last executing test programs: 50.840302976s ago: executing program 2 (id=3): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback}], 0x1c) sendto$inet6(r0, &(0x7f0000000040)="97", 0x1a000, 0x400c0d4, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) 49.277817506s ago: executing program 2 (id=9): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000100)=0x80000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000140)={@host}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r0, 0x7a8, &(0x7f0000000340)={{@host}, @host, 0x0, 0x6, 0x244c, 0xffffffffffffffff, 0x101, 0x0, 0xfffffffc}) close(r0) 48.9136044s ago: executing program 2 (id=11): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, 0x0, 0x40090) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000880)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a1c010000060a010400000000000000000a0000030900010073797a310000000028000480240001800a000100717565756500000014000280060001400008000006000240000000000900020073797a32"], 0x144}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) 48.524290949s ago: executing program 2 (id=13): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000240)={0x28, 0x20, 0x1, 0x3, 0x25dfdbfb, "", [@nested={0x18, 0x117, 0x0, 0x1, [@typed={0xc, 0x3, 0x0, 0x0, @u64=0xfac08}, @typed={0x8, 0xeb, 0x0, 0x0, @pid}]}]}, 0x28}], 0x1, 0x0, 0x0, 0x1}, 0x0) setresgid(0x0, 0x0, 0xee01) r1 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) unshare(0x10000) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r2 = syz_open_dev$dvb_demux(&(0x7f0000001e00), 0x0, 0xca200) ioctl$DVB_DEMUX_DMX_SET_FILTER(r2, 0x403c6f2b, &(0x7f0000001e40)={0xe9c, {"0d06d96fff2900", "3dfa7700", "0000ff4a70f300"}, 0x4000c, 0x4}) preadv(r2, &(0x7f0000000480)=[{&(0x7f0000000080)=""/4, 0x4}], 0x1, 0x1, 0x11) sched_setaffinity(0x0, 0x0, 0x0) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000300)=ANY=[@ANYBLOB='p\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00042cbd7000ffdbdf25010000004c000280bc00018008000100040000000800010002000000080001000600000008000100070000000800010006000000080001000700000008000100070000000c0001000000000000000000100002800c0001"], 0x70}, 0x1, 0x0, 0x0, 0x40005}, 0x40) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000340)=ANY=[@ANYBLOB="1801000030"], 0x118}], 0x1, 0x0, 0x0, 0x1}, 0x0) r4 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) r5 = syz_io_uring_setup(0x38c8, &(0x7f0000000100)={0x0, 0x9981, 0x80, 0x1, 0x7f, 0x0, r4}, &(0x7f0000000180), &(0x7f0000000200), &(0x7f0000000240)) syz_io_uring_setup(0xf00, &(0x7f0000000400)={0x0, 0x595e, 0x1, 0x2, 0x1a3, 0x0, r5}, &(0x7f00000000c0)=0x0, &(0x7f00000001c0)=0x0, &(0x7f0000000040)=0x0) r9 = socket$inet_tcp(0x2, 0x1, 0x0) r10 = epoll_create1(0x80000) r11 = fcntl$dupfd(r9, 0x406, r9) epoll_ctl$EPOLL_CTL_ADD(r10, 0x1, r11, &(0x7f0000000040)={0x20000000}) r12 = syz_clone(0x2000, 0x0, 0x0, 0x0, 0x0, 0x0) r13 = getpid() kcmp$KCMP_EPOLL_TFD(r13, r12, 0x7, r11, &(0x7f0000000100)={r10, r11}) syz_io_uring_submit(r6, r7, r8, &(0x7f0000000280)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x8, 0x4004, @fd=r3, 0x5, 0x0, 0x0, 0x0, 0x1, {0x2}}) prlimit64(r1, 0x7, 0x0, 0x0) 42.47389855s ago: executing program 2 (id=23): ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0xfffff34, 0x0, [{0xf88e470f, 0xed}]}) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_int(r0, 0x6, 0x24, &(0x7f0000000000)=0x1, 0x4) 41.848017173s ago: executing program 2 (id=28): openat$audio(0xffffff9c, &(0x7f00000000c0), 0x48100, 0x0) r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x38, 0x1403, 0x1, 0x70bd2a, 0x25dfdbfe, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'lo\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x44}, 0x20000810) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) sendmsg$NFC_CMD_FW_DOWNLOAD(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000300)={0x28, r2, 0x101, 0x70bd25, 0x25dfdbfb, {}, [@NFC_ATTR_FIRMWARE_NAME={0xa, 0x14, 'wpan0\x00'}, @NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x2400c040) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x2e, 0xe}, 0x0) mprotect(&(0x7f000006a000/0x3000)=nil, 0x3000, 0x1) timer_settime(0x0, 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x427b5000) r3 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, &(0x7f0000000040)={0x84, @rand_addr=0x64010101, 0x4e22, 0x3, 'lblcr\x00', 0x1, 0x80005, 0x6f}, 0x2c) syz_init_net_socket$llc(0x1a, 0x2, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup(r5) ioctl$SIOCSIFHWADDR(r6, 0x8914, 0x0) write$tun(r4, &(0x7f00000002c0)=ANY=[@ANYBLOB], 0x2e) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x4000002d) r7 = socket$inet_sctp(0x2, 0x1, 0x84) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r8 = socket$kcm(0xa, 0x2, 0x0) r9 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADDDEST(r7, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010101, 0x4e21, 0x3, 'wrr\x00', 0x23, 0x81, 0x5}, {@dev={0xac, 0x14, 0x14, 0x3c}, 0x4e23, 0x10000, 0x1cb, 0x12d61, 0x12d58}}, 0x44) setsockopt$IP_VS_SO_SET_ADDDEST(r9, 0x0, 0x487, &(0x7f0000000000)={{0x84, @broadcast, 0x4e24, 0x3, 'fo\x00', 0x8, 0x323b, 0x56}, {@remote, 0x4e23, 0x10000, 0x0, 0x12d5c, 0x12d5c}}, 0x44) sendmsg$sock(r8, &(0x7f0000000400)={&(0x7f0000000140)=@in6={0x2, 0x4e21, 0x0, @remote}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x10, 0x1, 0x24, 0x3}}], 0x10}, 0x40004) syz_open_dev$usbfs(&(0x7f00000000c0), 0x8204, 0x2) 26.483899015s ago: executing program 32 (id=28): openat$audio(0xffffff9c, &(0x7f00000000c0), 0x48100, 0x0) r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x38, 0x1403, 0x1, 0x70bd2a, 0x25dfdbfe, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'lo\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x44}, 0x20000810) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) sendmsg$NFC_CMD_FW_DOWNLOAD(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000300)={0x28, r2, 0x101, 0x70bd25, 0x25dfdbfb, {}, [@NFC_ATTR_FIRMWARE_NAME={0xa, 0x14, 'wpan0\x00'}, @NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x2400c040) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x2e, 0xe}, 0x0) mprotect(&(0x7f000006a000/0x3000)=nil, 0x3000, 0x1) timer_settime(0x0, 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x427b5000) r3 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, &(0x7f0000000040)={0x84, @rand_addr=0x64010101, 0x4e22, 0x3, 'lblcr\x00', 0x1, 0x80005, 0x6f}, 0x2c) syz_init_net_socket$llc(0x1a, 0x2, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup(r5) ioctl$SIOCSIFHWADDR(r6, 0x8914, 0x0) write$tun(r4, &(0x7f00000002c0)=ANY=[@ANYBLOB], 0x2e) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x4000002d) r7 = socket$inet_sctp(0x2, 0x1, 0x84) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r8 = socket$kcm(0xa, 0x2, 0x0) r9 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADDDEST(r7, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010101, 0x4e21, 0x3, 'wrr\x00', 0x23, 0x81, 0x5}, {@dev={0xac, 0x14, 0x14, 0x3c}, 0x4e23, 0x10000, 0x1cb, 0x12d61, 0x12d58}}, 0x44) setsockopt$IP_VS_SO_SET_ADDDEST(r9, 0x0, 0x487, &(0x7f0000000000)={{0x84, @broadcast, 0x4e24, 0x3, 'fo\x00', 0x8, 0x323b, 0x56}, {@remote, 0x4e23, 0x10000, 0x0, 0x12d5c, 0x12d5c}}, 0x44) sendmsg$sock(r8, &(0x7f0000000400)={&(0x7f0000000140)=@in6={0x2, 0x4e21, 0x0, @remote}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x10, 0x1, 0x24, 0x3}}], 0x10}, 0x40004) syz_open_dev$usbfs(&(0x7f00000000c0), 0x8204, 0x2) 12.093341538s ago: executing program 1 (id=124): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000003c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) close(0xffffffffffffffff) prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000000540)=0x189d, 0x1a) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r3, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000180)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000300)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0xc2}}}}}}, 0x0) 9.540015362s ago: executing program 1 (id=127): userfaultfd(0x800) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x18, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"], &(0x7f00000003c0)='syzkaller\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195}, 0x94) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080), 0x8c40, 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x82) writev(r0, &(0x7f00000004c0), 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000600)={0x26, 'hash\x00', 0x0, 0x0, 'cbcmac(camellia-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000680)="ad56b6c5820f54c7be0000000000000028901c81a63e98c39b5e3b759a55a79da446e9f29116d4e7700905afbdb0c549e33c578224fb28110a540b4b5ef9d52a824513c2cb71c74d2def2d3ffe", 0x4d) r2 = accept4(r1, 0x0, 0x0, 0x80000) openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x82) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0xc, 0x143182) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0xfffffffffffffe55, 0x0, 0x1, 0x0, 0x0, 0x4008980}, 0x4008814) r4 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f00000002c0)={0x84, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e1c, 0x3, 'wrr\x00', 0x1, 0x80, 0x19}, 0x2c) r5 = socket$kcm(0xa, 0x4, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r4, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010101, 0x4e21, 0x3, 'wrr\x00', 0x23, 0x81, 0x5}, {@dev={0xac, 0x14, 0x14, 0x3c}, 0x4e23, 0x2, 0x1cb, 0x12d61, 0x12d58}}, 0x44) sendmsg$sock(r5, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @remote}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x10, 0x1, 0x24, 0x3}}], 0x10}, 0x40004) r6 = socket$inet_tcp(0x2, 0x1, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000080)={0xffffffffffffffff, 0x0, 0x25, 0x2, @val=@perf_event={0x429}}, 0x18) r7 = socket$netlink(0x10, 0x3, 0x15) writev(r7, &(0x7f0000000300)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000d00000000000006040000000000f93132", 0x39}], 0x1) recvmmsg(r7, &(0x7f0000007600)=[{{0x0, 0x0, 0x0}, 0x6}], 0x1, 0x2000, 0x0) close_range(r6, 0xffffffffffffffff, 0x0) sendmsg$AUDIT_USER_AVC(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000380)=ANY=[@ANYBLOB="10000000530400082bbd9200ffdbdf25"], 0x20000}, 0x1, 0x0, 0x0, 0x8000}, 0x20000080) 8.702340265s ago: executing program 0 (id=129): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000240)={0x28, 0x20, 0x1, 0x3, 0x25dfdbfb, "", [@nested={0x18, 0x117, 0x0, 0x1, [@typed={0xc, 0x3, 0x0, 0x0, @u64=0xfac08}, @typed={0x8, 0xeb, 0x0, 0x0, @pid}]}]}, 0x28}], 0x1, 0x0, 0x0, 0x1}, 0x0) setresgid(0x0, 0x0, 0xee01) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) unshare(0x10000) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000300)=ANY=[@ANYBLOB='p\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00042cbd7000ffdbdf25010000004c000280bc00018008000100040000000800010002000000080001000600000008000100070000000800010006000000080001000700000008000100070000000c0001000000000000000000100002800c0001"], 0x70}, 0x1, 0x0, 0x0, 0x40005}, 0x40) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000340)=ANY=[@ANYBLOB="1801000030"], 0x118}], 0x1, 0x0, 0x0, 0x1}, 0x0) 7.512966398s ago: executing program 1 (id=130): ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_int(r0, 0x6, 0x24, &(0x7f0000000000)=0x1, 0x4) 7.383555058s ago: executing program 0 (id=132): socket$nl_netfilter(0x10, 0x3, 0xc) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1000, 0x0) socket(0x10, 0x803, 0x0) syz_io_uring_setup(0xefd, &(0x7f0000000400)={0x0, 0x0, 0x10000, 0x3, 0x55}, 0x0, 0x0, 0x0) syz_usb_connect(0x3, 0x3f, &(0x7f00000065c0)=ANY=[@ANYBLOB="12012103c3c97710"], 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)) r2 = syz_open_dev$dri(&(0x7f00000003c0), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r2, 0x4010640d, &(0x7f0000000300)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r2, 0xc01064b5, &(0x7f0000000040)={&(0x7f0000000000)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_ATOMIC(r2, 0xc03864bc, &(0x7f0000000180)={0x1, 0x1, &(0x7f00000000c0)=[r3], &(0x7f0000000180), &(0x7f0000000200), &(0x7f00000001c0)=[0x7fffffff], 0x0, 0x1}) 7.280630592s ago: executing program 1 (id=133): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x6, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x1, 0x14}]}, &(0x7f0000000100)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, 0x21}, 0x90) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="5c0000000206030000000000008000000000000005000100070000000900020073797a30000000001400078008001240000000000500150004000000050005000000000005000400000000000d000300686173683a6d6163"], 0x5c}}, 0x0) sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000740)=ANY=[@ANYBLOB="44000000090605000000000000000000010000050900020073797a30000006000500010007000000080009400000000114000880100007800a001100b4"], 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x44000) sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="40000000030601010000006800000000020000080500010007"], 0x40}, 0x1, 0x0, 0x0, 0x2000c045}, 0x8000) openat$sequencer(0xffffff9c, &(0x7f00000001c0), 0x41, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000700)={'syz0\x00', {0x0, 0xe5e4, 0x0, 0x9}, 0x7, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x3, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x80000000, 0x0, 0x0, 0x0, 0x8, 0x0, 0x2000001, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, 0xfffffffc, 0x4, 0xfffffefe, 0x0, 0xf6, 0x0, 0x0, 0x3, 0x1, 0x9, 0x0, 0x0, 0x80001ff, 0x4, 0x0, 0x1, 0x7fffffff, 0x2, 0x4000000, 0xfffffffd, 0x5, 0x0, 0xfdfffffe, 0x4, 0x0, 0x0, 0x0, 0x0, 0x5, 0xfffffffe, 0xffffffff, 0x7b67], [0x0, 0x0, 0x0, 0x3, 0x3, 0x0, 0xfffffffe, 0x3, 0x0, 0x0, 0x9b05, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x10001, 0x0, 0x0, 0xfffffff8, 0xfffffffc, 0x2, 0x7, 0x5, 0x1, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4, 0x0, 0x0, 0x1, 0x8, 0x0, 0x0, 0x0, 0x6, 0x0, 0xffffffff, 0xfffffffc, 0x0, 0x0, 0xc33, 0xffffffff, 0x1a0b, 0x39, 0xaecd, 0x10, 0x0, 0x3, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc], [0x1, 0x0, 0x567, 0x4, 0x0, 0x3, 0x0, 0x9, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000005, 0x0, 0x0, 0x0, 0x0, 0x3, 0x10000000, 0x0, 0x101, 0xfffffffe, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xfffffffd, 0x0, 0x0, 0x4000000d, 0xffffffff, 0x0, 0x9, 0x3, 0x0, 0x14, 0x1, 0x0, 0x400a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x1d, 0x400, 0x0, 0x8, 0x4000002, 0x0, 0x100000], [0x0, 0x1ff, 0x0, 0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffe, 0xf7b, 0x0, 0x0, 0x0, 0xaad, 0x10000, 0x80000, 0x0, 0x8, 0x0, 0x3e8, 0xfffffffd, 0x10000001, 0x0, 0x0, 0x5861, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, 0x0, 0x0, 0x13, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x101, 0xfffffffe, 0x0, 0x5, 0x0, 0x1]}, 0x45c) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000a00)=ANY=[@ANYBLOB="40000000180015ffe0000000ffffffff0a2000000002000000000000240009801c00000008000000140005"], 0x40}], 0x1}, 0x0) 7.140733483s ago: executing program 1 (id=135): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='freezer.self_freezing\x00', 0x275a, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000300)=@abs, 0x6e) setpriority(0x1, r2, 0xa) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000240)='syzkaller\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$inet_tcp(0x2, 0x1, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0) syz_emit_ethernet(0x157, &(0x7f0000000600)={@multicast, @empty, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "02adf7", 0x121, 0x3a, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, {[], @ndisc_ns={0x87, 0x0, 0x0, @mcast1, [{0x2, 0x7, "3ba4b0c78151bd353de0a06f9c70d7e4871e1a749b36774ecc7f71b3470c95979f19a43ce51fdd406fad64c3f1f0c958602d5e9883e3761c0f2cfa"}, {0x4, 0x1a, "788dd5b8b1d36608fc91f72a15a3eaeb7bc4f77ce523bf6677729b6a3ca40e4f53f4b256f32d0891decee58144719333032c3645a06e98fdadd6c967332471ca0f1b208e79899980bf8d28c64f488636a0dace41e5f92cda559aaa716d3c58914b5b33c2dd8bbee57bda3deede512585d5568b5079fe486df1d07040f8d9fc184126a877ec3d302f9ec782b749d0e663a9e52448db3c4254966d3e1075914a3a11c4a0205188dd7daa5474c367c1ab7454a684fa6a5044c275dbef6b0a4f3a10ad6b463212f1f05506e2ac7909fb"}]}}}}}}, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000040)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(0xffffffffffffffff, 0xc02064b6, &(0x7f00000001c0)={r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(0xffffffffffffffff, 0xc02064b9, &(0x7f00000002c0)={&(0x7f0000000240)=[0x0, 0x0, 0x0], &(0x7f0000000040), 0x3, r7}) ioctl$DRM_IOCTL_MODE_ATOMIC(0xffffffffffffffff, 0xc03864bc, &(0x7f0000000100)={0x0, 0x1, &(0x7f0000000280)=[r7], &(0x7f00000000c0)=[0x3], &(0x7f0000000640), &(0x7f0000000340), 0x0, 0xffffffffffffffff}) sync_file_range(r1, 0x6, 0x0, 0x7) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0x6c, 0x0, 0x0}) socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f00000002c0)={0x48, 0x2, r8, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_GET_HW_INFO(r0, 0x3b8a, &(0x7f0000000180)={0x28, 0x0, r9, 0x0, 0xfffffffffffffffc}) 6.991777713s ago: executing program 3 (id=137): sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000040)={0x2c, 0x0, 0x601, 0x0, 0x0, {}, [@TIPC_NLA_LINK={0x18, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20044885}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$SIOCX25SFACILITIES(0xffffffffffffffff, 0x89e3, &(0x7f0000000000)={0x73, 0x3166, 0x5, 0xb, 0x3}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000440)={[0x3, 0x100000000, 0x0, 0x7f, 0x100000, 0x0, 0x2004c8, 0x8000000, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x2, 0xffffffffffffffff], 0x0, 0x200}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 6.709181258s ago: executing program 4 (id=138): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)={0x20, 0x1, 0x1, 0x201, 0x0, 0x0, {0xa}, [@CTA_FILTER={0xc, 0x19, 0x0, 0x1, [@CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x4ad}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x8040850}, 0x24008840) 5.949911672s ago: executing program 4 (id=139): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xd4ad1185e214d3bd}}, [@NFT_MSG_NEWFLOWTABLE={0x164, 0x16, 0xa, 0x201, 0x0, 0x0, {0x5, 0x0, 0x2}, [@NFTA_FLOWTABLE_HOOK={0x1c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'pimreg1\x00'}]}]}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x2}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x3}, @NFTA_FLOWTABLE_HOOK={0xf8, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x68, 0x3, 0x0, 0x1, [{0x14, 0x1, 'dvmrp1\x00'}, {0x14, 0x1, 'syz_tun\x00'}, {0x14, 0x1, 'team0\x00'}, {0x14, 0x1, 'geneve0\x00'}, {0x14, 0x1, 'dummy0\x00'}]}, @NFTA_FLOWTABLE_HOOK_DEVS={0x2c, 0x3, 0x0, 0x1, [{0x14, 0x1, 'ip6tnl0\x00'}, {0x14, 0x1, 'wg1\x00'}]}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x40, 0x3, 0x0, 0x1, [{0x14, 0x1, 'vxcan1\x00'}, {0x14, 0x1, 'netpci0\x00'}, {0x14, 0x1, 'dvmrp0\x00'}]}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0xf}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}]}]}, @NFT_MSG_DELSET={0x38, 0xb, 0xa, 0x102, 0x0, 0x0, {0x7, 0x0, 0x9}, [@NFTA_SET_DATA_LEN={0x8, 0x7, 0x1, 0x0, 0x24}, @NFTA_SET_EXPR={0x10, 0x11, 0x0, 0x1, @notrack={{0xc}, @void}}, @NFTA_SET_HANDLE={0xc, 0x10, 0x1, 0x0, 0x4}]}], {0x14}}, 0x1c4}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_udp(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000000900), 0x10, 0x822000) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f0000000940)=0x3) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000100), 0x0, 0x0) read$msr(r1, &(0x7f0000007880)=""/102400, 0x19000) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0) 5.805951558s ago: executing program 1 (id=140): openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r0 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r2, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r3, &(0x7f0000000240)={0x0, 0x334ecc4b, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) 4.483488515s ago: executing program 4 (id=141): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000240)={0x28, 0x20, 0x1, 0x3, 0x25dfdbfb, "", [@nested={0x18, 0x117, 0x0, 0x1, [@typed={0xc, 0x3, 0x0, 0x0, @u64=0xfac08}, @typed={0x8, 0xeb, 0x0, 0x0, @pid}]}]}, 0x28}], 0x1, 0x0, 0x0, 0x1}, 0x0) setresgid(0x0, 0x0, 0xee01) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) unshare(0x10000) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000300)=ANY=[@ANYBLOB='p\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00042cbd7000ffdbdf25010000004c000280bc00018008000100040000000800010002000000080001000600000008000100070000000800010006000000080001000700000008000100070000000c0001000000000000000000100002800c0001"], 0x70}, 0x1, 0x0, 0x0, 0x40005}, 0x40) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000340)=ANY=[@ANYBLOB="1801000030"], 0x118}], 0x1, 0x0, 0x0, 0x1}, 0x0) 4.187701064s ago: executing program 3 (id=142): ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0xfffff34, 0x0, [{0xf88e470f, 0xed}]}) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_int(r0, 0x6, 0x24, 0x0, 0x0) 3.876806934s ago: executing program 3 (id=143): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000580)=[@in={0x2, 0x4e21, @local}], 0x10) sendmsg$inet_sctp(r0, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f00000006c0)=[{0x0}], 0x1, 0x0, 0x0, 0x804c040}, 0x1) r1 = dup(r0) write$cgroup_subtree(r1, 0x0, 0x32600) 3.872300916s ago: executing program 0 (id=144): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x6, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x1, 0x14}]}, &(0x7f0000000100)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, 0x21}, 0x90) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="5c0000000206030000000000008000000000000005000100070000000900020073797a30000000001400078008001240000000000500150004000000050005000000000005000400000000000d000300686173683a6d6163"], 0x5c}}, 0x0) sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000740)=ANY=[@ANYBLOB="44000000090605000000000000000000010000050900020073797a30000006000500010007000000080009400000000114000880100007800a001100b4"], 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x44000) sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="40000000030601010000006800000000020000080500010007"], 0x40}, 0x1, 0x0, 0x0, 0x2000c045}, 0x8000) openat$sequencer(0xffffff9c, &(0x7f00000001c0), 0x41, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000700)={'syz0\x00', {0x0, 0xe5e4, 0x0, 0x9}, 0x7, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x3, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x80000000, 0x0, 0x0, 0x0, 0x8, 0x0, 0x2000001, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, 0xfffffffc, 0x4, 0xfffffefe, 0x0, 0xf6, 0x0, 0x0, 0x3, 0x1, 0x9, 0x0, 0x0, 0x80001ff, 0x4, 0x0, 0x1, 0x7fffffff, 0x2, 0x4000000, 0xfffffffd, 0x5, 0x0, 0xfdfffffe, 0x4, 0x0, 0x0, 0x0, 0x0, 0x5, 0xfffffffe, 0xffffffff, 0x7b67], [0x0, 0x0, 0x0, 0x3, 0x3, 0x0, 0xfffffffe, 0x3, 0x0, 0x0, 0x9b05, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x10001, 0x0, 0x0, 0xfffffff8, 0xfffffffc, 0x2, 0x7, 0x5, 0x1, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4, 0x0, 0x0, 0x1, 0x8, 0x0, 0x0, 0x0, 0x6, 0x0, 0xffffffff, 0xfffffffc, 0x0, 0x0, 0xc33, 0xffffffff, 0x1a0b, 0x39, 0xaecd, 0x10, 0x0, 0x3, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc], [0x1, 0x0, 0x567, 0x4, 0x0, 0x3, 0x0, 0x9, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000005, 0x0, 0x0, 0x0, 0x0, 0x3, 0x10000000, 0x0, 0x101, 0xfffffffe, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xfffffffd, 0x0, 0x0, 0x4000000d, 0xffffffff, 0x0, 0x9, 0x3, 0x0, 0x14, 0x1, 0x0, 0x400a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x1d, 0x400, 0x0, 0x8, 0x4000002, 0x0, 0x100000], [0x0, 0x1ff, 0x0, 0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffe, 0xf7b, 0x0, 0x0, 0x0, 0xaad, 0x10000, 0x80000, 0x0, 0x8, 0x0, 0x3e8, 0xfffffffd, 0x10000001, 0x0, 0x0, 0x5861, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, 0x0, 0x0, 0x13, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x101, 0xfffffffe, 0x0, 0x5, 0x0, 0x1]}, 0x45c) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000a00)=ANY=[@ANYBLOB="40000000180015ffe0000000ffffffff0a2000000002000000000000240009801c00000008000000140005"], 0x40}], 0x1}, 0x0) 3.698740181s ago: executing program 4 (id=145): socket$kcm(0x11, 0x200000000000002, 0x300) bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@base={0x1, 0x7, 0x4, 0x5}, 0x50) socket$inet_smc(0x2b, 0x1, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x6, 0xe, &(0x7f0000002300)=ANY=[@ANYBLOB="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"], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000040), 0x10}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000780)="b9ff03076003008c9c18ed0f6fd2", 0x0, 0xfe6, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000020000000000000000"], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) vmsplice(r2, &(0x7f0000e79000)=[{&(0x7f00003fb000)="f7", 0x1}], 0x1, 0x8) mremap(&(0x7f000020e000/0x2000)=nil, 0x2000, 0x400000, 0x3, &(0x7f000082a000/0x400000)=nil) mbind(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1, 0x0, 0x0, 0x2) openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x560b0000, &(0x7f0000000000)="259a53f271a76d2688a24c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r3 = syz_usb_connect(0x1, 0x36, &(0x7f00000004c0)=ANY=[@ANYBLOB="1a0100005c6b4408070a64006e40010203030902240001a8230800090400bc6435fb4d00090503034d00ff99090805", @ANYRES32], &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) r4 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r4, &(0x7f0000000a80)=""/188, 0xba) syz_usb_disconnect(r3) close(r4) 3.587939489s ago: executing program 0 (id=146): timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) membarrier(0x10, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000300)) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000440)) ppoll(&(0x7f0000000100)=[{0xffffffffffffffff, 0x412}], 0x1, 0x0, 0x0, 0x0) r0 = openat$uinput(0xffffff9c, &(0x7f0000000140), 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000001fc0)={'syz1\x00', {0x2, 0x3e0, 0x2, 0x80}, 0x9, [0x1, 0x9, 0x9d, 0x8, 0xf, 0x10, 0x2, 0xb, 0x5, 0x4, 0x8, 0x4, 0xfffffff9, 0xb, 0x9, 0x0, 0x9, 0x9, 0x2, 0xffffffff, 0xfff, 0x7, 0x6, 0xde, 0x2, 0x6, 0x8aa, 0x200, 0x6, 0x3, 0x1, 0x7f, 0x89, 0xd02e, 0x9, 0xd4000000, 0x6, 0x10001, 0x8, 0x10001, 0x80000000, 0x1, 0x7, 0x7, 0x3, 0x1110, 0x8000, 0x3, 0x7fff, 0x3, 0x4, 0x5, 0x200000, 0x4, 0x0, 0x8, 0x0, 0xe, 0x0, 0xfff, 0x9, 0x8000, 0xb4b, 0x2], [0x9, 0xffffff7f, 0x22465077, 0x0, 0x1, 0x99, 0x3, 0x7ff, 0x5335, 0x4, 0x5, 0x7, 0x1, 0x2, 0x3, 0xb9e, 0xd, 0x2, 0xfffffffb, 0x7, 0x3e2bffa5, 0x1, 0x1, 0x1, 0xded, 0x2, 0x1ff, 0x7, 0x3, 0x1ff, 0x3ff, 0x100, 0x1, 0x3, 0x9, 0x2, 0x2, 0x9, 0x4, 0x4, 0x9, 0x8, 0x4, 0x8, 0x6, 0x54179ad0, 0x3, 0x6, 0x3, 0x1, 0x7, 0xc963, 0x10, 0x800, 0x29, 0x0, 0xbbc, 0x1, 0xa, 0x1, 0xa3, 0xc, 0x4, 0x53439b6b], [0xa, 0x367d59f4, 0x7, 0xffff0176, 0x80, 0xf6650435, 0xffffff01, 0xd70, 0x401, 0xfff, 0x7fff, 0x8, 0x0, 0xf, 0x1, 0x6, 0x4, 0x2, 0x4, 0x5c45a20a, 0x7, 0xffff, 0xfffffc00, 0x101, 0x0, 0x80, 0x6, 0x8, 0xffffffff, 0xb9a, 0xb76, 0x1, 0x0, 0x6, 0xb, 0x9, 0x1, 0x10000, 0x9, 0x8001ff, 0x1, 0x5e07, 0x1000, 0x0, 0xd45e, 0x466d, 0x200, 0x7, 0x3, 0x8, 0x81, 0x40, 0x80000000, 0xffffffbe, 0xa, 0x7, 0xfffffff7, 0x0, 0x3, 0xec54, 0x7fffffff, 0x4, 0x0, 0x22], [0xfff, 0x2, 0x4, 0xff, 0x3, 0x6, 0x2, 0x0, 0x7fffffff, 0x100, 0x4, 0x6, 0x7, 0xff, 0x8001, 0x8, 0x2, 0x7f, 0xa518, 0x4, 0x84d, 0x7, 0xff, 0x3, 0x4, 0x200, 0x0, 0x5, 0x2, 0x8000, 0x101, 0xa, 0xba, 0x7ff, 0x0, 0x1, 0x0, 0x10, 0x2, 0x4, 0x1, 0x4, 0xffffffff, 0x8, 0x101, 0x3, 0xffffffff, 0x5, 0x4, 0x9, 0x9, 0x73d1, 0x8, 0x334, 0x7, 0x4, 0x200, 0x8001, 0x8, 0x8000, 0x3, 0x3, 0x8, 0xf44d]}, 0x45c) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040), 0x0) r1 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0) landlock_restrict_self(r1, 0x7) landlock_restrict_self(r1, 0x0) r2 = landlock_create_ruleset(&(0x7f0000000040)={0x2, 0x3, 0x2}, 0x18, 0x0) r3 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0) landlock_restrict_self(r3, 0x0) landlock_restrict_self(r3, 0x0) landlock_restrict_self(r3, 0x0) landlock_restrict_self(r3, 0x0) landlock_restrict_self(r3, 0x0) landlock_restrict_self(r3, 0x0) landlock_restrict_self(r3, 0x0) landlock_restrict_self(r3, 0x0) r4 = landlock_create_ruleset(&(0x7f00000000c0)={0x100}, 0x18, 0x0) landlock_restrict_self(r4, 0x4) landlock_restrict_self(r2, 0x7) landlock_restrict_self(r3, 0x9) landlock_restrict_self(r1, 0xa) landlock_restrict_self(r1, 0x0) 3.499233442s ago: executing program 3 (id=147): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r1, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, &(0x7f0000002d00)=""/4080, 0xff0}, 0x0) close(r0) 3.314111132s ago: executing program 3 (id=148): set_mempolicy(0x3, &(0x7f0000000000)=0x7, 0x7) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newlink={0x44, 0x10, 0x44b, 0x0, 0x0, {0x7a, 0x0, 0x0, 0x0, 0x1840}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_HASH_ELASTICITY={0x8, 0x1a, 0x3}, @IFLA_BR_AGEING_TIME={0x8}]}}}]}, 0x44}}, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8983, 0x0) r1 = syz_open_dev$dri(0x0, 0x1, 0x400) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f0000000440)={0x0, &(0x7f0000000380), 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, 0x0) ioctl$DRM_IOCTL_MODE_DIRTYFB(r1, 0xc01864b1, &(0x7f0000000300)={0x0, 0x0, 0x6, 0x0, 0x0}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r3, &(0x7f00000000c0)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x13}}, 0x10) connect$inet(r3, 0x0, 0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) write$binfmt_aout(r4, &(0x7f0000000300)=ANY=[], 0xff2e) ioctl$TCSETS(r4, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x3, 0x7fff, 0x16, "b0bf2ebb48c849ac0000000003000018bfff40"}) syz_open_pts(r4, 0x0) openat$sequencer(0xffffffffffffff9c, 0x0, 0x1, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000080}, 0x8000) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000040)={0x48, 0x2, 0x6, 0x5, 0x0, 0x0, {0x0, 0x0, 0xfffc}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'hash:ip,mac\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x48}}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=ANY=[@ANYBLOB="50000000090601020000000000000000150000000900020073797a31000000000500010007000000280007800a00110010030000000000001800018014000240"], 0x50}, 0x1, 0x0, 0x0, 0x3004c047}, 0x4000050) 1.361749476s ago: executing program 0 (id=149): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) socket(0x1e, 0x4, 0x0) socket(0x1e, 0x2, 0x0) r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) timerfd_create(0x0, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x141042, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)) io_uring_setup(0x3fa5, &(0x7f0000000000)={0x0, 0x6cae, 0x100, 0x1, 0x5a}) epoll_create1(0x0) socket$kcm(0x10, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) pipe2(&(0x7f0000000040), 0x800) r2 = syz_io_uring_setup(0x34b8, &(0x7f0000000540)={0x0, 0xc3b1, 0x800, 0x1, 0x82, 0x0, 0x0}, 0x0, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) syz_io_uring_submit(0x0, r3, r4, &(0x7f0000000040)=@IORING_OP_READV=@pass_iovec={0x1, 0xb, 0x4004, @fd, 0xf8, 0x0, 0x0, 0x11, 0x1, {0x0, 0x0, 0x0, '\x00', 0x0}}) io_uring_enter(r2, 0x1, 0x1, 0x1, 0x0, 0x0) 867.222671ms ago: executing program 3 (id=150): openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x181c01, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x40000}, 0x4008000) socket$inet6_tcp(0xa, 0x1, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000440)='net/sockstat\x00') syz_emit_ethernet(0x8e, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaac437bf8cb64c86dd6bcce164000000000000000000010000"], 0x0) r1 = syz_usbip_server_init(0x1) syz_usb_connect$uac2(0x5, 0xe2, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000300000010"], 0x0) write$usbip_server(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="0000000300000001"], 0x35) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)) socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x3) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r2) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB="580000001000ffff25"], 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x8000002) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) 730.093913ms ago: executing program 0 (id=151): sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000040)={0x2c, 0x0, 0x601, 0x0, 0x0, {}, [@TIPC_NLA_LINK={0x18, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20044885}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$SIOCX25SFACILITIES(0xffffffffffffffff, 0x89e3, &(0x7f0000000000)={0x73, 0x3166, 0x5, 0xb, 0x3}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000440)={[0x3, 0x100000000, 0x0, 0x7f, 0x100000, 0x0, 0x2004c8, 0x8000000, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x2, 0xffffffffffffffff], 0x0, 0x200}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 254.695495ms ago: executing program 4 (id=152): ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0xfffff34, 0x0, [{0xf88e470f, 0xed}]}) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_int(r0, 0x6, 0x24, 0x0, 0x0) 0s ago: executing program 4 (id=153): socket$nl_netfilter(0x10, 0x3, 0xc) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1000, 0x0) socket(0x10, 0x803, 0x0) syz_io_uring_setup(0xefd, &(0x7f0000000400)={0x0, 0x0, 0x10000, 0x3, 0x55}, 0x0, 0x0, 0x0) syz_usb_connect(0x3, 0x3f, &(0x7f00000065c0)=ANY=[@ANYBLOB="12012103c3c97710"], 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)) r2 = syz_open_dev$dri(&(0x7f00000003c0), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r2, 0x4010640d, &(0x7f0000000300)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r2, 0xc01064b5, &(0x7f0000000040)={&(0x7f0000000000)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_ATOMIC(r2, 0xc03864bc, &(0x7f0000000180)={0x1, 0x1, &(0x7f00000000c0)=[r3], &(0x7f0000000180), &(0x7f0000000200), &(0x7f00000001c0)=[0x7fffffff], 0x0, 0x1}) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.178' (ED25519) to the list of known hosts. [ 91.885503][ T10] cfg80211: failed to load regulatory.db [ 92.751933][ T5584] cgroup: Unknown subsys name 'net' [ 92.965164][ T5584] cgroup: Unknown subsys name 'cpuset' [ 93.037169][ T5584] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 95.105808][ T5584] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 97.858291][ T5609] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 97.860970][ T5609] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 97.861838][ T5609] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 97.865444][ T5611] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 97.892099][ T5609] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 97.936771][ T5612] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 97.943826][ T5613] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 97.945956][ T5613] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 97.955948][ T5612] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 97.960125][ T5612] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 97.962589][ T5613] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 97.966281][ T5613] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 97.982083][ T59] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 97.982237][ T59] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 97.985166][ T5613] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 98.094290][ T59] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 98.137001][ T5604] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 98.139771][ T5604] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 98.141627][ T5604] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 98.143572][ T5604] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 98.223826][ T4912] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 98.250120][ T4912] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 98.250953][ T4912] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 98.252674][ T4912] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 98.253468][ T4912] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 100.117586][ T59] Bluetooth: hci3: command tx timeout [ 100.117595][ T5613] Bluetooth: hci1: command tx timeout [ 100.117769][ T59] Bluetooth: hci0: command tx timeout [ 100.276480][ T5613] Bluetooth: hci2: command tx timeout [ 100.356473][ T5613] Bluetooth: hci4: command tx timeout [ 100.890157][ T5599] bridge0: port 1(bridge_slave_0) entered blocking state [ 100.891438][ T5599] bridge0: port 1(bridge_slave_0) entered disabled state [ 100.891576][ T5599] bridge_slave_0: entered allmulticast mode [ 100.894732][ T5599] bridge_slave_0: entered promiscuous mode [ 100.978828][ T5599] bridge0: port 2(bridge_slave_1) entered blocking state [ 100.978932][ T5599] bridge0: port 2(bridge_slave_1) entered disabled state [ 100.979059][ T5599] bridge_slave_1: entered allmulticast mode [ 100.980942][ T5599] bridge_slave_1: entered promiscuous mode [ 101.017547][ T5600] bridge0: port 1(bridge_slave_0) entered blocking state [ 101.017710][ T5600] bridge0: port 1(bridge_slave_0) entered disabled state [ 101.017853][ T5600] bridge_slave_0: entered allmulticast mode [ 101.019716][ T5600] bridge_slave_0: entered promiscuous mode [ 101.053242][ T5601] bridge0: port 1(bridge_slave_0) entered blocking state [ 101.053359][ T5601] bridge0: port 1(bridge_slave_0) entered disabled state [ 101.053526][ T5601] bridge_slave_0: entered allmulticast mode [ 101.055445][ T5601] bridge_slave_0: entered promiscuous mode [ 101.108444][ T5600] bridge0: port 2(bridge_slave_1) entered blocking state [ 101.108554][ T5600] bridge0: port 2(bridge_slave_1) entered disabled state [ 101.108906][ T5600] bridge_slave_1: entered allmulticast mode [ 101.110762][ T5600] bridge_slave_1: entered promiscuous mode [ 101.150320][ T5601] bridge0: port 2(bridge_slave_1) entered blocking state [ 101.150432][ T5601] bridge0: port 2(bridge_slave_1) entered disabled state [ 101.150556][ T5601] bridge_slave_1: entered allmulticast mode [ 101.152689][ T5601] bridge_slave_1: entered promiscuous mode [ 101.247537][ T5599] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 101.279728][ T5602] bridge0: port 1(bridge_slave_0) entered blocking state [ 101.279853][ T5602] bridge0: port 1(bridge_slave_0) entered disabled state [ 101.280022][ T5602] bridge_slave_0: entered allmulticast mode [ 101.282206][ T5602] bridge_slave_0: entered promiscuous mode [ 101.324076][ T5599] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 101.350165][ T5600] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 101.351020][ T5602] bridge0: port 2(bridge_slave_1) entered blocking state [ 101.351206][ T5602] bridge0: port 2(bridge_slave_1) entered disabled state [ 101.351372][ T5602] bridge_slave_1: entered allmulticast mode [ 101.354883][ T5602] bridge_slave_1: entered promiscuous mode [ 101.390941][ T5601] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 101.440291][ T5600] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 101.465672][ T5601] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 101.491421][ T5603] bridge0: port 1(bridge_slave_0) entered blocking state [ 101.491630][ T5603] bridge0: port 1(bridge_slave_0) entered disabled state [ 101.491806][ T5603] bridge_slave_0: entered allmulticast mode [ 101.494176][ T5603] bridge_slave_0: entered promiscuous mode [ 101.568567][ T5599] team0: Port device team_slave_0 added [ 101.568826][ T5603] bridge0: port 2(bridge_slave_1) entered blocking state [ 101.568975][ T5603] bridge0: port 2(bridge_slave_1) entered disabled state [ 101.569138][ T5603] bridge_slave_1: entered allmulticast mode [ 101.571271][ T5603] bridge_slave_1: entered promiscuous mode [ 101.620101][ T5602] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 101.658931][ T5599] team0: Port device team_slave_1 added [ 101.684394][ T5600] team0: Port device team_slave_0 added [ 101.694851][ T5602] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 101.713399][ T5601] team0: Port device team_slave_0 added [ 101.750514][ T5600] team0: Port device team_slave_1 added [ 101.770921][ T5601] team0: Port device team_slave_1 added [ 101.793871][ T5603] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 101.848705][ T5599] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 101.848718][ T5599] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 101.848736][ T5599] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 101.852946][ T5603] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 101.912986][ T5602] team0: Port device team_slave_0 added [ 101.933927][ T5599] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 101.933945][ T5599] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 101.933972][ T5599] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 101.987841][ T5600] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 101.987882][ T5600] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 101.987901][ T5600] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 101.990583][ T5602] team0: Port device team_slave_1 added [ 101.991332][ T5601] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 101.991342][ T5601] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 101.991360][ T5601] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 102.093587][ T5600] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 102.093601][ T5600] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 102.093621][ T5600] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 102.149464][ T5601] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 102.149476][ T5601] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 102.149495][ T5601] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 102.153520][ T5603] team0: Port device team_slave_0 added [ 102.196687][ T5613] Bluetooth: hci3: command tx timeout [ 102.207467][ T5613] Bluetooth: hci0: command tx timeout [ 102.207481][ T4912] Bluetooth: hci1: command tx timeout [ 102.247012][ T5603] team0: Port device team_slave_1 added [ 102.249420][ T5602] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 102.249433][ T5602] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 102.249451][ T5602] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 102.328642][ T5602] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 102.328655][ T5602] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 102.328674][ T5602] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 102.356514][ T5613] Bluetooth: hci2: command tx timeout [ 102.436547][ T5613] Bluetooth: hci4: command tx timeout [ 102.778730][ T5599] hsr_slave_0: entered promiscuous mode [ 102.780393][ T5599] hsr_slave_1: entered promiscuous mode [ 102.782742][ T5603] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 102.782753][ T5603] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 102.782771][ T5603] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 102.869876][ T5603] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 102.869889][ T5603] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 102.869907][ T5603] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 102.922373][ T5600] hsr_slave_0: entered promiscuous mode [ 102.924061][ T5600] hsr_slave_1: entered promiscuous mode [ 102.925091][ T5600] debugfs: 'hsr0' already exists in 'hsr' [ 102.925187][ T5600] Cannot create hsr debugfs directory [ 102.954747][ T5601] hsr_slave_0: entered promiscuous mode [ 102.955735][ T5601] hsr_slave_1: entered promiscuous mode [ 102.957788][ T5601] debugfs: 'hsr0' already exists in 'hsr' [ 102.957862][ T5601] Cannot create hsr debugfs directory [ 103.091481][ T5602] hsr_slave_0: entered promiscuous mode [ 103.092617][ T5602] hsr_slave_1: entered promiscuous mode [ 103.093317][ T5602] debugfs: 'hsr0' already exists in 'hsr' [ 103.093335][ T5602] Cannot create hsr debugfs directory [ 103.229300][ T5603] hsr_slave_0: entered promiscuous mode [ 103.230490][ T5603] hsr_slave_1: entered promiscuous mode [ 103.231148][ T5603] debugfs: 'hsr0' already exists in 'hsr' [ 103.231186][ T5603] Cannot create hsr debugfs directory [ 104.160075][ T5599] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 104.200500][ T5599] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 104.206042][ T5599] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 104.241054][ T5599] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 104.245149][ T5599] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 104.276717][ T4912] Bluetooth: hci1: command tx timeout [ 104.276750][ T4912] Bluetooth: hci3: command tx timeout [ 104.276901][ T5613] Bluetooth: hci0: command tx timeout [ 104.285567][ T5599] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 104.326962][ T5599] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 104.350966][ T5599] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 104.436672][ T5613] Bluetooth: hci2: command tx timeout [ 104.512952][ T5601] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 104.517510][ T5613] Bluetooth: hci4: command tx timeout [ 104.551506][ T5601] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 104.564840][ T5601] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 104.595398][ T5601] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 104.606452][ T5601] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 104.651415][ T5601] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 104.677223][ T5601] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 104.710959][ T5601] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 104.858180][ T5602] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 104.890404][ T5602] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 104.906312][ T5602] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 104.942556][ T5602] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 104.958832][ T5602] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 104.991755][ T5602] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 105.030998][ T5602] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 105.083254][ T5602] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 105.216315][ T5600] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 105.262581][ T5600] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 105.283856][ T5600] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 105.320424][ T5600] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 105.338773][ T5600] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 105.381597][ T5600] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 105.414429][ T5600] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 105.442576][ T5600] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 105.597962][ T5599] 8021q: adding VLAN 0 to HW filter on device bond0 [ 105.659836][ T5603] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 105.701263][ T5603] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 105.715950][ T5603] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 105.751847][ T5603] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 105.766869][ T5603] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 105.810937][ T5603] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 105.828783][ T5603] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 105.870785][ T5603] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 105.899647][ T5599] 8021q: adding VLAN 0 to HW filter on device team0 [ 105.955914][ T56] bridge0: port 1(bridge_slave_0) entered blocking state [ 105.956079][ T56] bridge0: port 1(bridge_slave_0) entered forwarding state [ 106.027529][ T5601] 8021q: adding VLAN 0 to HW filter on device bond0 [ 106.032781][ T56] bridge0: port 2(bridge_slave_1) entered blocking state [ 106.033287][ T56] bridge0: port 2(bridge_slave_1) entered forwarding state [ 106.200809][ T5601] 8021q: adding VLAN 0 to HW filter on device team0 [ 106.235989][ T5602] 8021q: adding VLAN 0 to HW filter on device bond0 [ 106.272776][ T2239] bridge0: port 1(bridge_slave_0) entered blocking state [ 106.272874][ T2239] bridge0: port 1(bridge_slave_0) entered forwarding state [ 106.329876][ T2239] bridge0: port 2(bridge_slave_1) entered blocking state [ 106.329992][ T2239] bridge0: port 2(bridge_slave_1) entered forwarding state [ 106.357315][ T5613] Bluetooth: hci3: command tx timeout [ 106.357356][ T5613] Bluetooth: hci0: command tx timeout [ 106.357375][ T59] Bluetooth: hci1: command tx timeout [ 106.429890][ T5602] 8021q: adding VLAN 0 to HW filter on device team0 [ 106.451595][ T5600] 8021q: adding VLAN 0 to HW filter on device bond0 [ 106.504523][ T56] bridge0: port 1(bridge_slave_0) entered blocking state [ 106.504782][ T56] bridge0: port 1(bridge_slave_0) entered forwarding state [ 106.521866][ T59] Bluetooth: hci2: command tx timeout [ 106.596331][ T56] bridge0: port 2(bridge_slave_1) entered blocking state [ 106.600557][ T59] Bluetooth: hci4: command tx timeout [ 106.605551][ T56] bridge0: port 2(bridge_slave_1) entered forwarding state [ 106.693835][ T5600] 8021q: adding VLAN 0 to HW filter on device team0 [ 106.732278][ T5603] 8021q: adding VLAN 0 to HW filter on device bond0 [ 106.762059][ T66] bridge0: port 1(bridge_slave_0) entered blocking state [ 106.762298][ T66] bridge0: port 1(bridge_slave_0) entered forwarding state [ 106.837699][ T2209] bridge0: port 2(bridge_slave_1) entered blocking state [ 106.837836][ T2209] bridge0: port 2(bridge_slave_1) entered forwarding state [ 106.938928][ T5603] 8021q: adding VLAN 0 to HW filter on device team0 [ 107.019177][ T2209] bridge0: port 1(bridge_slave_0) entered blocking state [ 107.019270][ T2209] bridge0: port 1(bridge_slave_0) entered forwarding state [ 107.094030][ T2209] bridge0: port 2(bridge_slave_1) entered blocking state [ 107.094432][ T2209] bridge0: port 2(bridge_slave_1) entered forwarding state [ 107.905736][ T5599] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 108.343489][ T5601] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 108.485396][ T5602] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 108.512246][ T5599] veth0_vlan: entered promiscuous mode [ 108.620857][ T5599] veth1_vlan: entered promiscuous mode [ 108.811653][ T5601] veth0_vlan: entered promiscuous mode [ 108.875816][ T5601] veth1_vlan: entered promiscuous mode [ 108.889244][ T5602] veth0_vlan: entered promiscuous mode [ 108.892240][ T5599] veth0_macvtap: entered promiscuous mode [ 108.896078][ T5600] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 108.935853][ T5603] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 108.960108][ T5599] veth1_macvtap: entered promiscuous mode [ 108.991289][ T5602] veth1_vlan: entered promiscuous mode [ 109.083008][ T5599] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 109.133311][ T5599] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 109.195238][ T5601] veth0_macvtap: entered promiscuous mode [ 109.250121][ T68] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.297204][ T68] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.307132][ T5601] veth1_macvtap: entered promiscuous mode [ 109.340248][ T68] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.359609][ T5602] veth0_macvtap: entered promiscuous mode [ 109.361950][ T68] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.474002][ T5600] veth0_vlan: entered promiscuous mode [ 109.488390][ T5602] veth1_macvtap: entered promiscuous mode [ 109.560221][ T5601] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 109.617410][ T5600] veth1_vlan: entered promiscuous mode [ 109.709303][ T5601] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 109.715036][ T5602] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 109.836114][ T5602] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 109.836180][ T1383] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.863356][ T1383] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.901494][ T1383] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.930859][ T1383] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.953653][ T1383] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.968577][ T1383] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.974486][ T1383] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.025644][ T1383] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.083519][ T5603] veth0_vlan: entered promiscuous mode [ 110.218408][ T1383] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 110.218435][ T1383] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 110.372694][ T5600] veth0_macvtap: entered promiscuous mode [ 110.532079][ T5600] veth1_macvtap: entered promiscuous mode [ 110.564655][ T5603] veth1_vlan: entered promiscuous mode [ 110.709340][ T158] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 110.709364][ T158] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 110.859740][ T66] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 110.859762][ T66] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 110.960428][ T5600] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 111.000534][ T66] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 111.000552][ T66] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 111.022502][ T5600] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 111.081652][ T5603] veth0_macvtap: entered promiscuous mode [ 111.158454][ T12] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.173389][ T12] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.191985][ T5603] veth1_macvtap: entered promiscuous mode [ 111.203802][ T12] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.241801][ T158] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 111.241823][ T158] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 111.276114][ T12] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.395413][ T1420] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 111.395434][ T1420] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 111.561070][ T5603] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 111.828793][ T5603] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 112.111770][ T1031] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.127566][ T66] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.185784][ T2209] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.274726][ T2209] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.163199][ T2209] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 113.163218][ T2209] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 113.485307][ T5799] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8'. [ 113.485443][ T5799] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 113.594827][ T5800] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 114.051361][ T1383] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 114.051383][ T1383] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 114.148459][ T5811] netlink: 200 bytes leftover after parsing attributes in process `syz.2.11'. [ 114.219019][ T68] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 114.219035][ T68] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 114.510731][ T158] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 114.510749][ T158] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 115.035279][ T5810] netlink: 20 bytes leftover after parsing attributes in process `syz.1.10'. [ 117.320255][ T5818] netlink: 'syz.2.13': attribute type 1 has an invalid length. [ 117.320279][ T5818] netlink: 232 bytes leftover after parsing attributes in process `syz.2.13'. [ 117.320309][ T5818] netlink: 'syz.2.13': attribute type 1 has an invalid length. [ 117.494865][ T5828] netlink: 20 bytes leftover after parsing attributes in process `syz.0.14'. [ 117.574340][ T5831] netlink: 200 bytes leftover after parsing attributes in process `syz.0.14'. [ 118.694185][ T5841] capability: warning: `syz.0.16' uses deprecated v2 capabilities in a way that may be insecure [ 119.206873][ T5840] block device autoloading is deprecated and will be removed. [ 120.377117][ T5851] netlink: 200 bytes leftover after parsing attributes in process `syz.0.21'. [ 121.462978][ T5871] syzkaller0: entered promiscuous mode [ 121.463006][ T5871] syzkaller0: entered allmulticast mode [ 121.561418][ T821] IPVS: starting estimator thread 0... [ 121.676636][ T5875] IPVS: using max 8 ests per chain, 19200 per kthread [ 121.841662][ T5865] lo speed is unknown, defaulting to 1000 [ 122.000757][ T5882] netlink: 'syz.0.33': attribute type 1 has an invalid length. [ 122.000783][ T5882] netlink: 232 bytes leftover after parsing attributes in process `syz.0.33'. [ 122.000810][ T5882] netlink: 'syz.0.33': attribute type 1 has an invalid length. [ 122.975105][ T9] usb 2-1: new low-speed USB device number 2 using dummy_hcd [ 123.221412][ T9] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 123.221501][ T9] usb 2-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 123.221554][ T9] usb 2-1: config 168 interface 0 altsetting 188 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 123.221580][ T9] usb 2-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 123.221606][ T9] usb 2-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 123.221632][ T9] usb 2-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 123.221657][ T9] usb 2-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 123.221684][ T9] usb 2-1: config 168 interface 0 has no altsetting 0 [ 123.258864][ T9] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 123.258915][ T9] usb 2-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 123.258958][ T9] usb 2-1: config 168 interface 0 altsetting 188 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 123.258985][ T9] usb 2-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 123.259011][ T9] usb 2-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 123.259037][ T9] usb 2-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 123.259063][ T9] usb 2-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 123.259089][ T9] usb 2-1: config 168 interface 0 has no altsetting 0 [ 123.442228][ T9] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 123.442282][ T9] usb 2-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 123.442323][ T9] usb 2-1: config 168 interface 0 altsetting 188 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 123.442350][ T9] usb 2-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 123.442376][ T9] usb 2-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 123.442402][ T9] usb 2-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 123.442429][ T9] usb 2-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 123.442455][ T9] usb 2-1: config 168 interface 0 has no altsetting 0 [ 123.500516][ T9] usb 2-1: string descriptor 0 read error: -22 [ 123.500931][ T9] usb 2-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 123.500996][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 123.647225][ T5865] lo speed is unknown, defaulting to 1000 [ 123.772193][ T5896] netlink: 200 bytes leftover after parsing attributes in process `syz.3.35'. [ 124.033457][ T5865] lo speed is unknown, defaulting to 1000 [ 124.633045][ T9] adutux 2-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 125.025339][ T9] usb 2-1: USB disconnect, device number 2 [ 125.067994][ T37] audit: type=1326 audit(1784291556.893:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5907 comm="syz.0.41" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f399869de99 code=0x0 [ 125.568755][ T5705] usb 1-1: new full-speed USB device number 2 using dummy_hcd [ 125.762227][ T5705] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 125.762262][ T5705] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 125.762288][ T5705] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 64 [ 125.834751][ T5705] usb 1-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 125.834783][ T5705] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 125.834804][ T5705] usb 1-1: Product: syz [ 125.834818][ T5705] usb 1-1: Manufacturer: syz [ 125.834833][ T5705] usb 1-1: SerialNumber: syz [ 126.181468][ T5705] usb 1-1: config 0 descriptor?? [ 126.206523][ T5909] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 126.402955][ T5934] netlink: 200 bytes leftover after parsing attributes in process `syz.4.47'. [ 126.498066][ T5930] netlink: 'syz.3.46': attribute type 1 has an invalid length. [ 126.498090][ T5930] netlink: 232 bytes leftover after parsing attributes in process `syz.3.46'. [ 126.498105][ T5930] netlink: 'syz.3.46': attribute type 1 has an invalid length. [ 126.629414][ T5938] capability: warning: `syz.0.41' uses 32-bit capabilities (legacy support in use) [ 127.010295][ T5705] rc_core: IR keymap rc-streamzap not found [ 127.010316][ T5705] Registered IR keymap rc-empty [ 127.184212][ T5705] rc rc0: Streamzap PC Remote Infrared Receiver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 127.319885][ T5705] input: Streamzap PC Remote Infrared Receiver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input5 [ 128.812220][ T5720] lo speed is unknown, defaulting to 1000 [ 128.825799][ T5865] infiniband syz1: set active [ 128.825820][ T5865] infiniband syz1: added lo [ 129.087638][ T5720] usb 1-1: USB disconnect, device number 2 [ 129.400420][ T5865] workqueue: Failed to create a rescuer kthread for wq "ib_mad1": -EINTR [ 129.460234][ T5865] infiniband syz1: Couldn't open port 1 [ 129.532481][ T5865] smbdirect: ib_dev[syz1]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 129.532511][ T5865] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 129.532545][ T5865] smbdirect: ib_dev[syz1]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 130.502268][ T5865] RDS/IB: syz1: added [ 130.514342][ T821] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 130.550318][ T5865] smc: adding ib device syz1 with port count 1 [ 130.550472][ T5865] smc: ib device syz1 port 1 has no pnetid [ 130.559754][ T5720] lo speed is unknown, defaulting to 1000 [ 130.635504][ T37] audit: type=1326 audit(1784291562.453:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5978 comm="syz.4.55" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f77b13dde99 code=0x0 [ 130.686476][ T821] usb 1-1: Using ep0 maxpacket: 8 [ 130.689456][ T821] usb 1-1: config 0 has an invalid interface number: 31 but max is 0 [ 130.689484][ T821] usb 1-1: config 0 has no interface number 0 [ 130.693864][ T821] usb 1-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 130.693893][ T821] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 130.693913][ T821] usb 1-1: Product: syz [ 130.693927][ T821] usb 1-1: Manufacturer: syz [ 130.693941][ T821] usb 1-1: SerialNumber: syz [ 130.762670][ T5865] lo speed is unknown, defaulting to 1000 [ 130.780057][ T821] usb 1-1: config 0 descriptor?? [ 130.986852][ T821] uvcvideo 1-1:0.31: Found UVC 0.04 device syz (046d:08c3) [ 130.986966][ T821] uvcvideo 1-1:0.31: No valid video chain found. [ 131.763151][ T5992] syz.3.59 uses obsolete (PF_INET,SOCK_PACKET) [ 131.900045][ T5329] usb 1-1: USB disconnect, device number 3 [ 132.853514][ T1338] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.853617][ T1338] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.963745][ T37] audit: type=1326 audit(1784291564.723:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6007 comm="syz.0.61" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f399869de99 code=0x0 [ 133.338043][ T5329] usb 1-1: new full-speed USB device number 4 using dummy_hcd [ 133.345368][ T37] audit: type=1326 audit(1784291565.163:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6016 comm="syz.1.63" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f24d102de99 code=0x0 [ 133.351662][ T5865] lo speed is unknown, defaulting to 1000 [ 133.496941][ T5329] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 133.496976][ T5329] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 133.497002][ T5329] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 64 [ 133.501830][ T5329] usb 1-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 133.501859][ T5329] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 133.501888][ T5329] usb 1-1: Product: syz [ 133.501902][ T5329] usb 1-1: Manufacturer: syz [ 133.501916][ T5329] usb 1-1: SerialNumber: syz [ 133.646526][ T5706] usb 2-1: new full-speed USB device number 3 using dummy_hcd [ 133.655795][ T5329] usb 1-1: config 0 descriptor?? [ 133.659726][ T6009] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 133.822717][ T5706] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 133.822753][ T5706] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 133.822781][ T5706] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 64 [ 133.830533][ T5706] usb 2-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 133.830616][ T5706] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 133.830702][ T5706] usb 2-1: Product: syz [ 133.830737][ T5706] usb 2-1: Manufacturer: syz [ 133.830778][ T5706] usb 2-1: SerialNumber: syz [ 133.926645][ T6028] i2c i2c-0: Frontend requested software zigzag, but didn't set the frequency step size [ 133.986494][ T5329] rc_core: IR keymap rc-streamzap not found [ 133.986516][ T5329] Registered IR keymap rc-empty [ 133.986748][ T821] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 133.988286][ T5329] rc rc0: Streamzap PC Remote Infrared Receiver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 134.018021][ T5329] input: Streamzap PC Remote Infrared Receiver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input7 [ 134.139134][ T5706] usb 2-1: config 0 descriptor?? [ 134.140339][ T6020] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 134.156456][ T821] usb 5-1: Using ep0 maxpacket: 16 [ 134.555080][ T6034] netlink: 68 bytes leftover after parsing attributes in process `syz.3.68'. [ 134.906286][ T5706] rc_core: IR keymap rc-streamzap not found [ 134.906494][ T5706] Registered IR keymap rc-empty [ 135.154852][ T821] usb 5-1: unable to get BOS descriptor or descriptor too short [ 135.154926][ T821] usb 5-1: no configurations [ 135.154939][ T821] usb 5-1: can't read configurations, error -22 [ 135.224924][ T5706] rc rc1: Streamzap PC Remote Infrared Receiver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc1 [ 135.279866][ T5865] lo speed is unknown, defaulting to 1000 [ 135.537663][ T5706] input: Streamzap PC Remote Infrared Receiver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc1/input8 [ 135.977676][ T5720] usb 1-1: USB disconnect, device number 4 [ 136.829191][ T10] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 136.986609][ T37] audit: type=1326 audit(1784291568.803:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6052 comm="syz.0.74" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f399869de99 code=0x0 [ 137.044527][ T821] usb 2-1: USB disconnect, device number 3 [ 137.116561][ T10] usb 5-1: Using ep0 maxpacket: 8 [ 137.120358][ T10] usb 5-1: config 0 has an invalid interface number: 31 but max is 0 [ 137.120386][ T10] usb 5-1: config 0 has no interface number 0 [ 137.141703][ T10] usb 5-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 137.141782][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 137.141837][ T10] usb 5-1: Product: syz [ 137.141878][ T10] usb 5-1: Manufacturer: syz [ 137.141913][ T10] usb 5-1: SerialNumber: syz [ 137.285697][ T10] usb 5-1: config 0 descriptor?? [ 137.500122][ T10] uvcvideo 5-1:0.31: Found UVC 0.04 device syz (046d:08c3) [ 137.500235][ T10] uvcvideo 5-1:0.31: No valid video chain found. [ 137.714483][ T5613] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 137.764188][ T5613] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 137.779869][ T5613] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 137.794226][ T5613] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 137.811352][ T5613] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 137.882456][ T6063] Zero length message leads to an empty skb [ 137.989616][ T10] usb 5-1: USB disconnect, device number 4 [ 138.238162][ T5865] lo speed is unknown, defaulting to 1000 [ 138.530053][ T6073] netlink: 68 bytes leftover after parsing attributes in process `syz.3.79'. [ 138.894731][ T37] audit: type=1326 audit(1784291570.713:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6079 comm="syz.3.82" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f95f1edde99 code=0x0 [ 139.127974][ T821] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 139.276589][ T10] usb 4-1: new full-speed USB device number 2 using dummy_hcd [ 139.294786][ T821] usb 2-1: Using ep0 maxpacket: 16 [ 139.449918][ T10] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 139.449950][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 139.449976][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 64 [ 139.514151][ T10] usb 4-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 139.514183][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 139.514204][ T10] usb 4-1: Product: syz [ 139.514219][ T10] usb 4-1: Manufacturer: syz [ 139.514234][ T10] usb 4-1: SerialNumber: syz [ 139.616767][ T10] usb 4-1: config 0 descriptor?? [ 139.618997][ T6082] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 139.960386][ T59] Bluetooth: hci5: command tx timeout [ 139.987775][ T821] usb 2-1: unable to get BOS descriptor or descriptor too short [ 139.987864][ T821] usb 2-1: no configurations [ 139.987877][ T821] usb 2-1: can't read configurations, error -22 [ 139.999075][ T10] rc_core: IR keymap rc-streamzap not found [ 139.999119][ T10] Registered IR keymap rc-empty [ 140.085599][ T10] rc rc0: Streamzap PC Remote Infrared Receiver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 140.118141][ T10] input: Streamzap PC Remote Infrared Receiver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input9 [ 140.506439][ T6059] lo speed is unknown, defaulting to 1000 [ 141.130494][ T6110] netlink: 68 bytes leftover after parsing attributes in process `syz.1.91'. [ 141.557494][ T6106] faux_driver vgem: [drm] Unknown color mode 55545; guessing buffer size. [ 142.048329][ T59] Bluetooth: hci5: command tx timeout [ 142.383254][ T5720] usb 4-1: USB disconnect, device number 2 [ 142.516519][ T37] audit: type=1326 audit(1784291574.333:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6118 comm="syz.0.94" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f399869de99 code=0x0 [ 142.815179][ T6122] netlink: 20 bytes leftover after parsing attributes in process `syz.3.95'. [ 142.853755][ T6122] netlink: 200 bytes leftover after parsing attributes in process `syz.3.95'. [ 143.135748][ T6126] Bluetooth: MGMT ver 1.23 [ 143.152448][ T6126] Bluetooth: hci0: service_discovery: too big uuid_count value 48059 [ 143.550980][ T37] audit: type=1326 audit(1784291575.373:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6135 comm="syz.1.102" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f24d102de99 code=0x0 [ 143.676511][ T36] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 143.719984][ T5865] lo speed is unknown, defaulting to 1000 [ 143.867347][ T36] usb 5-1: Using ep0 maxpacket: 16 [ 143.908635][ T821] usb 2-1: new full-speed USB device number 6 using dummy_hcd [ 144.119134][ T59] Bluetooth: hci5: command tx timeout [ 144.245419][ T821] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 144.245447][ T821] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 144.245467][ T821] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 64 [ 144.289973][ T821] usb 2-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 144.290006][ T821] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 144.290026][ T821] usb 2-1: Product: syz [ 144.290041][ T821] usb 2-1: Manufacturer: syz [ 144.290056][ T821] usb 2-1: SerialNumber: syz [ 144.551737][ T821] usb 2-1: config 0 descriptor?? [ 144.576580][ T6137] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 145.179023][ T36] usb 5-1: unable to get BOS descriptor or descriptor too short [ 145.179087][ T36] usb 5-1: no configurations [ 145.179096][ T36] usb 5-1: can't read configurations, error -22 [ 145.216728][ T821] rc_core: IR keymap rc-streamzap not found [ 145.216749][ T821] Registered IR keymap rc-empty [ 145.252967][ T821] rc rc0: Streamzap PC Remote Infrared Receiver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 145.300384][ T821] input: Streamzap PC Remote Infrared Receiver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input10 [ 146.197861][ T59] Bluetooth: hci5: command tx timeout [ 147.021427][ T10] usb 2-1: USB disconnect, device number 6 [ 147.400205][ T6160] fuse: Unknown parameter 'grou00000000000000000000' [ 147.497326][ T6163] netlink: 20 bytes leftover after parsing attributes in process `syz.0.108'. [ 147.527752][ T6163] netlink: 200 bytes leftover after parsing attributes in process `syz.0.108'. [ 148.835971][ T6179] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 148.836037][ T6179] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 148.866679][ T36] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 149.017008][ T36] usb 5-1: Using ep0 maxpacket: 16 [ 149.324700][ T37] audit: type=1326 audit(1784291581.143:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6186 comm="syz.0.117" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f399869de99 code=0x0 [ 149.602638][ T6059] bridge0: port 1(bridge_slave_0) entered blocking state [ 149.632364][ T6059] bridge0: port 1(bridge_slave_0) entered disabled state [ 149.632616][ T6059] bridge_slave_0: entered allmulticast mode [ 149.737893][ T6059] bridge_slave_0: entered promiscuous mode [ 149.764082][ T6059] bridge0: port 2(bridge_slave_1) entered blocking state [ 149.764275][ T6059] bridge0: port 2(bridge_slave_1) entered disabled state [ 149.764485][ T6059] bridge_slave_1: entered allmulticast mode [ 149.794803][ T6059] bridge_slave_1: entered promiscuous mode [ 149.824614][ T36] usb 5-1: unable to get BOS descriptor or descriptor too short [ 149.824677][ T36] usb 5-1: no configurations [ 149.824686][ T36] usb 5-1: can't read configurations, error -22 [ 149.919003][ T6059] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 149.937673][ T6059] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 150.025751][ T6059] team0: Port device team_slave_0 added [ 150.059736][ T6059] team0: Port device team_slave_1 added [ 150.214120][ T6190] netlink: 'syz.1.118': attribute type 1 has an invalid length. [ 150.214143][ T6190] netlink: 232 bytes leftover after parsing attributes in process `syz.1.118'. [ 150.214158][ T6190] netlink: 'syz.1.118': attribute type 1 has an invalid length. [ 150.612036][ T6198] netlink: 20 bytes leftover after parsing attributes in process `syz.1.121'. [ 150.682716][ T6059] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 150.682731][ T6059] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 150.682752][ T6059] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 150.932492][ T6059] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 150.932510][ T6059] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 150.932538][ T6059] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 152.685997][ T6214] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 153.473362][ T6059] hsr_slave_0: entered promiscuous mode [ 153.494584][ T6059] hsr_slave_1: entered promiscuous mode [ 153.504179][ T6059] debugfs: 'hsr0' already exists in 'hsr' [ 153.504205][ T6059] Cannot create hsr debugfs directory [ 153.929089][ T10] IPVS: starting estimator thread 0... [ 153.999451][ T5606] usb 5-1: new low-speed USB device number 9 using dummy_hcd [ 154.018990][ T6225] IPVS: using max 11 ests per chain, 26400 per kthread [ 154.334081][ T5606] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 154.334132][ T5606] usb 5-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 154.334180][ T5606] usb 5-1: config 168 interface 0 altsetting 188 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 154.334210][ T5606] usb 5-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 154.334239][ T5606] usb 5-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 154.334269][ T5606] usb 5-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 154.334299][ T5606] usb 5-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 154.334328][ T5606] usb 5-1: config 168 interface 0 has no altsetting 0 [ 154.354921][ T5606] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 154.354968][ T5606] usb 5-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 154.355015][ T5606] usb 5-1: config 168 interface 0 altsetting 188 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 154.355045][ T5606] usb 5-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 154.355073][ T5606] usb 5-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 154.355101][ T5606] usb 5-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 154.355130][ T5606] usb 5-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 154.355159][ T5606] usb 5-1: config 168 interface 0 has no altsetting 0 [ 154.366067][ T5606] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 154.366130][ T5606] usb 5-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 154.366210][ T5606] usb 5-1: config 168 interface 0 altsetting 188 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 154.366313][ T5606] usb 5-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 154.366429][ T5606] usb 5-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 154.366459][ T5606] usb 5-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 154.366489][ T5606] usb 5-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 154.366519][ T5606] usb 5-1: config 168 interface 0 has no altsetting 0 [ 154.541108][ T5606] usb 5-1: string descriptor 0 read error: -22 [ 154.541577][ T5606] usb 5-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 154.541642][ T5606] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 154.890085][ T5606] adutux 5-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 154.994338][ T5606] usb 5-1: USB disconnect, device number 9 [ 155.349807][ T158] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 155.380180][ T6232] netlink: 'syz.0.129': attribute type 1 has an invalid length. [ 155.380206][ T6232] netlink: 232 bytes leftover after parsing attributes in process `syz.0.129'. [ 155.380221][ T6232] netlink: 'syz.0.129': attribute type 1 has an invalid length. [ 155.789748][ T6247] netlink: 20 bytes leftover after parsing attributes in process `syz.1.133'. [ 155.924267][ T821] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 155.978260][ T158] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 156.296458][ T821] usb 1-1: Using ep0 maxpacket: 16 [ 156.453715][ T6257] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 157.488215][ T6268] process 'syz.4.139' launched './file2' with NULL argv: empty string added [ 158.409176][ T821] usb 1-1: unable to get BOS descriptor or descriptor too short [ 158.409250][ T821] usb 1-1: no configurations [ 158.409263][ T821] usb 1-1: can't read configurations, error -22 [ 158.672712][ T158] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 158.904639][ T6271] netlink: 'syz.4.141': attribute type 1 has an invalid length. [ 158.904662][ T6271] netlink: 232 bytes leftover after parsing attributes in process `syz.4.141'. [ 158.904679][ T6271] netlink: 'syz.4.141': attribute type 1 has an invalid length. [ 159.291026][ T6279] netlink: 20 bytes leftover after parsing attributes in process `syz.0.144'. [ 159.316007][ T158] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 159.718423][ T5705] usb 5-1: new low-speed USB device number 10 using dummy_hcd [ 160.243286][ T5705] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 160.243334][ T5705] usb 5-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 160.243377][ T5705] usb 5-1: config 168 interface 0 altsetting 188 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 160.243406][ T5705] usb 5-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 160.243431][ T5705] usb 5-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 160.243458][ T5705] usb 5-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 160.243484][ T5705] usb 5-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 160.243511][ T5705] usb 5-1: config 168 interface 0 has no altsetting 0 [ 160.523097][ T5705] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 160.523144][ T5705] usb 5-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 160.523198][ T5705] usb 5-1: config 168 interface 0 altsetting 188 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 160.523227][ T5705] usb 5-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 160.523253][ T5705] usb 5-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 160.523280][ T5705] usb 5-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 160.523306][ T5705] usb 5-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 160.523333][ T5705] usb 5-1: config 168 interface 0 has no altsetting 0 [ 160.877825][ T5705] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 160.877871][ T5705] usb 5-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 160.877913][ T5705] usb 5-1: config 168 interface 0 altsetting 188 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 160.877949][ T5705] usb 5-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 160.877974][ T5705] usb 5-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 160.878000][ T5705] usb 5-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 160.878026][ T5705] usb 5-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 160.878053][ T5705] usb 5-1: config 168 interface 0 has no altsetting 0 [ 160.914144][ T5705] usb 5-1: string descriptor 0 read error: -22 [ 160.914490][ T5705] usb 5-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 160.914518][ T5705] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 161.553237][ T5705] adutux 5-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 161.642947][ T6291] bridge1: the hash_elasticity option has been deprecated and is always 16 [ 161.812722][ T5705] usb 5-1: USB disconnect, device number 10 [ 162.079267][ T6059] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 162.296802][ T6059] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 162.301627][ T6059] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 162.405500][ T6059] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 162.406883][ T6059] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 162.523209][ T6059] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 162.533234][ T6300] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(8) [ 162.533328][ T6300] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 162.560144][ T6059] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 162.681034][ T6300] vhci_hcd vhci_hcd.0: Device attached [ 162.683974][ T6059] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 162.886463][ T5705] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 163.016441][ T10] usb 39-1: new low-speed USB device number 2 using vhci_hcd [ 163.058338][ T5705] usb 4-1: Using ep0 maxpacket: 16 [ 163.132544][ T6307] ================================================================== [ 163.132567][ T6307] BUG: KASAN: slab-use-after-free in vhci_tx_loop+0x3e9/0x1c70 [ 163.132616][ T6307] Read of size 8 at addr ffff8880286093a0 by task vhci_tx/6307 [ 163.132634][ T6307] [ 163.132664][ T6307] CPU: 1 UID: 0 PID: 6307 Comm: vhci_tx Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 163.132694][ T6307] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 163.132711][ T6307] Call Trace: [ 163.132719][ T6307] [ 163.132728][ T6307] dump_stack_lvl+0xe8/0x150 [ 163.132765][ T6307] print_address_description+0x55/0x1e0 [ 163.132799][ T6307] ? vhci_tx_loop+0x3e9/0x1c70 [ 163.132825][ T6307] print_report+0x58/0x70 [ 163.132855][ T6307] kasan_report+0x117/0x150 [ 163.132881][ T6307] ? vhci_tx_loop+0x3e9/0x1c70 [ 163.132911][ T6307] vhci_tx_loop+0x3e9/0x1c70 [ 163.132949][ T6307] ? __pfx_vhci_tx_loop+0x10/0x10 [ 163.132981][ T6307] ? __lock_acquire+0x683/0x2ce0 [ 163.133006][ T6307] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 163.133040][ T6307] ? lockdep_hardirqs_on+0x7a/0x110 [ 163.133080][ T6307] ? do_raw_spin_lock+0x12b/0x2f0 [ 163.133117][ T6307] ? __pfx_autoremove_wake_function+0x10/0x10 [ 163.133151][ T6307] ? __kthread_parkme+0x71/0x1f0 [ 163.133180][ T6307] ? __kthread_parkme+0x196/0x1f0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 163.133210][ T6307] kthread+0x388/0x470 [ 163.133241][ T6307] ? __pfx_vhci_tx_loop+0x10/0x10 [ 163.133265][ T6307] ? __pfx_kthread+0x10/0x10 [ 163.133301][ T6307] ret_from_fork+0x514/0xb70 [ 163.133336][ T6307] ? __pfx_ret_from_fork+0x10/0x10 [ 163.133368][ T6307] ? __switch_to+0xc89/0x1420 [ 163.133396][ T6307] ? __pfx_kthread+0x10/0x10 [ 163.133428][ T6307] ret_from_fork_asm+0x1a/0x30 [ 163.133458][ T6307] [ 163.133466][ T6307] [ 163.133471][ T6307] Allocated by task 10: [ 163.133481][ T6307] kasan_save_track+0x3e/0x80 [ 163.133499][ T6307] __kasan_kmalloc+0x93/0xb0 [ 163.133517][ T6307] __kmalloc_cache_noprof+0x3d2/0x6b0 [ 163.133539][ T6307] vhci_urb_enqueue+0x5c2/0xe00 [ 163.133563][ T6307] usb_hcd_submit_urb+0x322/0x1b40 [ 163.133586][ T6307] usb_start_wait_urb+0x13f/0x5b0 [ 163.133616][ T6307] usb_control_msg+0x234/0x3e0 [ 163.133644][ T6307] hub_port_init+0xb0b/0x28b0 [ 163.133673][ T6307] hub_event+0x24e2/0x4cf0 [ 163.133702][ T6307] process_scheduled_works+0xa8e/0x14e0 [ 163.133724][ T6307] worker_thread+0xa47/0xfb0 [ 163.133747][ T6307] kthread+0x388/0x470 [ 163.133776][ T6307] ret_from_fork+0x514/0xb70 [ 163.133804][ T6307] ret_from_fork_asm+0x1a/0x30 [ 163.133820][ T6307] [ 163.133825][ T6307] Freed by task 6306: [ 163.133841][ T6307] kasan_save_track+0x3e/0x80 [ 163.133858][ T6307] kasan_save_free_info+0x40/0x50 [ 163.133883][ T6307] __kasan_slab_free+0x5c/0x80 [ 163.133901][ T6307] kfree+0x1c5/0x6c0 [ 163.133930][ T6307] pickup_urb_and_free_priv+0x225/0x3f0 [ 163.133955][ T6307] vhci_rx_loop+0x3c5/0xa00 [ 163.133976][ T6307] kthread+0x388/0x470 [ 163.134002][ T6307] ret_from_fork+0x514/0xb70 [ 163.134031][ T6307] ret_from_fork_asm+0x1a/0x30 [ 163.134049][ T6307] [ 163.134054][ T6307] The buggy address belongs to the object at ffff888028609380 [ 163.134054][ T6307] which belongs to the cache kmalloc-64 of size 64 [ 163.134072][ T6307] The buggy address is located 32 bytes inside of [ 163.134072][ T6307] freed 64-byte region [ffff888028609380, ffff8880286093c0) [ 163.134094][ T6307] [ 163.134100][ T6307] The buggy address belongs to the physical page: [ 163.134122][ T6307] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x28609 [ 163.134140][ T6307] flags: 0x80000000000000(node=0|zone=1) [ 163.134154][ T6307] page_type: f5(slab) [ 163.134172][ T6307] raw: 0080000000000000 ffff88813ffb48c0 dead000000000100 dead000000000122 [ 163.134190][ T6307] raw: 0000000000000000 0000000800200020 00000000f5000000 0000000000000000 [ 163.134201][ T6307] page dumped because: kasan: bad access detected [ 163.134215][ T6307] page_owner tracks the page as allocated [ 163.134223][ T6307] page last allocated via order 0, migratetype Unmovable, gfp_mask 0xd2cc0(GFP_KERNEL|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 66, tgid 66 (kworker/u8:4), ts 8692043447, free_ts 0 [ 163.134262][ T6307] post_alloc_hook+0x1f9/0x250 [ 163.134289][ T6307] get_page_from_freelist+0x262a/0x26a0 [ 163.134305][ T6307] __alloc_frozen_pages_noprof+0x18d/0x380 [ 163.134322][ T6307] allocate_slab+0x79/0x5e0 [ 163.134340][ T6307] refill_objects+0x2d8/0x350 [ 163.134360][ T6307] __pcs_replace_empty_main+0x330/0x690 [ 163.134379][ T6307] __kmalloc_node_noprof+0x632/0x7d0 [ 163.134392][ T6307] __vmalloc_node_range_noprof+0x5d9/0x1730 [ 163.134417][ T6307] __vmalloc_node_noprof+0xc2/0x100 [ 163.134441][ T6307] dup_task_struct+0x2a0/0x8f0 [ 163.134459][ T6307] copy_process+0x820/0x4390 [ 163.134477][ T6307] kernel_clone+0x2d2/0x8d0 [ 163.134497][ T6307] user_mode_thread+0x110/0x180 [ 163.134517][ T6307] call_usermodehelper_exec_work+0x5c/0x230 [ 163.134534][ T6307] process_scheduled_works+0xa8e/0x14e0 [ 163.134551][ T6307] worker_thread+0xa47/0xfb0 [ 163.134569][ T6307] page_owner free stack trace missing [ 163.134575][ T6307] [ 163.134579][ T6307] Memory state around the buggy address: [ 163.134588][ T6307] ffff888028609280: 00 00 00 00 00 00 00 00 fc fc fc fc fc fc fc fc [ 163.134599][ T6307] ffff888028609300: 00 00 00 00 00 00 00 00 fc fc fc fc fc fc fc fc [ 163.134613][ T6307] >ffff888028609380: fa fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 163.134622][ T6307] ^ [ 163.134630][ T6307] ffff888028609400: 00 00 00 00 00 00 fc fc fc fc fc fc fc fc fc fc [ 163.134641][ T6307] ffff888028609480: 00 00 00 00 00 00 fc fc fc fc fc fc fc fc fc fc [ 163.134650][ T6307] ================================================================== [ 163.424111][ T6307] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 163.424187][ T6307] CPU: 0 UID: 0 PID: 6307 Comm: vhci_tx Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 163.424251][ T6307] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 163.424291][ T6307] Call Trace: [ 163.424313][ T6307] [ 163.424322][ T6307] vpanic+0x56c/0xa60 [ 163.424364][ T6307] ? rcu_is_watching+0x15/0xb0 [ 163.424438][ T6307] ? __pfx_vpanic+0x10/0x10 [ 163.424508][ T6307] panic+0xc5/0xd0 [ 163.424553][ T6307] ? __pfx_panic+0x10/0x10 [ 163.424606][ T6307] ? preempt_schedule_thunk+0x16/0x40 [ 163.424720][ T6307] ? vhci_tx_loop+0x3e9/0x1c70 [ 163.424796][ T6307] ? preempt_schedule_thunk+0x16/0x40 [ 163.424861][ T6307] ? vhci_tx_loop+0x3e9/0x1c70 [ 163.424925][ T6307] check_panic_on_warn+0x89/0xb0 [ 163.425010][ T6307] ? vhci_tx_loop+0x3e9/0x1c70 [ 163.425066][ T6307] end_report+0x73/0x170 [ 163.425128][ T6307] ? vhci_tx_loop+0x3e9/0x1c70 [ 163.425196][ T6307] kasan_report+0x128/0x150 [ 163.425253][ T6307] ? vhci_tx_loop+0x3e9/0x1c70 [ 163.425329][ T6307] vhci_tx_loop+0x3e9/0x1c70 [ 163.425423][ T6307] ? __pfx_vhci_tx_loop+0x10/0x10 [ 163.425504][ T6307] ? __lock_acquire+0x683/0x2ce0 [ 163.425567][ T6307] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 163.425652][ T6307] ? lockdep_hardirqs_on+0x7a/0x110 [ 163.425750][ T6307] ? do_raw_spin_lock+0x12b/0x2f0 [ 163.425836][ T6307] ? __pfx_autoremove_wake_function+0x10/0x10 [ 163.425920][ T6307] ? __kthread_parkme+0x71/0x1f0 [ 163.425966][ T6307] ? __kthread_parkme+0x196/0x1f0 [ 163.425995][ T6307] kthread+0x388/0x470 [ 163.426031][ T6307] ? __pfx_vhci_tx_loop+0x10/0x10 [ 163.426054][ T6307] ? __pfx_kthread+0x10/0x10 [ 163.426085][ T6307] ret_from_fork+0x514/0xb70 [ 163.426117][ T6307] ? __pfx_ret_from_fork+0x10/0x10 [ 163.426148][ T6307] ? __switch_to+0xc89/0x1420 [ 163.426177][ T6307] ? __pfx_kthread+0x10/0x10 [ 163.426208][ T6307] ret_from_fork_asm+0x1a/0x30 [ 163.426243][ T6307] [ 163.426849][ T6307] Kernel Offset: disabled