679537][ C1] RSP: 0018:ffffc90000a08a18 EFLAGS: 00010282 [ 1632.685630][ C1] RAX: 0000000000000000 RBX: 0000000000000003 RCX: ffffffff817b1cd8 [ 1632.693612][ C1] RDX: ffff88801d2a5ac0 RSI: ffffffff817b1ce5 RDI: 0000000000000001 [ 1632.701602][ C1] RBP: 0000000000000001 R08: 0000000000000001 R09: 0000000000000000 [ 1632.709588][ C1] R10: 0000000000000000 R11: 0000000000000001 R12: ffffffff8bf085c0 [ 1632.717574][ C1] R13: ffffffff8b9021e0 R14: ffffffff8a4bf300 R15: ffffc90000a08b18 [ 1632.725568][ C1] ? __pfx_rose_t0timer_expiry+0x10/0x10 [ 1632.731255][ C1] ? __warn_printk+0x198/0x350 [ 1632.736063][ C1] ? __warn_printk+0x1a5/0x350 [ 1632.740888][ C1] ? debug_print_object+0x1a1/0x2b0 [ 1632.746116][ C1] ? __pfx_rose_t0timer_expiry+0x10/0x10 [ 1632.751790][ C1] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 1632.757621][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1632.763286][ C1] debug_check_no_obj_freed+0x4b7/0x600 [ 1632.768883][ C1] ? __pfx_debug_check_no_obj_freed+0x10/0x10 [ 1632.775013][ C1] kfree+0x291/0x6d0 [ 1632.778931][ C1] ? rose_timer_expiry+0x53f/0x630 [ 1632.784076][ C1] ? rose_timer_expiry+0x53f/0x630 [ 1632.789212][ C1] rose_timer_expiry+0x53f/0x630 [ 1632.794175][ C1] ? __pfx_rose_timer_expiry+0x10/0x10 [ 1632.799655][ C1] call_timer_fn+0x19a/0x620 [ 1632.804268][ C1] ? __pfx_call_timer_fn+0x10/0x10 [ 1632.809394][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1632.815073][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1632.820734][ C1] ? mark_held_locks+0x49/0x80 [ 1632.825540][ C1] ? __pfx_rose_timer_expiry+0x10/0x10 [ 1632.831023][ C1] __run_timers+0x6ef/0x960 [ 1632.835558][ C1] ? __pfx___run_timers+0x10/0x10 [ 1632.840602][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1632.846285][ C1] run_timer_base+0x114/0x190 [ 1632.850981][ C1] ? __pfx_run_timer_base+0x10/0x10 [ 1632.856192][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1632.861857][ C1] run_timer_softirq+0x1a/0x40 [ 1632.866635][ C1] handle_softirqs+0x219/0x8e0 [ 1632.871437][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 1632.876752][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1632.882411][ C1] __irq_exit_rcu+0x109/0x170 [ 1632.887110][ C1] irq_exit_rcu+0x9/0x30 [ 1632.891373][ C1] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 1632.897027][ C1] [ 1632.900388][ C1] [ 1632.903313][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1632.909306][ C1] RIP: 0010:rcu_is_watching+0x19/0xc0 [ 1632.914704][ C1] Code: 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 55 53 65 ff 05 b3 e7 ff 11 e8 9e 42 bd 09 48 c7 c3 a8 d2 a2 93 <89> c5 83 f8 07 0f 87 82 00 00 00 48 8d 3c ed e0 2e cd 8d 48 b8 00 [ 1632.934323][ C1] RSP: 0018:ffffc900001175e0 EFLAGS: 00000296 [ 1632.940399][ C1] RAX: 0000000000000001 RBX: ffffffff93a2d2a8 RCX: 00000000f251cc2a [ 1632.948370][ C1] RDX: ffffffff816bf3cd RSI: ffffffff8bf07940 RDI: ffffffff8bf07980 [ 1632.956344][ C1] RBP: ffffc900001176b0 R08: 25a8901442f27bf1 R09: 0000000000000000 [ 1632.964317][ C1] R10: 0000000000000000 R11: 0000000000000001 R12: ffffffff81a7e2a0 [ 1632.972286][ C1] R13: ffffc90000117668 R14: 0000000000000000 R15: ffff88801d2a5ac0 [ 1632.980261][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1632.986453][ C1] ? unwind_next_frame+0xbd/0x20a0 [ 1632.991590][ C1] unwind_next_frame+0xa3b/0x20a0 [ 1632.996628][ C1] ? kthread+0x3c5/0x780 [ 1633.000885][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1633.007071][ C1] arch_stack_walk+0x94/0x100 [ 1633.011770][ C1] ? kthread+0x3c5/0x780 [ 1633.016032][ C1] stack_trace_save+0x8e/0xc0 [ 1633.020735][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 1633.026137][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1633.031785][ C1] ? kasan_save_stack+0x42/0x60 [ 1633.036663][ C1] ? kasan_save_stack+0x33/0x60 [ 1633.041546][ C1] kasan_save_stack+0x33/0x60 [ 1633.046252][ C1] ? kasan_save_stack+0x33/0x60 [ 1633.051129][ C1] ? kasan_record_aux_stack+0xa7/0xc0 [ 1633.056519][ C1] ? kmem_cache_free+0x15e/0x6c0 [ 1633.061483][ C1] ? __io_req_caches_free+0x19e/0x5c0 [ 1633.066883][ C1] ? io_ring_exit_work+0x387/0x10f0 [ 1633.072087][ C1] ? process_one_work+0x9cf/0x1b70 [ 1633.077208][ C1] ? worker_thread+0x6c8/0xf10 [ 1633.081984][ C1] ? kthread+0x3c5/0x780 [ 1633.086350][ C1] kasan_record_aux_stack+0xa7/0xc0 [ 1633.091569][ C1] kmem_cache_free+0x15e/0x6c0 [ 1633.096355][ C1] ? __io_req_caches_free+0x19e/0x5c0 [ 1633.101772][ C1] ? __io_req_caches_free+0x19e/0x5c0 [ 1633.107270][ C1] __io_req_caches_free+0x19e/0x5c0 [ 1633.112508][ C1] io_ring_exit_work+0x387/0x10f0 [ 1633.117551][ C1] ? do_raw_spin_lock+0x12c/0x2b0 [ 1633.122598][ C1] ? __pfx_io_ring_exit_work+0x10/0x10 [ 1633.128079][ C1] ? __lock_acquire+0xb8a/0x1c90 [ 1633.133055][ C1] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 1633.138884][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1633.144535][ C1] ? debug_object_deactivate+0x1ec/0x3a0 [ 1633.150211][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1633.155860][ C1] ? rcu_is_watching+0x12/0xc0 [ 1633.160650][ C1] process_one_work+0x9cf/0x1b70 [ 1633.165625][ C1] ? __pfx_process_one_work+0x10/0x10 [ 1633.171009][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1633.176669][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1633.182317][ C1] ? assign_work+0x1a0/0x250 [ 1633.186921][ C1] worker_thread+0x6c8/0xf10 [ 1633.191551][ C1] ? __pfx_worker_thread+0x10/0x10 [ 1633.196675][ C1] kthread+0x3c5/0x780 [ 1633.200757][ C1] ? __pfx_kthread+0x10/0x10 [ 1633.205359][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1633.211111][ C1] ? rcu_is_watching+0x12/0xc0 [ 1633.215906][ C1] ? __pfx_kthread+0x10/0x10 [ 1633.220524][ C1] ret_from_fork+0x675/0x7d0 [ 1633.225130][ C1] ? __pfx_kthread+0x10/0x10 [ 1633.229730][ C1] ret_from_fork_asm+0x1a/0x30 [ 1633.234543][ C1] [ 1633.237775][ C1] Kernel Offset: disabled [ 1633.242100][ C1] Rebooting in 86400 seconds..