last executing test programs: 9.476026615s ago: executing program 3 (id=338): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x12, 0xb, 0x4, 0x2}, 0x48) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000001c40)=ANY=[@ANYBLOB="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"/3590], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r3}, 0x10) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000080)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9], [0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], [0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa90d]}, 0x45c) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f0000000380)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) socket$inet_udplite(0x2, 0x2, 0x88) ioprio_get$uid(0x3, 0x0) sendmsg$IPCTNL_MSG_CT_GET(r2, 0x0, 0x0) set_mempolicy(0x6002, &(0x7f0000000080)=0xfffffffffffffffd, 0x4) mknod$loop(&(0x7f0000000000)='./file0\x00', 0x0, 0x1) mount(&(0x7f0000000540)=@nullb, &(0x7f0000000040)='./file0\x00', &(0x7f00000005c0)='vxfs\x00', 0x0, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r7 = socket$l2tp6(0xa, 0x2, 0x73) sendmsg$ETHTOOL_MSG_PAUSE_GET(0xffffffffffffffff, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={0x0, 0x20}}, 0x0) connect$l2tp6(r7, 0x0, 0x0) sendmmsg$inet6(r7, &(0x7f0000000ac0)=[{{&(0x7f0000000180)={0xa, 0x0, 0x0, @empty}, 0x18, 0x0, 0x0, 0x0, 0x0, 0xe0}}], 0x17fd147c801ae9ab, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000004c0)={{r1}, &(0x7f0000000340), &(0x7f0000000480)=r0}, 0x20) 8.072456886s ago: executing program 3 (id=346): prlimit64(0x0, 0x6, &(0x7f0000000140), 0x0) setresuid(0xee01, 0xee01, 0x0) msgget$private(0x0, 0x0) msgrcv(0x0, 0x0, 0x4b, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 7.860360999s ago: executing program 3 (id=349): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newtaction={0x60, 0x30, 0x871a15abc695fa3d, 0x0, 0x0, {}, [{0x4c, 0x1, [@m_ctinfo={0x48, 0x1, 0x0, 0x0, {{0xb}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CTINFO_ACT={0x18, 0x3, {0x0, 0x0, 0x9}}]}, {0x4}, {0xffffffffffffffe0}, {0xc}}}]}]}, 0x60}}, 0x0) ioctl$IOCTL_STATUS_ACCEL_DEV(0xffffffffffffffff, 0x40046103, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "5b1d75cb3ed028481b97f44f556e2e89a98c57d702290989961424b3761e66f3"}) r3 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @local, 0xc}, 0x1c) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote}, 0x1c) setsockopt$sock_linger(r3, 0x1, 0xd, &(0x7f0000000480)={0x80001, 0x3}, 0x8) close(r3) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) socket$netlink(0x10, 0x3, 0x14) r6 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r6, &(0x7f0000000040)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r6, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x1}, 0x10) r7 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r7, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x1, 0x5}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r7, 0x10f, 0x87, &(0x7f0000000240)={0x42, 0x1}, 0x10) close(r6) sendmsg$NL80211_CMD_TRIGGER_SCAN(r4, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000300)={&(0x7f0000000380)=ANY=[@ANYBLOB="533a4a9c431800003d380101000000000000", @ANYRES16=r5, @ANYBLOB="040029bd7000fcdbdf252100000004008700"], 0x18}, 0x1, 0x0, 0x0, 0x4004}, 0x4) r8 = socket$kcm(0x10, 0x2, 0x4) r9 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmmsg$inet(r9, &(0x7f0000002d00)=[{{&(0x7f00000002c0)={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000001780)=[{&(0x7f00000004c0)="7901ce7890798a19679434d46bca119ab004e64ce13c76d73043b55ed99cc59c4525da9312009e49bb676cf6585f56ff8003b27778def8ab019d5d72ffe737ad0a8dda6e7c1f9b5ae9e326aa669c34c39b7cb24aa438b7f0043375deec60008b73041efea5e5d993cce0c0d3f748d7a3e13c8788189c6b9ec1d5d91644aafdf570dcf17ac8171799c916678c900d158172a70d9807b13b9fcffd3b4e5009cbca2db0d40531e94a3860879f0026412d20199adb810f5946565ce371cea503f509e16776e3df7ce11374a12cb04b0b0bb5f61a2995863aa277136371c392bb516d58da6a0e9640e89990a49a7ef7a0b94b606fbad94331b0fd30def69a93eb1d69587dfadda1f2aea241fe470dbf5e6670afc9b9df08730586ac4ed2a8fc501b97421612920487b554304692812eac0b6780a4f5480c484ae070cad6b987425bf034d48f40c29b83379d6a8d165005cdd4bc0cbd97dc781a5094e701394d0ac05b6a20de3ecacad0f2cbf29d5c2b45b1f45d79172e3d604bb805227529fa5d805d809c93f5658f7452ca3771f8be108e65a9dd62b1ab6cb0ca0079f1ad53cc1744dade91bc1ca47e20587a0874a4d6294bca8e324155826f9ffda13f0859be347cbb70437ec34c61fe265e0700548a412e4c11f8130e8a4f2ab23d4e95147f2707b9ffc149257364222f6c262f29269d512f79493f325edd84889f729187a8bc9e8ab4a9047587ab3a220ba3a8c3e913c0db71e6bedce9159db8946e4e83fd87a967a91cdfd1189ed9dcc87c68e0026f3fa33bf1f53f928a8e774f7eaa9e18e56464b8b137f14eff81d0e49cca00f9bdff2782ad97465ed02303deb5f11a368446d68b854d10669181e4c9bb6d035ea57160516dc07a41a20136805176f8f0e2f719370c292fdba907207219cd88505c006032130bd35e3a76f028aa70e0f5be99f2844bdfd047c699ad27235849878fb2c08c2936f4d3958253cd59f4d4a4629c4fe98dd7272f153c80be753751316215b942f85c1b2eea22d300744bab527fb10a3e8cc02a252319411ac9dea22a0099aec698c8fb6013341f6bbb7738f4f0cb01047f7b297c963e0c28a098d3b4c9d6386535b85dbcdd071d94d949acb8f3f4275255c63abdfc893ee545b9598fb37ec3913fa21a748fb13c4d8c0e243170c71a0d4a8836282b1a3311cd754b586346d41e91f568a14b305fc77f2fb61d62157c225f4f8af40012224aec745080a734108f6b8dc016ec3ed0b671b7be1ff5e78872e372473096d247c8017f230457629b0e80197279bb19d1f62ca110e44191d4f073d6a65795d7e07d3efa76adca7ba5af1b2757eb975a80af6071630ae3fad39fcaf301c5c56075f12984398699c0166717ca3773e81b5ff5e76f94d18ee2b24d375eeb9081b55a45f9325c3ab7298e6def382cdaef249232c71caaba6eda774083b56d79816baf27df5f4d613fbb593346d4fd991c94df4b30f957073184467be4f904beba046525952ed3ede63f061f6563518ae7afc68c7a5a3880976c7e84db64157f96be1e627cb535c183a041644d7de613adb4b9a5a3541e08f6edfa7d23077c14dc6e3b036f4219c9dd3e8762e03b389f91b9a790987072d8290ede2c6e3da55fefc8074d1f52ba2d5f98237a682304d1bf0e21c5729f970869bc1a4d45726771fa8cfe6dc02c9acde368148287b934777b98b6966f5830fbf3a0072bfd2c8de86d7c233c1c64cf087c444b40604535a3c6fbe1c76822741b7db2f8239146a5e17a088e78c370c0f1d2ef15c5580bbc260672dd04b6d9281bd3a9adda4cc07ff3749d4bb68b11a43a6c2f67a077778802fcd539081cb404b0fe8fa4e60b6d0413d69d525483812bb91debc63fd8ff28efe18e04da714180539ef17d92df8f8975a429c9906b1d84391a4533164dd6c529b3b529d9d9b5aa258c84a4c0df77fa7d52b9dc5a3e7609e7de2e532f3680c3591bf903144c1cfb0dbe0490dc291af93529d09fed4af2002556eca01dce88b134112b15935c43842af479a66d029f4b30ecf220ee3bbef8fb4e3ddaac43ae14b3a15a537d9d7749fde25f8a74d212ae35899de2a30abfd9d730033072b8be4279273d3395f4db84c4ef04b72eb3a776cc750ec4e3468b27cc7e19c1783d04c061fa4bfeba1ad3540183a7df889bff6351fee7ef1cfe2c86f3967959c802a3ab174ef54cac27ee1b883440ce3194783c4e6372c7638c563a9d7014f6bcb042e0ec2f35923ac41753b99ccf38fe9dc38faaa43cd3fd0dce7b387c2d5e6dcb0c69789a365c91ad16d7f3139286b6cbba4f469462dd09382717e9e0e6b8eb95dd11161231050d53957d3a6b25aa38293b3f7e5e811f98431f09e14cc424f5407aa5e0e4f05d1a4782739791d4717b82e40747f32f8d9249910507ca36def4ebe9b3f8e4a598c34359c6eee949bbfdb3bfc3f021dc5dc3c0b740273c69c26bb00ab23fef302e7b147c9802e60e309eaf5e1d31422e8a52e8af08e35d127e2051b77935da97d43783de949188986607eba575bbeef9b8bfe6b4a0376a97296742d077dee9b57d5f752f2879939da456f58f8c189471316911f7f697cd7f812f77ca1b034a44392f860172b8506837880256245af4beae56aa850925a9b294910a5aea961c824089d635e94ee12908aa2e4affde16e6ede7a2525044227a33fd2e54bd4c1cce6bf9be3dd7157984cdc35899f1e7b46586888e7e4f9a2632648237512a200c625b90d9c373a8d2ca570385c9f0490aad80c837ccbc8dddc5ebbe51470dbbfd1d086747f3b6928b6ff6bd6ce56705b2c0ffd6394d40a41c3c78f27e7719deea24f1aadfbbc4fe2bcc45eb86a940db108e1d786e14a2eeee862cfe2760932e5d57c1e6966cd9fd5d048081bf9de76527fa860ff57bd9e3ce6344aab6ff5817154277563630b28396f50bfb79f005017ccc58871f4e06587dc4105c143809b356c707264495bbe69c84ae34d6ed9691110e277fbbadcdf0d111e1748cc3b81ea5f378c829fe868ccc893b30906dabe87d0c9e3fb65d2880c73af20a4ed9624dd3629315d5bdda8585f1acc8756aa320bee332f850f9da482a6f407e063985201d46a04ba0e238eb6a5e310246c7fbcf5cdf60685f55fbefd63038220fef418a80663f2ddf0fbfcf20637bb779a18ea21eda27418f5edd9778445a8b9b7dfc7a37b7cd536cb788acc9c674a22ebef5775f09bd34c9e99d11c350c286662b8a24cb6da865fbe1ac34c36001afe32fa8865eebea0b779b74a4333bf96b6b7296cb0bc0beca68bb69c22c8a60f86979ef7af47305370d7757eeec5860bb062b30f431aa486d04b750ed67ad62bfbb32694be1e01af0d54d7919f91ba500eb50237029e545ab5e4f3f55893819cc19027ea6185eb35f7dca35f123f6f07d00084b949dfa6b136fded7bc1e6c91e89adbf2f6bf05cca40ccc55a80406202492916eed64f712b8f9c2b12ab062f843d42a947adecb9c4ad0a907e29efeef3b5c305e18519d69369e48a4dd19dedb666d0ecd57706d4de17f2f54e14a5361a90b36edaa718ad4e67e6674561c4507b3258c65b0dfbe3f5cd2bb52aedf2e49acf459df01d9bb9a97f83d916fdb1a53474f577594d24c36e031b76f89f9ae1f52f6f1eba5a4675232fe2e2d001429f96651d278488c0b97f817a95f86ffa57ddf6f8258da9fe61de5f3d17583bb3244e664460740824f23b682a7a53f7394ac8a204e61c7a3a3c7b05daf4ad71e799c649dd3b64b6baff43b2637320eb8cee2cfcc721a94e88fb5e990304ecce62ff26a6d0609c861f6828b61763754802ec9a620a38f48bec62b113ac8b2f22cb23af71228237ffc8c77ce66c7b2833c92d784078d493a6e5794c6495736d46bd92f80a80818db24efdd1f94c7c86c180be82a40d05ca0ba0482239e5ab4dad2f71cd714af56ab8da38224df59ae9ec65cc30decaaad82f67f09e03e0ba7bc0c10318f74f0283ce13924f9ecf42c67a0143d633791e1f5fa117915f0f0878fed756598f38594097fcca8e191dbc5a6446fb594e34d4cb0ff5a5f03af9f55294c7447ab9d64f9b8e35c1be7ce90e239d37eb9ab12ee6bd3ae2bb51f972edb68a0754390bac8d5bfb28eae3e4cd1547d1317e507d7349fc10b29795df690fa5e9819c64b49bcec0e07eec7c261e71f3b2547eaf9969efb3b73a9648742b2639e02e3ee84d88aef7129d9b7005eb4e1ab0dd2b2264735994c644238d51da51c3cbb565ef1878534619821b712917f4859ca5b563088f49db6d690034cfd6b83e7d8aaf3820533c71ba687a88eeff402b9e0f21bae69829dbba3a05b7be691845f00bea0983880258c4e93cad98a46ed45bbfb4c8ebfd20879d94a70c24291d245467c7aab7204e8526348f2f94544d1d2e34f1e71cfe12f059353b227480631e1ec4c23da2149fd2c6e3fb631bf024d355796203b047d66d3737ef413246000be5427c6080287823d1fe40be6d706b8d517bfc73981a56d792604c0ad6d7ad168a70d7d36da507c2ccca22191065616f90315f935cea1968bf524d3ba94d76bdb6d6a2d4e409ddf7d8b965fe62ee8f2d633af6e0fd23a519314f08a14afa88c0025a93750fafd8004fc597d5e0d50b3d50a9e252b63a1191df04d0a4742df4b2f88bcc6c43692bcfead591b65c234c00415a1501426947b85e2d198e356a1e62f6b1be92ed78c019a481b6ec2429915c1f1d842a72681bb93e3e25a1330c01a591eeb7cf496d8ae2c69b76a048a0bfdea512ea6bb7bcea5a356e56b9153f91ea4c9ff263320268dbda816779280f7a4f83eb0590f85ceccf3ac771ff53d67bf59468925952b2cb9480d9777e10750c8a0d3918bfd99e47c7d4f99fafbd75f95a64a7c57bbbf15afed45cfe65289332016d85ca2618327007c862ca6d1305c7f636e4bc1979ac85979e8100ca24b77103f592715403dab718da940b6f6140a51924b763f28d8a7f90321c32fd6e50325a0170bb10f859abe8c2e76b674ee08af4cefd0ea6ee74fb0210bb8106b2f611a717673b65c6231cd2fa711e05d1725d3c3e704", 0xe00}, {&(0x7f00000014c0)="68f7c3b65181be1c53da96aff1e4ffa16bcf59987dfd0c19979b487cb27eeb9f5cf2cadec4bf9285c4c4507e4f48f4d7ed70a44c76cfce078c6723b05aab627c1b68838cb22b1198e4501f1658d79c8464d5d94dbe35e9eb70f3fa0c9d0df7ee450f2764eeb97b044a61863d5db177f6f51e34aa3d592e34ce09dd9946c3b4c9f6", 0x81}, {0x0}], 0x3}}, {{0x0, 0x0, &(0x7f0000001b80)=[{0x0}, {&(0x7f00000018c0)}, {0x0}, {&(0x7f00000019c0)="9dda2a41f157f78dd3a59aeb0cc6547c208b4d3525b69cd12dba3d9680a68defc3cb10badd224751641f6ca199fc782bd61a3ecd13cdddb762feff338d833f015e311e3be49a842e05f2a9066eb54ef8684d3d33c53a799c899a8cc62ff8bb95d079891e9bfcb381", 0x68}, {&(0x7f0000001a40)}, {&(0x7f0000001b00)}], 0x6, &(0x7f0000001d00)=[@ip_ttl={{0x14, 0x0, 0x2, 0x200}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @loopback, @initdev={0xac, 0x1e, 0x1, 0x0}}}}, @ip_tos_int={{0x14}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x1}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @broadcast, @local}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x1f}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x53}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @broadcast, @loopback}}}], 0xd8}}, {{&(0x7f0000001e00)={0x2, 0x4e22, @private=0xa010101}, 0x10, &(0x7f0000002100)=[{0x0}], 0x1}}, {{&(0x7f0000002640)={0x2, 0x4e20, @empty}, 0x10, &(0x7f0000002a00)=[{&(0x7f0000002680)}, {&(0x7f00000026c0)="8510cabf166edc2a6e8081a4a9e0204f8b77bae5ff7898348462f81dee6561526c966f058d5d511bd668c644d146a70d5bb9749c4bc3d0496f3dd131db221463ec3339afc55e5e8ad5b0995aa283265c4f4158b77d6f0327927504ff3009b0e95733bd30e477e97dc4bdf4c40ffcd028e070d012acc6a8da75c4964ff8915fe184186e3a2d7ffc32c65afb1d8138557b408ed93d5693db6091d1064edfbb22abb6a55620e0facb", 0xa7}, {0x0}, {&(0x7f0000002980)="ba4858ef98054c70d0215393b82abb5ebfbf52ed3477f10d237d3637c45b083b5fc1a1c8a341acfd64332ea841d369ea39cc6c8ba55f55", 0x37}], 0x4, &(0x7f0000002c00)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @multicast2, @dev={0xac, 0x14, 0x14, 0xf}}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x5}}, @ip_ttl={{0x14, 0x0, 0x2, 0x9}}, @ip_ttl={{0x14, 0x0, 0x2, 0x726}}, @ip_tos_u8={{0x11}}], 0x80}}], 0x4, 0x448c1) sendmsg$inet(r9, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x0, @dev}, 0x10, 0x0}, 0x30044041) sendmsg$inet(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000100)="5c00000012006bab9e3fe3d86e6c1d000014a10d00000000000004b68675f8001d000a00a0e69ee517d34460bc24eab556a705251e6182949a36c23d3b48dfd8cdbf9367b4fa51f60a64c9f408000300060100000400020011000000", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00001b0000/0x18000)=nil, &(0x7f0000000440)=[@textreal={0x8, &(0x7f0000000000)="f00fc7484d36f08266060266b9800000c00f326635000400000f308bc1de780066b9aa0200000f322e0f01cf66b9ab0900000f32f2f031b3e759dc2c", 0x3c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 7.089618047s ago: executing program 3 (id=359): prlimit64(0x0, 0x6, &(0x7f0000000140), 0x0) setresuid(0xee01, 0xee01, 0x0) msgget$private(0x0, 0x0) msgrcv(0x0, 0x0, 0x4b, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 6.869030055s ago: executing program 3 (id=361): r0 = socket(0x10, 0x2, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x6}, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_WOL_SET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000480)={0x20, r1, 0xe7d02281b1d40445, 0x0, 0x0, {}, [@ETHTOOL_A_WOL_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0xb}]}]}, 0x20}}, 0x0) 6.711877903s ago: executing program 3 (id=363): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000c00)="89e7ee2c7cdad9b4b47381c988a8", 0xe}], 0x1) 6.594088967s ago: executing program 4 (id=364): r0 = syz_open_procfs(0x0, &(0x7f0000000100)='comm\x00') write$binfmt_script(r0, &(0x7f00000003c0)={'#! ', './file0', [], 0xa, "5caf"}, 0xd) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='status\x00') preadv(r1, &(0x7f0000000000)=[{&(0x7f0000000240)=""/135, 0x87}], 0x1, 0x0, 0x0) 6.44721809s ago: executing program 4 (id=366): syz_emit_ethernet(0x96, &(0x7f0000000280)={@local, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f81fcb", 0x60, 0x3a, 0x0, @private0, @mcast2, {[], @param_prob={0x4, 0x0, 0x0, 0x0, {0x0, 0x6, "4aa1d3", 0x0, 0x0, 0x0, @private1, @ipv4={'\x00', '\xff\xff', @loopback}, [@routing={0x3c}, @srh={0x0, 0x2, 0x4, 0x1, 0x0, 0x0, 0x0, [@ipv4={'\x00', '\xff\xff', @remote}]}, @srh={0x2f}, @dstopts]}}}}}}}, 0x0) 6.339170059s ago: executing program 4 (id=367): r0 = socket$inet_udp(0x2, 0x2, 0x0) recvmmsg(r0, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}}], 0x40000000000012d, 0x2, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=""/25, 0x13}}], 0x1, 0x0, 0x0) setsockopt$inet_int(r0, 0x0, 0x6, &(0x7f0000000180)=0x6, 0x4) setsockopt$inet_int(r0, 0x0, 0x7, &(0x7f0000000140)=0x6, 0x4) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x36, &(0x7f00000002c0)={@broadcast, @link_local, @void, {@ipv4={0x800, @udp={{0x6, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty, {[@timestamp={0x44, 0x4, 0xc6}]}}, {0x0, 0x4e20, 0x10, 0x0, @gue={{0x2}}}}}}}, 0x0) 6.067918257s ago: executing program 4 (id=371): sendto(0xffffffffffffffff, &(0x7f00000014c0)="8e", 0x1, 0x0, 0x0, 0x0) r0 = socket$inet(0x2, 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_REFINE(0xffffffffffffffff, 0xc2604110, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="b80000001900010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000", @ANYRES32=0x0, @ANYRES32=r0, @ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001b7c000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0xb8}}, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="b80000001900010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002"], 0xb8}}, 0x0) 5.521931812s ago: executing program 4 (id=377): ioctl$PTP_PIN_SETFUNC(0xffffffffffffffff, 0x40603d07, &(0x7f0000000040)={'\x00', 0x0, 0x1}) r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0285628, &(0x7f0000000080)={0x3, @win={{0x2}, 0x0, 0x0, &(0x7f0000000040)={{0x0, 0x0, 0x0, 0xfffffffe}}, 0x0, 0x0}}) socket$inet_mptcp(0x2, 0x1, 0x106) syz_open_dev$vcsu(0x0, 0x0, 0x0) 4.207818113s ago: executing program 4 (id=379): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x0, 0x0) r6 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_S_SELECTION(r6, 0xc040565f, &(0x7f0000000000)={0x2, 0x100, 0x3}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(0xffffffffffffffff, 0xc0709411, &(0x7f0000000280)={{0x0, 0x4, 0x100000000, 0x6, 0x0, 0x101, 0xfff, 0x0, 0x10000, 0x1, 0x3, 0x1, 0x80000001, 0x2, 0x4}, 0x8, [0x0]}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000001740)={0xeeb, [], 0x0, "285c4d007ecdfb"}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r1, 0xd000943e, &(0x7f00000d3200)={0x0, 0x0, "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", "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"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r5, 0xd000943d, &(0x7f00000d4200)={0x8fcd, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}], 0x8, "c0d407618e9a5e"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r5, 0xd000943d, &(0x7f00000d5200)={0x40, [], 0x80, "a63fdc6584f74d"}) ioctl$BTRFS_IOC_TREE_SEARCH(r1, 0xd0009411, &(0x7f00000d6200)={{0x0, 0x54da, 0xff, 0x96a, 0x5, 0x8000000000000001, 0x4, 0x3, 0x7, 0x3, 0x5, 0x8, 0x2, 0xd85, 0x2}}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r4, 0xd000943d, &(0x7f00000d7400)={0xff, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}], 0x61, "5101e3174f9f6d"}) r11 = socket$inet6_icmp(0xa, 0x2, 0x3a) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r11, 0x5421, &(0x7f0000000240)={0x0, ""/256, 0x0}) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x4, 0x5, &(0x7f00000006c0)=ANY=[@ANYRESOCT=r12, @ANYRESHEX], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x60, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r6, 0xd000943d, &(0x7f00000d8400)={0xffffffffffff7145, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}], 0x0, "91ce83f7bc488a"}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r3, 0xc0709411, &(0x7f00000d9400)={{0x0, 0x3ff, 0x4, 0xff, 0x100000001, 0x41b9, 0x5, 0x6dc, 0x9, 0x80000001, 0x0, 0x8, 0xfffffffffffeffff, 0xb4b, 0x8}, 0x18, [0x0, 0x0, 0x0]}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, &(0x7f00000d94c0)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r6, 0xd000943d, &(0x7f00000d96c0)={0x1d92, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}], 0x81, "149d3448098eac"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r2, 0xd000943d, &(0x7f00000da6c0)={0x9, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}], 0xf8, "c293aefd2eeffb"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r3, 0xd000943d, &(0x7f00000db6c0)={0x1, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r7}, {r8}, {r9}, {0x0, r10}, {r12}, {0x0, r13}, {r14, r15}, {r16, r17}], 0x8, "ff0cd8c9bcb714"}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x10) pselect6(0x40, &(0x7f00000001c0), 0x0, &(0x7f0000000080)={0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0) r18 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r18, 0x40085112, &(0x7f0000000040)=@e={0xff, 0xa, 0x0, 0x0, @SEQ_CONTROLLER=0xfe}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x14) 3.547303126s ago: executing program 0 (id=385): r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$SIOCRSGCAUSE(r0, 0x89e0, &(0x7f0000001c80)) 3.44556339s ago: executing program 2 (id=386): r0 = socket(0x10, 0x2, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x6}, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_WOL_SET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000480)={0x20, r1, 0xe7d02281b1d40445, 0x0, 0x0, {}, [@ETHTOOL_A_WOL_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0xb}]}]}, 0x20}}, 0x0) 3.408147544s ago: executing program 0 (id=388): r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) open_tree(0xffffffffffffff9c, 0x0, 0x0) r1 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100007516b7108c0d0e008f8e0018030109021b0001000000000904080001030000000905", @ANYBLOB="8fcf"], 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(0xffffffffffffffff, 0x0, 0x0) r3 = dup(r2) syz_usb_control_io(r1, 0x0, 0x0) write$UHID_INPUT(r3, &(0x7f0000001980)={0x9, {"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", 0x1000}}, 0x1006) ioctl$TCXONC(r0, 0x540a, 0x0) ioctl$TIOCL_GETMOUSEREPORTING(r0, 0x5412, 0x0) 3.226172583s ago: executing program 1 (id=389): ioctl$PTP_PIN_SETFUNC(0xffffffffffffffff, 0x40603d07, &(0x7f0000000040)={'\x00', 0x0, 0x1}) r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0285628, &(0x7f0000000080)={0x3, @win={{0x2}, 0x0, 0x0, &(0x7f0000000040)={{0x0, 0x0, 0x0, 0xfffffffe}}, 0x0, 0x0}}) socket$inet_mptcp(0x2, 0x1, 0x106) syz_open_dev$vcsu(0x0, 0x0, 0x0) 3.180733076s ago: executing program 2 (id=390): mknodat$null(0xffffffffffffff9c, 0x0, 0x0, 0x103) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x6, 0x5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000008000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0xfff, 0x7}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c3"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000700)='mm_lru_insertion\x00', r1}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000100)='mm_lru_insertion\x00', r3}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) write$cgroup_type(r4, &(0x7f0000000180), 0x40010) 3.140749015s ago: executing program 1 (id=391): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x12, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000730117000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x90) 3.05134081s ago: executing program 1 (id=392): r0 = socket$inet_udp(0x2, 0x2, 0x0) recvmmsg(r0, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}}], 0x40000000000012d, 0x2, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=""/25, 0x13}}], 0x1, 0x0, 0x0) setsockopt$inet_int(r0, 0x0, 0x6, &(0x7f0000000180)=0x6, 0x4) setsockopt$inet_int(r0, 0x0, 0x7, &(0x7f0000000140)=0x6, 0x4) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x36, &(0x7f00000002c0)={@broadcast, @link_local, @void, {@ipv4={0x800, @udp={{0x6, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty, {[@timestamp={0x44, 0x4, 0xc6}]}}, {0x0, 0x4e20, 0x10, 0x0, @gue={{0x2}}}}}}}, 0x0) 3.012424542s ago: executing program 2 (id=393): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) write$binfmt_script(r2, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd600a847500140600fe8000000000000000000000000000bb", @ANYRES32=0x41424344], 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000327000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f326635004000000f300f20e06635800000000f22e0f30fa6c8", 0x50}], 0x1, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x2d, 0x0, &(0x7f0000000580)) socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000924000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, &(0x7f0000000340)=""/149, 0x95, 0x0, &(0x7f0000000500)=""/221, 0xdd}, &(0x7f0000000280)=0x40) sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000180)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10) ioctl$KVM_X86_SETUP_MCE(r3, 0x4008ae9c, &(0x7f0000000240)={0x20, 0x4}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 2.847959796s ago: executing program 1 (id=394): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_STATUS32(0xffffffffffffffff, 0xc0245720, &(0x7f0000000240)) r3 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x800000000001) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fda000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x15) r6 = dup(r1) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) pipe2$9p(&(0x7f0000000040), 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0xffff, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text16={0x10, &(0x7f0000000000)="f30fa8670f01ca660ff660000f3265360fc72a0f787aefbaf80c66b828f2c78a66efbafc0c66b8f1ffffff66eff2dd8aedaf36ff9a2dde6f", 0x38}], 0x1, 0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f00000000c0)) ioctl$KVM_RUN(r7, 0xae80, 0x0) 1.834470648s ago: executing program 1 (id=395): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28"], 0x50}}, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000000)={'sit0\x00', &(0x7f00000002c0)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x2b, 0x4, 0x0, 0x0, 0xac, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast, @remote, {[@timestamp={0x44, 0x18, 0x0, 0x0, 0xd, [0x401, 0x5, 0x0, 0x5, 0x0]}, @timestamp_prespec={0x44, 0x3c, 0xc0, 0x3, 0x0, [{@private=0xa010102}, {@multicast1}, {@remote}, {@broadcast}, {@empty}, {@multicast1, 0xffd200}, {@private=0xa010100}]}, @timestamp_prespec={0x44, 0x34, 0x0, 0x3, 0x8, [{@dev}, {@remote}, {@multicast2}, {@private=0xa010101}, {@rand_addr=0x64010101}, {@multicast2, 0x2}]}, @noop, @noop, @noop, @lsrr={0x83, 0xb, 0xdc, [@rand_addr=0x64010101, @multicast1]}]}}}}}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000240), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r2, 0x0) r3 = dup(r1) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0xffff, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) setsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000040), 0x4) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0xd000}) ioctl$KVM_NMI(r4, 0xae9a) ioctl$KVM_RUN(r4, 0xae80, 0x0) 1.684774829s ago: executing program 2 (id=396): syz_emit_ethernet(0x4a, &(0x7f0000000140)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "df1d00", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000000000)={0x0, 'ip6gretap0\x00', {}, 0x1ff}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, &(0x7f0000000040)="0fa26667f046836b0876650fc71a66ba4100edb9800000c00f3235001000000f30420f017805450f0866b8af008ed86446d8e4b8010000000f01d9", 0x3b}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000140)=ANY=[@ANYRES64=r0]) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1.337841672s ago: executing program 1 (id=397): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="240000001e000100000000000000000002000000000000000000000008000f20"], 0x24}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) connect$x25(0xffffffffffffffff, &(0x7f00000000c0), 0x12) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000040), 0x208e24b) r3 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r3, &(0x7f00000001c0)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @dev}, 0x10) recvmmsg(r3, &(0x7f0000005280)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff00003f00}, 0x3}, {{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000002cc0)=""/152, 0x98}, {&(0x7f0000000340)=""/211, 0xd3}], 0x2}}, {{0x0, 0x0, &(0x7f0000003200)=[{0x0}], 0x1}, 0xb177}, {{&(0x7f00000038c0)=@sco, 0x80, 0x0}, 0xa000000}], 0x4, 0x40002006, 0x0) sendfile(r3, r2, 0x0, 0xffefffff) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r4, 0x84, 0x24, &(0x7f0000000440), &(0x7f0000000100)=0x8) sendmsg$NFT_BATCH(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a010400000000000000000100000008000240000000020900010073797a300000000014000000110001"], 0x50}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000009006000000000000000000000a3c000000090a090600000000000000000100000008000a40000000000900020073797a31000000000900010073797a3000000000080005400000001414000000110001"], 0x64}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x14200}, 0xc, &(0x7f0000000140)={&(0x7f0000000500)=ANY=[@ANYBLOB="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"], 0x14dc}, 0x1, 0x0, 0x0, 0x20010}, 0x20000454) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_icmp_ICMP_FILTER(r5, 0x3a, 0x1, 0x0, 0x52) close(r1) 1.277473s ago: executing program 2 (id=398): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000003c0)=0x70, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000400)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(r0, &(0x7f0000000580)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000004c0)='k', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000a80)="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", 0x14e}, {&(0x7f0000000440)="47c976258ac1cc5aa7", 0x9}, {&(0x7f0000000940)="8d7af8bb51eeeafe737610134c891ebed665377b52c33db586b932741ed69b1a3f99831f5ee965d8f6546da48e94389112a57b8a6bbdafcf812cd8222bc33029228b0941167175eb1032ee6bd3536034df7f54ec2e238a5ef7c82b3f56d363b511a9953b0b4375170cc8c9a3f8cf29386d1ad31147862dd5b3348c4600b278e53af55705314d9bd1a5a21411c3bc04", 0x8f}, {&(0x7f0000000dc0)="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", 0x14d}, {&(0x7f0000000200)="2227a019d5e7f8e7f37b8483f12eb9716ddff30653c2fcc91a7b93d9032615e616b9cce3b11b24eaacf7cd5730342f767c2264cea4847dd424cf02e86f062c640259dca922a664d47b586c99e65c4f1ef29c5911746568639e844f7ab079f91b7e24d3cf0f21cfe9ee3d164a9b22b6f43002163b91ffdce92ca10ce581acffe571498a21542adeec265864bd", 0x8c}, {&(0x7f0000000500)="07759df1e25d8d39f867219a7a43732386418805234dc745b59a4c26980fb341b6446b4dfa40256a56016f729fed9c631e8b5be5f40183bb109756b40f178eb4f60f6994501c4d84f9a1a40fae56db43aebb1afe6258806ec57a0f1685e38146", 0x60}, {&(0x7f0000000c00)="aa6f5bc82efbaddadf09c581ec494a6cd679416a55967268a91d36557a9c7de0bfb53db717e6cfc408ee04a5f1098ee1c770a387743761d626629f727e4a788c10ae671895898fbc13f2de4ec2e6522592b1e2fb59db9027640d8b4bab4842253a35d988fca6eb63922386f512c70195a71825670865f4234966", 0x7a}], 0x7}}], 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0x1801, 0x4) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='illinois\x00', 0x9) sendto$inet(r0, &(0x7f0000000700)="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", 0xffffffffffffff20, 0x6b, 0x0, 0x0) 980.759506ms ago: executing program 2 (id=399): r0 = getpid() process_vm_readv(r0, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0x5) ioctl$TCFLSH(r1, 0x8910, 0x20001114) 469.346304ms ago: executing program 0 (id=400): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r1 = socket$unix(0x1, 0x5, 0x0) r2 = dup2(r1, r0) r3 = syz_io_uring_setup(0x10b, &(0x7f00000003c0), &(0x7f0000000180)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f0000000440)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r2, 0x0, 0x0}) io_uring_enter(r3, 0x3f70, 0x0, 0x0, 0x0, 0x0) 210.312741ms ago: executing program 0 (id=401): ioctl$PTP_PIN_SETFUNC(0xffffffffffffffff, 0x40603d07, &(0x7f0000000040)={'\x00', 0x0, 0x1}) r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0285628, &(0x7f0000000080)={0x3, @win={{0x2}, 0x0, 0x0, &(0x7f0000000040)={{0x0, 0x0, 0x0, 0xfffffffe}}, 0x0, 0x0}}) socket$inet_mptcp(0x2, 0x1, 0x106) syz_open_dev$vcsu(0x0, 0x0, 0x0) 113.127989ms ago: executing program 0 (id=402): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$inet(0x2, 0xa, 0x0) sendmsg$nl_generic(r1, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x24, 0x10, 0x701, 0x0, 0x0, {0xa}, [@typed={0x6, 0x1, 0x0, 0x0, @str='\x1b\x00'}, @typed={0x8, 0xa, 0x0, 0x0, @fd=r2}]}, 0x24}}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x3) socketpair(0x28, 0x2, 0x28, &(0x7f0000000000)) socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kmem_cache_free\x00', r4}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000005b80)={{{@in6=@remote, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x2}}, {{@in6=@mcast1, 0x0, 0x6c}, 0x0, @in=@dev}}, 0xe8) syz_emit_ethernet(0x3e, &(0x7f0000000200)={@link_local, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x4, 0x0, 0x0, 0x3, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @empty, @dev}}}}}}, 0x0) sched_setscheduler(r0, 0x1, &(0x7f0000000540)=0x4) semget$private(0x0, 0x5, 0x0) 0s ago: executing program 0 (id=403): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000010140)={0x5c, 0x2, 0x6, 0x301, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x0}]}, @IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}]}, 0x5c}}, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.76' (ED25519) to the list of known hosts. [ 53.394236][ T5199] cgroup: Unknown subsys name 'net' [ 53.535053][ T5199] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 54.974095][ T5199] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 57.270079][ T5216] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 57.285419][ T5228] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 57.293556][ T5228] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 57.312991][ T5230] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 57.323150][ T5232] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 57.338499][ T5232] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 57.340779][ T5229] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 57.355146][ T5232] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 57.355328][ T5229] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 57.368039][ T5232] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 57.387556][ T5229] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 57.396922][ T5232] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 57.417151][ T5229] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 57.425172][ T5230] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 57.427509][ T5233] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 57.440275][ T5230] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 57.440448][ T5229] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 57.457901][ T5229] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 57.465948][ T5230] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 57.466494][ T5229] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 57.478733][ T5230] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 57.480484][ T5233] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 57.488905][ T5232] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 57.496205][ T5233] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 57.504717][ T5232] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 57.516539][ T5232] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 57.518763][ T5233] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 57.523632][ T5230] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 57.540679][ T5233] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 57.550750][ T5232] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 58.006845][ T5218] chnl_net:caif_netlink_parms(): no params data found [ 58.099532][ T5215] chnl_net:caif_netlink_parms(): no params data found [ 58.269334][ T5219] chnl_net:caif_netlink_parms(): no params data found [ 58.281169][ T5212] chnl_net:caif_netlink_parms(): no params data found [ 58.330975][ T5218] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.338315][ T5218] bridge0: port 1(bridge_slave_0) entered disabled state [ 58.345706][ T5218] bridge_slave_0: entered allmulticast mode [ 58.352834][ T5218] bridge_slave_0: entered promiscuous mode [ 58.360926][ T5217] chnl_net:caif_netlink_parms(): no params data found [ 58.412365][ T5218] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.420495][ T5218] bridge0: port 2(bridge_slave_1) entered disabled state [ 58.427736][ T5218] bridge_slave_1: entered allmulticast mode [ 58.434486][ T5218] bridge_slave_1: entered promiscuous mode [ 58.468796][ T5215] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.476127][ T5215] bridge0: port 1(bridge_slave_0) entered disabled state [ 58.483516][ T5215] bridge_slave_0: entered allmulticast mode [ 58.490549][ T5215] bridge_slave_0: entered promiscuous mode [ 58.499093][ T5215] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.506240][ T5215] bridge0: port 2(bridge_slave_1) entered disabled state [ 58.513639][ T5215] bridge_slave_1: entered allmulticast mode [ 58.521282][ T5215] bridge_slave_1: entered promiscuous mode [ 58.589194][ T5218] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 58.637485][ T5218] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 58.647515][ T5219] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.654662][ T5219] bridge0: port 1(bridge_slave_0) entered disabled state [ 58.662406][ T5219] bridge_slave_0: entered allmulticast mode [ 58.669811][ T5219] bridge_slave_0: entered promiscuous mode [ 58.689208][ T5215] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 58.723478][ T5219] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.731027][ T5219] bridge0: port 2(bridge_slave_1) entered disabled state [ 58.738452][ T5219] bridge_slave_1: entered allmulticast mode [ 58.745248][ T5219] bridge_slave_1: entered promiscuous mode [ 58.765309][ T5215] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 58.796370][ T5218] team0: Port device team_slave_0 added [ 58.805126][ T5218] team0: Port device team_slave_1 added [ 58.831387][ T5212] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.838930][ T5212] bridge0: port 1(bridge_slave_0) entered disabled state [ 58.846130][ T5212] bridge_slave_0: entered allmulticast mode [ 58.853282][ T5212] bridge_slave_0: entered promiscuous mode [ 58.898688][ T5219] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 58.910613][ T5219] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 58.920419][ T5212] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.928441][ T5212] bridge0: port 2(bridge_slave_1) entered disabled state [ 58.935583][ T5212] bridge_slave_1: entered allmulticast mode [ 58.942516][ T5212] bridge_slave_1: entered promiscuous mode [ 58.965699][ T5215] team0: Port device team_slave_0 added [ 59.021068][ T5215] team0: Port device team_slave_1 added [ 59.038324][ T5217] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.045462][ T5217] bridge0: port 1(bridge_slave_0) entered disabled state [ 59.055988][ T5217] bridge_slave_0: entered allmulticast mode [ 59.062920][ T5217] bridge_slave_0: entered promiscuous mode [ 59.071504][ T5217] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.078821][ T5217] bridge0: port 2(bridge_slave_1) entered disabled state [ 59.086018][ T5217] bridge_slave_1: entered allmulticast mode [ 59.092916][ T5217] bridge_slave_1: entered promiscuous mode [ 59.101948][ T5218] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 59.109277][ T5218] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 59.138795][ T5218] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 59.153320][ T5218] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 59.160703][ T5218] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 59.187336][ T5218] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 59.210586][ T5212] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 59.263608][ T5219] team0: Port device team_slave_0 added [ 59.271755][ T5212] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 59.293858][ T5215] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 59.301975][ T5215] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 59.328189][ T5215] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 59.355334][ T5217] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 59.367401][ T5219] team0: Port device team_slave_1 added [ 59.385206][ T5215] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 59.392797][ T5215] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 59.419208][ T5215] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 59.445309][ T5218] hsr_slave_0: entered promiscuous mode [ 59.451827][ T5218] hsr_slave_1: entered promiscuous mode [ 59.461951][ T5217] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 59.502436][ T5212] team0: Port device team_slave_0 added [ 59.512818][ T5212] team0: Port device team_slave_1 added [ 59.537690][ T54] Bluetooth: hci3: command tx timeout [ 59.555987][ T5219] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 59.563074][ T5219] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 59.589819][ T5219] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 59.617420][ T5216] Bluetooth: hci1: command tx timeout [ 59.623504][ T5216] Bluetooth: hci4: command tx timeout [ 59.627440][ T54] Bluetooth: hci2: command tx timeout [ 59.629937][ T5228] Bluetooth: hci0: command tx timeout [ 59.666201][ T5217] team0: Port device team_slave_0 added [ 59.676185][ T5217] team0: Port device team_slave_1 added [ 59.683627][ T5219] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 59.690805][ T5219] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 59.718090][ T5219] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 59.733513][ T5212] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 59.740989][ T5212] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 59.767054][ T5212] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 59.780015][ T5212] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 59.787065][ T5212] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 59.813055][ T5212] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 59.827217][ T5215] hsr_slave_0: entered promiscuous mode [ 59.833497][ T5215] hsr_slave_1: entered promiscuous mode [ 59.840281][ T5215] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 59.848130][ T5215] Cannot create hsr debugfs directory [ 59.934267][ T5217] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 59.941903][ T5217] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 59.968268][ T5217] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 60.041443][ T5217] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 60.048636][ T5217] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 60.075547][ T5217] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 60.102545][ T5219] hsr_slave_0: entered promiscuous mode [ 60.108880][ T5219] hsr_slave_1: entered promiscuous mode [ 60.115179][ T5219] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 60.122885][ T5219] Cannot create hsr debugfs directory [ 60.162945][ T5212] hsr_slave_0: entered promiscuous mode [ 60.169778][ T5212] hsr_slave_1: entered promiscuous mode [ 60.175910][ T5212] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 60.184390][ T5212] Cannot create hsr debugfs directory [ 60.384193][ T5217] hsr_slave_0: entered promiscuous mode [ 60.391631][ T5217] hsr_slave_1: entered promiscuous mode [ 60.399590][ T5217] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 60.407321][ T5217] Cannot create hsr debugfs directory [ 60.461723][ T5218] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 60.475323][ T5218] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 60.485215][ T5218] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 60.506593][ T5218] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 60.695112][ T5215] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 60.704738][ T5215] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 60.721864][ T5215] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 60.753151][ T5215] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 60.809765][ T5212] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 60.848624][ T5212] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 60.862595][ T5212] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 60.890708][ T5212] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 60.938511][ T5219] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 60.972363][ T5219] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 60.989010][ T5218] 8021q: adding VLAN 0 to HW filter on device bond0 [ 61.020668][ T5219] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 61.031291][ T5219] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 61.074927][ T5218] 8021q: adding VLAN 0 to HW filter on device team0 [ 61.096371][ T5217] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 61.109496][ T5217] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 61.131414][ T5217] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 61.141905][ T5217] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 61.174870][ T5267] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.182306][ T5267] bridge0: port 1(bridge_slave_0) entered forwarding state [ 61.212604][ T5267] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.219802][ T5267] bridge0: port 2(bridge_slave_1) entered forwarding state [ 61.340660][ T5215] 8021q: adding VLAN 0 to HW filter on device bond0 [ 61.415380][ T5218] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 61.427065][ T5218] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 61.443189][ T5215] 8021q: adding VLAN 0 to HW filter on device team0 [ 61.492509][ T5268] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.499900][ T5268] bridge0: port 1(bridge_slave_0) entered forwarding state [ 61.560848][ T5212] 8021q: adding VLAN 0 to HW filter on device bond0 [ 61.571618][ T5270] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.578852][ T5270] bridge0: port 2(bridge_slave_1) entered forwarding state [ 61.593516][ T5219] 8021q: adding VLAN 0 to HW filter on device bond0 [ 61.618283][ T5228] Bluetooth: hci3: command tx timeout [ 61.641144][ T5217] 8021q: adding VLAN 0 to HW filter on device bond0 [ 61.664736][ T5212] 8021q: adding VLAN 0 to HW filter on device team0 [ 61.698807][ T5228] Bluetooth: hci0: command tx timeout [ 61.699905][ T5216] Bluetooth: hci4: command tx timeout [ 61.704242][ T5228] Bluetooth: hci2: command tx timeout [ 61.713693][ T54] Bluetooth: hci1: command tx timeout [ 61.729096][ T5219] 8021q: adding VLAN 0 to HW filter on device team0 [ 61.738832][ T5268] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.746074][ T5268] bridge0: port 1(bridge_slave_0) entered forwarding state [ 61.759626][ T5268] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.766853][ T5268] bridge0: port 2(bridge_slave_1) entered forwarding state [ 61.795548][ T5268] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.802759][ T5268] bridge0: port 1(bridge_slave_0) entered forwarding state [ 61.824891][ T5217] 8021q: adding VLAN 0 to HW filter on device team0 [ 61.862725][ T5268] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.870060][ T5268] bridge0: port 2(bridge_slave_1) entered forwarding state [ 61.908096][ T5270] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.915285][ T5270] bridge0: port 1(bridge_slave_0) entered forwarding state [ 61.924876][ T5270] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.931995][ T5270] bridge0: port 2(bridge_slave_1) entered forwarding state [ 61.943245][ T5218] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 62.191845][ T5218] veth0_vlan: entered promiscuous mode [ 62.225526][ T5218] veth1_vlan: entered promiscuous mode [ 62.252529][ T5215] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 62.400287][ T5218] veth0_macvtap: entered promiscuous mode [ 62.480062][ T5218] veth1_macvtap: entered promiscuous mode [ 62.509271][ T5215] veth0_vlan: entered promiscuous mode [ 62.569790][ T5215] veth1_vlan: entered promiscuous mode [ 62.581123][ T5218] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 62.615801][ T5218] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 62.641198][ T5218] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.651526][ T5218] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.660929][ T5218] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.672963][ T5218] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.693138][ T5219] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 62.705827][ T5217] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 62.729600][ T5212] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 62.798665][ T5215] veth0_macvtap: entered promiscuous mode [ 62.874139][ T5215] veth1_macvtap: entered promiscuous mode [ 62.916268][ T5217] veth0_vlan: entered promiscuous mode [ 62.945897][ T5215] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 62.960639][ T5215] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.973261][ T5215] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 63.029509][ T5217] veth1_vlan: entered promiscuous mode [ 63.039396][ T5215] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 63.050134][ T5215] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.062054][ T5215] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 63.073032][ T5215] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.082780][ T5215] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.091643][ T5215] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.100580][ T5215] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.132703][ T5219] veth0_vlan: entered promiscuous mode [ 63.152597][ T2578] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 63.165352][ T2578] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 63.191130][ T5219] veth1_vlan: entered promiscuous mode [ 63.270873][ T52] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 63.291124][ T5219] veth0_macvtap: entered promiscuous mode [ 63.306843][ T52] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 63.380044][ T5217] veth0_macvtap: entered promiscuous mode [ 63.394364][ T5217] veth1_macvtap: entered promiscuous mode [ 63.404012][ T5212] veth0_vlan: entered promiscuous mode [ 63.420926][ T5219] veth1_macvtap: entered promiscuous mode [ 63.473706][ T5212] veth1_vlan: entered promiscuous mode [ 63.494399][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 63.504133][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 63.591068][ T5219] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 63.603959][ T5219] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.614215][ T5219] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 63.629362][ T5219] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.642849][ T5219] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 63.681719][ T5219] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 63.696982][ T54] Bluetooth: hci3: command tx timeout [ 63.699534][ T5219] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.712570][ T5219] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 63.724788][ T5219] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.739164][ T5219] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 63.753902][ T5217] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 63.772440][ T5217] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.777626][ T54] Bluetooth: hci2: command tx timeout [ 63.783655][ T5216] Bluetooth: hci0: command tx timeout [ 63.788002][ T5233] Bluetooth: hci1: command tx timeout [ 63.793767][ T5216] Bluetooth: hci4: command tx timeout [ 63.815421][ T5217] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 63.826000][ T5217] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.836256][ T5217] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 63.846834][ T5217] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.861735][ T5217] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 63.872065][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 63.882376][ T5217] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 63.893242][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 63.901288][ T5217] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.918186][ T5217] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 63.932918][ T5217] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.943644][ T5217] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 63.961703][ T5217] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.973332][ T5217] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 63.986158][ T5219] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.995220][ T5219] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.004368][ T5219] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.013302][ T5219] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.025161][ T5212] veth0_macvtap: entered promiscuous mode [ 64.050088][ T5217] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.058987][ T5217] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.067967][ T5217] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.076706][ T5217] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.091637][ T5212] veth1_macvtap: entered promiscuous mode [ 64.150223][ T5212] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 64.160998][ T5212] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.177016][ T5212] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 64.188258][ T5212] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.198226][ T5212] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 64.208734][ T5212] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.218705][ T5212] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 64.229209][ T5212] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.240637][ T5212] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 64.247812][ T5269] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 64.259611][ T5212] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 64.270407][ T5212] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.280775][ T5212] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 64.291444][ T5212] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.301309][ T5212] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 64.312086][ T5212] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.323315][ T5212] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 64.334084][ T5212] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.347387][ T5212] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 64.393911][ T5212] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.407680][ T5212] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.420768][ T5212] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.429901][ T5212] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.454613][ T5269] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 64.461554][ T29] audit: type=1326 audit(1722036971.432:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5307 comm="syz.0.1" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a5d377299 code=0x7ffc0000 [ 64.485853][ T5269] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 64.510058][ T5269] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 64.524437][ T5269] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 64.542604][ T29] audit: type=1326 audit(1722036971.432:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5307 comm="syz.0.1" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a5d377299 code=0x7ffc0000 [ 64.586716][ T5269] usb 2-1: config 0 descriptor?? [ 64.628670][ T29] audit: type=1326 audit(1722036971.462:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5307 comm="syz.0.1" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7f1a5d377299 code=0x7ffc0000 [ 64.686485][ T2578] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.699467][ T2578] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.709256][ T29] audit: type=1326 audit(1722036971.462:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5307 comm="syz.0.1" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a5d377299 code=0x7ffc0000 [ 64.776659][ T2578] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.788214][ T29] audit: type=1326 audit(1722036971.462:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5307 comm="syz.0.1" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a5d377299 code=0x7ffc0000 [ 64.811186][ T2578] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.826506][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.833301][ T29] audit: type=1326 audit(1722036971.462:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5307 comm="syz.0.1" exe="/root/syz-executor" sig=0 arch=c000003e syscall=93 compat=0 ip=0x7f1a5d377299 code=0x7ffc0000 [ 64.851126][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.856933][ T29] audit: type=1326 audit(1722036971.462:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5307 comm="syz.0.1" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a5d377299 code=0x7ffc0000 [ 64.886648][ T29] audit: type=1326 audit(1722036971.462:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5307 comm="syz.0.1" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a5d377299 code=0x7ffc0000 [ 65.024894][ T2521] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.049477][ T2521] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.094088][ T5269] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 65.104229][ T5269] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 65.114378][ T5269] plantronics 0003:047F:FFFF.0001: No inputs registered, leaving [ 65.125723][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.162555][ T5269] plantronics 0003:047F:FFFF.0001: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 65.164377][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.199855][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.220131][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.478951][ T5306] netlink: 92 bytes leftover after parsing attributes in process `syz.1.7'. [ 65.618003][ T5220] usb 2-1: USB disconnect, device number 2 [ 65.735471][ T5322] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 65.758324][ T5326] syz.3.4 uses obsolete (PF_INET,SOCK_PACKET) [ 65.782948][ T5216] Bluetooth: hci3: command tx timeout [ 65.857071][ T5216] Bluetooth: hci1: command tx timeout [ 65.858093][ T5228] Bluetooth: hci0: command tx timeout [ 65.863118][ T5216] Bluetooth: hci4: command tx timeout [ 65.869997][ T5228] Bluetooth: hci2: command tx timeout [ 66.352234][ T5338] ptrace attach of "./syz-executor exec"[5219] was attempted by "./syz-executor exec"[5338] [ 66.414921][ T5269] kernel write not supported for file /vbi1 (pid: 5269 comm: kworker/0:5) [ 66.771728][ T5351] netlink: 'syz.2.17': attribute type 9 has an invalid length. [ 66.796095][ T5351] bond0: entered promiscuous mode [ 66.801562][ T5351] bond_slave_0: entered promiscuous mode [ 66.855565][ T5356] Bluetooth: MGMT ver 1.23 [ 66.889285][ T5351] bond_slave_1: entered promiscuous mode [ 67.063882][ T5351] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 67.283209][ T5351] bond0: left promiscuous mode [ 67.339525][ T5351] bond_slave_0: left promiscuous mode [ 67.356545][ T5351] bond_slave_1: left promiscuous mode [ 69.318197][ T5267] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 69.508427][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 69.531551][ T5267] usb 5-1: Using ep0 maxpacket: 32 [ 69.567105][ T5267] usb 5-1: New USB device found, idVendor=0c72, idProduct=000d, bcdDevice=27.9b [ 69.593602][ T5267] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 69.632468][ T5267] usb 5-1: Product: syz [ 69.647489][ T5267] usb 5-1: Manufacturer: syz [ 69.659804][ T5267] usb 5-1: SerialNumber: syz [ 69.814934][ T5267] usb 5-1: config 0 descriptor?? [ 70.787161][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 70.817395][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 70.825656][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 70.835019][ T5408] Zero length message leads to an empty skb [ 71.050309][ T5267] peak_usb 5-1:0.0: PEAK-System PCAN-USB Pro hwrev 0 serial 00000000.00000000 (2 channels) [ 71.077787][ T5267] peak_usb 5-1:0.0 can0: sending command failure: -22 [ 71.097157][ T5267] peak_usb 5-1:0.0 can0: sending command failure: -22 [ 71.155997][ T5270] kernel write not supported for file /vbi5 (pid: 5270 comm: kworker/1:5) [ 71.206585][ T5267] peak_usb 5-1:0.0: probe with driver peak_usb failed with error -22 [ 71.260178][ T5267] usb 5-1: USB disconnect, device number 2 [ 71.670796][ T5451] netlink: 8 bytes leftover after parsing attributes in process `syz.0.51'. [ 71.782362][ T1259] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.791795][ T1259] ieee802154 phy1 wpan1: encryption failed: -22 [ 72.255650][ T5465] netlink: 8 bytes leftover after parsing attributes in process `syz.4.55'. [ 72.328361][ T5465] gtp0: entered promiscuous mode [ 72.333371][ T5465] gtp0: entered allmulticast mode [ 72.856972][ T5487] netlink: 48 bytes leftover after parsing attributes in process `syz.3.62'. [ 72.922577][ T5488] netlink: 24 bytes leftover after parsing attributes in process `syz.3.62'. [ 72.966940][ T5487] netlink: 11 bytes leftover after parsing attributes in process `syz.3.62'. [ 73.377444][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 73.470221][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 73.547115][ T5267] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 73.748001][ T5267] usb 4-1: Using ep0 maxpacket: 32 [ 73.763041][ T5267] usb 4-1: New USB device found, idVendor=0c72, idProduct=000d, bcdDevice=27.9b [ 73.835225][ T5267] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 73.891992][ T5267] usb 4-1: Product: syz [ 73.896220][ T5267] usb 4-1: Manufacturer: syz [ 73.940181][ T5267] usb 4-1: SerialNumber: syz [ 73.982642][ T5267] usb 4-1: config 0 descriptor?? [ 74.027021][ T5224] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 74.230363][ T5224] usb 3-1: New USB device found, idVendor=0c45, idProduct=614a, bcdDevice=e6.af [ 74.238829][ T5512] netlink: 168 bytes leftover after parsing attributes in process `syz.0.72'. [ 74.252007][ T5224] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 74.272682][ T5512] netlink: 'syz.0.72': attribute type 2 has an invalid length. [ 74.284386][ T5224] usb 3-1: config 0 descriptor?? [ 74.307697][ T5512] netlink: 60 bytes leftover after parsing attributes in process `syz.0.72'. [ 74.320056][ T5224] gspca_main: sonixj-2.14.0 probing 0c45:614a [ 74.669762][ T5267] peak_usb 4-1:0.0: PEAK-System PCAN-USB Pro hwrev 0 serial 00000000.00000000 (2 channels) [ 74.699062][ T5267] peak_usb 4-1:0.0 can0: sending command failure: -22 [ 74.736312][ T5267] peak_usb 4-1:0.0 can0: sending command failure: -22 [ 74.788666][ T5267] peak_usb 4-1:0.0: probe with driver peak_usb failed with error -22 [ 74.838700][ T5522] (unnamed net_device) (uninitialized): option arp_validate: mode dependency failed, not supported in mode balance-alb(6) [ 74.966168][ T5506] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 74.999995][ T5506] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 75.057417][ T5268] usb 4-1: USB disconnect, device number 2 [ 75.101065][ T5224] gspca_sonixj: reg_w1 err -71 [ 75.121919][ T5224] sonixj 3-1:0.0: probe with driver sonixj failed with error -71 [ 75.161730][ T5530] netlink: 'syz.1.79': attribute type 29 has an invalid length. [ 75.172636][ T5224] usb 3-1: USB disconnect, device number 2 [ 75.231340][ T5530] netlink: 'syz.1.79': attribute type 29 has an invalid length. [ 75.535051][ T5541] netlink: 168 bytes leftover after parsing attributes in process `syz.0.84'. [ 75.554285][ T5541] netlink: 'syz.0.84': attribute type 2 has an invalid length. [ 75.573061][ T5541] netlink: 60 bytes leftover after parsing attributes in process `syz.0.84'. [ 75.873132][ T5549] capability: warning: `syz.4.85' uses deprecated v2 capabilities in a way that may be insecure [ 75.918005][ T5546] netlink: 16 bytes leftover after parsing attributes in process `syz.3.86'. [ 75.931450][ T5546] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 75.943634][ T5550] (unnamed net_device) (uninitialized): option arp_validate: mode dependency failed, not supported in mode balance-alb(6) [ 77.239852][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 77.251506][ T5576] netlink: 'syz.3.95': attribute type 1 has an invalid length. [ 77.298485][ T5576] __nla_validate_parse: 1 callbacks suppressed [ 77.298502][ T5576] netlink: 19 bytes leftover after parsing attributes in process `syz.3.95'. [ 77.766881][ T5585] netlink: 8 bytes leftover after parsing attributes in process `syz.1.96'. [ 78.307570][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 78.317486][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 78.326902][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 79.714737][ T5603] (unnamed net_device) (uninitialized): option arp_validate: mode dependency failed, not supported in mode balance-alb(6) [ 80.340400][ T5625] netlink: 'syz.0.111': attribute type 29 has an invalid length. [ 80.380115][ T5625] netlink: 'syz.0.111': attribute type 29 has an invalid length. [ 80.814002][ T5632] netlink: 8 bytes leftover after parsing attributes in process `syz.4.110'. [ 82.119359][ T46] cfg80211: failed to load regulatory.db [ 82.656743][ C0] sched: RT throttling activated [ 82.762681][ T5648] (unnamed net_device) (uninitialized): option arp_validate: mode dependency failed, not supported in mode balance-alb(6) [ 82.914979][ T5650] netlink: 16 bytes leftover after parsing attributes in process `syz.0.119'. [ 83.187097][ T5659] netlink: 'syz.0.123': attribute type 21 has an invalid length. [ 83.211942][ T5659] netlink: 132 bytes leftover after parsing attributes in process `syz.0.123'. [ 83.343773][ T5670] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 83.577197][ T8] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 83.604660][ T5676] bond_slave_0: entered promiscuous mode [ 83.610720][ T5676] bond_slave_1: entered promiscuous mode [ 83.715871][ T5676] bond_slave_0: left promiscuous mode [ 83.721765][ T5676] bond_slave_1: left promiscuous mode [ 84.260991][ T8] usb 5-1: config index 0 descriptor too short (expected 157, got 36) [ 84.274754][ T8] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 84.321814][ T8] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 84.343417][ T8] usb 5-1: New USB device found, idVendor=054c, idProduct=0168, bcdDevice= 0.e8 [ 84.359946][ T8] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 84.375602][ T8] usb 5-1: config 0 descriptor?? [ 84.859574][ T8] hid-generic 0003:054C:0168.0002: hidraw0: USB HID v72.c7 Device [HID 054c:0168] on usb-dummy_hcd.4-1/input0 [ 84.890533][ T46] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 84.984204][ T5696] netlink: 16 bytes leftover after parsing attributes in process `syz.0.134'. [ 85.115795][ T46] usb 5-1: USB disconnect, device number 3 [ 85.368955][ T5708] netlink: 76 bytes leftover after parsing attributes in process `syz.1.140'. [ 85.410185][ T5708] ÊüG: entered promiscuous mode [ 85.598052][ T5718] bond_slave_0: entered promiscuous mode [ 85.603836][ T5718] bond_slave_1: entered promiscuous mode [ 85.804317][ T5718] bond_slave_0: left promiscuous mode [ 85.810012][ T5718] bond_slave_1: left promiscuous mode [ 85.857579][ T5220] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 86.166871][ T5273] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 86.387165][ T5273] usb 4-1: Using ep0 maxpacket: 16 [ 86.433284][ T5273] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 86.458334][ T5273] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 22 [ 86.529938][ T5273] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 86.581201][ T5273] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 86.623454][ T5273] usb 4-1: SerialNumber: syz [ 86.902330][ T5273] usb 4-1: USB disconnect, device number 3 [ 87.189718][ T5748] process 'syz.0.155' launched './file0' with NULL argv: empty string added [ 87.846945][ T8] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 89.190516][ T5772] syz.2.163 (5772): drop_caches: 2 [ 89.301750][ T5228] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 89.311977][ T5228] Bluetooth: hci4: Injecting HCI hardware error event [ 89.324003][ T5228] Bluetooth: hci4: hardware error 0x00 [ 89.496947][ T8] usb 2-1: Using ep0 maxpacket: 32 [ 89.518737][ T8] usb 2-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 89.546835][ T8] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 89.576040][ T5775] pim6reg0: tun_chr_ioctl cmd 1074025677 [ 89.576369][ T8] usb 2-1: config 0 descriptor?? [ 89.590546][ T5775] pim6reg0: linktype set to 768 [ 89.640261][ T8] gspca_main: nw80x-2.14.0 probing 055f:d001 [ 90.698116][ T46] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 90.709290][ T8] gspca_nw80x: reg_w err -71 [ 90.720597][ T8] nw80x 2-1:0.0: probe with driver nw80x failed with error -71 [ 90.799739][ T8] usb 2-1: USB disconnect, device number 3 [ 90.907130][ T5233] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 90.915783][ T5233] Bluetooth: hci1: Injecting HCI hardware error event [ 90.917010][ T46] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 90.923985][ T5233] Bluetooth: hci1: hardware error 0x00 [ 91.587048][ T5228] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 91.618545][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 92.033553][ T5812] pim6reg0: tun_chr_ioctl cmd 1074025677 [ 92.057072][ T5812] pim6reg0: linktype set to 768 [ 92.067336][ T5813] tipc: Started in network mode [ 92.102872][ T5813] tipc: Node identity 1, cluster identity 4711 [ 92.114977][ T29] audit: type=1326 audit(1722036999.072:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5810 comm="syz.1.178" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f4eb6f77299 code=0x0 [ 92.128455][ T5816] Falling back ldisc for ttyS3. [ 92.150493][ T5813] tipc: Node number set to 1 [ 92.686913][ T46] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 92.879228][ T46] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 92.926306][ T46] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 92.949687][ T46] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 92.973100][ T46] usb 4-1: New USB device found, idVendor=20d6, idProduct=cb17, bcdDevice= 0.00 [ 92.997589][ T46] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 93.032362][ T46] usb 4-1: config 0 descriptor?? [ 93.217715][ T5233] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 93.255928][ T8] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 93.276667][ T5220] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 93.471744][ T46] input: THQ uDraw Game Tablet for PS3 Joypad as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:20D6:CB17.0003/input/input5 [ 93.492179][ T5220] usb 2-1: Using ep0 maxpacket: 8 [ 93.500407][ T5220] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 93.518753][ T5220] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 93.529933][ T5220] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 93.543541][ T5220] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 93.558835][ T5220] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 93.572406][ T5220] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 93.582760][ T5220] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 93.599486][ T46] input: THQ uDraw Game Tablet for PS3 Touchpad as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:20D6:CB17.0003/input/input6 [ 93.634709][ T46] input: THQ uDraw Game Tablet for PS3 Pen as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:20D6:CB17.0003/input/input7 [ 93.887248][ T5220] usb 2-1: usb_control_msg returned -32 [ 93.905872][ T46] input: THQ uDraw Game Tablet for PS3 Accelerometer as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:20D6:CB17.0003/input/input8 [ 93.920708][ T5220] usbtmc 2-1:16.0: can't read capabilities [ 94.177585][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 94.621630][ T46] hid-udraw 0003:20D6:CB17.0003: hidraw0: USB HID v0.00 Device [HID 20d6:cb17] on usb-dummy_hcd.3-1/input0 [ 94.642819][ T46] usb 4-1: USB disconnect, device number 4 [ 94.687943][ T5273] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 95.066899][ T5220] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 95.156897][ T1658] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 95.272733][ T5220] usb 1-1: New USB device found, idVendor=04bb, idProduct=0901, bcdDevice=55.ba [ 95.311993][ T5220] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 95.335007][ T5220] usb 1-1: Product: syz [ 95.343870][ T5220] usb 1-1: Manufacturer: syz [ 95.386315][ T1658] usb 3-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc [ 95.398432][ T5220] usb 1-1: SerialNumber: syz [ 95.408400][ T1658] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 95.427228][ T5220] usb 1-1: config 0 descriptor?? [ 95.452646][ T1658] usb 3-1: Product: syz [ 95.484695][ T1658] usb 3-1: Manufacturer: syz [ 95.498925][ T1658] usb 3-1: SerialNumber: syz [ 95.518048][ T1658] usb 3-1: config 0 descriptor?? [ 95.542907][ T1658] i2c-tiny-usb 3-1:0.0: version 6d.cc found at bus 003 address 003 [ 95.796351][ T5220] kaweth 1-1:0.0: Firmware present in device. [ 95.804443][ T5220] kaweth 1-1:0.0: Error reading configuration (-71), no net device created [ 95.816347][ T5220] kaweth 1-1:0.0: probe with driver kaweth failed with error -5 [ 95.870237][ T5220] usb 1-1: USB disconnect, device number 2 [ 95.985183][ T1658] (null): failure reading functionality [ 96.040724][ T1658] i2c i2c-1: connected i2c-tiny-usb device [ 96.073339][ T5273] usb 2-1: USB disconnect, device number 4 [ 96.282556][ T5220] usb 3-1: USB disconnect, device number 3 [ 97.378017][ T5886] infiniband syz2: set active [ 97.383082][ T5886] infiniband syz2: added team_slave_1 [ 97.391318][ T5886] syz2: rxe_create_cq: returned err = -12 [ 97.397652][ T5886] infiniband syz2: Couldn't create ib_mad CQ [ 97.403830][ T5886] infiniband syz2: Couldn't open port 1 [ 97.417959][ T8] usb 2-1: new low-speed USB device number 5 using dummy_hcd [ 97.436447][ T5886] RDS/IB: syz2: added [ 97.441116][ T5886] smc: adding ib device syz2 with port count 1 [ 97.447569][ T5886] smc: ib device syz2 port 1 has pnetid [ 98.068895][ T8] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 98.093253][ T8] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 is Bulk; changing to Interrupt [ 98.103968][ T8] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 98.125304][ T8] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 10 [ 98.151431][ T8] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 98.200107][ T8] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 98.241680][ T8] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 is Bulk; changing to Interrupt [ 98.259688][ T8] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 98.298241][ T8] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 10 [ 98.809993][ T5904] netlink: 8 bytes leftover after parsing attributes in process `syz.4.207'. [ 99.282410][ T8] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 99.525885][ T8] usb 2-1: unable to read config index 2 descriptor/start: -71 [ 99.554672][ T8] usb 2-1: can't read configurations, error -71 [ 100.777657][ T5922] Bluetooth: MGMT ver 1.23 [ 100.794108][ T5922] Bluetooth: hci3: invalid length 0, exp 2 for type 21 [ 101.017016][ T5269] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 101.227115][ T5269] usb 1-1: Using ep0 maxpacket: 16 [ 101.249193][ T5269] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 101.277539][ T5269] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 22 [ 101.287191][ T5220] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 101.319765][ T5269] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 101.346398][ T5269] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 101.367798][ T5269] usb 1-1: SerialNumber: syz [ 101.510790][ T5220] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 101.542000][ T5220] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 101.572610][ T5220] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 101.633615][ T5273] usb 1-1: USB disconnect, device number 3 [ 101.644791][ T5220] usb 3-1: New USB device found, idVendor=20d6, idProduct=cb17, bcdDevice= 0.00 [ 101.832725][ T5963] input: syz1 as /devices/virtual/input/input9 [ 101.926383][ T5227] udevd[5227]: setting owner of /dev/bus/usb/001/003 to uid=0, gid=0 failed: No such file or directory [ 102.262855][ T5220] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 102.273251][ T5220] usb 3-1: config 0 descriptor?? [ 102.358276][ T5966] netlink: 12 bytes leftover after parsing attributes in process `syz.1.233'. [ 102.526985][ T5233] Bluetooth: hci3: ISO packet for unknown connection handle 3840 [ 102.734204][ T5220] input: THQ uDraw Game Tablet for PS3 Joypad as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:20D6:CB17.0004/input/input10 [ 102.883998][ T5220] input: THQ uDraw Game Tablet for PS3 Touchpad as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:20D6:CB17.0004/input/input11 [ 102.996254][ T5220] input: THQ uDraw Game Tablet for PS3 Pen as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:20D6:CB17.0004/input/input12 [ 103.091976][ T5220] input: THQ uDraw Game Tablet for PS3 Accelerometer as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:20D6:CB17.0004/input/input13 [ 103.226533][ T5220] hid-udraw 0003:20D6:CB17.0004: hidraw0: USB HID v0.00 Device [HID 20d6:cb17] on usb-dummy_hcd.2-1/input0 [ 103.298507][ T5220] usb 3-1: USB disconnect, device number 4 [ 103.913955][ T29] audit: type=1326 audit(1722037010.872:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5988 comm="syz.2.239" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f80a2f77299 code=0x0 [ 104.076975][ T5986] netlink: 44 bytes leftover after parsing attributes in process `syz.1.237'. [ 104.101417][ T5986] netlink: 28 bytes leftover after parsing attributes in process `syz.1.237'. [ 104.498577][ T6005] netlink: 12 bytes leftover after parsing attributes in process `syz.4.242'. [ 105.094102][ T5269] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 105.313905][ T5269] usb 1-1: New USB device found, idVendor=0c45, idProduct=614a, bcdDevice=e6.af [ 105.343907][ T5269] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 105.372840][ T5269] usb 1-1: config 0 descriptor?? [ 105.385344][ T5269] gspca_main: sonixj-2.14.0 probing 0c45:614a [ 105.744551][ T6013] input: syz1 as /devices/virtual/input/input14 [ 106.674365][ T5269] gspca_sonixj: reg_w1 err -110 [ 106.708922][ T5269] sonixj 1-1:0.0: probe with driver sonixj failed with error -110 [ 107.181734][ T6024] netlink: 'syz.4.248': attribute type 5 has an invalid length. [ 107.307161][ T46] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 107.499178][ T46] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 107.518185][ T46] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 107.533070][ T46] usb 3-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 107.550806][ T46] usb 3-1: config 1 interface 1 has no altsetting 0 [ 107.561302][ T46] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 107.573465][ T46] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 107.582168][ T46] usb 3-1: Product: syz [ 107.586553][ T46] usb 3-1: Manufacturer: syz [ 107.589633][ T29] audit: type=1326 audit(1722037014.552:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6041 comm="syz.1.255" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f4eb6f77299 code=0x0 [ 107.592135][ T46] usb 3-1: SerialNumber: syz [ 107.623258][ T46] cdc_ncm 3-1:1.0: skipping garbage [ 107.633914][ T46] cdc_ncm 3-1:1.0: NCM or ECM functional descriptors missing [ 107.642746][ T46] cdc_ncm 3-1:1.0: bind() failure [ 108.038642][ T46] cdc_mbim 3-1:1.1: probe with driver cdc_mbim failed with error -71 [ 108.074282][ T5220] usb 1-1: USB disconnect, device number 4 [ 108.405271][ T46] usb 3-1: USB disconnect, device number 5 [ 108.540247][ C1] eth0: bad gso: type: 1, size: 1408 [ 109.006866][ T8] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 109.103125][ T6068] overlayfs: missing 'lowerdir' [ 109.241473][ T8] usb 5-1: New USB device found, idVendor=04bb, idProduct=0901, bcdDevice=55.ba [ 109.256633][ T8] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 109.272105][ T8] usb 5-1: Product: syz [ 109.284662][ T8] usb 5-1: Manufacturer: syz [ 109.306102][ T29] audit: type=1326 audit(1722037016.272:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6074 comm="syz.1.269" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4eb6f77299 code=0x7ffc0000 [ 109.312322][ T8] usb 5-1: SerialNumber: syz [ 109.330257][ C0] vkms_vblank_simulate: vblank timer overrun [ 109.388552][ T29] audit: type=1326 audit(1722037016.272:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6074 comm="syz.1.269" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4eb6f77299 code=0x7ffc0000 [ 109.424111][ T6079] netlink: 'syz.2.270': attribute type 4 has an invalid length. [ 109.427150][ T8] usb 5-1: config 0 descriptor?? [ 109.457069][ T29] audit: type=1326 audit(1722037016.272:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6074 comm="syz.1.269" exe="/root/syz-executor" sig=0 arch=c000003e syscall=113 compat=0 ip=0x7f4eb6f77299 code=0x7ffc0000 [ 109.506119][ T29] audit: type=1326 audit(1722037016.272:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6074 comm="syz.1.269" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4eb6f77299 code=0x7ffc0000 [ 109.575693][ T29] audit: type=1326 audit(1722037016.322:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6074 comm="syz.1.269" exe="/root/syz-executor" sig=0 arch=c000003e syscall=29 compat=0 ip=0x7f4eb6f77299 code=0x7ffc0000 [ 109.599006][ C0] vkms_vblank_simulate: vblank timer overrun [ 109.625122][ T29] audit: type=1326 audit(1722037016.322:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6074 comm="syz.1.269" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4eb6f77299 code=0x7ffc0000 [ 109.647394][ C0] vkms_vblank_simulate: vblank timer overrun [ 109.657434][ T29] audit: type=1326 audit(1722037016.332:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6074 comm="syz.1.269" exe="/root/syz-executor" sig=0 arch=c000003e syscall=31 compat=0 ip=0x7f4eb6f77299 code=0x7ffc0000 [ 109.680588][ C0] vkms_vblank_simulate: vblank timer overrun [ 109.746080][ T8] kaweth 5-1:0.0: Firmware present in device. [ 109.755815][ T29] audit: type=1326 audit(1722037016.332:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6074 comm="syz.1.269" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4eb6f77299 code=0x7ffc0000 [ 109.782613][ T29] audit: type=1326 audit(1722037016.332:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6074 comm="syz.1.269" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4eb6f77299 code=0x7ffc0000 [ 109.782750][ T8] kaweth 5-1:0.0: Error reading configuration (-71), no net device created [ 109.834185][ T29] audit: type=1326 audit(1722037016.332:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6074 comm="syz.1.269" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7f4eb6f77299 code=0x7ffc0000 [ 109.850511][ T8] kaweth 5-1:0.0: probe with driver kaweth failed with error -5 [ 109.883814][ T8] usb 5-1: USB disconnect, device number 4 [ 110.276965][ T5269] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 111.422606][ T6104] ubi0: attaching mtd0 [ 111.430000][ T6104] ubi0: scanning is finished [ 111.434648][ T6104] ubi0: empty MTD device detected [ 111.787221][ T5269] usb 1-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 111.855818][ T5269] usb 1-1: config 27 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 111.929989][ T6104] ubi0 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt0d", error -4 [ 112.026880][ T5269] usb 1-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 112.046830][ T5269] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 112.239485][ T5269] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 112.580870][ T5269] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 112.739538][ T5269] snd-usb-audio 1-1:27.0: probe with driver snd-usb-audio failed with error -2 [ 112.746620][ T6091] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 112.757347][ T6091] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 112.799209][ T5227] udevd[5227]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 112.927444][ T8] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 112.939766][ T6118] syzkaller0: entered promiscuous mode [ 112.945291][ T6118] syzkaller0: entered allmulticast mode [ 113.340833][ T8] usb 4-1: Using ep0 maxpacket: 32 [ 113.460279][ T8] usb 4-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 113.486827][ T8] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 113.538107][ T8] usb 4-1: config 0 descriptor?? [ 113.759837][ T8] gspca_main: sunplus-2.14.0 probing 041e:400b [ 114.010379][ T46] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 114.210134][ T46] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 114.211083][ T5224] usb 1-1: USB disconnect, device number 5 [ 114.254785][ T46] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 114.275002][ T46] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 114.344688][ T46] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 114.392409][ T46] usb 3-1: config 0 descriptor?? [ 115.246845][ T8] gspca_sunplus: reg_w_riv err -110 [ 115.252256][ T8] sunplus 4-1:0.0: probe with driver sunplus failed with error -110 [ 115.380794][ T1658] usb 4-1: USB disconnect, device number 5 [ 115.487463][ T6143] kernel read not supported for file /#! [ 115.487463][ T6143] ë•#êwÛ¶×mü\§è3e§ô ­§ (pid: 6143 comm: syz.0.290) [ 115.577510][ T46] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 115.588674][ T29] kauditd_printk_skb: 67 callbacks suppressed [ 115.588695][ T29] audit: type=1800 audit(1722037022.569:90): pid=6143 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.0.290" name=2321200AEB9523EA77DBB6D76DFC5CA7E83365A719F409ADA718 dev="mqueue" ino=10870 res=0 errno=0 [ 115.626864][ T46] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 115.657832][ T46] plantronics 0003:047F:FFFF.0005: No inputs registered, leaving [ 115.698752][ T46] plantronics 0003:047F:FFFF.0005: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 116.046903][ T46] usb 5-1: new full-speed USB device number 5 using dummy_hcd [ 116.304993][ T46] usb 5-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 116.357764][ T46] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 116.397077][ T46] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 116.426913][ T46] usb 5-1: Product: syz [ 116.438863][ T46] usb 5-1: Manufacturer: syz [ 116.467043][ T46] usb 5-1: SerialNumber: syz [ 116.502228][ T46] cdc_ether 5-1:1.0: probe with driver cdc_ether failed with error -22 [ 117.764759][ T6129] netlink: 92 bytes leftover after parsing attributes in process `syz.2.286'. [ 117.866087][ T8] usb 3-1: USB disconnect, device number 6 [ 118.039886][ T5224] usb 5-1: USB disconnect, device number 5 [ 118.210547][ T6169] overlayfs: missing 'lowerdir' [ 118.332992][ T5233] Bluetooth: hci2: SCO packet for unknown connection handle 0 [ 118.451261][ T6185] vivid-000: disconnect [ 118.487015][ T5270] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 118.504098][ T6185] vivid-000: reconnect [ 118.722897][ T5270] usb 3-1: Using ep0 maxpacket: 32 [ 118.744474][ T5270] usb 3-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 118.773686][ T5270] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 118.807619][ T5270] usb 3-1: config 0 descriptor?? [ 118.842233][ T5270] gspca_main: sunplus-2.14.0 probing 041e:400b [ 119.091981][ T6208] 9pnet: p9_errstr2errno: server reported unknown error Ý@íÎhQI¸¥ŠteœkKzEËxÐBAšÁbà¹lpΆ²vxÝé*óÍDŽ‘àò}‘©Ù’ñ;5ÏÇ–3OŲ" [ 119.975545][ T5270] gspca_sunplus: reg_w_riv err -71 [ 120.013203][ T5270] sunplus 3-1:0.0: probe with driver sunplus failed with error -71 [ 120.288705][ T5270] usb 3-1: USB disconnect, device number 7 [ 120.462930][ T6222] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 120.536935][ T6222] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 120.682429][ T6229] overlayfs: missing 'lowerdir' [ 120.961951][ T6237] netlink: 4 bytes leftover after parsing attributes in process `syz.2.324'. [ 121.131577][ T6241] vxfs: WRONG superblock magic 00000000 at 1 [ 121.139913][ T6241] vxfs: WRONG superblock magic 00000000 at 8 [ 121.146123][ T6241] vxfs: can't find superblock. [ 121.697919][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 122.148608][ T6247] ======================================================= [ 122.148608][ T6247] WARNING: The mand mount option has been deprecated and [ 122.148608][ T6247] and is ignored by this kernel. Remove the mand [ 122.148608][ T6247] option from the mount to silence this warning. [ 122.148608][ T6247] ======================================================= [ 122.183574][ C0] vkms_vblank_simulate: vblank timer overrun [ 122.554997][ T6237] team1: Mode changed to "loadbalance" [ 122.903839][ T6254] bond_slave_0: entered promiscuous mode [ 122.909678][ T6254] bond_slave_1: entered promiscuous mode [ 123.082019][ T6254] bond_slave_0: left promiscuous mode [ 123.087645][ T6254] bond_slave_1: left promiscuous mode [ 124.220220][ T6295] vxfs: WRONG superblock magic 00000000 at 1 [ 124.232319][ T6295] vxfs: WRONG superblock magic 00000000 at 8 [ 124.242247][ T6295] vxfs: can't find superblock. [ 125.362376][ T6312] netlink: 'syz.2.347': attribute type 15 has an invalid length. [ 125.417383][ T6312] netlink: 24 bytes leftover after parsing attributes in process `syz.2.347'. [ 125.520515][ T6317] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 125.556934][ T6325] bond_slave_0: entered promiscuous mode [ 125.562751][ T6325] bond_slave_1: entered promiscuous mode [ 125.641590][ T6317] tipc: Failed to remove unknown binding: 66,1,1/0:3113857689/3113857691 [ 125.682656][ T6317] tipc: Failed to remove unknown binding: 66,1,1/0:3113857689/3113857691 [ 125.732786][ T6332] netlink: 32 bytes leftover after parsing attributes in process `syz.0.354'. [ 125.781255][ T8] IPVS: starting estimator thread 0... [ 125.809783][ T6325] bond_slave_0: left promiscuous mode [ 125.815360][ T6325] bond_slave_1: left promiscuous mode [ 125.821335][ T6317] kvm: emulating exchange as write [ 125.848670][ T6342] netlink: 12 bytes leftover after parsing attributes in process `syz.4.356'. [ 125.927144][ T6339] IPVS: using max 23 ests per chain, 55200 per kthread [ 125.973225][ T6342] netlink: 28 bytes leftover after parsing attributes in process `syz.4.356'. [ 126.014883][ T6342] 8021q: adding VLAN 0 to HW filter on device bond1 [ 126.158438][ T6354] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 126.179403][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 126.402956][ T6363] netlink: 'syz.3.361': attribute type 11 has an invalid length. [ 126.577073][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 126.708363][ T6344] ptrace attach of "./syz-executor exec"[5219] was attempted by "./syz-executor exec"[6344] [ 127.402481][ T6409] netlink: 'syz.0.373': attribute type 11 has an invalid length. [ 127.457921][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 127.616949][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 128.779748][ T6416] syz.2.374 (6416): drop_caches: 2 [ 129.250383][ T6427] debugfs: Directory 'ptm0' with parent 'caif_serial' already present! [ 129.913366][ T6444] netlink: 'syz.2.386': attribute type 11 has an invalid length. [ 130.180249][ T5268] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 130.376957][ T5268] usb 1-1: Using ep0 maxpacket: 16 [ 130.391829][ T5268] usb 1-1: config 0 has an invalid interface number: 8 but max is 0 [ 130.401239][ T5268] usb 1-1: config 0 has no interface number 0 [ 130.414558][ T5268] usb 1-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 130.432758][ T5268] usb 1-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 130.461579][ T5268] usb 1-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 130.471417][ T5268] usb 1-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 130.626891][ T5268] usb 1-1: Product: syz [ 130.631484][ T5268] usb 1-1: SerialNumber: syz [ 130.800768][ T6458] kvm: kvm [6457]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0x65bf0000110c [ 131.208994][ T6458] kvm: kvm [6457]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x186) = 0x6e4c00006b5f [ 131.247861][ T5268] usb 1-1: config 0 descriptor?? [ 131.258397][ T5268] cm109 1-1:0.8: invalid payload size 0, expected 4 [ 131.268015][ T5268] input: CM109 USB driver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.8/input/input17 [ 131.574783][ C0] cm109 1-1:0.8: cm109_urb_ctl_callback: usb_submit_urb (urb_irq) failed -90 [ 131.991356][ C0] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 131.999155][ C0] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 132.006433][ C0] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 132.013747][ C0] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 132.021259][ C0] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 132.028630][ C0] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 132.036279][ C0] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 132.043598][ C0] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 132.050887][ C0] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 132.058204][ C0] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 132.083892][ T8] usb 1-1: USB disconnect, device number 6 [ 132.083941][ C0] cm109 1-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 132.153869][ T8] cm109 1-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 133.101113][ T6487] Falling back ldisc for ptm1. [ 133.231603][ T1259] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.238444][ T1259] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.246508][ T1259] ================================================================== [ 133.254609][ T1259] BUG: KASAN: slab-use-after-free in tty_write_room+0x35/0x90 [ 133.262189][ T1259] Read of size 8 at addr ffff88805eace020 by task aoe_tx0/1259 [ 133.269767][ T1259] [ 133.272139][ T1259] CPU: 0 UID: 0 PID: 1259 Comm: aoe_tx0 Not tainted 6.10.0-syzkaller-12708-g2f8c4f506285 #0 [ 133.282237][ T1259] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 133.292521][ T1259] Call Trace: [ 133.295858][ T1259] [ 133.298814][ T1259] dump_stack_lvl+0x241/0x360 [ 133.303625][ T1259] ? __pfx_dump_stack_lvl+0x10/0x10 [ 133.308902][ T1259] ? __pfx__printk+0x10/0x10 [ 133.313511][ T1259] ? _printk+0xd5/0x120 [ 133.317719][ T1259] ? __virt_addr_valid+0x183/0x530 [ 133.322865][ T1259] ? __virt_addr_valid+0x183/0x530 [ 133.328088][ T1259] print_report+0x169/0x550 [ 133.332870][ T1259] ? __virt_addr_valid+0x183/0x530 [ 133.337979][ T1259] ? __virt_addr_valid+0x183/0x530 [ 133.343754][ T1259] ? __virt_addr_valid+0x45f/0x530 [ 133.348870][ T1259] ? __phys_addr+0xba/0x170 [ 133.353418][ T1259] ? tty_write_room+0x35/0x90 [ 133.358218][ T1259] kasan_report+0x143/0x180 [ 133.362725][ T1259] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 133.369157][ T1259] ? tty_write_room+0x35/0x90 [ 133.373844][ T1259] tty_write_room+0x35/0x90 [ 133.378367][ T1259] handle_tx+0x164/0x640 [ 133.382645][ T1259] dev_hard_start_xmit+0x27a/0x7e0 [ 133.387771][ T1259] __dev_queue_xmit+0x1b63/0x3e90 [ 133.393660][ T1259] ? __dev_queue_xmit+0x2da/0x3e90 [ 133.398779][ T1259] ? __pfx___dev_queue_xmit+0x10/0x10 [ 133.404146][ T1259] ? skb_dequeue+0x113/0x150 [ 133.408726][ T1259] ? do_raw_spin_lock+0x14f/0x370 [ 133.413760][ T1259] ? __pfx_lock_release+0x10/0x10 [ 133.418830][ T1259] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 133.424852][ T1259] ? _raw_spin_unlock_irq+0x23/0x50 [ 133.430101][ T1259] ? lockdep_hardirqs_on+0x99/0x150 [ 133.435498][ T1259] tx+0x6b/0x180 [ 133.439125][ T1259] ? __pfx_tx+0x10/0x10 [ 133.443265][ T1259] kthread+0x23a/0x450 [ 133.447543][ T1259] ? _raw_spin_unlock_irqrestore+0x8f/0x140 [ 133.453717][ T1259] ? __pfx_kthread+0x10/0x10 [ 133.458439][ T1259] ? __pfx_default_wake_function+0x10/0x10 [ 133.464253][ T1259] ? __kthread_parkme+0x169/0x1d0 [ 133.469294][ T1259] ? __pfx_kthread+0x10/0x10 [ 133.473914][ T1259] kthread+0x2f0/0x390 [ 133.478350][ T1259] ? __pfx_kthread+0x10/0x10 [ 133.482976][ T1259] ? __pfx_kthread+0x10/0x10 [ 133.487616][ T1259] ret_from_fork+0x4b/0x80 [ 133.492330][ T1259] ? __pfx_kthread+0x10/0x10 [ 133.496921][ T1259] ret_from_fork_asm+0x1a/0x30 [ 133.501805][ T1259] [ 133.504998][ T1259] [ 133.507399][ T1259] Allocated by task 6351: [ 133.511724][ T1259] kasan_save_track+0x3f/0x80 [ 133.516434][ T1259] __kasan_kmalloc+0x98/0xb0 [ 133.521100][ T1259] __kmalloc_cache_noprof+0x19c/0x2c0 [ 133.526552][ T1259] alloc_tty_struct+0xa9/0x7d0 [ 133.532348][ T1259] tty_init_dev+0x5b/0x4c0 [ 133.536760][ T1259] ptmx_open+0xda/0x2c0 [ 133.540926][ T1259] chrdev_open+0x5b0/0x630 [ 133.545336][ T1259] do_dentry_open+0x970/0x1440 [ 133.550109][ T1259] vfs_open+0x3e/0x330 [ 133.554202][ T1259] path_openat+0x2b3e/0x3470 [ 133.558802][ T1259] do_filp_open+0x235/0x490 [ 133.563320][ T1259] do_sys_openat2+0x13e/0x1d0 [ 133.568017][ T1259] __x64_sys_openat+0x247/0x2a0 [ 133.572983][ T1259] do_syscall_64+0xf3/0x230 [ 133.577488][ T1259] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 133.583399][ T1259] [ 133.585725][ T1259] Freed by task 5267: [ 133.589712][ T1259] kasan_save_track+0x3f/0x80 [ 133.594431][ T1259] kasan_save_free_info+0x40/0x50 [ 133.599488][ T1259] poison_slab_object+0xe0/0x150 [ 133.604538][ T1259] __kasan_slab_free+0x37/0x60 [ 133.609328][ T1259] kfree+0x149/0x360 [ 133.613247][ T1259] process_scheduled_works+0xa2c/0x1830 [ 133.618905][ T1259] worker_thread+0x86d/0xd40 [ 133.623766][ T1259] kthread+0x2f0/0x390 [ 133.628522][ T1259] ret_from_fork+0x4b/0x80 [ 133.632932][ T1259] ret_from_fork_asm+0x1a/0x30 [ 133.638157][ T1259] [ 133.641116][ T1259] Last potentially related work creation: [ 133.648765][ T1259] kasan_save_stack+0x3f/0x60 [ 133.653947][ T1259] __kasan_record_aux_stack+0xac/0xc0 [ 133.661704][ T1259] insert_work+0x3e/0x330 [ 133.666044][ T1259] __queue_work+0xc8b/0xf50 [ 133.670582][ T1259] queue_work_on+0x1c2/0x380 [ 133.675183][ T1259] tty_release_struct+0xbc/0xe0 [ 133.680049][ T1259] tty_release+0xd0c/0x12c0 [ 133.684577][ T1259] __fput+0x24a/0x8a0 [ 133.688672][ T1259] task_work_run+0x24f/0x310 [ 133.693277][ T1259] get_signal+0x15da/0x1730 [ 133.697791][ T1259] arch_do_signal_or_restart+0x96/0x860 [ 133.703341][ T1259] syscall_exit_to_user_mode+0xc9/0x370 [ 133.708903][ T1259] do_syscall_64+0x100/0x230 [ 133.713500][ T1259] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 133.719405][ T1259] [ 133.721721][ T1259] The buggy address belongs to the object at ffff88805eace000 [ 133.721721][ T1259] which belongs to the cache kmalloc-cg-2k of size 2048 [ 133.736738][ T1259] The buggy address is located 32 bytes inside of [ 133.736738][ T1259] freed 2048-byte region [ffff88805eace000, ffff88805eace800) [ 133.751136][ T1259] [ 133.753466][ T1259] The buggy address belongs to the physical page: [ 133.759892][ T1259] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x5eac8 [ 133.768761][ T1259] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 133.777294][ T1259] memcg:ffff88805eb43081 [ 133.781636][ T1259] anon flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 133.790428][ T1259] page_type: 0xfdffffff(slab) [ 133.795827][ T1259] raw: 00fff00000000040 ffff88801544f3c0 0000000000000000 dead000000000001 [ 133.804424][ T1259] raw: 0000000000000000 0000000000080008 00000001fdffffff ffff88805eb43081 [ 133.813018][ T1259] head: 00fff00000000040 ffff88801544f3c0 0000000000000000 dead000000000001 [ 133.821886][ T1259] head: 0000000000000000 0000000000080008 00000001fdffffff ffff88805eb43081 [ 133.830584][ T1259] head: 00fff00000000003 ffffea00017ab201 ffffffffffffffff 0000000000000000 [ 133.839268][ T1259] head: 0000000000000008 0000000000000000 00000000ffffffff 0000000000000000 [ 133.847927][ T1259] page dumped because: kasan: bad access detected [ 133.854359][ T1259] page_owner tracks the page as allocated [ 133.860080][ T1259] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5219, tgid 5219 (syz-executor), ts 60416055173, free_ts 16090113179 [ 133.881448][ T1259] post_alloc_hook+0x1f3/0x230 [ 133.886232][ T1259] get_page_from_freelist+0x2e4c/0x2f10 [ 133.891790][ T1259] __alloc_pages_noprof+0x256/0x6c0 [ 133.896982][ T1259] alloc_slab_page+0x5f/0x120 [ 133.901673][ T1259] allocate_slab+0x5a/0x2f0 [ 133.906162][ T1259] ___slab_alloc+0xcd1/0x14b0 [ 133.910919][ T1259] __slab_alloc+0x58/0xa0 [ 133.915248][ T1259] __kmalloc_node_track_caller_noprof+0x281/0x440 [ 133.921828][ T1259] kmemdup_noprof+0x2a/0x60 [ 133.926324][ T1259] __devinet_sysctl_register+0xb0/0x2a0 [ 133.931866][ T1259] devinet_sysctl_register+0x17e/0x1f0 [ 133.937314][ T1259] inetdev_init+0x296/0x4d0 [ 133.941803][ T1259] inetdev_event+0x338/0x15c0 [ 133.946469][ T1259] notifier_call_chain+0x19f/0x3e0 [ 133.951574][ T1259] register_netdevice+0x167f/0x1b00 [ 133.956768][ T1259] register_vlan_dev+0x38c/0x810 [ 133.961703][ T1259] page last free pid 1 tgid 1 stack trace: [ 133.967586][ T1259] free_unref_page+0xd19/0xea0 [ 133.972454][ T1259] free_contig_range+0x9e/0x160 [ 133.977303][ T1259] destroy_args+0x8a/0x890 [ 133.981719][ T1259] debug_vm_pgtable+0x4be/0x550 [ 133.986569][ T1259] do_one_initcall+0x248/0x880 [ 133.991327][ T1259] do_initcall_level+0x157/0x210 [ 133.996350][ T1259] do_initcalls+0x3f/0x80 [ 134.001888][ T1259] kernel_init_freeable+0x435/0x5d0 [ 134.007089][ T1259] kernel_init+0x1d/0x2b0 [ 134.011434][ T1259] ret_from_fork+0x4b/0x80 [ 134.015855][ T1259] ret_from_fork_asm+0x1a/0x30 [ 134.020641][ T1259] [ 134.022978][ T1259] Memory state around the buggy address: [ 134.028704][ T1259] ffff88805eacdf00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 134.036773][ T1259] ffff88805eacdf80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 134.044862][ T1259] >ffff88805eace000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 134.053392][ T1259] ^ [ 134.058514][ T1259] ffff88805eace080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 134.066676][ T1259] ffff88805eace100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 134.074747][ T1259] ================================================================== [ 134.083086][ T1259] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 134.090298][ T1259] CPU: 0 UID: 0 PID: 1259 Comm: aoe_tx0 Not tainted 6.10.0-syzkaller-12708-g2f8c4f506285 #0 [ 134.100740][ T1259] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 134.111043][ T1259] Call Trace: [ 134.114358][ T1259] [ 134.117307][ T1259] dump_stack_lvl+0x241/0x360 [ 134.122007][ T1259] ? __pfx_dump_stack_lvl+0x10/0x10 [ 134.127344][ T1259] ? __pfx__printk+0x10/0x10 [ 134.131953][ T1259] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 134.138053][ T1259] ? vscnprintf+0x5d/0x90 [ 134.142405][ T1259] panic+0x349/0x860 [ 134.146313][ T1259] ? check_panic_on_warn+0x21/0xb0 [ 134.151444][ T1259] ? __pfx_panic+0x10/0x10 [ 134.155902][ T1259] ? _raw_spin_unlock_irqrestore+0xd8/0x140 [ 134.161828][ T1259] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 134.168129][ T1259] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 134.174503][ T1259] check_panic_on_warn+0x86/0xb0 [ 134.179469][ T1259] ? tty_write_room+0x35/0x90 [ 134.184186][ T1259] end_report+0x77/0x160 [ 134.188448][ T1259] kasan_report+0x154/0x180 [ 134.192959][ T1259] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 134.199288][ T1259] ? tty_write_room+0x35/0x90 [ 134.203964][ T1259] tty_write_room+0x35/0x90 [ 134.208466][ T1259] handle_tx+0x164/0x640 [ 134.212711][ T1259] dev_hard_start_xmit+0x27a/0x7e0 [ 134.217921][ T1259] __dev_queue_xmit+0x1b63/0x3e90 [ 134.223039][ T1259] ? __dev_queue_xmit+0x2da/0x3e90 [ 134.228151][ T1259] ? __pfx___dev_queue_xmit+0x10/0x10 [ 134.233566][ T1259] ? skb_dequeue+0x113/0x150 [ 134.238271][ T1259] ? do_raw_spin_lock+0x14f/0x370 [ 134.243297][ T1259] ? __pfx_lock_release+0x10/0x10 [ 134.248324][ T1259] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 134.254305][ T1259] ? _raw_spin_unlock_irq+0x23/0x50 [ 134.259505][ T1259] ? lockdep_hardirqs_on+0x99/0x150 [ 134.264697][ T1259] tx+0x6b/0x180 [ 134.268243][ T1259] ? __pfx_tx+0x10/0x10 [ 134.272387][ T1259] kthread+0x23a/0x450 [ 134.276456][ T1259] ? _raw_spin_unlock_irqrestore+0x8f/0x140 [ 134.282363][ T1259] ? __pfx_kthread+0x10/0x10 [ 134.286963][ T1259] ? __pfx_default_wake_function+0x10/0x10 [ 134.292771][ T1259] ? __kthread_parkme+0x169/0x1d0 [ 134.297796][ T1259] ? __pfx_kthread+0x10/0x10 [ 134.302388][ T1259] kthread+0x2f0/0x390 [ 134.306484][ T1259] ? __pfx_kthread+0x10/0x10 [ 134.311217][ T1259] ? __pfx_kthread+0x10/0x10 [ 134.315904][ T1259] ret_from_fork+0x4b/0x80 [ 134.320343][ T1259] ? __pfx_kthread+0x10/0x10 [ 134.324948][ T1259] ret_from_fork_asm+0x1a/0x30 [ 134.329716][ T1259] [ 134.332840][ T1259] Kernel Offset: disabled [ 134.337243][ T1259] Rebooting in 86400 seconds..