last executing test programs: 2m52.838581649s ago: executing program 4 (id=145): socket$packet(0x11, 0x3, 0x300) socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) ioctl$TUNSETVNETHDRSZ(0xffffffffffffffff, 0x400454d8, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x2000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$OSF_MSG_ADD(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000008c0)=ANY=[@ANYBLOB="0815000000051104000000000000000001000005540201"], 0x1508}}, 0x4) 2m47.865853763s ago: executing program 4 (id=158): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newtaction={0xe68, 0x30, 0x1, 0x70bd2b, 0x25dfdbfd, {}, [{0xe54, 0x1, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{0x4, 0x8001, 0x10000000, 0x8}, 0x92, 0x6}, [{0x4, 0xe, 0x8, 0xe42, 0x4, 0xec87}, {0x6, 0x40, 0x6, 0x458, 0x400, 0x7}, {0x40, 0xa6, 0x8, 0x0, 0x7, 0xf63}, {0x1, 0x2, 0xfc78, 0x3, 0x4, 0x7fff}, {0x0, 0x3c98, 0x1, 0x7fffffff, 0x9, 0xc}, {0x3, 0x7, 0x3, 0x0, 0x6, 0x4}, {0x1, 0x2, 0x0, 0x51, 0x6, 0x6}, {0xf, 0xfff, 0x9, 0x99, 0x6b2b}, {0x8e73, 0x3f8000, 0x1, 0x4, 0x7, 0x7}, {0x4, 0x3, 0x1, 0x4, 0x0, 0x400}, {0xec25, 0x60, 0xffffff00, 0xb45d, 0x552, 0x39f}, {0x100000, 0xfffff317, 0x2, 0x5, 0x974f, 0x17}, {0x4, 0x7, 0x100, 0x9, 0xfff, 0xffffffff}, {0xfffffff7, 0x101, 0x400, 0x6, 0x40, 0xb}, {0x0, 0x4, 0x5, 0x3, 0x81, 0x2}, {0xb2, 0x4c81440c, 0x8, 0x800, 0x2, 0xd66}, {0x4, 0x2bb, 0x80, 0xa, 0xfffffffa, 0x5}, {0xfffffffe, 0x5b92, 0x7, 0x4, 0x88f5, 0x9}, {0x6, 0xc, 0x200, 0x4, 0xfffffff1, 0x26}, {0x9, 0x56, 0x1, 0xd, 0x5, 0x1}, {0x5, 0x3, 0xc, 0xfffffff7, 0x2}, {0xfffffff7, 0xf9f5, 0x8, 0xfff, 0xe1, 0x2d5e}, {0x6, 0x10001, 0x2, 0xcb, 0x5, 0x4}, {0xe, 0x101, 0x80, 0xd, 0xfffffffc, 0x9}, {0x0, 0xb, 0xfffffff4, 0x9, 0xfff, 0x81}, {0x6, 0x4, 0x9, 0x38f5, 0xe, 0xb4}, {0x2, 0x6, 0x9, 0x3, 0xe5, 0x3800}, {0x9, 0x4, 0x1, 0x101, 0x49a, 0x40}, {0x100, 0xffffffff, 0x80000001, 0x3, 0x12ab, 0xbc}, {0xa4a9, 0x3, 0x9, 0x7, 0x9, 0xb}, {0x7fffffff, 0x4, 0x5, 0x3, 0x7fff, 0xc}, {0x5, 0x9, 0x75, 0xffff8001, 0x9, 0x6}, {0xb0, 0x4, 0xffffffff, 0x6d, 0x81, 0xfffffffa}, {0x100, 0x6, 0xffffffff, 0x0, 0x4, 0x9}, {0x6, 0x9, 0x9, 0x1, 0xffff, 0x2}, {0x800, 0x4, 0xfffffffe, 0x10001, 0x7fffffff, 0x100}, {0xb, 0x2, 0x4, 0xfffffff8, 0x6, 0xfffffff9}, {0x1, 0x9, 0x5, 0x6, 0x84, 0x7}, {0xa, 0x0, 0x909d, 0x1, 0x9}, {0xbe0, 0x3, 0x5, 0x2, 0x3, 0x80000001}, {0x6, 0x0, 0x8001, 0xce8, 0xc7f, 0x10001}, {0xcf4, 0xaad, 0x8, 0x6, 0x1, 0x3}, {0x6, 0x5, 0x5, 0x7, 0x7247, 0x2}, {0x80000000, 0xfe9, 0x32b2, 0x7, 0x5, 0x7ff}, {0x40, 0x9, 0x68, 0x0, 0x2, 0x98a}, {0x7, 0x0, 0x5b02, 0x6, 0x8001, 0x2}, {0x6, 0x4, 0x1ff, 0xd, 0x8, 0xfff}, {0x2, 0x9, 0x800, 0x0, 0xfffffff8, 0x3a}, {0x4, 0x9, 0x9, 0xfff, 0x3, 0xd4f}, {0xb44, 0x8, 0x9, 0x7f, 0x3, 0x3}, {0xc1, 0x6, 0x2, 0x6, 0x1, 0x5}, {0x40, 0x6be, 0x4d1, 0x5, 0x2, 0x7}, {0x1ff, 0xb25, 0x80000001, 0x1, 0xf}, {0x4, 0x6, 0x1, 0x32}, {0xe6e1, 0x5, 0xfffffff9, 0x2, 0x60, 0x1a0}, {0x401, 0x0, 0x8000, 0xffff65ca, 0xffffffc0, 0xf9}, {0xf, 0x2, 0x9, 0xa, 0x3, 0xffffffff}, {0x4, 0x3, 0x9, 0x6, 0x4, 0x7ff}, {0x7ff, 0xfffffffc, 0x15e5a53f, 0x67b, 0x1, 0x4}, {0x4, 0x7, 0x5, 0x10001, 0x8, 0x6}, {0x8f2, 0xfff, 0x6, 0x2, 0xc5, 0xfffffff8}, {0x8000, 0xc1, 0x8, 0x7fff, 0x7fff, 0x400}, {0x2900416, 0x10000, 0xe, 0x9, 0x1000, 0x9}, {0x10, 0xfffffff8, 0x0, 0x4, 0xe, 0x9}, {0x8, 0x8, 0x8000, 0x0, 0xd01, 0x3}, {0x800, 0x3, 0x0, 0x0, 0x4, 0xf87b}, {0x1, 0x1ff, 0x3, 0x3, 0x9, 0x3ff}, {0x7, 0xfffffff6, 0x0, 0xde, 0x3, 0x7}, {0x8, 0xaf00, 0x1, 0x1, 0x8, 0x1}, {0x4, 0x2, 0x9, 0xfd, 0x0, 0x7}, {0x0, 0x6, 0x8, 0xc, 0xf15f10b, 0x6}, {0x4d, 0x6, 0x8, 0x7, 0xe582, 0x6}, {0x4, 0x0, 0x40, 0x8, 0x0, 0xffff8000}, {0x9, 0x4, 0x6, 0x6, 0xa, 0x8}, {0x3, 0x401, 0x6, 0xe, 0x1ff000, 0x1}, {0xfffffb2a, 0x8, 0x5, 0xffff, 0x2, 0xffffff00}, {0x400, 0x6, 0x3, 0x9a, 0x1, 0x2000}, {0x5, 0x2, 0x81, 0xf, 0x5, 0x8}, {0x1, 0x4241, 0xfffffff8, 0x9, 0x400, 0xebed}, {0x5, 0x1ed, 0x2, 0x8, 0x707, 0xfc1a}, {0x1d, 0x33, 0xfffffff8, 0x2, 0x6, 0x9}, {0x9b, 0x6, 0x3a438d3b, 0x8000, 0x4}, {0x9, 0x81, 0x7fff, 0x800, 0x9}, {0x10, 0x4, 0x1, 0x622e, 0xd8, 0x9}, {0x33, 0x7, 0x9, 0x6, 0x1e, 0xd}, {0xd2, 0x7, 0x6, 0x2, 0x7, 0x1000}, {0x3, 0x0, 0x7, 0xab7, 0x5, 0x5}, {0xb, 0x7, 0xc, 0x1, 0x6, 0x80000000}, {0x3, 0x1, 0x2, 0x8, 0x2c, 0x10}, {0x50a49641, 0x2, 0x4, 0xef1, 0x8, 0x9a90}, {0x5e300141, 0x0, 0x7, 0x93, 0xa, 0x6e}, {0x36, 0x5, 0x6de, 0x80000001, 0x4}, {0x8, 0x2, 0x5, 0x4, 0x0, 0x57d}, {0x3, 0x6, 0x7fc, 0x6, 0x7, 0x8}, {0x5000, 0x7, 0x0, 0x4, 0x6, 0x4}, {0x4, 0x7fffffff, 0x7fff, 0xfffffffe, 0x100000, 0x5}, {0x7d, 0x343, 0x6, 0x1, 0xa19a, 0x5}, {0x1, 0x4, 0x962, 0xd, 0x1, 0x8}, {0x1a4, 0x2, 0xffff, 0xa, 0x0, 0x1}, {0x800, 0x81, 0x6, 0x3, 0xfffffff9, 0x8001}, {0x8000, 0x3, 0x0, 0x1, 0x2, 0x8}, {0x101, 0x4, 0x7f, 0x3b24, 0xc16, 0x1ff}, {0x80, 0x8, 0x3, 0x2, 0x34c, 0x2}, {0x9, 0x6, 0x2, 0x88, 0x4, 0x3ff}, {0x6, 0x4, 0xf, 0x5, 0xfffff157, 0x7}, {0x400000, 0xbefa, 0x9, 0x6, 0x4, 0xffffffff}, {0x2fd, 0x4, 0x8, 0x3, 0x6, 0x1}, {0xa1, 0x1, 0xd, 0x7, 0x4, 0xe1}, {0x6, 0x101, 0x7, 0x3, 0x0, 0x3}, {0x3, 0x6, 0x7, 0x9}, {0x2, 0xc, 0x23c, 0x8, 0x12, 0x80}, {0x0, 0x292, 0x2, 0x8, 0xffff, 0x2}, {0x9, 0x0, 0x3, 0x4, 0x40, 0xffffffff}, {0x80000000, 0x6f95, 0x23, 0xf9, 0x8, 0x7fff}, {0x5, 0x19de554e, 0xfffff4b2, 0xb97, 0x1, 0x7}, {0x9, 0x0, 0x521, 0x5, 0x3}, {0xffff, 0x4, 0xfb1, 0x3, 0x0, 0xfffffff8}, {0x6, 0x19c1, 0x7ff, 0xa, 0xda8b, 0x9b}, {0x3, 0x8, 0x7fff, 0x6, 0x7, 0x8}, {0x80, 0x5, 0x48, 0xce6, 0x3, 0x4}, {0x9, 0x3ae2, 0x1, 0x7, 0x7, 0xfff}, {0xb5, 0x7f, 0xffffacad, 0x0, 0x4}, {0x3, 0x0, 0x7455, 0xe, 0x8000, 0x4}, {0x8, 0x8, 0x10, 0x0, 0x0, 0x3}, {0x2, 0x8, 0x0, 0x5, 0x1ff, 0x6}, {0xd, 0x4, 0x73f57df3, 0x8, 0xffffff61, 0x8}, {0x7, 0x8, 0x5, 0x5, 0xb, 0x40}, {0x6f, 0x0, 0xffff, 0x81, 0xc, 0x10000}], [{0x5, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {0x2}, {}, {}, {}, {0x5}, {}, {0x2, 0x1}, {0x0, 0x1}, {0x4}, {0x3, 0x1}, {}, {0x4}, {0x1}, {0x4, 0x1}, {0x2, 0x1}, {0x4, 0x1}, {0x0, 0x1}, {0x4}, {0x2, 0x1}, {0x1, 0x1}, {}, {0x4}, {}, {0x1, 0x1}, {0x4, 0x1}, {0x0, 0x1}, {0x4}, {0x3}, {0x5}, {}, {0x2}, {0x5}, {0x4}, {0x1, 0x1}, {0x4, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x3}, {0x2, 0x1}, {0x5, 0x1}, {0x2, 0x1}, {0x3}, {0x3}, {0x5}, {0x5}, {0x7, 0x1}, {0x5, 0x1}, {0x0, 0x1}, {0x4}, {}, {0x5}, {0x2}, {0x1}, {0x4, 0x1}, {0x1, 0x1}, {0x3}, {0x5}, {0x0, 0x1}, {0x1, 0x1}, {0x2, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x1}, {0x1, 0x1}, {0x2}, {0x4}, {0x0, 0x1}, {0x4, 0x1}, {0x1}, {0x1}, {0x1}, {0x1}, {0x3, 0x1}, {0x1}, {0x2}, {0x3}, {0x3}, {0x4}, {0x5, 0x1}, {0x5}, {0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x3}, {}, {0x4, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {0x4}, {0x3}, {0x2}, {0x1, 0x1}, {0x4, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {0x4, 0x1}, {0x5}, {0x4, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x1}, {0x2, 0x1}, {0x4}, {}, {0x2}, {0x1}, {0x1}, {0x4}, {0x1, 0x1}, {0x4, 0x1}, {0x1, 0x1}, {0x4}, {0x0, 0x1}, {0x3, 0x1}, {0x1}, {0x4, 0x1}, {0x1}, {0x2, 0x1}, {}, {0x2, 0x1}, {0x2, 0x1}], 0x1}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}]}]}, 0xe68}, 0x1, 0x0, 0x0, 0x4081}, 0x2400c800) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)={0x50, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}]}, 0x50}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000000000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) 2m46.809675845s ago: executing program 4 (id=162): r0 = openat(0xffffffffffffff9c, 0x0, 0x1a000, 0x13) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) r3 = fsopen(0x0, 0x1) setresgid(0x0, 0xffffffffffffffff, 0x0) setfsgid(0x0) setresgid(0xffffffffffffffff, 0x0, 0x0) sendmsg$netlink(r0, &(0x7f0000000880)={&(0x7f00000000c0)=@proc={0x10, 0x0, 0x25dfdbfb, 0x4}, 0xc, &(0x7f0000000280)=[{&(0x7f0000000180)={0x18, 0x25, 0x200, 0x70bd26, 0x25dfdbfc, "", [@typed={0x8, 0x83, 0x0, 0x0, @u32=0x5}]}, 0x18}, {&(0x7f0000001080)={0x10fc, 0x30, 0x4, 0x70bd2b, 0x25dfdbfb, "", [@generic="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", @typed={0x8, 0xb4, 0x0, 0x0, @fd=r1}, @typed={0x8, 0x2e, 0x0, 0x0, @fd=r3}, @generic="c652b030d00f721c70033df7f6c868d58c98bb0a7127161adee99fdec54540a4677387780924537c50ae18a25f6e07c1c99f1c13cd012ef732e3a3f0d1ea14a6d830ccec71a8b8f996f98cb628b4b3d7cbf6d3e9f259f7692fe914107c3225f13bbb98387af47fc96589f448399efb9f26770e0fe6c4eb94934f767c19fc0b9fcc60e189330ed64befe4c964b9359419f7337fbca400cc4a925e4d0b4717321ff70a0a84c99ffc", @nested={0x24, 0x61, 0x0, 0x1, [@nested={0x4, 0x22}, @typed={0xc, 0x125, 0x0, 0x0, @u64=0x3ff}, @typed={0x8, 0x28, 0x0, 0x0, @pid=0xffffffffffffffff}, @typed={0x8, 0x6f, 0x0, 0x0, @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}}]}, @typed={0x8, 0x74, 0x0, 0x0, @u32=0x4}, @typed={0x5, 0x113, 0x0, 0x0, @str='\x00'}]}, 0x10fc}, {&(0x7f0000000300)={0x138, 0x3a, 0x800, 0x70bd2b, 0x25dfdbff, "", [@generic="00819694173eb569f55357a428db99f4ba083ae8243a84f6ade4b5f61c7549666514f6f03aee92d73df2e01bbcd5f7870d3ed2770e80efa467021161674e67c020250119c3d0904250", @typed={0x8, 0x110, 0x0, 0x0, @u32=0x80000000}, @nested={0xc3, 0x62, 0x0, 0x1, [@typed={0x8, 0xbc, 0x0, 0x0, @uid}, @generic="7b073b36e2907a68e9abac6ff1b797d7bc3bf6c6c7b83ca0b54c34c81a446140fe5998af37cbeb35b35b3d12f407d3e2e98aff5f61b9234566f62dcc05e935ac2a9f125e8122b613df1f89dc3812b87914e5f6ba965ab0fb9f13ab13ed34335944ddd12fb02ab2632a9df68c25142ca03bad2032a8ee20501e0af3f9a138570237345d6e1ced47bcf3c5a48f3b0727ac2987956b156b632a908084", @typed={0xc, 0x28, 0x0, 0x0, @u64=0xbba}, @nested={0x4, 0x112}, @nested={0x4, 0x7}, @nested={0x4, 0x14f}, @nested={0x4, 0x19}]}, @typed={0xd, 0x8d, 0x0, 0x0, @str='$(((-+&(\x00'}]}, 0x138}, {&(0x7f0000000980)={0x4d4, 0x27, 0x400, 0x70bd25, 0x25dfdbfc, "", [@nested={0x1d2, 0xcb, 0x0, 0x1, [@typed={0xb, 0x5d, 0x0, 0x0, @str='$\'/@#\x0f\x00'}, @generic="b0a19c87b6548f966785f191056470cd01f11346c547b54b174ce0106e0ff696fd1d6aadbb529ff57e3f2169eb9affb2482e78b3c2cff417e788ee0dd0308379cc88eeb011fe389f5850cbf37bb9a3e9801d22ddd2114cc43a47e33185d1ddf6e4b0454287c1edd8d897a272d14e08", @nested={0x4, 0x40}, @generic="8a2559a1ee39bd3246337c190bf5d0e38db57b4e4de2f67c721dce3038939e78f7d1b46a4c2b93db4cb6fa699703f48c2390b006450df8e5ec5a3a82bb7ee0bc0b3f5abca6347e0a8304961d2d9708cdd655c0a39092af5a816b966735c0d50605b5387688b1e4b68ccfa1143d832a4498b0b00942b58bf9e42e17a606049bdb6d44ea8c", @nested={0x4, 0xab}, @typed={0x8, 0x11f, 0x0, 0x0, @fd=r3}, @nested={0x4, 0x120}, @generic="6357bb0a1227205573f9075b7cee0bae368eabd1a9b79538ead305bdb68d6851b05f0c19a28a3a1e480c6f23c65d79ff868ef130b673fd1f287f1272f1fd9eb9ddcc786b5372f26f5aa1a38bbb1705f1", @generic="0d4ecfbc1c44ad7ca7016d03d072a483c04187a115e1e4f16ec25a597e9b63b2ad947f0a9f40b7e2cfa5dff14593577d2d5d3b3d55980c0c5925652db67b7ff3ea92a5bf1c50aa5f952d1c3e331c40b18d8517622bc17ad364f292aab8fbc8010ab01db3098a6e507b8321"]}, @nested={0x9a, 0x48, 0x0, 0x1, [@generic="09211e8bcc0398eff82c1be62bcb9c01667c3ef500ed05957eb084ee77b520166005f99bd6bcd82bfdb2877d8c80dc77c3874da9a7c5e1a43cf30cae094695b20247cb1d", @nested={0x4, 0x91}, @typed={0x8, 0xfb, 0x0, 0x0, @fd}, @generic="35e2455a021ec4812a3df18e0a19168a576137dc5bc546ee0b089389c0592de6a2bfd466d614c059ec4f988ff90f3cc2b91be8af1ff933a26b0407c4ffc7147047ccae0ec6d1"]}, @nested={0x4, 0x63}, @generic="66c20d894d612dd2ee00cbcf05f38d78ef8c9aed8c8284a923092d710007372f37425ac25e61d9613e8e5917b7ba5e017b9899ae54d63645f53db71277427abb98264f447872162a8d492a1902c7ff2dd562c1a4f005e915cfd01efd833ae66f5d0f2afb651fc83dfd7b0c00e2b62614c135146cff6d80ed1c4d86e80372ff6475ee768710cab93d9ae4c218e3e3f8c85f26cb2aa402b4f88a7185e873a809fa530293b7468910e4b5b92399ae7f4c971d315c31b12c8e64d344f990ddc3f70d98faa8b614da1f3663cd5212098499277d435c6ceb44cb6b5506f733cd6e3190ae649a86273bcb", @nested={0xf4, 0x64, 0x0, 0x1, [@nested={0x4, 0x2e}, @typed={0x9, 0x7, 0x0, 0x0, @str='@,{^\x00'}, @generic="702671a87e498ff47d1b05f790d379df25721e7dae399c3a12cc66e2211ae9dfa43afca828205bd51734120784cac5ffdcf8c95a111f9a896be29bf6a07365cb9fc3260f21249202193d24e4ef7cba8eed6ea8e2d0138b9b42473b16ad4d555fa7cd7ab61a18a66bee0f340077310ad056105654ee8285094d10222db57a740b6f96486351a90d6948eab571064ce7829da0cf9e73a6fbb97ed2ac4676167a3469a88726356cae7d3656cc88e8668fd1f6800d6a44d3855b81f65fbca000daa0c15ec012ca2ed9808b2889e5ea569ba0041fb7133ac65380a0cd8d93dc8113f0"]}, @generic="fef0e5dfb2cf1f5f9e80f0c117d9416cc2e712d3a77f66127cc73d4daa8477ac38ed9805abaff4b22304b4d6fc8569d735df8d0d141433528d95c7d59117b150a4a042d7cc2df69262b58eb201cdf5d16671ac758c81f98c1beb3efa43054177e2a713b844c9c88e74319ba4b6b38710b12df0"]}, 0x4d4}], 0x4, &(0x7f00000005c0)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=r2, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000014000000000000000100000001000000", @ANYRES32=r1, @ANYBLOB="000000001c000000000000000100000001", @ANYRES32=r1, @ANYRES32=r3, @ANYRES32, @ANYBLOB="00000000340000000000000001000000010000", @ANYRES32=r3, @ANYRES32=r0, @ANYRES32, @ANYRES32, @ANYRES32=r3, @ANYRES32=r3, @ANYRES32, @ANYRESHEX=r3, @ANYRES32, @ANYRES32=r1, @ANYRES32=r1, @ANYRES32=r0, @ANYRES32=r0, @ANYRES32, @ANYRES32=r1, @ANYRES32, @ANYRESHEX=r3, @ANYRES32=r0, @ANYRES32=r2, @ANYRES8=0x0, @ANYRES32=r1, @ANYRES32=r1, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32=r2, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0x130, 0x4004810}, 0x4000000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r4, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r6 = socket(0x840000000002, 0x3, 0x100) r7 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$bt_BT_VOICE(r7, 0x112, 0xb, &(0x7f0000000940)=0x3, 0x2) connect$bt_sco(r7, &(0x7f0000001040), 0x8) connect$inet(r6, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_ro(r8, &(0x7f0000000200)='freezer.parent_freezing\x00', 0x0, 0x0) setsockopt$MRT_PIM(r6, 0x0, 0xcf, 0x0, 0x0) 2m44.281419579s ago: executing program 4 (id=166): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x100030) ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f00000001c0)={0x79, 0x0, 0xe3c}) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x4, 0x3, 0x100000, 0x2000, &(0x7f000000f000/0x2000)=nil}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0xcccc0000, 0x1000, &(0x7f0000f15000/0x1000)=nil}) r2 = openat$tun(0xffffffffffffff9c, 0x0, 0xa000, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$sock_linger(r3, 0x1, 0x3c, &(0x7f0000000180)={0x1, 0x9}, 0x8) r4 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) quotactl_fd$Q_SYNC(r4, 0xffffffff80000100, 0x0, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r7 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r8 = syz_open_dev$dri(&(0x7f00000008c0), 0x1, 0x400) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r8, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r8, 0xc06864a1, &(0x7f0000000d40)={0x0, 0x0, r9, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r8, 0xc06864ce, &(0x7f0000000340)={r10, 0x101, 0x3, 0x0, 0x0, [0x0], [0x0, 0x7, 0x0, 0xfffffffc], [0x0, 0x80000006, 0x2], [0x5, 0x0, 0x1, 0x5]}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r7, 0xc02064b2, &(0x7f0000000140)={0x3ff, 0x2, 0x806}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r7, 0xc00c642d, &(0x7f0000000080)={r11, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r8, 0xc00c642e, &(0x7f0000000300)={0x0, 0x0, r12}) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'dvmrp1\x00', 0x2}) ioctl$TUNSETOFFLOAD(r2, 0x400454c9, 0xba98575a95aeb70d) ioctl$TUNSETLINK(r2, 0x400454cd, 0x328) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000040)={0x10003, 0x5, 0xa000, 0x1000, &(0x7f0000fd3000/0x1000)=nil}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) 2m42.473722538s ago: executing program 4 (id=172): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) io_uring_setup(0x667, &(0x7f0000000000)={0x0, 0x8dd3, 0x1, 0x42, 0x235}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) fsopen(0x0, 0x1) r5 = memfd_create(&(0x7f0000000140)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xcda\x9b\x11X\x0e\xa1\xcf\x1a\x98S7\xc9\x00'/47, 0x2) ftruncate(r5, 0xffff) fcntl$addseals(r5, 0x409, 0x7) r6 = ioctl$UDMABUF_CREATE(0xffffffffffffffff, 0x40187542, &(0x7f0000000000)={r5, 0x0, 0x0, 0x8000}) ioctl$DMA_BUF_IOCTL_SYNC(r6, 0x40086200, &(0x7f00000001c0)=0x1) ioctl$DMA_BUF_IOCTL_SYNC(r6, 0x40086200, &(0x7f00000000c0)=0x7) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) 2m40.977548731s ago: executing program 4 (id=173): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = landlock_create_ruleset(&(0x7f00000002c0)={0x7f6e}, 0x18, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r3, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r4 = signalfd4(0xffffffffffffffff, &(0x7f0000000080)={[0x2]}, 0x8, 0x80000) readv(r4, &(0x7f00000001c0)=[{&(0x7f0000000140)=""/128, 0x80}], 0x1) landlock_restrict_self(0xffffffffffffffff, 0x1) landlock_restrict_self(r2, 0xe) landlock_restrict_self(r2, 0x9) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r5, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) read(r5, &(0x7f00000004c0)=""/67, 0x43) r6 = socket(0x1e, 0x1, 0x0) connect$tipc(r6, &(0x7f0000000000)=@name={0x1e, 0x2, 0x1, {{0x1, 0x1}}}, 0x10) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r7 = openat$iommufd(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r7, 0x3ba0, 0x0) 2m25.833741344s ago: executing program 32 (id=173): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = landlock_create_ruleset(&(0x7f00000002c0)={0x7f6e}, 0x18, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r3, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r4 = signalfd4(0xffffffffffffffff, &(0x7f0000000080)={[0x2]}, 0x8, 0x80000) readv(r4, &(0x7f00000001c0)=[{&(0x7f0000000140)=""/128, 0x80}], 0x1) landlock_restrict_self(0xffffffffffffffff, 0x1) landlock_restrict_self(r2, 0xe) landlock_restrict_self(r2, 0x9) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r5, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) read(r5, &(0x7f00000004c0)=""/67, 0x43) r6 = socket(0x1e, 0x1, 0x0) connect$tipc(r6, &(0x7f0000000000)=@name={0x1e, 0x2, 0x1, {{0x1, 0x1}}}, 0x10) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r7 = openat$iommufd(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r7, 0x3ba0, 0x0) 19.448590397s ago: executing program 1 (id=552): r0 = socket$unix(0x1, 0x5, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)=ANY=[], 0x40}}, 0x0) 19.239493442s ago: executing program 1 (id=555): r0 = openat(0xffffffffffffff9c, 0x0, 0x1a000, 0x13) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) r2 = fsopen(0x0, 0x1) setfsgid(0x0) sendmsg$netlink(r0, &(0x7f0000000880)={&(0x7f00000000c0)=@proc={0x10, 0x0, 0x25dfdbfb, 0x4}, 0xc, &(0x7f0000000280)=[{&(0x7f0000000180)={0x18, 0x25, 0x200, 0x70bd26, 0x25dfdbfc, "", [@typed={0x8, 0x83, 0x0, 0x0, @u32=0x5}]}, 0x18}, {&(0x7f0000001080)={0x10fc, 0x30, 0x4, 0x70bd2b, 0x25dfdbfb, "", [@generic="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", @typed={0x8, 0xb4, 0x0, 0x0, @fd=r1}, @typed={0x8, 0x2e, 0x0, 0x0, @fd=r2}, @generic="c652b030d00f721c70033df7f6c868d58c98bb0a7127161adee99fdec54540a4677387780924537c50ae18a25f6e07c1c99f1c13cd012ef732e3a3f0d1ea14a6d830ccec71a8b8f996f98cb628b4b3d7cbf6d3e9f259f7692fe914107c3225f13bbb98387af47fc96589f448399efb9f26770e0fe6c4eb94934f767c19fc0b9fcc60e189330ed64befe4c964b9359419f7337fbca400cc4a925e4d0b4717321ff70a0a84c99ffc", @nested={0x24, 0x61, 0x0, 0x1, [@nested={0x4, 0x22}, @typed={0xc, 0x125, 0x0, 0x0, @u64=0x3ff}, @typed={0x8, 0x28, 0x0, 0x0, @pid=0xffffffffffffffff}, @typed={0x8, 0x6f, 0x0, 0x0, @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}}]}, @typed={0x8, 0x74, 0x0, 0x0, @u32=0x4}, @typed={0x5, 0x113, 0x0, 0x0, @str='\x00'}]}, 0x10fc}, {&(0x7f0000000300)={0x138, 0x3a, 0x800, 0x70bd2b, 0x25dfdbff, "", [@generic="00819694173eb569f55357a428db99f4ba083ae8243a84f6ade4b5f61c7549666514f6f03aee92d73df2e01bbcd5f7870d3ed2770e80efa467021161674e67c020250119c3d0904250", @typed={0x8, 0x110, 0x0, 0x0, @u32=0x80000000}, @nested={0xc3, 0x62, 0x0, 0x1, [@typed={0x8, 0xbc, 0x0, 0x0, @uid}, @generic="7b073b36e2907a68e9abac6ff1b797d7bc3bf6c6c7b83ca0b54c34c81a446140fe5998af37cbeb35b35b3d12f407d3e2e98aff5f61b9234566f62dcc05e935ac2a9f125e8122b613df1f89dc3812b87914e5f6ba965ab0fb9f13ab13ed34335944ddd12fb02ab2632a9df68c25142ca03bad2032a8ee20501e0af3f9a138570237345d6e1ced47bcf3c5a48f3b0727ac2987956b156b632a908084", @typed={0xc, 0x28, 0x0, 0x0, @u64=0xbba}, @nested={0x4, 0x112}, @nested={0x4, 0x7}, @nested={0x4, 0x14f}, @nested={0x4, 0x19}]}, @typed={0xd, 0x8d, 0x0, 0x0, @str='$(((-+&(\x00'}]}, 0x138}, {&(0x7f0000000980)={0x4d4, 0x27, 0x400, 0x70bd25, 0x25dfdbfc, "", [@nested={0x1d2, 0xcb, 0x0, 0x1, [@typed={0xb, 0x5d, 0x0, 0x0, @str='$\'/@#\x0f\x00'}, @generic="b0a19c87b6548f966785f191056470cd01f11346c547b54b174ce0106e0ff696fd1d6aadbb529ff57e3f2169eb9affb2482e78b3c2cff417e788ee0dd0308379cc88eeb011fe389f5850cbf37bb9a3e9801d22ddd2114cc43a47e33185d1ddf6e4b0454287c1edd8d897a272d14e08", @nested={0x4, 0x40}, @generic="8a2559a1ee39bd3246337c190bf5d0e38db57b4e4de2f67c721dce3038939e78f7d1b46a4c2b93db4cb6fa699703f48c2390b006450df8e5ec5a3a82bb7ee0bc0b3f5abca6347e0a8304961d2d9708cdd655c0a39092af5a816b966735c0d50605b5387688b1e4b68ccfa1143d832a4498b0b00942b58bf9e42e17a606049bdb6d44ea8c", @nested={0x4, 0xab}, @typed={0x8, 0x11f, 0x0, 0x0, @fd=r2}, @nested={0x4, 0x120}, @generic="6357bb0a1227205573f9075b7cee0bae368eabd1a9b79538ead305bdb68d6851b05f0c19a28a3a1e480c6f23c65d79ff868ef130b673fd1f287f1272f1fd9eb9ddcc786b5372f26f5aa1a38bbb1705f1", @generic="0d4ecfbc1c44ad7ca7016d03d072a483c04187a115e1e4f16ec25a597e9b63b2ad947f0a9f40b7e2cfa5dff14593577d2d5d3b3d55980c0c5925652db67b7ff3ea92a5bf1c50aa5f952d1c3e331c40b18d8517622bc17ad364f292aab8fbc8010ab01db3098a6e507b8321"]}, @nested={0x9a, 0x48, 0x0, 0x1, [@generic="09211e8bcc0398eff82c1be62bcb9c01667c3ef500ed05957eb084ee77b520166005f99bd6bcd82bfdb2877d8c80dc77c3874da9a7c5e1a43cf30cae094695b20247cb1d", @nested={0x4, 0x91}, @typed={0x8, 0xfb, 0x0, 0x0, @fd}, @generic="35e2455a021ec4812a3df18e0a19168a576137dc5bc546ee0b089389c0592de6a2bfd466d614c059ec4f988ff90f3cc2b91be8af1ff933a26b0407c4ffc7147047ccae0ec6d1"]}, @nested={0x4, 0x63}, @generic="66c20d894d612dd2ee00cbcf05f38d78ef8c9aed8c8284a923092d710007372f37425ac25e61d9613e8e5917b7ba5e017b9899ae54d63645f53db71277427abb98264f447872162a8d492a1902c7ff2dd562c1a4f005e915cfd01efd833ae66f5d0f2afb651fc83dfd7b0c00e2b62614c135146cff6d80ed1c4d86e80372ff6475ee768710cab93d9ae4c218e3e3f8c85f26cb2aa402b4f88a7185e873a809fa530293b7468910e4b5b92399ae7f4c971d315c31b12c8e64d344f990ddc3f70d98faa8b614da1f3663cd5212098499277d435c6ceb44cb6b5506f733cd6e3190ae649a86273bcb", @nested={0xf4, 0x64, 0x0, 0x1, [@nested={0x4, 0x2e}, @typed={0x9, 0x7, 0x0, 0x0, @str='@,{^\x00'}, @generic="702671a87e498ff47d1b05f790d379df25721e7dae399c3a12cc66e2211ae9dfa43afca828205bd51734120784cac5ffdcf8c95a111f9a896be29bf6a07365cb9fc3260f21249202193d24e4ef7cba8eed6ea8e2d0138b9b42473b16ad4d555fa7cd7ab61a18a66bee0f340077310ad056105654ee8285094d10222db57a740b6f96486351a90d6948eab571064ce7829da0cf9e73a6fbb97ed2ac4676167a3469a88726356cae7d3656cc88e8668fd1f6800d6a44d3855b81f65fbca000daa0c15ec012ca2ed9808b2889e5ea569ba0041fb7133ac65380a0cd8d93dc8113f0"]}, @generic="fef0e5dfb2cf1f5f9e80f0c117d9416cc2e712d3a77f66127cc73d4daa8477ac38ed9805abaff4b22304b4d6fc8569d735df8d0d141433528d95c7d59117b150a4a042d7cc2df69262b58eb201cdf5d16671ac758c81f98c1beb3efa43054177e2a713b844c9c88e74319ba4b6b38710b12df0"]}, 0x4d4}], 0x4, &(0x7f00000005c0)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000014000000000000000100000001000000", @ANYRES32=r1, @ANYBLOB="000000001c000000000000000100000001", @ANYRES32=r1, @ANYRES32=r2, @ANYRES32, @ANYBLOB="00000000340000000000000001000000010000", @ANYRES32=r2, @ANYRES32=r0, @ANYRES32, @ANYRES32, @ANYRES32=r2, @ANYRES32=r2, @ANYRES32, @ANYRESHEX=r2, @ANYRES32, @ANYRES32=r1, @ANYRES32=r1, @ANYRES32=r0, @ANYRES32=r0, @ANYRES32, @ANYRES32=r1, @ANYRES32, @ANYRESHEX=r2, @ANYRES32=r0, @ANYRES32, @ANYRES8=0x0, @ANYRES32=r1, @ANYRES32=r1, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0x130, 0x4004810}, 0x4000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r5 = socket(0x840000000002, 0x3, 0x100) r6 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$bt_BT_VOICE(r6, 0x112, 0xb, &(0x7f0000000940)=0x3, 0x2) connect$bt_sco(r6, &(0x7f0000001040), 0x8) connect$inet(r5, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_ro(r7, &(0x7f0000000200)='freezer.parent_freezing\x00', 0x0, 0x0) setsockopt$MRT_PIM(r5, 0x0, 0xcf, 0x0, 0x0) 12.438391008s ago: executing program 2 (id=571): bpf$MAP_CREATE(0x0, 0x0, 0x50) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) sched_setattr(0x0, &(0x7f0000000180)={0x38, 0x5, 0x8, 0x18001, 0x0, 0x9, 0x100000001, 0xffffffff, 0x108, 0x65aa}, 0x0) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0) symlink(&(0x7f0000000000)='.\x00', 0x0) mknod(&(0x7f00000000c0)='./file1/file3\x00', 0xc000, 0x81b) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x403, 0x6030, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x2}}}}]}}]}}, 0x0) syz_usb_control_io(r2, 0x0, &(0x7f0000000940)={0x44, &(0x7f0000000380)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r2, 0x0, 0x0) fsopen(0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000037c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000881}, 0x44040) mprotect(&(0x7f0000e37000/0x3000)=nil, 0x3000, 0x100000d) r4 = socket$isdn(0x22, 0x2, 0x25) bind$isdn(r4, &(0x7f0000000200)={0x22, 0x7f, 0x8, 0x23, 0x5}, 0x6) 11.353326097s ago: executing program 3 (id=574): r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x10) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x48) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x3, 0x4, 0x7ffe, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfffffffe, 0xffffffff}, 0x0) r3 = openat$kvm(0xffffffffffffff9c, 0x0, 0x22102, 0x0) ioctl$KVM_GET_SUPPORTED_HV_CPUID_sys(r3, 0xc008aec1, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWSETELEM={0x14, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x3c}, 0x1, 0x0, 0x0, 0x4000850}, 0x40801) r5 = syz_open_dev$vim2m(0x0, 0x5, 0x2) writev(0xffffffffffffffff, &(0x7f0000000200), 0x0) shutdown(0xffffffffffffffff, 0x1) socket$nl_generic(0x10, 0x3, 0x10) ioctl$vim2m_VIDIOC_DQBUF(r5, 0xc0585611, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)={0x1c, 0x2e, 0x9, 0x70bd27, 0x0, {0x4}, [@typed={0x8, 0x18, 0x0, 0x0, @binary="05ac0f00"}]}, 0x1c}, 0x1, 0x0, 0x0, 0x42804}, 0x0) munmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000) r7 = openat$nullb(0xffffffffffffff9c, &(0x7f00000001c0), 0x185802, 0x0) sendfile(r7, r7, 0x0, 0x200000) r8 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="3c0000001000010400000000fddbdfaaabeb6ad1ff5afb61832500000000a4bf410a2fd6f1d7acc92d71aef65401e8e0ac3ade00e7542e6fba9c30bdd65a559a2bbceeba34714d44e172161b7f43e44b3d43ed34ed3620c301f5fd5c3f92fe849e6f2d02af97899b167c9cf25dc6578711dab70da77b7c34fff59c2856cedf94f09960", @ANYRES32=0x0, @ANYBLOB="00010000ac0000001c0012800b000100697036746e6c00000c00028006000f0003000000"], 0x3c}, 0x1, 0x0, 0x0, 0x40001}, 0x20004090) 10.298869612s ago: executing program 1 (id=577): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x100030) ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f00000001c0)={0x79, 0x0, 0xe3c}) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x4, 0x3, 0x100000, 0x2000, &(0x7f000000f000/0x2000)=nil}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0xcccc0000, 0x1000, &(0x7f0000f15000/0x1000)=nil}) r2 = openat$tun(0xffffffffffffff9c, 0x0, 0xa000, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$sock_linger(r3, 0x1, 0x3c, &(0x7f0000000180)={0x1, 0x9}, 0x8) r4 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) quotactl_fd$Q_SYNC(r4, 0xffffffff80000100, 0x0, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r7 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f0000000d40)={0x0, 0x0, r8, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(0xffffffffffffffff, 0xc06864ce, &(0x7f0000000340)={r9, 0x101, 0x3, 0x0, 0x0, [0x0], [0x0, 0x7, 0x0, 0xfffffffc], [0x0, 0x80000006, 0x2], [0x5, 0x0, 0x1, 0x5]}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r7, 0xc02064b2, &(0x7f0000000140)={0x3ff, 0x2, 0x806}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r7, 0xc00c642d, &(0x7f0000000080)={r10, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, &(0x7f0000000300)={0x0, 0x0, r11}) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'dvmrp1\x00', 0x2}) ioctl$TUNSETOFFLOAD(r2, 0x400454c9, 0xba98575a95aeb70d) ioctl$TUNSETLINK(r2, 0x400454cd, 0x328) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000040)={0x10003, 0x5, 0xa000, 0x1000, &(0x7f0000fd3000/0x1000)=nil}) r12 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r12, 0xffffffffffffffff, 0x0) 10.081321344s ago: executing program 0 (id=579): socket$vsock_stream(0x28, 0x1, 0x0) r0 = socket$vsock_stream(0x28, 0x1, 0x0) dup(r0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000200)={0xffffffffffffffff, 0x0, 0x3, 0x0, &(0x7f00000002c0)='\\ S', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x4c) r1 = syz_io_uring_setup(0x54d, &(0x7f0000000040)={0x0, 0x735a, 0x100, 0x805, 0x350}, &(0x7f0000000100)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x2e, 0x0, 0x0, 0x5}]}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_WRITE={0x17, 0x1, 0x2007, @fd, 0xffffffffffffff7f, 0x0, 0x0, 0x4, 0x1}) io_uring_enter(r1, 0x47bc, 0x0, 0x0, 0x0, 0x0) 9.908316921s ago: executing program 1 (id=580): syz_create_resource$binfmt(&(0x7f0000000040)='./file0\x00') openat$uinput(0xffffffffffffff9c, 0x0, 0x802, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008a}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$MAP_CREATE(0x0, 0x0, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r3, &(0x7f0000000140)={0xa, 0x4e24, 0x3, @remote, 0x3}, 0x1c) r4 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r4, 0x0, 0x27, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) r5 = socket$netlink(0x10, 0x3, 0x0) writev(r5, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r5, &(0x7f0000000080)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200000000000006040000000000f93132", 0x39}, {&(0x7f00000004c0)}], 0x2) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x4e1c, 0x4, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x3e}}, 0x3fff8000}, 0x1c) sendmmsg$inet6(r3, &(0x7f0000001980)=[{{&(0x7f0000000100)={0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, '\x00', 0x64}, 0x10}, 0x1c, 0x0}}], 0x40000000000024e, 0x20002040) 7.551637624s ago: executing program 0 (id=581): r0 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x2001) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x14, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d960001000000000000000000007efff100004000", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c527d3d458dd4992861ac00", "f4bd000000801900", [0x8, 0xffffffff9673e35d]}}) 7.335402915s ago: executing program 1 (id=582): openat$uhid(0xffffffffffffff9c, 0x0, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpid() prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x1400210bce) ioctl$vim2m_VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, &(0x7f00000005c0)={0x43e8, 0x5, 0x2, {0x1, @win={{0x1, 0x7fffffff, 0x5}, 0x3, 0x8007, &(0x7f00000001c0)={{0x5, 0x1, 0x10001, 0x3}}, 0x3, 0x0, 0x7}}, 0x1}) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r0 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x4) read$msr(r0, &(0x7f0000002700)=""/102392, 0x18ff8) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r3) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r4}, &(0x7f0000000000), &(0x7f00000002c0)=r1}, 0x20) recvmsg$unix(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000380)=""/243, 0xf3}, {&(0x7f0000000300)=""/105, 0x69}], 0x2}, 0x10042) 6.924927367s ago: executing program 5 (id=584): open$dir(&(0x7f0000000040)='./file0\x00', 0x208600, 0x140) mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000002280)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x8000}}) statx(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x800, 0xf0cb2f4a0c2cfc5d, 0x0) 6.760827469s ago: executing program 0 (id=585): r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x1, 0x1) r1 = io_uring_setup(0x60e5, &(0x7f0000000180)={0x0, 0x558, 0x40, 0x1, 0x156, 0x0, r0}) syz_io_uring_setup(0x10d, &(0x7f0000000100)={0x0, 0x405885, 0x100, 0x0, 0x347, 0x0, r1}, &(0x7f0000000240)=0x0, &(0x7f00000000c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x4004, @fd_index=0x3, 0x0, 0x0}) socket$packet(0x11, 0x3, 0x300) socket(0x10, 0x803, 0x0) openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x300000a, 0x4031, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xd, 0x3, &(0x7f0000000140)=ANY=[@ANYBLOB="1800"/14], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x94) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) pivot_root(0x0, 0x0) 5.980564567s ago: executing program 2 (id=586): socket$packet(0x11, 0x3, 0x300) socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) ioctl$TUNSETVNETHDRSZ(0xffffffffffffffff, 0x400454d8, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x2000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$OSF_MSG_ADD(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x1508}}, 0x4) 5.858280937s ago: executing program 5 (id=587): r0 = openat(0xffffffffffffff9c, 0x0, 0x1a000, 0x13) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) r3 = fsopen(0x0, 0x1) setfsgid(0x0) sendmsg$netlink(r0, &(0x7f0000000880)={&(0x7f00000000c0)=@proc={0x10, 0x0, 0x25dfdbfb, 0x4}, 0xc, &(0x7f0000000280)=[{&(0x7f0000000180)={0x18, 0x25, 0x200, 0x70bd26, 0x25dfdbfc, "", [@typed={0x8, 0x83, 0x0, 0x0, @u32=0x5}]}, 0x18}, {&(0x7f0000001080)={0x10fc, 0x30, 0x4, 0x70bd2b, 0x25dfdbfb, "", [@generic="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", @typed={0x8, 0xb4, 0x0, 0x0, @fd=r1}, @typed={0x8, 0x2e, 0x0, 0x0, @fd=r3}, @generic="c652b030d00f721c70033df7f6c868d58c98bb0a7127161adee99fdec54540a4677387780924537c50ae18a25f6e07c1c99f1c13cd012ef732e3a3f0d1ea14a6d830ccec71a8b8f996f98cb628b4b3d7cbf6d3e9f259f7692fe914107c3225f13bbb98387af47fc96589f448399efb9f26770e0fe6c4eb94934f767c19fc0b9fcc60e189330ed64befe4c964b9359419f7337fbca400cc4a925e4d0b4717321ff70a0a84c99ffc", @nested={0x24, 0x61, 0x0, 0x1, [@nested={0x4, 0x22}, @typed={0xc, 0x125, 0x0, 0x0, @u64=0x3ff}, @typed={0x8, 0x28, 0x0, 0x0, @pid=0xffffffffffffffff}, @typed={0x8, 0x6f, 0x0, 0x0, @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}}]}, @typed={0x8, 0x74, 0x0, 0x0, @u32=0x4}, @typed={0x5, 0x113, 0x0, 0x0, @str='\x00'}]}, 0x10fc}, {&(0x7f0000000300)={0x138, 0x3a, 0x800, 0x70bd2b, 0x25dfdbff, "", [@generic="00819694173eb569f55357a428db99f4ba083ae8243a84f6ade4b5f61c7549666514f6f03aee92d73df2e01bbcd5f7870d3ed2770e80efa467021161674e67c020250119c3d0904250", @typed={0x8, 0x110, 0x0, 0x0, @u32=0x80000000}, @nested={0xc3, 0x62, 0x0, 0x1, [@typed={0x8, 0xbc, 0x0, 0x0, @uid}, @generic="7b073b36e2907a68e9abac6ff1b797d7bc3bf6c6c7b83ca0b54c34c81a446140fe5998af37cbeb35b35b3d12f407d3e2e98aff5f61b9234566f62dcc05e935ac2a9f125e8122b613df1f89dc3812b87914e5f6ba965ab0fb9f13ab13ed34335944ddd12fb02ab2632a9df68c25142ca03bad2032a8ee20501e0af3f9a138570237345d6e1ced47bcf3c5a48f3b0727ac2987956b156b632a908084", @typed={0xc, 0x28, 0x0, 0x0, @u64=0xbba}, @nested={0x4, 0x112}, @nested={0x4, 0x7}, @nested={0x4, 0x14f}, @nested={0x4, 0x19}]}, @typed={0xd, 0x8d, 0x0, 0x0, @str='$(((-+&(\x00'}]}, 0x138}, {&(0x7f0000000980)={0x4d4, 0x27, 0x400, 0x70bd25, 0x25dfdbfc, "", [@nested={0x1d2, 0xcb, 0x0, 0x1, [@typed={0xb, 0x5d, 0x0, 0x0, @str='$\'/@#\x0f\x00'}, @generic="b0a19c87b6548f966785f191056470cd01f11346c547b54b174ce0106e0ff696fd1d6aadbb529ff57e3f2169eb9affb2482e78b3c2cff417e788ee0dd0308379cc88eeb011fe389f5850cbf37bb9a3e9801d22ddd2114cc43a47e33185d1ddf6e4b0454287c1edd8d897a272d14e08", @nested={0x4, 0x40}, @generic="8a2559a1ee39bd3246337c190bf5d0e38db57b4e4de2f67c721dce3038939e78f7d1b46a4c2b93db4cb6fa699703f48c2390b006450df8e5ec5a3a82bb7ee0bc0b3f5abca6347e0a8304961d2d9708cdd655c0a39092af5a816b966735c0d50605b5387688b1e4b68ccfa1143d832a4498b0b00942b58bf9e42e17a606049bdb6d44ea8c", @nested={0x4, 0xab}, @typed={0x8, 0x11f, 0x0, 0x0, @fd=r3}, @nested={0x4, 0x120}, @generic="6357bb0a1227205573f9075b7cee0bae368eabd1a9b79538ead305bdb68d6851b05f0c19a28a3a1e480c6f23c65d79ff868ef130b673fd1f287f1272f1fd9eb9ddcc786b5372f26f5aa1a38bbb1705f1", @generic="0d4ecfbc1c44ad7ca7016d03d072a483c04187a115e1e4f16ec25a597e9b63b2ad947f0a9f40b7e2cfa5dff14593577d2d5d3b3d55980c0c5925652db67b7ff3ea92a5bf1c50aa5f952d1c3e331c40b18d8517622bc17ad364f292aab8fbc8010ab01db3098a6e507b8321"]}, @nested={0x9a, 0x48, 0x0, 0x1, [@generic="09211e8bcc0398eff82c1be62bcb9c01667c3ef500ed05957eb084ee77b520166005f99bd6bcd82bfdb2877d8c80dc77c3874da9a7c5e1a43cf30cae094695b20247cb1d", @nested={0x4, 0x91}, @typed={0x8, 0xfb, 0x0, 0x0, @fd}, @generic="35e2455a021ec4812a3df18e0a19168a576137dc5bc546ee0b089389c0592de6a2bfd466d614c059ec4f988ff90f3cc2b91be8af1ff933a26b0407c4ffc7147047ccae0ec6d1"]}, @nested={0x4, 0x63}, @generic="66c20d894d612dd2ee00cbcf05f38d78ef8c9aed8c8284a923092d710007372f37425ac25e61d9613e8e5917b7ba5e017b9899ae54d63645f53db71277427abb98264f447872162a8d492a1902c7ff2dd562c1a4f005e915cfd01efd833ae66f5d0f2afb651fc83dfd7b0c00e2b62614c135146cff6d80ed1c4d86e80372ff6475ee768710cab93d9ae4c218e3e3f8c85f26cb2aa402b4f88a7185e873a809fa530293b7468910e4b5b92399ae7f4c971d315c31b12c8e64d344f990ddc3f70d98faa8b614da1f3663cd5212098499277d435c6ceb44cb6b5506f733cd6e3190ae649a86273bcb", @nested={0xf4, 0x64, 0x0, 0x1, [@nested={0x4, 0x2e}, @typed={0x9, 0x7, 0x0, 0x0, @str='@,{^\x00'}, @generic="702671a87e498ff47d1b05f790d379df25721e7dae399c3a12cc66e2211ae9dfa43afca828205bd51734120784cac5ffdcf8c95a111f9a896be29bf6a07365cb9fc3260f21249202193d24e4ef7cba8eed6ea8e2d0138b9b42473b16ad4d555fa7cd7ab61a18a66bee0f340077310ad056105654ee8285094d10222db57a740b6f96486351a90d6948eab571064ce7829da0cf9e73a6fbb97ed2ac4676167a3469a88726356cae7d3656cc88e8668fd1f6800d6a44d3855b81f65fbca000daa0c15ec012ca2ed9808b2889e5ea569ba0041fb7133ac65380a0cd8d93dc8113f0"]}, @generic="fef0e5dfb2cf1f5f9e80f0c117d9416cc2e712d3a77f66127cc73d4daa8477ac38ed9805abaff4b22304b4d6fc8569d735df8d0d141433528d95c7d59117b150a4a042d7cc2df69262b58eb201cdf5d16671ac758c81f98c1beb3efa43054177e2a713b844c9c88e74319ba4b6b38710b12df0"]}, 0x4d4}], 0x4, &(0x7f00000005c0)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=r2, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000014000000000000000100000001000000", @ANYRES32=r1, @ANYBLOB="000000001c000000000000000100000001", @ANYRES32=r1, @ANYRES32=r3, @ANYRES32, @ANYBLOB="00000000340000000000000001000000010000", @ANYRES32=r3, @ANYRES32=r0, @ANYRES32, @ANYRES32, @ANYRES32=r3, @ANYRES32=r3, @ANYRES32, @ANYRESHEX=r3, @ANYRES32, @ANYRES32=r1, @ANYRES32=r1, @ANYRES32=r0, @ANYRES32=r0, @ANYRES32, @ANYRES32=r1, @ANYRES32, @ANYRESHEX=r3, @ANYRES32=r0, @ANYRES32=r2, @ANYRES8=0x0, @ANYRES32=r1, @ANYRES32=r1, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32=r2, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0x130, 0x4004810}, 0x4000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r4, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r6 = socket(0x840000000002, 0x3, 0x100) r7 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$bt_BT_VOICE(r7, 0x112, 0xb, &(0x7f0000000940)=0x3, 0x2) connect$bt_sco(r7, &(0x7f0000001040), 0x8) connect$inet(r6, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_ro(r8, &(0x7f0000000200)='freezer.parent_freezing\x00', 0x0, 0x0) setsockopt$MRT_PIM(r6, 0x0, 0xcf, 0x0, 0x0) 5.518374096s ago: executing program 3 (id=588): sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000380)={0x3c, 0x2, 0x6, 0xc1f5321d5cccd829, 0x0, 0x0, {0x5, 0x0, 0x9}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x7}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040000}, 0x40) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x4001}, 0x0) write(0xffffffffffffffff, &(0x7f0000000500)="ba", 0x1) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r0, 0x2) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000940)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5", 0x4) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x2, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000600)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "f900f5", 0x18, 0x6, 0x1, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0x2, 0x0, 0x0, 0x0, {[@fastopen={0x1e, 0x2}]}}}}}}}}, 0x0) 5.441044008s ago: executing program 0 (id=589): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="4c0000002000010000000000000014000200fc02000000000000000000000000000108000d00020000001400010020010000000000000000000000000001"], 0x4c}}, 0x20000000) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000340)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) write$tun(r0, &(0x7f0000000280)={@val={0x6f01, 0x800}, @val={0x1, 0x0, 0x27, 0x0, 0x27}, @mpls={[], @ipv4=@tcp={{0x6, 0x4, 0x0, 0x0, 0xfd5e, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffff20, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x5, 0xb, 0x0, 0x700, 0x0, 0x18, {[@window={0x9, 0xfffffffffffffec4}, @timestamp={0x5, 0x2, 0xffffff07}, @generic={0x0, 0x2, "d588380003c1"}]}}}}}}, 0xfd6c) 5.352279547s ago: executing program 3 (id=590): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x100030) ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f00000001c0)={0x79, 0x0, 0xe3c}) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x4, 0x3, 0x100000, 0x2000, &(0x7f000000f000/0x2000)=nil}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0xcccc0000, 0x1000, &(0x7f0000f15000/0x1000)=nil}) r2 = openat$tun(0xffffffffffffff9c, 0x0, 0xa000, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$sock_linger(r3, 0x1, 0x3c, &(0x7f0000000180)={0x1, 0x9}, 0x8) r4 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) quotactl_fd$Q_SYNC(r4, 0xffffffff80000100, 0x0, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r7 = syz_open_dev$dri(&(0x7f00000008c0), 0x1, 0x400) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r7, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r7, 0xc06864a1, &(0x7f0000000d40)={0x0, 0x0, r8, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r7, 0xc06864ce, &(0x7f0000000340)={r9, 0x101, 0x3, 0x0, 0x0, [0x0], [0x0, 0x7, 0x0, 0xfffffffc], [0x0, 0x80000006, 0x2], [0x5, 0x0, 0x1, 0x5]}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000140)={0x3ff, 0x2, 0x806}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000080)={r10, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r7, 0xc00c642e, &(0x7f0000000300)={0x0, 0x0, r11}) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'dvmrp1\x00', 0x2}) ioctl$TUNSETOFFLOAD(r2, 0x400454c9, 0xba98575a95aeb70d) ioctl$TUNSETLINK(r2, 0x400454cd, 0x328) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000040)={0x10003, 0x5, 0xa000, 0x1000, &(0x7f0000fd3000/0x1000)=nil}) r12 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r12, 0xffffffffffffffff, 0x0) 4.608790366s ago: executing program 0 (id=591): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r0, 0xc004743e, 0x110e22fff6) r1 = socket$rxrpc(0x21, 0x2, 0xa) futex(&(0x7f000000cffc)=0x1, 0x6, 0x0, 0x0, 0x0, 0x0) futex(0x0, 0x3, 0x2, 0x0, &(0x7f0000000040), 0x0) setsockopt$sock_int(r1, 0x1, 0x7, &(0x7f0000000240), 0x4) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x28}}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getpgid(0x0) r5 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x1) ioctl$KVM_SET_MEMORY_ATTRIBUTES(r6, 0x4020aed2, &(0x7f00000000c0)={0xffff1000, 0x301000, 0x8}) ioctl$KVM_SET_MEMORY_ATTRIBUTES(r6, 0x4020aed2, &(0x7f00000097c0)={0xffff1000, 0x11b000, 0x8}) sendmsg$nl_route(r2, 0x0, 0x40000c0) bind$packet(0xffffffffffffffff, &(0x7f0000000180)={0x11, 0x10, 0x0, 0x1, 0x0, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, 0x14) ioctl$HIDIOCGRDESC(0xffffffffffffffff, 0x90044802, &(0x7f0000005000)={0x80f, "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"}) 4.547777597s ago: executing program 3 (id=592): syz_create_resource$binfmt(&(0x7f0000000040)='./file0\x00') openat$uinput(0xffffffffffffff9c, 0x0, 0x802, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008a}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$MAP_CREATE(0x0, 0x0, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r3, &(0x7f0000000140)={0xa, 0x4e24, 0x3, @remote, 0x3}, 0x1c) r4 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r4, 0x0, 0x27, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) r5 = socket$netlink(0x10, 0x3, 0x0) writev(r5, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r5, &(0x7f0000000080)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200000000000006040000000000f93132", 0x39}, {&(0x7f00000004c0)}], 0x2) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x4e1c, 0x4, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x3e}}, 0x3fff8000}, 0x1c) sendmmsg$inet6(r3, &(0x7f0000001980)=[{{&(0x7f0000000100)={0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, '\x00', 0x64}, 0x10}, 0x1c, 0x0}}], 0x40000000000024e, 0x20002040) 4.481550923s ago: executing program 1 (id=593): syz_open_dev$video(0x0, 0x75, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x4008032, 0xffffffffffffffff, 0x2000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x89f2, &(0x7f0000000900)={'tunl0\x00', @random="0000230c1100"}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x60600, 0x0) ioctl$FS_IOC_FSSETXATTR(r2, 0x401c5820, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_PRE_FAULT_MEMORY(r5, 0xc040aed5, &(0x7f00000000c0)={0x100000, 0x21d000}) 2.279898796s ago: executing program 3 (id=594): r0 = socket(0xa, 0x3, 0xff) setsockopt$inet6_int(r0, 0x29, 0x5, &(0x7f0000000040)=0xfffffff9, 0x4) syz_emit_ethernet(0x4e, &(0x7f00000001c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa3986dd6c370c8900182b01fe800000000000000000000000000025fe8000000000000000000000000000aaff"], 0x0) setsockopt$inet6_int(r0, 0x29, 0x4, &(0x7f0000000000)=0x6568, 0x4) recvmmsg(r0, &(0x7f0000003a00)=[{{0x0, 0x0, 0x0}, 0x3}], 0x1, 0x40010002, 0x0) 2.176912404s ago: executing program 5 (id=595): sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x5, 0x9, 0x6, 0x0, 0xb49, 0x9, 0x8, 0x2, 0x3}, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaa"], 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x8, 0xf, &(0x7f0000000200)=ANY=[@ANYBLOB="1800008080b63428e900"/20, @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7020000000000008500000051000000bf0900000000000055"], 0x0, 0x47, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb86dd69010000001406fffe800000000000000000000039fe8000000000000000000000000000aa4e224e24000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="51c2"], 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000007880)=[{{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000040)="af0ac9", 0x3}], 0x1}}], 0x1, 0x4000000) r0 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x2001) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x14, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d960001000000000000000000007efff100004000", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c527d3d458dd4992861ac00", "f4bd000000801900", [0x8, 0xffffffff9673e35d]}}) 1.937823144s ago: executing program 5 (id=596): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000740)={0x3c, 0x2, 0x6, 0x101, 0x6000000, 0x0, {0x4}, [@IPSET_ATTR_REVISION={0x5, 0x4, 0x72}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x3}, @IPSET_ATTR_TYPENAME={0xe, 0x3, 'bitmap:ip\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x3c}}, 0x0) 1.781960268s ago: executing program 5 (id=597): r0 = open$dir(&(0x7f0000000040)='./file0\x00', 0x208600, 0x140) mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000002280)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x8000}}) statx(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x800, 0xf0cb2f4a0c2cfc5d, 0x0) read$FUSE(r1, &(0x7f0000006380)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r1, &(0x7f0000001200)={0x50, 0x0, r2, {0x7, 0x2d, 0x0, 0x0, 0x0, 0x0, 0x8fa}}, 0x50) read$FUSE(r1, &(0x7f0000004340)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INTERRUPT(r1, &(0x7f0000000200)={0x10, 0xffffffffffffffda, r3}, 0x10) fchmodat(r0, &(0x7f0000000000)='.\x00', 0xfffffed3) 1.124221148s ago: executing program 2 (id=598): socketpair$unix(0x1, 0x3, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x8001, 0x0, 0x9, 0x4, 0xfffffe0000000001, 0xfa14, 0xffffffff}, 0x0) openat$vimc2(0xffffffffffffff9c, 0x0, 0x2, 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000240), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000000c0)) ioctl$PPPIOCSFLAGS1(r0, 0x40047459, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x2, 0x8, 0x0, 0x3}, 0x0) ioprio_get$uid(0x3, 0x0) 819.878912ms ago: executing program 5 (id=599): r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x1, 0x1) r1 = io_uring_setup(0x60e5, &(0x7f0000000180)={0x0, 0x558, 0x40, 0x1, 0x156, 0x0, r0}) syz_io_uring_setup(0x10d, &(0x7f0000000100)={0x0, 0x405885, 0x100, 0x0, 0x347, 0x0, r1}, &(0x7f0000000240)=0x0, &(0x7f00000000c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x4004, @fd_index=0x3, 0x0, 0x0}) socket$packet(0x11, 0x3, 0x300) socket(0x10, 0x803, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x300000a, 0x4031, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xd, 0x3, &(0x7f0000000140)=ANY=[@ANYBLOB="1800"/14], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x94) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) pivot_root(0x0, 0x0) 613.904345ms ago: executing program 2 (id=600): sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000380)={0x3c, 0x2, 0x6, 0xc1f5321d5cccd829, 0x0, 0x0, {0x5, 0x0, 0x9}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x7}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040000}, 0x40) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x4001}, 0x0) write(0xffffffffffffffff, &(0x7f0000000500)="ba", 0x1) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r0, 0x2) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000940)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5", 0x4) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x2, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000600)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "f900f5", 0x18, 0x6, 0x1, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0x2, 0x0, 0x0, 0x0, {[@fastopen={0x1e, 0x2}]}}}}}}}}, 0x0) 611.246516ms ago: executing program 3 (id=601): read$FUSE(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_PR_STREAM_STATUS(0xffffffffffffffff, 0x84, 0x74, 0x0, 0x0) openat$fb0(0xffffffffffffff9c, 0x0, 0x0, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) r3 = inotify_init1(0x0) inotify_add_watch(r3, &(0x7f0000000040)='./file1\x00', 0x7f7) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$binfmt_misc(r1, &(0x7f0000000000), 0xfffffecc) r4 = openat(0xffffffffffffff9c, 0x0, 0x42, 0x0) ioctl$FS_IOC_SETFLAGS(r4, 0x40086602, 0x0) splice(r0, 0x0, r2, 0x0, 0x4ffe6, 0x0) 381.492999ms ago: executing program 2 (id=602): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="4c0000002000010000000000000014000200fc02000000000000000000000000000108000d00020000001400010020010000000000000000000000000001"], 0x4c}}, 0x20000000) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000340)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) write$tun(r0, &(0x7f0000000280)={@val={0x6f01, 0x800}, @val={0x1, 0x0, 0x27, 0x0, 0x27}, @mpls={[], @ipv4=@tcp={{0x6, 0x4, 0x0, 0x0, 0xfd5e, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffff20, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x5, 0xb, 0x0, 0x700, 0x0, 0x18, {[@window={0x9, 0xfffffffffffffec4}, @timestamp={0x5, 0x2, 0xffffff07}, @generic={0x0, 0x2, "d588380003c1"}]}}}}}}, 0xfd6c) 77.896949ms ago: executing program 2 (id=603): openat$uhid(0xffffffffffffff9c, 0x0, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpid() prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x1400210bce) ioctl$vim2m_VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, &(0x7f00000005c0)={0x43e8, 0x5, 0x2, {0x1, @win={{0x1, 0x7fffffff, 0x5}, 0x3, 0x8007, &(0x7f00000001c0)={{0x5, 0x1, 0x10001, 0x3}}, 0x3, 0x0, 0x7}}, 0x1}) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r0 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x4) read$msr(r0, &(0x7f0000002700)=""/102392, 0x18ff8) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r3) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r4}, &(0x7f0000000000), &(0x7f00000002c0)=r1}, 0x20) recvmsg$unix(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000380)=""/243, 0xf3}, {&(0x7f0000000300)=""/105, 0x69}], 0x2}, 0x10042) 0s ago: executing program 0 (id=604): syz_create_resource$binfmt(&(0x7f0000000040)='./file0\x00') openat$uinput(0xffffffffffffff9c, 0x0, 0x802, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008a}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$MAP_CREATE(0x0, 0x0, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r3, &(0x7f0000000140)={0xa, 0x4e24, 0x3, @remote, 0x3}, 0x1c) r4 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r4, 0x0, 0x27, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) r5 = socket$netlink(0x10, 0x3, 0x0) writev(r5, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r5, &(0x7f0000000080)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200000000000006040000000000f93132", 0x39}, {&(0x7f00000004c0)}], 0x2) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x4e1c, 0x4, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x3e}}, 0x3fff8000}, 0x1c) sendmmsg$inet6(r3, &(0x7f0000001980)=[{{&(0x7f0000000100)={0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, '\x00', 0x64}, 0x10}, 0x1c, 0x0}}], 0x40000000000024e, 0x20002040) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.192' (ED25519) to the list of known hosts. [ 90.353025][ T5808] cgroup: Unknown subsys name 'net' [ 90.513015][ T5808] cgroup: Unknown subsys name 'cpuset' [ 90.528470][ T5808] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 92.421114][ T5808] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 94.882127][ T5822] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 94.890785][ T5822] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 94.899991][ T5822] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 94.912745][ T5826] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 94.923573][ T5826] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 94.946973][ T5828] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 94.958588][ T5826] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 94.976846][ T5826] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 94.987709][ T5833] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 94.990532][ T5826] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 95.003639][ T5833] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 95.019888][ T5833] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 95.030631][ T5832] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 95.040413][ T5832] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 95.049003][ T5832] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 95.058970][ T5832] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 95.071937][ T5833] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 95.074976][ T5832] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 95.089086][ T5833] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 95.093654][ T5833] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 95.108477][ T5832] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 95.117088][ T5833] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 95.118936][ T5832] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 95.132114][ T5833] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 95.147530][ T5826] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 96.045388][ T5821] chnl_net:caif_netlink_parms(): no params data found [ 96.281836][ T5820] chnl_net:caif_netlink_parms(): no params data found [ 96.339100][ T5829] chnl_net:caif_netlink_parms(): no params data found [ 96.392139][ T5835] chnl_net:caif_netlink_parms(): no params data found [ 96.507327][ T5827] chnl_net:caif_netlink_parms(): no params data found [ 96.600006][ T5821] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.611908][ T5821] bridge0: port 1(bridge_slave_0) entered disabled state [ 96.622332][ T5821] bridge_slave_0: entered allmulticast mode [ 96.632883][ T5821] bridge_slave_0: entered promiscuous mode [ 96.695080][ T5821] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.704466][ T5821] bridge0: port 2(bridge_slave_1) entered disabled state [ 96.714072][ T5821] bridge_slave_1: entered allmulticast mode [ 96.724939][ T5821] bridge_slave_1: entered promiscuous mode [ 96.942190][ T5821] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 96.972921][ T5820] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.983695][ T5820] bridge0: port 1(bridge_slave_0) entered disabled state [ 96.994436][ T5820] bridge_slave_0: entered allmulticast mode [ 97.004706][ T5820] bridge_slave_0: entered promiscuous mode [ 97.015309][ T5829] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.026767][ T5829] bridge0: port 1(bridge_slave_0) entered disabled state [ 97.040002][ T5829] bridge_slave_0: entered allmulticast mode [ 97.050354][ T5829] bridge_slave_0: entered promiscuous mode [ 97.081254][ T5821] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 97.112737][ T5835] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.122330][ T5835] bridge0: port 1(bridge_slave_0) entered disabled state [ 97.132517][ T5835] bridge_slave_0: entered allmulticast mode [ 97.133043][ T5828] Bluetooth: hci0: command tx timeout [ 97.145884][ T5835] bridge_slave_0: entered promiscuous mode [ 97.157901][ T5820] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.166587][ T5820] bridge0: port 2(bridge_slave_1) entered disabled state [ 97.175696][ T5820] bridge_slave_1: entered allmulticast mode [ 97.184780][ T5820] bridge_slave_1: entered promiscuous mode [ 97.193383][ T5829] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.204871][ T5829] bridge0: port 2(bridge_slave_1) entered disabled state [ 97.210210][ T5828] Bluetooth: hci1: command tx timeout [ 97.213368][ T5833] Bluetooth: hci4: command tx timeout [ 97.221687][ T5826] Bluetooth: hci2: command tx timeout [ 97.230831][ T5829] bridge_slave_1: entered allmulticast mode [ 97.241983][ T5829] bridge_slave_1: entered promiscuous mode [ 97.284436][ T5835] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.292942][ T5828] Bluetooth: hci3: command tx timeout [ 97.301265][ T5835] bridge0: port 2(bridge_slave_1) entered disabled state [ 97.311818][ T5835] bridge_slave_1: entered allmulticast mode [ 97.322683][ T5835] bridge_slave_1: entered promiscuous mode [ 97.398597][ T5821] team0: Port device team_slave_0 added [ 97.451613][ T5827] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.460791][ T5827] bridge0: port 1(bridge_slave_0) entered disabled state [ 97.469488][ T5827] bridge_slave_0: entered allmulticast mode [ 97.478590][ T5827] bridge_slave_0: entered promiscuous mode [ 97.491483][ T5821] team0: Port device team_slave_1 added [ 97.505762][ T5835] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 97.529610][ T5835] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 97.552057][ T5820] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 97.571792][ T5829] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 97.586405][ T5827] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.595111][ T5827] bridge0: port 2(bridge_slave_1) entered disabled state [ 97.603975][ T5827] bridge_slave_1: entered allmulticast mode [ 97.614614][ T5827] bridge_slave_1: entered promiscuous mode [ 97.657979][ T5820] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 97.673488][ T5829] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 97.690519][ T24] cfg80211: failed to load regulatory.db [ 97.808659][ T5821] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 97.819006][ T5821] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 97.860870][ T5821] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 97.886858][ T5835] team0: Port device team_slave_0 added [ 97.902650][ T5820] team0: Port device team_slave_0 added [ 97.936516][ T5827] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 97.955160][ T5827] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 97.969315][ T5821] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 97.980986][ T5821] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 98.019980][ T5821] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 98.039659][ T5835] team0: Port device team_slave_1 added [ 98.050076][ T5820] team0: Port device team_slave_1 added [ 98.068671][ T5829] team0: Port device team_slave_0 added [ 98.138968][ T5829] team0: Port device team_slave_1 added [ 98.239373][ T5827] team0: Port device team_slave_0 added [ 98.251506][ T5827] team0: Port device team_slave_1 added [ 98.260403][ T5835] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 98.269573][ T5835] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 98.299725][ T5835] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 98.314434][ T5820] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 98.323211][ T5820] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 98.352418][ T5820] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 98.366266][ T5829] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 98.374907][ T5829] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 98.407206][ T5829] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 98.454302][ T5835] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 98.462120][ T5835] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 98.491705][ T5835] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 98.516535][ T5820] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 98.528526][ T5820] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 98.567342][ T5820] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 98.583719][ T5829] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 98.592476][ T5829] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 98.624036][ T5829] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 98.671707][ T5827] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 98.679990][ T5827] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 98.708989][ T5827] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 98.751364][ T5821] hsr_slave_0: entered promiscuous mode [ 98.760628][ T5821] hsr_slave_1: entered promiscuous mode [ 98.775462][ T5827] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 98.784514][ T5827] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 98.829645][ T5827] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 98.920810][ T5835] hsr_slave_0: entered promiscuous mode [ 98.929619][ T5835] hsr_slave_1: entered promiscuous mode [ 98.937436][ T5835] debugfs: 'hsr0' already exists in 'hsr' [ 98.944228][ T5835] Cannot create hsr debugfs directory [ 99.024673][ T5820] hsr_slave_0: entered promiscuous mode [ 99.034951][ T5820] hsr_slave_1: entered promiscuous mode [ 99.043492][ T5820] debugfs: 'hsr0' already exists in 'hsr' [ 99.050339][ T5820] Cannot create hsr debugfs directory [ 99.151973][ T5827] hsr_slave_0: entered promiscuous mode [ 99.160651][ T5827] hsr_slave_1: entered promiscuous mode [ 99.168712][ T5827] debugfs: 'hsr0' already exists in 'hsr' [ 99.176924][ T5827] Cannot create hsr debugfs directory [ 99.192090][ T5829] hsr_slave_0: entered promiscuous mode [ 99.201095][ T5829] hsr_slave_1: entered promiscuous mode [ 99.213469][ T5828] Bluetooth: hci0: command tx timeout [ 99.220045][ T5829] debugfs: 'hsr0' already exists in 'hsr' [ 99.231724][ T5829] Cannot create hsr debugfs directory [ 99.290230][ T5828] Bluetooth: hci1: command tx timeout [ 99.298436][ T5826] Bluetooth: hci2: command tx timeout [ 99.298478][ T5826] Bluetooth: hci4: command tx timeout [ 99.369329][ T5828] Bluetooth: hci3: command tx timeout [ 100.181219][ T5835] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 100.215510][ T5835] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 100.242783][ T5835] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 100.259574][ T5835] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 100.343058][ T5821] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 100.357913][ T5821] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 100.385561][ T5821] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 100.399485][ T5821] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 100.514069][ T5820] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 100.541413][ T5820] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 100.566524][ T5820] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 100.585007][ T5820] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 100.752153][ T5827] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 100.772618][ T5827] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 100.807075][ T5827] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 100.858055][ T5835] 8021q: adding VLAN 0 to HW filter on device bond0 [ 100.867016][ T5827] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 101.026840][ T5835] 8021q: adding VLAN 0 to HW filter on device team0 [ 101.036529][ T5829] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 101.055341][ T5829] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 101.084719][ T5829] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 101.100608][ T5829] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 101.118409][ T1338] bridge0: port 1(bridge_slave_0) entered blocking state [ 101.126702][ T1338] bridge0: port 1(bridge_slave_0) entered forwarding state [ 101.174298][ T1338] bridge0: port 2(bridge_slave_1) entered blocking state [ 101.182222][ T1338] bridge0: port 2(bridge_slave_1) entered forwarding state [ 101.288309][ T5828] Bluetooth: hci0: command tx timeout [ 101.369458][ T5828] Bluetooth: hci1: command tx timeout [ 101.379549][ T5828] Bluetooth: hci4: command tx timeout [ 101.379558][ T5833] Bluetooth: hci2: command tx timeout [ 101.411329][ T5820] 8021q: adding VLAN 0 to HW filter on device bond0 [ 101.448387][ T5828] Bluetooth: hci3: command tx timeout [ 101.534836][ T5821] 8021q: adding VLAN 0 to HW filter on device bond0 [ 101.634138][ T5820] 8021q: adding VLAN 0 to HW filter on device team0 [ 101.682297][ T5821] 8021q: adding VLAN 0 to HW filter on device team0 [ 101.717609][ T1338] bridge0: port 1(bridge_slave_0) entered blocking state [ 101.728190][ T1338] bridge0: port 1(bridge_slave_0) entered forwarding state [ 101.787740][ T1338] bridge0: port 2(bridge_slave_1) entered blocking state [ 101.798519][ T1338] bridge0: port 2(bridge_slave_1) entered forwarding state [ 101.815623][ T1338] bridge0: port 1(bridge_slave_0) entered blocking state [ 101.825939][ T1338] bridge0: port 1(bridge_slave_0) entered forwarding state [ 101.863964][ T5827] 8021q: adding VLAN 0 to HW filter on device bond0 [ 101.902916][ T1338] bridge0: port 2(bridge_slave_1) entered blocking state [ 101.916722][ T1338] bridge0: port 2(bridge_slave_1) entered forwarding state [ 101.977639][ T5829] 8021q: adding VLAN 0 to HW filter on device bond0 [ 102.055773][ T5829] 8021q: adding VLAN 0 to HW filter on device team0 [ 102.107001][ T801] bridge0: port 1(bridge_slave_0) entered blocking state [ 102.118427][ T801] bridge0: port 1(bridge_slave_0) entered forwarding state [ 102.147657][ T5835] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 102.166564][ T5827] 8021q: adding VLAN 0 to HW filter on device team0 [ 102.197603][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 102.207728][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 102.254272][ T1338] bridge0: port 1(bridge_slave_0) entered blocking state [ 102.262193][ T1338] bridge0: port 1(bridge_slave_0) entered forwarding state [ 102.333078][ T1338] bridge0: port 2(bridge_slave_1) entered blocking state [ 102.341089][ T1338] bridge0: port 2(bridge_slave_1) entered forwarding state [ 102.604344][ T5835] veth0_vlan: entered promiscuous mode [ 102.763946][ T5835] veth1_vlan: entered promiscuous mode [ 102.920271][ T5821] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 103.029865][ T5820] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 103.057278][ T5835] veth0_macvtap: entered promiscuous mode [ 103.105196][ T5835] veth1_macvtap: entered promiscuous mode [ 103.222384][ T5829] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 103.247814][ T5835] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 103.278047][ T5835] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 103.355458][ T5821] veth0_vlan: entered promiscuous mode [ 103.368682][ T5828] Bluetooth: hci0: command tx timeout [ 103.375545][ T148] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.385767][ T148] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.427779][ T5827] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 103.438036][ T148] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.448834][ T5828] Bluetooth: hci4: command tx timeout [ 103.448875][ T5828] Bluetooth: hci1: command tx timeout [ 103.449177][ T5828] Bluetooth: hci2: command tx timeout [ 103.471685][ T148] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.530917][ T5833] Bluetooth: hci3: command tx timeout [ 103.542890][ T5821] veth1_vlan: entered promiscuous mode [ 103.594082][ T5820] veth0_vlan: entered promiscuous mode [ 103.698782][ T5829] veth0_vlan: entered promiscuous mode [ 103.749849][ T5820] veth1_vlan: entered promiscuous mode [ 103.780309][ T5829] veth1_vlan: entered promiscuous mode [ 103.935828][ T5821] veth0_macvtap: entered promiscuous mode [ 103.951989][ T1326] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 103.972148][ T1326] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 104.023159][ T5821] veth1_macvtap: entered promiscuous mode [ 104.055481][ T5829] veth0_macvtap: entered promiscuous mode [ 104.079010][ T5820] veth0_macvtap: entered promiscuous mode [ 104.106070][ T148] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 104.114902][ T148] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 104.126964][ T5829] veth1_macvtap: entered promiscuous mode [ 104.161729][ T5820] veth1_macvtap: entered promiscuous mode [ 104.182152][ T5821] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 104.246177][ T5827] veth0_vlan: entered promiscuous mode [ 104.257792][ T5835] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 104.287333][ T5821] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 104.332586][ T5829] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 104.407153][ T5829] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 104.421735][ T148] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.432523][ T148] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.451570][ T5820] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 104.461695][ T5827] veth1_vlan: entered promiscuous mode [ 104.481949][ T148] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.494575][ T148] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.527196][ T5820] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 104.592337][ T1338] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.609245][ T1338] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.641773][ T1338] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.665873][ T1338] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.711558][ T1338] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.740165][ T1338] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.781372][ T1338] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.821050][ T1338] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.994258][ T5827] veth0_macvtap: entered promiscuous mode [ 105.101851][ T5827] veth1_macvtap: entered promiscuous mode [ 105.119680][ T1326] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 105.140226][ T1326] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 105.251559][ T148] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 105.296438][ T148] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 105.320354][ T5827] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 105.400504][ T1326] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 105.432631][ T1326] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 105.452443][ T5827] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 105.494564][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 105.529926][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 105.557823][ T1338] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.610483][ T1338] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.684797][ T1338] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.716765][ T1338] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.789578][ T148] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 105.819722][ T148] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 105.886039][ T1338] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 105.900600][ T1338] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 106.459453][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 106.530018][ T801] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 106.561059][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 106.576722][ T0] NOHZ tick-stop error: local softirq work is pending, handler #240!!! [ 106.593014][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 106.603799][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 106.613668][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 106.624197][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 106.633665][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 106.643355][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 106.654441][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 107.098756][ T801] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 107.220842][ T801] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 107.301014][ T801] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 107.753852][ T5969] netlink: 'syz.0.10': attribute type 3 has an invalid length. [ 108.085161][ T5979] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 108.126217][ T5980] netlink: 24 bytes leftover after parsing attributes in process `syz.2.15'. [ 109.885171][ T5999] netlink: 104 bytes leftover after parsing attributes in process `syz.0.20'. [ 111.787145][ T6019] netlink: 32 bytes leftover after parsing attributes in process `syz.2.26'. [ 113.247494][ T6038] netlink: 56 bytes leftover after parsing attributes in process `syz.4.32'. [ 115.998691][ T5962] usb 3-1: new full-speed USB device number 2 using dummy_hcd [ 116.201527][ T5962] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 116.230727][ T5962] usb 3-1: config 0 has no interfaces? [ 116.246751][ T5962] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 116.299011][ T5962] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 116.331770][ T5962] usb 3-1: config 0 descriptor?? [ 116.612165][ T5962] usb 3-1: USB disconnect, device number 2 [ 116.955389][ T6068] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 117.005358][ T6068] tipc: Started in network mode [ 117.021204][ T6068] tipc: Node identity e286df41d384, cluster identity 4711 [ 117.066228][ T6068] tipc: Enabled bearer , priority 0 [ 117.159053][ T6067] tipc: Disabling bearer [ 120.055933][ T6096] netlink: 56 bytes leftover after parsing attributes in process `syz.3.51'. [ 120.919425][ T6104] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 120.956360][ T6104] tipc: Started in network mode [ 122.270392][ T6108] netlink: 'syz.0.55': attribute type 4 has an invalid length. [ 122.315179][ T6104] tipc: Node identity 2ac2c4412c0c, cluster identity 4711 [ 122.324336][ T6110] netlink: 'syz.0.55': attribute type 4 has an invalid length. [ 122.355369][ T6104] tipc: Enabled bearer , priority 0 [ 122.363963][ T5905] usb 5-1: new full-speed USB device number 2 using dummy_hcd [ 122.511582][ T6102] tipc: Disabling bearer [ 122.651217][ T5905] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 122.699872][ T5905] usb 5-1: config 0 has no interfaces? [ 122.717762][ T5905] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 122.769082][ T5905] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 122.809450][ T5905] usb 5-1: config 0 descriptor?? [ 123.046482][ T5905] usb 5-1: USB disconnect, device number 2 [ 124.048255][ T29] audit: type=1326 audit(1772194529.538:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6123 comm="syz.4.59" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed6419c799 code=0x7ffc0000 [ 124.362950][ T29] audit: type=1326 audit(1772194529.548:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6123 comm="syz.4.59" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed6419c799 code=0x7ffc0000 [ 124.438816][ T29] audit: type=1326 audit(1772194529.768:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6123 comm="syz.4.59" exe="/root/syz-executor" sig=0 arch=c000003e syscall=135 compat=0 ip=0x7fed6419c799 code=0x7ffc0000 [ 124.573242][ T29] audit: type=1326 audit(1772194529.768:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6123 comm="syz.4.59" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed6419c799 code=0x7ffc0000 [ 124.725788][ T29] audit: type=1326 audit(1772194529.768:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6123 comm="syz.4.59" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7fed6419c799 code=0x7ffc0000 [ 124.725833][ T29] audit: type=1326 audit(1772194529.768:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6123 comm="syz.4.59" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed6419c799 code=0x7ffc0000 [ 124.725864][ T29] audit: type=1326 audit(1772194529.768:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6123 comm="syz.4.59" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed6419c799 code=0x7ffc0000 [ 124.725894][ T29] audit: type=1326 audit(1772194529.768:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6123 comm="syz.4.59" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7fed6419c799 code=0x7ffc0000 [ 124.725927][ T29] audit: type=1326 audit(1772194529.768:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6123 comm="syz.4.59" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed6419c799 code=0x7ffc0000 [ 124.725957][ T29] audit: type=1326 audit(1772194529.768:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6123 comm="syz.4.59" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed6419c799 code=0x7ffc0000 [ 125.152043][ T6141] netlink: 104 bytes leftover after parsing attributes in process `syz.0.62'. [ 126.257127][ T5944] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 126.361269][ T5944] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz1] on syz0 [ 127.226936][ T6153] netlink: 'syz.3.66': attribute type 4 has an invalid length. [ 127.331411][ T6155] netlink: 'syz.3.66': attribute type 4 has an invalid length. [ 129.080741][ T10] usb 3-1: new full-speed USB device number 3 using dummy_hcd [ 129.272223][ T10] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 129.316203][ T10] usb 3-1: config 0 has no interfaces? [ 129.338316][ T10] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 129.372535][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 129.425657][ T10] usb 3-1: config 0 descriptor?? [ 129.684611][ T796] usb 3-1: USB disconnect, device number 3 [ 130.603115][ T6179] can: request_module (can-proto-3) failed. [ 131.086302][ T6186] netlink: 'syz.2.71': attribute type 5 has an invalid length. [ 131.189909][ T6186] netlink: 40 bytes leftover after parsing attributes in process `syz.2.71'. [ 132.089806][ T6191] input: syz1 as /devices/virtual/input/input5 [ 133.540323][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.553895][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 134.733277][ T6213] netlink: 'syz.2.79': attribute type 4 has an invalid length. [ 134.759531][ T6213] netlink: 'syz.2.79': attribute type 4 has an invalid length. [ 135.338242][ T5905] usb 2-1: new full-speed USB device number 2 using dummy_hcd [ 135.540057][ T5905] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 135.585352][ T5905] usb 2-1: config 0 has no interfaces? [ 135.608656][ T5905] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 135.652848][ T5905] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 135.732780][ T5905] usb 2-1: config 0 descriptor?? [ 135.876082][ T6232] input: syz1 as /devices/virtual/input/input6 [ 136.044460][ T5905] usb 2-1: USB disconnect, device number 2 [ 137.216881][ T6243] Zero length message leads to an empty skb [ 139.988956][ T6263] netlink: 4768 bytes leftover after parsing attributes in process `syz.4.94'. [ 141.909227][ T5944] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 142.449129][ T24] usb 4-1: new full-speed USB device number 2 using dummy_hcd [ 142.480586][ T5944] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 142.514330][ T5944] usb 3-1: New USB device found, idVendor=1ac7, idProduct=0001, bcdDevice=cc.19 [ 142.538173][ T5944] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 142.582083][ T5944] usb 3-1: Product: syz [ 142.594752][ T5944] usb 3-1: Manufacturer: syz [ 142.628275][ T5944] usb 3-1: SerialNumber: syz [ 142.651203][ T5944] usb 3-1: config 0 descriptor?? [ 142.665381][ T24] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 142.698940][ T24] usb 4-1: config 0 has no interfaces? [ 142.700037][ T5944] usbtouchscreen 3-1:0.0: probe with driver usbtouchscreen failed with error -32 [ 142.704757][ T24] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 142.798405][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 142.844013][ T24] usb 4-1: config 0 descriptor?? [ 142.896859][ T5944] usb 3-1: USB disconnect, device number 4 [ 143.190150][ T24] usb 4-1: USB disconnect, device number 2 [ 144.660668][ T6286] input: syz1 as /devices/virtual/input/input8 [ 151.248318][ T9] usb 2-1: new full-speed USB device number 3 using dummy_hcd [ 151.453918][ T9] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 151.499739][ T9] usb 2-1: config 0 has no interfaces? [ 151.518644][ T9] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 151.547640][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 151.729404][ T9] usb 2-1: config 0 descriptor?? [ 152.251732][ T9] usb 2-1: USB disconnect, device number 3 [ 152.299265][ T6351] netlink: 212408 bytes leftover after parsing attributes in process `syz.3.118'. [ 152.496402][ T6355] input: syz1 as /devices/virtual/input/input9 [ 156.885482][ T6392] netlink: 'syz.2.131': attribute type 4 has an invalid length. [ 159.870422][ T6404] input: syz1 as /devices/virtual/input/input10 [ 160.948249][ T29] kauditd_printk_skb: 39 callbacks suppressed [ 160.948267][ T29] audit: type=1326 audit(1772194566.448:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6414 comm="syz.2.133" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0045d9c799 code=0x7ffc0000 [ 160.981214][ T29] audit: type=1326 audit(1772194566.488:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6414 comm="syz.2.133" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0045d9c799 code=0x7ffc0000 [ 161.054911][ T29] audit: type=1326 audit(1772194566.488:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6414 comm="syz.2.133" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0045d9c799 code=0x7ffc0000 [ 161.344769][ T29] audit: type=1326 audit(1772194566.588:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6414 comm="syz.2.133" exe="/root/syz-executor" sig=0 arch=c000003e syscall=154 compat=0 ip=0x7f0045d9c799 code=0x7ffc0000 [ 161.448623][ T29] audit: type=1326 audit(1772194566.598:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6414 comm="syz.2.133" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0045d9c799 code=0x7ffc0000 [ 161.537594][ T29] audit: type=1326 audit(1772194566.598:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6414 comm="syz.2.133" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0045d9c799 code=0x7ffc0000 [ 161.637244][ T29] audit: type=1326 audit(1772194566.598:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6414 comm="syz.2.133" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0045d9c799 code=0x7ffc0000 [ 161.718573][ T29] audit: type=1326 audit(1772194566.598:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6414 comm="syz.2.133" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f0045d9c799 code=0x7ffc0000 [ 161.860140][ T29] audit: type=1326 audit(1772194566.598:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6414 comm="syz.2.133" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f0045d9c799 code=0x7ffc0000 [ 164.118278][ T6432] fuse: Unknown parameter 'fd0x0000000000000003' [ 165.336854][ T6450] vxcan1: tx drop: invalid sa for name 0xfffffffffffffffe [ 165.980251][ T6447] input: syz1 as /devices/virtual/input/input11 [ 170.448978][ T6468] netlink: 212408 bytes leftover after parsing attributes in process `syz.1.154'. [ 172.990150][ T6511] faux_driver vgem: [drm] Unknown color mode 2054; guessing buffer size. [ 173.210980][ T6521] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 173.458277][ T5905] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 173.651849][ T5905] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 173.755964][ T5905] usb 4-1: New USB device found, idVendor=1ac7, idProduct=0001, bcdDevice=cc.19 [ 173.806600][ T5905] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 173.858347][ T5905] usb 4-1: Product: syz [ 173.872714][ T5905] usb 4-1: Manufacturer: syz [ 173.894108][ T5905] usb 4-1: SerialNumber: syz [ 173.991573][ T5905] usb 4-1: config 0 descriptor?? [ 174.076408][ T5905] usbtouchscreen 4-1:0.0: probe with driver usbtouchscreen failed with error -32 [ 174.523426][ T6533] mmap: syz.1.171 (6533) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 176.185666][ T6546] process 'syz.2.175' launched './file1' with NULL argv: empty string added [ 179.980490][ T6555] netlink: 212408 bytes leftover after parsing attributes in process `syz.1.177'. [ 180.864968][ T6578] syz.1.183 uses obsolete (PF_INET,SOCK_PACKET) [ 182.562823][ T5905] usb 4-1: USB disconnect, device number 3 [ 184.508285][ T981] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 184.686736][ T981] usb 3-1: unable to get BOS descriptor or descriptor too short [ 184.728702][ T981] usb 3-1: config 0 has an invalid interface number: 53 but max is 0 [ 184.748185][ T981] usb 3-1: config 0 has no interface number 0 [ 184.755354][ T981] usb 3-1: config 0 interface 53 has no altsetting 0 [ 184.791501][ T981] usb 3-1: New USB device found, idVendor=0421, idProduct=04f0, bcdDevice=ae.24 [ 184.818238][ T981] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 184.837643][ T981] usb 3-1: Product: syz [ 184.858036][ T981] usb 3-1: Manufacturer: syz [ 184.863346][ T981] usb 3-1: SerialNumber: syz [ 184.907363][ T981] usb 3-1: config 0 descriptor?? [ 185.679597][ T981] usb 3-1: bad CDC descriptors [ 185.758434][ T981] usb 3-1: USB disconnect, device number 5 [ 186.013811][ T6604] netlink: 212408 bytes leftover after parsing attributes in process `syz.0.193'. [ 186.051295][ T29] audit: type=1326 audit(1772194591.558:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6610 comm="syz.2.194" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0045d9c799 code=0x7ffc0000 [ 186.130433][ T29] audit: type=1326 audit(1772194591.588:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6610 comm="syz.2.194" exe="/root/syz-executor" sig=0 arch=c000003e syscall=135 compat=0 ip=0x7f0045d9c799 code=0x7ffc0000 [ 186.186386][ T29] audit: type=1326 audit(1772194591.588:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6610 comm="syz.2.194" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0045d9c799 code=0x7ffc0000 [ 186.287921][ T29] audit: type=1326 audit(1772194591.588:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6610 comm="syz.2.194" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0045d9c799 code=0x7ffc0000 [ 186.321309][ T29] audit: type=1326 audit(1772194591.588:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6610 comm="syz.2.194" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7f0045d9c799 code=0x7ffc0000 [ 186.529724][ T29] audit: type=1326 audit(1772194591.588:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6610 comm="syz.2.194" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0045d9c799 code=0x7ffc0000 [ 186.936187][ T29] audit: type=1326 audit(1772194591.588:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6610 comm="syz.2.194" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7f0045d9c799 code=0x7ffc0000 [ 186.974965][ T29] audit: type=1326 audit(1772194591.588:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6610 comm="syz.2.194" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0045d9c799 code=0x7ffc0000 [ 187.050529][ T29] audit: type=1326 audit(1772194591.598:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6610 comm="syz.2.194" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7f0045d9c799 code=0x7ffc0000 [ 187.097451][ T29] audit: type=1326 audit(1772194591.598:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6610 comm="syz.2.194" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0045d9c799 code=0x7ffc0000 [ 191.319426][ T5828] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 191.328771][ T5828] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 191.337538][ T5828] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 191.346398][ T5828] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 191.367268][ T5828] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 191.984754][ T6645] chnl_net:caif_netlink_parms(): no params data found [ 192.640829][ T6662] netlink: 56 bytes leftover after parsing attributes in process `syz.3.209'. [ 193.462305][ T5833] Bluetooth: hci5: command tx timeout [ 194.575866][ T6645] bridge0: port 1(bridge_slave_0) entered blocking state [ 194.584003][ T6645] bridge0: port 1(bridge_slave_0) entered disabled state [ 194.611912][ T6645] bridge_slave_0: entered allmulticast mode [ 194.669276][ T6645] bridge_slave_0: entered promiscuous mode [ 194.724829][ T6645] bridge0: port 2(bridge_slave_1) entered blocking state [ 194.758619][ T6645] bridge0: port 2(bridge_slave_1) entered disabled state [ 194.793464][ T6645] bridge_slave_1: entered allmulticast mode [ 194.832725][ T6645] bridge_slave_1: entered promiscuous mode [ 194.974553][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.981721][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.074202][ T6645] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 195.143216][ T6645] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 195.391211][ T6645] team0: Port device team_slave_0 added [ 195.431493][ T6645] team0: Port device team_slave_1 added [ 195.528424][ T5833] Bluetooth: hci5: command tx timeout [ 196.049939][ T6692] netlink: 'syz.0.216': attribute type 4 has an invalid length. [ 197.360137][ T6645] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 197.367760][ T6645] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 197.472668][ T6645] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 197.538586][ T6645] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 197.546840][ T6645] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 197.608274][ T5833] Bluetooth: hci5: command tx timeout [ 197.648681][ T6645] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 197.904929][ T6645] hsr_slave_0: entered promiscuous mode [ 197.958955][ T6645] hsr_slave_1: entered promiscuous mode [ 197.969210][ T6645] debugfs: 'hsr0' already exists in 'hsr' [ 197.986264][ T6645] Cannot create hsr debugfs directory [ 199.257662][ T6645] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 199.390175][ T6645] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 199.698442][ T5833] Bluetooth: hci5: command tx timeout [ 199.790965][ T6645] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 199.996698][ T6645] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 200.469374][ T6714] netlink: 56 bytes leftover after parsing attributes in process `syz.0.221'. [ 202.869630][ T6732] netlink: 'syz.2.226': attribute type 4 has an invalid length. [ 203.852496][ T6645] 8021q: adding VLAN 0 to HW filter on device bond0 [ 203.934502][ T6645] 8021q: adding VLAN 0 to HW filter on device team0 [ 203.973750][ T1326] bridge0: port 1(bridge_slave_0) entered blocking state [ 203.981185][ T1326] bridge0: port 1(bridge_slave_0) entered forwarding state [ 204.034706][ T1326] bridge0: port 2(bridge_slave_1) entered blocking state [ 204.042349][ T1326] bridge0: port 2(bridge_slave_1) entered forwarding state [ 204.482792][ T6744] netlink: 212408 bytes leftover after parsing attributes in process `syz.3.224'. [ 204.850493][ T6645] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 205.657373][ T6764] netlink: 56 bytes leftover after parsing attributes in process `syz.3.232'. [ 207.886348][ T6775] netlink: 'syz.0.237': attribute type 4 has an invalid length. [ 208.164568][ T6645] veth0_vlan: entered promiscuous mode [ 208.223144][ T6645] veth1_vlan: entered promiscuous mode [ 208.412131][ T6645] veth0_macvtap: entered promiscuous mode [ 208.455784][ T6645] veth1_macvtap: entered promiscuous mode [ 208.587049][ T6645] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 208.665031][ T6645] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 208.679240][ T5905] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 208.837838][ T6786] fuse: Unknown parameter 'fd0xffffffffffffffff' [ 209.143792][ T5905] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 209.283848][ T5905] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 209.335641][ T35] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 209.345371][ T5905] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 209.378243][ T5905] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 209.395422][ T35] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 209.428195][ T5905] usb 2-1: Product: syz [ 209.432527][ T5905] usb 2-1: Manufacturer: syz [ 209.437251][ T5905] usb 2-1: SerialNumber: syz [ 209.455086][ T35] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 209.500878][ T35] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 209.517658][ T5905] cdc_mbim 2-1:1.0: skipping garbage [ 209.829991][ T6783] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 209.893269][ T1338] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 209.981660][ T1338] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 210.770358][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 210.821456][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 210.897198][ T6783] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 210.937787][ T5905] cdc_mbim 2-1:1.0: dwNtbInMaxSize=0 is too small. Using 2048 [ 210.958186][ T5905] cdc_mbim 2-1:1.0: setting rx_max = 2048 [ 211.096371][ T6801] netlink: 44 bytes leftover after parsing attributes in process `syz.5.203'. [ 211.327183][ T5905] cdc_mbim 2-1:1.0: setting tx_max = 184 [ 211.341115][ T5905] cdc_mbim 2-1:1.0: cdc-wdm0: USB WDM device [ 211.357756][ T5905] wwan wwan0: port wwan0mbim0 attached [ 212.108917][ T5905] cdc_mbim 2-1:1.0 wwan0: register 'cdc_mbim' at usb-dummy_hcd.1-1, CDC MBIM, d6:f3:05:59:ee:e5 [ 212.166595][ T5905] usb 2-1: USB disconnect, device number 4 [ 212.194588][ T5905] cdc_mbim 2-1:1.0 wwan0: unregister 'cdc_mbim' usb-dummy_hcd.1-1, CDC MBIM [ 212.351776][ T5905] wwan wwan0: port wwan0mbim0 disconnected [ 213.121102][ T6818] netlink: 'syz.5.248': attribute type 4 has an invalid length. [ 217.536677][ T5837] Bluetooth: hci0: command 0x0406 tx timeout [ 217.546971][ T5837] Bluetooth: hci2: command 0x0406 tx timeout [ 217.581884][ T5838] Bluetooth: hci1: command 0x0406 tx timeout [ 217.589017][ T5142] Bluetooth: hci4: command 0x0406 tx timeout [ 217.599436][ T5838] Bluetooth: hci3: command 0x0406 tx timeout [ 218.963605][ T6866] netlink: 76 bytes leftover after parsing attributes in process `syz.1.260'. [ 218.987672][ T6866] netlink: 20 bytes leftover after parsing attributes in process `syz.1.260'. [ 219.878337][ T5905] usb 2-1: new full-speed USB device number 5 using dummy_hcd [ 220.050130][ T5905] usb 2-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 220.083522][ T5905] usb 2-1: config 27 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 220.127898][ T5905] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 220.153807][ T5905] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 220.206205][ T5905] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 220.590889][ T5905] snd-usb-audio 2-1:27.0: probe with driver snd-usb-audio failed with error -2 [ 222.697790][ T981] usb 2-1: USB disconnect, device number 5 [ 223.108268][ T9] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 223.612679][ T9] usb 1-1: Using ep0 maxpacket: 8 [ 223.658569][ T9] usb 1-1: config 0 has no interfaces? [ 223.688571][ T9] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 223.769252][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 223.812610][ T9] usb 1-1: config 0 descriptor?? [ 224.128892][ T6891] dummy0: entered promiscuous mode [ 224.137089][ T6891] vlan2: entered promiscuous mode [ 224.303588][ T5905] usb 1-1: USB disconnect, device number 2 [ 225.067965][ T6910] netlink: 76 bytes leftover after parsing attributes in process `syz.2.275'. [ 225.077588][ T6910] netlink: 20 bytes leftover after parsing attributes in process `syz.2.275'. [ 226.223296][ T6925] netlink: 'syz.2.281': attribute type 21 has an invalid length. [ 226.235267][ T6925] netlink: 'syz.2.281': attribute type 6 has an invalid length. [ 226.246403][ T6925] netlink: 132 bytes leftover after parsing attributes in process `syz.2.281'. [ 226.821107][ T5905] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 228.390903][ T5905] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 228.408408][ T5905] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 228.441027][ T5905] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 228.485431][ T5905] usb 3-1: config 0 descriptor?? [ 228.739991][ T5905] usbhid 3-1:0.0: can't add hid device: -71 [ 228.746319][ T5905] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 228.872748][ T5905] usb 3-1: USB disconnect, device number 6 [ 229.278710][ T5905] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 229.313720][ T29] kauditd_printk_skb: 3 callbacks suppressed [ 229.313734][ T29] audit: type=1326 audit(1772194634.818:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6942 comm="syz.5.286" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1df8b9c799 code=0x7ffc0000 [ 229.348180][ T29] audit: type=1326 audit(1772194634.858:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6942 comm="syz.5.286" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1df8b9c799 code=0x7ffc0000 [ 229.375349][ T29] audit: type=1326 audit(1772194634.858:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6942 comm="syz.5.286" exe="/root/syz-executor" sig=0 arch=c000003e syscall=192 compat=0 ip=0x7f1df8b9c799 code=0x7ffc0000 [ 229.401593][ T29] audit: type=1326 audit(1772194634.858:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6942 comm="syz.5.286" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1df8b9c799 code=0x7ffc0000 [ 229.455494][ T5905] usb 3-1: Using ep0 maxpacket: 32 [ 229.480054][ T5905] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 229.505668][ T5905] usb 3-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice= 0.40 [ 229.524973][ T29] audit: type=1326 audit(1772194634.858:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6942 comm="syz.5.286" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1df8b9c799 code=0x7ffc0000 [ 229.565783][ T5905] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 229.730807][ T5905] usb 3-1: config 0 descriptor?? [ 229.791344][ T5905] ldusb 3-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 229.828324][ T5905] ldusb 3-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 229.965378][ T5905] usb 3-1: USB disconnect, device number 7 [ 230.011574][ T5905] ldusb 3-1:0.0: LD USB Device #0 now disconnected [ 230.348259][ T10] usb 1-1: new full-speed USB device number 3 using dummy_hcd [ 230.530579][ T10] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 230.734425][ T10] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 230.764522][ T10] usb 1-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43 [ 230.793479][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 230.870357][ T10] usb 1-1: config 0 descriptor?? [ 231.578745][ T10] usb 1-1: string descriptor 0 read error: -71 [ 231.616812][ T10] usb 1-1: USB disconnect, device number 3 [ 233.249664][ T5866] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 233.412975][ T5866] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 233.423821][ T5866] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 233.433866][ T5866] usb 6-1: Product: syz [ 233.441223][ T5866] usb 6-1: Manufacturer: syz [ 233.446039][ T5866] usb 6-1: SerialNumber: syz [ 233.464142][ T5866] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 233.559885][ T24] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 233.704108][ T6984] netlink: 'syz.3.300': attribute type 21 has an invalid length. [ 233.718303][ T6984] netlink: 'syz.3.300': attribute type 6 has an invalid length. [ 233.726786][ T6984] netlink: 132 bytes leftover after parsing attributes in process `syz.3.300'. [ 233.774810][ C1] usb 6-1: ath: unknown panic pattern! [ 233.978318][ T5866] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 234.000729][ T6974] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 234.033563][ T6974] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 234.120142][ T9] usb 6-1: USB disconnect, device number 2 [ 234.159901][ T5866] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 234.189353][ T5866] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 234.219787][ T5866] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 234.260076][ T5866] usb 4-1: config 0 descriptor?? [ 234.313108][ T29] audit: type=1326 audit(1772194639.818:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6989 comm="syz.0.302" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f08fdf9c799 code=0x7ffc0000 [ 234.382312][ T29] audit: type=1326 audit(1772194639.818:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6989 comm="syz.0.302" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f08fdf9c799 code=0x7ffc0000 [ 234.446519][ T29] audit: type=1326 audit(1772194639.848:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6989 comm="syz.0.302" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7f08fdf9c799 code=0x7ffc0000 [ 234.486196][ T5866] usbhid 4-1:0.0: can't add hid device: -71 [ 234.496655][ T5866] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 234.515179][ T29] audit: type=1326 audit(1772194639.848:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6989 comm="syz.0.302" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f08fdf9c799 code=0x7ffc0000 [ 234.574819][ T29] audit: type=1326 audit(1772194639.858:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6989 comm="syz.0.302" exe="/root/syz-executor" sig=0 arch=c000003e syscall=259 compat=0 ip=0x7f08fdf9c799 code=0x7ffc0000 [ 234.604229][ T5866] usb 4-1: USB disconnect, device number 4 [ 234.618242][ T10] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 234.648954][ T24] ath9k_htc 6-1:1.0: ath9k_htc: Target is unresponsive [ 234.723149][ T29] audit: type=1326 audit(1772194639.858:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6989 comm="syz.0.302" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f08fdf9c799 code=0x7ffc0000 [ 234.754596][ T24] ath9k_htc: Failed to initialize the device [ 234.765461][ T9] usb 6-1: ath9k_htc: USB layer deinitialized [ 234.771937][ T29] audit: type=1326 audit(1772194639.858:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6989 comm="syz.0.302" exe="/root/syz-executor" sig=0 arch=c000003e syscall=322 compat=0 ip=0x7f08fdf9c799 code=0x7ffc0000 [ 234.803154][ T29] audit: type=1326 audit(1772194639.858:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6989 comm="syz.0.302" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f08fdf9c799 code=0x7ffc0000 [ 234.991483][ T29] audit: type=1326 audit(1772194639.858:86): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6989 comm="syz.0.302" exe="/root/syz-executor" sig=0 arch=c000003e syscall=88 compat=0 ip=0x7f08fdf9c799 code=0x7ffc0000 [ 235.020143][ T29] audit: type=1326 audit(1772194639.858:87): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6989 comm="syz.0.302" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f08fdf9c799 code=0x7ffc0000 [ 235.020188][ T10] usb 1-1: Using ep0 maxpacket: 32 [ 235.207360][ T5866] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 235.816793][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 235.839611][ T29] audit: type=1326 audit(1772194639.868:88): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6989 comm="syz.0.302" exe="/root/syz-executor" sig=0 arch=c000003e syscall=133 compat=0 ip=0x7f08fdf9c799 code=0x7ffc0000 [ 235.932002][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 235.968293][ T5866] usb 4-1: Using ep0 maxpacket: 32 [ 235.993936][ T7004] netlink: 212408 bytes leftover after parsing attributes in process `syz.5.305'. [ 236.017972][ T10] usb 1-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 236.030430][ T5866] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 236.071651][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 236.374009][ T10] usb 1-1: config 0 descriptor?? [ 237.090404][ T5866] usb 4-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice= 0.40 [ 237.100219][ T5866] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 237.147343][ T5866] usb 4-1: config 0 descriptor?? [ 237.156700][ T5866] usb 4-1: can't set config #0, error -71 [ 237.210332][ T5866] usb 4-1: USB disconnect, device number 5 [ 238.461519][ T7020] input: syz1 as /devices/virtual/input/input13 [ 239.986949][ T6992] delete_channel: no stack [ 239.999746][ T10] usbhid 1-1:0.0: can't add hid device: -71 [ 240.008160][ T10] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 240.029225][ T10] usb 1-1: USB disconnect, device number 4 [ 240.832028][ T10] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 240.868212][ T10] hid-generic 0000:0000:0000.0002: hidraw0: HID v0.00 Device [syz1] on syz0 [ 240.935673][ T7041] Bluetooth: MGMT ver 1.23 [ 241.827617][ T7050] netlink: 'syz.0.320': attribute type 21 has an invalid length. [ 241.898278][ T7050] netlink: 'syz.0.320': attribute type 6 has an invalid length. [ 241.906415][ T7050] netlink: 132 bytes leftover after parsing attributes in process `syz.0.320'. [ 242.381045][ T796] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 242.502094][ T7057] syzkaller0: entered promiscuous mode [ 242.564064][ T7057] syzkaller0: entered allmulticast mode [ 242.648661][ T7061] fuse: Unknown parameter 'fd0xffffffffffffffff' [ 243.162591][ T796] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 243.365904][ T796] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 243.499278][ T796] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 243.623450][ T796] usb 1-1: config 0 descriptor?? [ 243.700273][ T7063] netlink: 20 bytes leftover after parsing attributes in process `syz.3.324'. [ 243.870030][ T796] usbhid 1-1:0.0: can't add hid device: -71 [ 243.880826][ T796] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 243.914322][ T796] usb 1-1: USB disconnect, device number 5 [ 243.979285][ T7066] input: syz1 as /devices/virtual/input/input14 [ 247.912082][ T7099] fuse: Unknown parameter 'fd0xffffffffffffffff' [ 249.548430][ T7110] syzkaller0: entered promiscuous mode [ 249.592195][ T7110] syzkaller0: entered allmulticast mode [ 249.740233][ T7116] netlink: 212408 bytes leftover after parsing attributes in process `syz.5.340'. [ 250.078578][ T981] usb 1-1: new full-speed USB device number 6 using dummy_hcd [ 250.279691][ T981] usb 1-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 250.296602][ T981] usb 1-1: config 0 interface 0 has no altsetting 0 [ 250.418704][ T981] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 250.443623][ T981] usb 1-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 250.455756][ T981] usb 1-1: Product: syz [ 250.468552][ T981] usb 1-1: Manufacturer: syz [ 250.495482][ T981] usb 1-1: SerialNumber: syz [ 250.530466][ T981] usb 1-1: config 0 descriptor?? [ 251.383624][ T7133] input: syz1 as /devices/virtual/input/input15 [ 251.408648][ T981] usb 1-1: selecting invalid altsetting 0 [ 251.632531][ T7145] fuse: Unknown parameter 'fd0xffffffffffffffff' [ 253.871095][ T7156] netlink: 212408 bytes leftover after parsing attributes in process `syz.3.352'. [ 255.633582][ T7111] snd-usb-audio 1-1:0.0: Runtime PM usage count underflow! [ 256.364584][ T5914] usb 1-1: USB disconnect, device number 6 [ 256.415139][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.435533][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 259.969202][ T7206] netlink: 212408 bytes leftover after parsing attributes in process `syz.3.365'. [ 261.738275][ T981] usb 4-1: new full-speed USB device number 6 using dummy_hcd [ 262.915759][ T981] usb 4-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 262.957156][ T981] usb 4-1: config 0 interface 0 has no altsetting 0 [ 263.004227][ T981] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 263.064860][ T981] usb 4-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 263.112501][ T981] usb 4-1: Product: syz [ 263.136841][ T981] usb 4-1: Manufacturer: syz [ 263.156045][ T981] usb 4-1: SerialNumber: syz [ 263.216824][ T981] usb 4-1: config 0 descriptor?? [ 263.310449][ T981] usb 4-1: selecting invalid altsetting 0 [ 264.558598][ T796] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 264.720837][ T796] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 264.753451][ T796] usb 6-1: New USB device found, idVendor=1ac7, idProduct=0001, bcdDevice=cc.19 [ 264.782496][ T796] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 264.800488][ T796] usb 6-1: Product: syz [ 264.804974][ T796] usb 6-1: Manufacturer: syz [ 264.898167][ T796] usb 6-1: SerialNumber: syz [ 264.914090][ T796] usb 6-1: config 0 descriptor?? [ 264.944483][ T796] usbtouchscreen 6-1:0.0: probe with driver usbtouchscreen failed with error -32 [ 265.176734][ T981] usb 6-1: USB disconnect, device number 3 [ 265.312699][ T7231] snd-usb-audio 4-1:0.0: Runtime PM usage count underflow! [ 265.343888][ T5944] usb 4-1: USB disconnect, device number 6 [ 265.601314][ T29] kauditd_printk_skb: 49 callbacks suppressed [ 265.601333][ T29] audit: type=1326 audit(1772194671.108:138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7262 comm="syz.0.385" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f08fdf9c799 code=0x7ffc0000 [ 265.719934][ T29] audit: type=1326 audit(1772194671.148:139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7262 comm="syz.0.385" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f08fdf9c799 code=0x7ffc0000 [ 265.826894][ T29] audit: type=1326 audit(1772194671.148:140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7262 comm="syz.0.385" exe="/root/syz-executor" sig=0 arch=c000003e syscall=192 compat=0 ip=0x7f08fdf9c799 code=0x7ffc0000 [ 265.945017][ T29] audit: type=1326 audit(1772194671.148:141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7262 comm="syz.0.385" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f08fdf9c799 code=0x7ffc0000 [ 266.027543][ T29] audit: type=1326 audit(1772194671.148:142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7262 comm="syz.0.385" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f08fdf9c799 code=0x7ffc0000 [ 270.128627][ T981] usb 3-1: new full-speed USB device number 8 using dummy_hcd [ 270.208324][ T29] audit: type=1326 audit(1772194675.718:143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7317 comm="syz.1.401" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7137b9c799 code=0x7ffc0000 [ 270.276143][ T29] audit: type=1326 audit(1772194675.718:144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7317 comm="syz.1.401" exe="/root/syz-executor" sig=0 arch=c000003e syscall=192 compat=0 ip=0x7f7137b9c799 code=0x7ffc0000 [ 270.331404][ T29] audit: type=1326 audit(1772194675.718:145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7317 comm="syz.1.401" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7137b9c799 code=0x7ffc0000 [ 270.376374][ T981] usb 3-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 270.406304][ T981] usb 3-1: config 0 interface 0 has no altsetting 0 [ 270.435973][ T29] audit: type=1326 audit(1772194675.728:146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7317 comm="syz.1.401" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7137b9c799 code=0x7ffc0000 [ 270.468098][ T981] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 270.503358][ T981] usb 3-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 270.534202][ T981] usb 3-1: Product: syz [ 270.551797][ T981] usb 3-1: Manufacturer: syz [ 270.563214][ T981] usb 3-1: SerialNumber: syz [ 270.584536][ T981] usb 3-1: config 0 descriptor?? [ 270.620771][ T981] usb 3-1: selecting invalid altsetting 0 [ 273.237497][ T7351] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 273.281153][ T7351] tipc: Started in network mode [ 273.298699][ T7351] tipc: Node identity 3aabcc32771f, cluster identity 4711 [ 273.325381][ T7351] tipc: Enabled bearer , priority 0 [ 273.410360][ T7350] tipc: Disabling bearer [ 273.821202][ T7360] input: syz1 as /devices/virtual/input/input17 [ 273.945600][ T5840] udevd[5840]: setting owner of /dev/input/event4 to uid=0, gid=104 failed: No such file or directory [ 274.196547][ T981] usb 3-1: USB disconnect, device number 8 [ 276.943205][ T7395] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 277.034825][ T7395] tipc: Enabled bearer , priority 0 [ 277.170410][ T7394] tipc: Disabling bearer [ 277.484147][ T5944] usb 4-1: new full-speed USB device number 7 using dummy_hcd [ 277.692263][ T5944] usb 4-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 277.764697][ T5944] usb 4-1: config 0 interface 0 has no altsetting 0 [ 278.036829][ T5944] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 278.108299][ T5944] usb 4-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 278.132182][ T7411] input: syz1 as /devices/virtual/input/input18 [ 278.178288][ T5944] usb 4-1: Product: syz [ 278.229957][ T5944] usb 4-1: Manufacturer: syz [ 278.235217][ T5944] usb 4-1: SerialNumber: syz [ 278.346916][ T5944] usb 4-1: config 0 descriptor?? [ 279.437216][ T5944] usb 4-1: selecting invalid altsetting 0 [ 279.929892][ T10] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 280.139127][ T10] usb 3-1: Using ep0 maxpacket: 8 [ 280.155606][ T10] usb 3-1: config 0 has no interfaces? [ 280.163995][ T10] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 280.177115][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 280.221412][ T10] usb 3-1: config 0 descriptor?? [ 280.476354][ T10] usb 3-1: USB disconnect, device number 9 [ 282.336662][ T7439] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 282.396882][ T7439] tipc: Enabled bearer , priority 0 [ 282.550234][ T7437] tipc: Disabling bearer [ 282.624540][ T7450] input: syz1 as /devices/virtual/input/input19 [ 282.735679][ T7403] snd-usb-audio 4-1:0.0: Runtime PM usage count underflow! [ 282.765213][ T10] usb 4-1: USB disconnect, device number 7 [ 284.243782][ T24] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 285.268162][ T24] usb 2-1: Using ep0 maxpacket: 8 [ 285.282762][ T24] usb 2-1: config 0 has no interfaces? [ 285.298590][ T24] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 285.338866][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 285.389069][ T24] usb 2-1: config 0 descriptor?? [ 285.643310][ T5914] usb 2-1: USB disconnect, device number 6 [ 286.977430][ T7497] netlink: 'syz.3.454': attribute type 21 has an invalid length. [ 287.019570][ T7497] netlink: 'syz.3.454': attribute type 6 has an invalid length. [ 287.037268][ T7501] input: syz1 as /devices/virtual/input/input20 [ 287.045791][ T7497] netlink: 132 bytes leftover after parsing attributes in process `syz.3.454'. [ 287.554842][ T5914] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 288.110556][ T796] usb 2-1: new full-speed USB device number 7 using dummy_hcd [ 288.170222][ T5914] usb 4-1: Using ep0 maxpacket: 32 [ 288.181535][ T5914] usb 4-1: no configurations [ 288.190324][ T5914] usb 4-1: can't read configurations, error -22 [ 288.433927][ T796] usb 2-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 288.454207][ T796] usb 2-1: config 0 interface 0 has no altsetting 0 [ 289.056633][ T5914] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 289.072200][ T796] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 289.118159][ T796] usb 2-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 289.127389][ T796] usb 2-1: Product: syz [ 289.134710][ T796] usb 2-1: Manufacturer: syz [ 289.153124][ T796] usb 2-1: SerialNumber: syz [ 289.181341][ T796] usb 2-1: config 0 descriptor?? [ 289.245677][ T796] usb 2-1: selecting invalid altsetting 0 [ 289.259209][ T5914] usb 4-1: Using ep0 maxpacket: 32 [ 289.287144][ T5914] usb 4-1: no configurations [ 289.320028][ T5914] usb 4-1: can't read configurations, error -22 [ 289.349676][ T5914] usb usb4-port1: attempt power cycle [ 289.708188][ T5914] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 289.749360][ T5914] usb 4-1: Using ep0 maxpacket: 32 [ 289.771327][ T5914] usb 4-1: no configurations [ 289.790648][ T5914] usb 4-1: can't read configurations, error -22 [ 289.801670][ T7531] syzkaller0: entered promiscuous mode [ 289.818562][ T7531] syzkaller0: entered allmulticast mode [ 289.938782][ T5914] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 290.016935][ T5914] usb 4-1: device descriptor read/8, error -71 [ 290.159946][ T5914] usb usb4-port1: unable to enumerate USB device [ 291.352519][ T981] usb 2-1: USB disconnect, device number 7 [ 292.166761][ T7560] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.472'. [ 294.358269][ T24] usb 1-1: new full-speed USB device number 7 using dummy_hcd [ 295.451575][ T24] usb 1-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 295.478948][ T24] usb 1-1: config 0 interface 0 has no altsetting 0 [ 295.658739][ T24] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 295.688164][ T24] usb 1-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 295.731051][ T24] usb 1-1: Product: syz [ 295.756002][ T24] usb 1-1: Manufacturer: syz [ 295.817419][ T24] usb 1-1: SerialNumber: syz [ 295.879469][ T24] usb 1-1: config 0 descriptor?? [ 296.009462][ T24] usb 1-1: selecting invalid altsetting 0 [ 296.874093][ T7639] netlink: 28 bytes leftover after parsing attributes in process `syz.2.492'. [ 296.899852][ T7639] netlink: 28 bytes leftover after parsing attributes in process `syz.2.492'. [ 297.020606][ T7639] erspan0: entered promiscuous mode [ 297.177555][ T7639] gretap0: entered promiscuous mode [ 297.820437][ T7646] sctp: [Deprecated]: syz.2.494 (pid 7646) Use of int in maxseg socket option. [ 297.820437][ T7646] Use struct sctp_assoc_value instead [ 298.500156][ T7600] snd-usb-audio 1-1:0.0: Runtime PM usage count underflow! [ 298.575810][ T5914] usb 1-1: USB disconnect, device number 7 [ 298.931741][ T7658] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 299.054088][ T7658] tipc: Started in network mode [ 299.179584][ T7658] tipc: Node identity daa078aa9431, cluster identity 4711 [ 299.229294][ T7658] tipc: Enabled bearer , priority 0 [ 300.048321][ T7656] tipc: Disabling bearer [ 304.195804][ T7722] syzkaller0: entered promiscuous mode [ 304.217098][ T7722] syzkaller0: entered allmulticast mode [ 310.331472][ T7787] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 310.411281][ T7789] tipc: Enabled bearer , priority 0 [ 310.520619][ T7785] tipc: Disabling bearer [ 313.610112][ T7823] netlink: 212408 bytes leftover after parsing attributes in process `syz.1.536'. [ 314.625142][ T7839] netlink: 48 bytes leftover after parsing attributes in process `syz.1.542'. [ 314.809566][ T796] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 314.820840][ T5822] Bluetooth: hci5: command 0x0406 tx timeout [ 314.998581][ T796] usb 3-1: Using ep0 maxpacket: 8 [ 315.009643][ T796] usb 3-1: config 0 has no interfaces? [ 315.034046][ T796] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 315.082202][ T796] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 315.117648][ T796] usb 3-1: config 0 descriptor?? [ 315.293954][ T7851] binder: BINDER_SET_CONTEXT_MGR already set [ 315.310677][ T7851] binder: 7850:7851 ioctl 4018620d 200000004a80 returned -16 [ 315.348481][ T7851] binder: 7850:7851 ioctl c0306201 0 returned -14 [ 315.421347][ T7842] team_slave_0: entered promiscuous mode [ 315.427770][ T7842] team_slave_1: entered promiscuous mode [ 315.444924][ T7842] vlan2: entered promiscuous mode [ 315.482212][ T7842] team0: entered promiscuous mode [ 315.650925][ T796] usb 3-1: USB disconnect, device number 10 [ 317.151666][ T7867] fuse: Bad value for 'fd' [ 317.854110][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.862431][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 318.658264][ T981] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 318.890904][ T981] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 318.936709][ T981] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 318.950258][ T9] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 319.007387][ T981] usb 1-1: New USB device found, idVendor=0079, idProduct=1846, bcdDevice= 0.00 [ 319.039358][ T981] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 319.064046][ T981] usb 1-1: config 0 descriptor?? [ 319.153383][ T9] usb 4-1: Using ep0 maxpacket: 8 [ 319.209669][ T9] usb 4-1: config 127 has an invalid interface number: 171 but max is 1 [ 319.294776][ T9] usb 4-1: config 127 has an invalid descriptor of length 0, skipping remainder of the config [ 319.418347][ T9] usb 4-1: config 127 has no interface number 1 [ 319.498713][ T981] usbhid 1-1:0.0: can't add hid device: -71 [ 319.505316][ T981] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 319.516303][ T9] usb 4-1: config 127 interface 171 has no altsetting 0 [ 320.056451][ T981] usb 1-1: USB disconnect, device number 8 [ 320.080482][ T9] usb 4-1: New USB device found, idVendor=04e2, idProduct=1414, bcdDevice=c5.b9 [ 320.111821][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 320.152737][ T7894] netlink: 16 bytes leftover after parsing attributes in process `syz.2.559'. [ 320.165258][ T9] usb 4-1: Product: syz [ 320.178846][ T9] usb 4-1: Manufacturer: syz [ 320.183973][ T9] usb 4-1: SerialNumber: syz [ 320.521648][ T7899] syzkaller0: entered promiscuous mode [ 320.541243][ T7899] syzkaller0: entered allmulticast mode [ 322.357150][ T7916] fuse: Bad value for 'fd' [ 322.806418][ T9] xr_serial 4-1:127.171: xr_serial converter detected [ 322.883223][ T9] xr_serial ttyUSB0: Failed to set reg 0x1a: -71 [ 322.884908][ T7920] tipc: Enabled bearer , priority 0 [ 322.938387][ T7920] syzkaller0: entered promiscuous mode [ 322.944547][ T7920] syzkaller0: entered allmulticast mode [ 322.959320][ T9] xr_serial ttyUSB0: probe with driver xr_serial failed with error -71 [ 323.012069][ T9] usb 4-1: USB disconnect, device number 12 [ 323.025826][ T9] xr_serial 4-1:127.171: device disconnected [ 323.075302][ T7926] tipc: Resetting bearer [ 323.288639][ T7918] tipc: Resetting bearer [ 323.890642][ T7918] tipc: Disabling bearer [ 324.361458][ T29] audit: type=1326 audit(1772194729.858:147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7935 comm="syz.2.571" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0045d9c799 code=0x7ffc0000 [ 324.419438][ T29] audit: type=1326 audit(1772194729.898:148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7935 comm="syz.2.571" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0045d9c799 code=0x7ffc0000 [ 324.448763][ T29] audit: type=1326 audit(1772194729.898:149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7935 comm="syz.2.571" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7f0045d9c799 code=0x7ffc0000 [ 324.487157][ T29] audit: type=1326 audit(1772194729.898:150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7935 comm="syz.2.571" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0045d9c799 code=0x7ffc0000 [ 324.578953][ T29] audit: type=1326 audit(1772194729.898:151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7935 comm="syz.2.571" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0045d9c799 code=0x7ffc0000 [ 324.650329][ T29] audit: type=1326 audit(1772194729.898:152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7935 comm="syz.2.571" exe="/root/syz-executor" sig=0 arch=c000003e syscall=259 compat=0 ip=0x7f0045d9c799 code=0x7ffc0000 [ 324.763225][ T29] audit: type=1326 audit(1772194729.898:153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7935 comm="syz.2.571" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0045d9c799 code=0x7ffc0000 [ 324.798399][ T5962] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 324.861960][ T29] audit: type=1326 audit(1772194729.918:154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7935 comm="syz.2.571" exe="/root/syz-executor" sig=0 arch=c000003e syscall=322 compat=0 ip=0x7f0045d9c799 code=0x7ffc0000 [ 324.938205][ T29] audit: type=1326 audit(1772194730.028:155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7935 comm="syz.2.571" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0045d9c799 code=0x7ffc0000 [ 324.996802][ T5962] usb 3-1: Using ep0 maxpacket: 32 [ 324.996827][ T29] audit: type=1326 audit(1772194730.028:156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7935 comm="syz.2.571" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0045d9c799 code=0x7ffc0000 [ 325.164457][ T5962] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 325.222019][ T5962] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 325.267778][ T5962] usb 3-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 325.328433][ T5962] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 325.398876][ T5962] usb 3-1: config 0 descriptor?? [ 325.667417][ T7951] syzkaller0: entered promiscuous mode [ 325.679679][ T7951] syzkaller0: entered allmulticast mode [ 325.778987][ T7954] netlink: 28 bytes leftover after parsing attributes in process `syz.3.574'. [ 327.161130][ T7968] netlink: 'syz.1.580': attribute type 4 has an invalid length. [ 327.243922][ T7969] netlink: 'syz.1.580': attribute type 4 has an invalid length. [ 329.319064][ T7972] loop2: detected capacity change from 0 to 7 [ 329.451792][ T7972] Dev loop2: unable to read RDB block 7 [ 329.487441][ T7972] loop2: AHDI p1 p2 p3 [ 329.503662][ T7972] loop2: partition table partially beyond EOD, truncated [ 329.543679][ T7972] loop2: p1 start 1601398130 is beyond EOD, truncated [ 329.563911][ T7972] loop2: p2 start 1702059890 is beyond EOD, truncated [ 330.479725][ T7938] delete_channel: no stack [ 330.493544][ T5962] usbhid 3-1:0.0: can't add hid device: -71 [ 330.513841][ T5962] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 330.580978][ T5962] usb 3-1: USB disconnect, device number 11 [ 333.448445][ T8001] netlink: 'syz.3.592': attribute type 4 has an invalid length. [ 333.939391][ T8001] netlink: 'syz.3.592': attribute type 4 has an invalid length. [ 337.048829][ T30] INFO: task syz.4.173:6536 blocked for more than 144 seconds. [ 337.057173][ T30] Tainted: G L syzkaller #0 [ 337.118175][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 337.137793][ T30] task:syz.4.173 state:D stack:24512 pid:6536 tgid:6536 ppid:5827 task_flags:0x400040 flags:0x00080006 [ 337.464608][ T8040] netlink: 'syz.0.604': attribute type 4 has an invalid length. [ 337.563695][ T8040] netlink: 'syz.0.604': attribute type 4 has an invalid length. [ 338.858244][ T30] Call Trace: [ 338.874562][ T30] [ 338.877611][ T30] __schedule+0x15dd/0x5300 [ 338.918222][ T30] ? __pfx___schedule+0x10/0x10 [ 338.923370][ T30] ? schedule+0x90/0x360 [ 338.927779][ T30] schedule+0x164/0x360 [ 338.970551][ T30] schedule_timeout+0xc3/0x2c0 [ 338.975417][ T30] ? __lock_acquire+0x6b5/0x2cf0 [ 338.999658][ T30] ? __pfx_schedule_timeout+0x10/0x10 [ 339.005389][ T30] ? do_raw_spin_lock+0x12b/0x2f0 [ 339.046884][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 339.064262][ T30] ? wait_for_completion+0x274/0x5e0 [ 339.078464][ T30] wait_for_completion+0x2cc/0x5e0 [ 339.084236][ T30] ? __pfx_wait_for_completion+0x10/0x10 [ 339.108241][ T30] ? do_raw_spin_lock+0x12b/0x2f0 [ 339.128156][ T30] restrict_one_thread_callback+0x320/0x570 [ 339.134861][ T30] task_work_run+0x1d9/0x270 [ 339.148114][ T30] ? __pfx_task_work_run+0x10/0x10 [ 339.153774][ T30] ? lockdep_hardirqs_on+0x7a/0x110 [ 339.168489][ T30] get_signal+0x11eb/0x1330 [ 339.173175][ T30] ? debug_object_free+0x2d7/0x490 [ 339.198068][ T30] ? hrtimer_nanosleep+0x2c5/0x390 [ 339.204010][ T30] arch_do_signal_or_restart+0xbc/0x830 [ 339.218471][ T30] ? __pfx_get_timespec64+0x10/0x10 [ 339.224558][ T30] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 339.249637][ T30] ? __se_sys_clock_nanosleep+0x35b/0x3b0 [ 339.263828][ T30] exit_to_user_mode_loop+0x86/0x480 [ 339.275182][ T30] ? rcu_is_watching+0x15/0xb0 [ 339.286885][ T30] do_syscall_64+0x32d/0xf80 [ 339.299339][ T30] ? trace_irq_disable+0x3b/0x150 [ 339.318259][ T30] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 339.324690][ T30] ? clear_bhb_loop+0x40/0x90 [ 339.338452][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 339.346605][ T30] RIP: 0033:0x7fed6415cfce [ 339.368099][ T30] RSP: 002b:00007ffd85e94568 EFLAGS: 00000246 ORIG_RAX: 00000000000000e6 [ 339.377563][ T30] RAX: fffffffffffffdfc RBX: 000055555ca63500 RCX: 00007fed6415cfce [ 339.413781][ T30] RDX: 00007ffd85e945c0 RSI: 0000000000000000 RDI: 0000000000000000 [ 339.433674][ T30] RBP: 00007fed64417da0 R08: 0000000000000000 R09: 0000000000000000 [ 339.451626][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000002b4ca [ 339.469558][ T30] R13: 00007fed64415fac R14: 000000000002b498 R15: 00007fed64415fa0 [ 339.501041][ T30] [ 339.504534][ T30] INFO: task syz.4.173:6537 blocked for more than 147 seconds. [ 339.516173][ T30] Tainted: G L syzkaller #0 [ 339.526130][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 339.536631][ T30] task:syz.4.173 state:D stack:25904 pid:6537 tgid:6536 ppid:5827 task_flags:0x400140 flags:0x00080002 [ 339.550901][ T30] Call Trace: [ 339.555834][ T30] [ 339.559908][ T30] __schedule+0x15dd/0x5300 [ 339.567457][ T30] ? __pfx___schedule+0x10/0x10 [ 339.573955][ T30] ? schedule+0x90/0x360 [ 339.579072][ T30] schedule+0x164/0x360 [ 339.583861][ T30] schedule_timeout+0xc3/0x2c0 [ 339.590600][ T30] ? futex_unqueue+0x22/0x240 [ 339.595539][ T30] ? __pfx_schedule_timeout+0x10/0x10 [ 339.601955][ T30] ? do_raw_spin_lock+0x12b/0x2f0 [ 339.609102][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 339.614651][ T30] ? wait_for_completion+0x274/0x5e0 [ 339.620826][ T30] wait_for_completion+0x2cc/0x5e0 [ 339.629358][ T30] ? __pfx_wait_for_completion+0x10/0x10 [ 339.635552][ T30] ? do_raw_spin_lock+0x12b/0x2f0 [ 339.641559][ T30] restrict_one_thread_callback+0x320/0x570 [ 339.647971][ T30] task_work_run+0x1d9/0x270 [ 339.653309][ T30] ? __pfx_task_work_run+0x10/0x10 [ 339.658955][ T30] ? __pfx_futex_wait+0x10/0x10 [ 339.664563][ T30] get_signal+0x11eb/0x1330 [ 339.669891][ T30] ? do_futex+0x333/0x420 [ 339.674561][ T30] arch_do_signal_or_restart+0xbc/0x830 [ 339.680974][ T30] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 339.687824][ T30] exit_to_user_mode_loop+0x86/0x480 [ 339.694825][ T30] ? rcu_is_watching+0x15/0xb0 [ 339.700409][ T30] do_syscall_64+0x32d/0xf80 [ 339.705433][ T30] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 339.714244][ T30] ? clear_bhb_loop+0x40/0x90 [ 339.721859][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 339.732915][ T30] RIP: 0033:0x7fed6419c799 [ 339.737710][ T30] RSP: 002b:00007fed623f60e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 339.747181][ T30] RAX: fffffffffffffe00 RBX: 00007fed64415fa8 RCX: 00007fed6419c799 [ 339.756370][ T30] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fed64415fa8 [ 339.765624][ T30] RBP: 00007fed64415fa0 R08: 0000000000000000 R09: 0000000000000000 [ 339.774883][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 339.784482][ T30] R13: 00007fed64416038 R14: 00007ffd85e943a0 R15: 00007ffd85e94488 [ 339.794527][ T30] [ 339.798678][ T30] INFO: task syz.4.173:6538 blocked for more than 147 seconds. [ 339.807163][ T30] Tainted: G L syzkaller #0 [ 339.815792][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 339.836774][ T30] task:syz.4.173 state:D stack:27752 pid:6538 tgid:6536 ppid:5827 task_flags:0x400140 flags:0x00080006 [ 339.851350][ T30] Call Trace: [ 339.855313][ T30] [ 339.867447][ T30] __schedule+0x15dd/0x5300 [ 339.872746][ T30] ? register_lock_class+0x31/0x2e0 [ 339.898058][ T30] ? __pfx___schedule+0x10/0x10 [ 339.904242][ T30] ? schedule+0x90/0x360 [ 339.918201][ T30] schedule+0x164/0x360 [ 339.922470][ T30] schedule_timeout+0xc3/0x2c0 [ 339.927394][ T30] ? do_raw_spin_lock+0x12b/0x2f0 [ 339.951567][ T30] ? __pfx_schedule_timeout+0x10/0x10 [ 339.957572][ T30] ? do_raw_spin_lock+0x12b/0x2f0 [ 339.978063][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 339.983451][ T30] ? wait_for_completion+0x274/0x5e0 [ 339.998201][ T30] wait_for_completion+0x2cc/0x5e0 [ 340.004204][ T30] ? __pfx_wait_for_completion+0x10/0x10 [ 340.028204][ T30] landlock_restrict_sibling_threads+0xe16/0x1190 [ 340.048097][ T30] ? landlock_restrict_sibling_threads+0x261/0x1190 [ 340.056043][ T30] ? __pfx_landlock_restrict_sibling_threads+0x10/0x10 [ 340.070514][ T30] ? landlock_put_ruleset+0x10/0xb0 [ 340.076491][ T30] __se_sys_landlock_restrict_self+0x540/0x810 [ 340.083639][ T30] do_syscall_64+0x14d/0xf80 [ 340.089174][ T30] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 340.096318][ T30] ? clear_bhb_loop+0x40/0x90 [ 340.101566][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 340.109077][ T30] RIP: 0033:0x7fed6419c799 [ 340.113983][ T30] RSP: 002b:00007fed623d5028 EFLAGS: 00000246 ORIG_RAX: 00000000000001be [ 340.123748][ T30] RAX: ffffffffffffffda RBX: 00007fed64416090 RCX: 00007fed6419c799 [ 340.132562][ T30] RDX: 0000000000000000 RSI: 000000000000000e RDI: 0000000000000005 [ 340.144012][ T30] RBP: 00007fed64232bd9 R08: 0000000000000000 R09: 0000000000000000 [ 340.152763][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 340.161775][ T30] R13: 00007fed64416128 R14: 00007fed64416090 R15: 00007ffd85e94488 [ 340.170417][ T30] [ 340.173622][ T30] INFO: task syz.4.173:6539 blocked for more than 147 seconds. [ 340.195381][ T30] Tainted: G L syzkaller #0 [ 340.202633][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 340.211692][ T30] task:syz.4.173 state:D stack:28616 pid:6539 tgid:6536 ppid:5827 task_flags:0x400140 flags:0x00080006 [ 340.224261][ T30] Call Trace: [ 340.227766][ T30] [ 340.231444][ T30] __schedule+0x15dd/0x5300 [ 340.236220][ T30] ? register_lock_class+0x31/0x2e0 [ 340.244428][ T30] ? __pfx___schedule+0x10/0x10 [ 340.250377][ T30] ? schedule+0x90/0x360 [ 340.254963][ T30] schedule+0x164/0x360 [ 340.259310][ T30] schedule_timeout+0xc3/0x2c0 [ 340.264394][ T30] ? do_raw_spin_lock+0x12b/0x2f0 [ 340.269722][ T30] ? __pfx_schedule_timeout+0x10/0x10 [ 340.275565][ T30] ? do_raw_spin_lock+0x12b/0x2f0 [ 340.281261][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 340.286783][ T30] ? wait_for_completion+0x274/0x5e0 [ 340.292913][ T30] wait_for_completion+0x2cc/0x5e0 [ 340.298623][ T30] ? __pfx_wait_for_completion+0x10/0x10 [ 340.304939][ T30] landlock_restrict_sibling_threads+0xe16/0x1190 [ 340.311787][ T30] ? landlock_restrict_sibling_threads+0x261/0x1190 [ 340.319043][ T30] ? __pfx_landlock_restrict_sibling_threads+0x10/0x10 [ 340.326270][ T30] ? landlock_put_ruleset+0x10/0xb0 [ 340.332227][ T30] __se_sys_landlock_restrict_self+0x540/0x810 [ 340.339627][ T30] do_syscall_64+0x14d/0xf80 [ 340.346143][ T30] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 340.352471][ T30] ? clear_bhb_loop+0x40/0x90 [ 340.357507][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 340.364331][ T30] RIP: 0033:0x7fed6419c799 [ 340.369916][ T30] RSP: 002b:00007fed623b4028 EFLAGS: 00000246 ORIG_RAX: 00000000000001be [ 340.378969][ T30] RAX: ffffffffffffffda RBX: 00007fed64416180 RCX: 00007fed6419c799 [ 340.387342][ T30] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 0000000000000005 [ 340.396256][ T30] RBP: 00007fed64232bd9 R08: 0000000000000000 R09: 0000000000000000 [ 340.405550][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 340.414578][ T30] R13: 00007fed64416218 R14: 00007fed64416180 R15: 00007ffd85e94488 [ 340.422838][ T30] [ 340.426095][ T30] INFO: task syz.4.173:6544 blocked for more than 148 seconds. [ 340.435689][ T30] Tainted: G L syzkaller #0 [ 340.445020][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 340.454006][ T30] task:syz.4.173 state:D stack:25216 pid:6544 tgid:6536 ppid:5827 task_flags:0x400040 flags:0x00080002 [ 340.467378][ T30] Call Trace: [ 340.471090][ T30] [ 340.474598][ T30] __schedule+0x15dd/0x5300 [ 340.479848][ T30] ? __pfx___schedule+0x10/0x10 [ 340.485155][ T30] ? schedule+0x90/0x360 [ 340.489879][ T30] schedule+0x164/0x360 [ 340.494795][ T30] schedule_timeout+0xc3/0x2c0 [ 340.500593][ T30] ? futex_unqueue+0x22/0x240 [ 340.505994][ T30] ? __pfx_schedule_timeout+0x10/0x10 [ 340.511877][ T30] ? do_raw_spin_lock+0x12b/0x2f0 [ 340.517237][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 340.523601][ T30] ? wait_for_completion+0x274/0x5e0 [ 340.529452][ T30] wait_for_completion+0x2cc/0x5e0 [ 340.535189][ T30] ? __pfx_wait_for_completion+0x10/0x10 [ 340.542489][ T30] ? do_raw_spin_lock+0x12b/0x2f0 [ 340.551153][ T30] restrict_one_thread_callback+0x320/0x570 [ 340.557956][ T30] task_work_run+0x1d9/0x270 [ 340.563599][ T30] ? __pfx_task_work_run+0x10/0x10 [ 340.569453][ T30] ? __pfx_futex_wait+0x10/0x10 [ 340.574541][ T30] get_signal+0x11eb/0x1330 [ 340.580078][ T30] ? do_futex+0x333/0x420 [ 340.584561][ T30] ? hook_socket_connect+0x107/0x190 [ 340.590317][ T30] arch_do_signal_or_restart+0xbc/0x830 [ 340.596809][ T30] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 340.603540][ T30] exit_to_user_mode_loop+0x86/0x480 [ 340.609688][ T30] ? rcu_is_watching+0x15/0xb0 [ 340.614583][ T30] do_syscall_64+0x32d/0xf80 [ 340.619513][ T30] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 340.625829][ T30] ? clear_bhb_loop+0x40/0x90 [ 340.631163][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 340.637471][ T30] RIP: 0033:0x7fed6419c799 [ 340.642455][ T30] RSP: 002b:00007fed61f910e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 340.655222][ T30] RAX: fffffffffffffe00 RBX: 00007fed64416278 RCX: 00007fed6419c799 [ 340.663774][ T30] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fed64416278 [ 340.672226][ T30] RBP: 00007fed64416270 R08: 0000000000000000 R09: 0000000000000000 [ 340.682202][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 340.691527][ T30] R13: 00007fed64416308 R14: 00007ffd85e943a0 R15: 00007ffd85e94488 [ 340.700384][ T30] [ 340.703665][ T30] [ 340.703665][ T30] Showing all locks held in the system: [ 340.713933][ T30] 1 lock held by khungtaskd/30: [ 340.720488][ T30] #0: ffffffff8e760620 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 340.730958][ T30] 2 locks held by getty/5578: [ 340.736045][ T30] #0: ffff8880370920a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 340.748273][ T30] #1: ffffc9000332e2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45c/0x13c0 [ 340.761743][ T30] 3 locks held by kworker/u8:12/7092: [ 340.767403][ T30] #0: ffff8880b863ad60 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0xb6/0x150 [ 340.779471][ T30] #1: ffff8880b8724588 (psi_seq){-.-.}-{0:0}, at: psi_task_switch+0x53/0x880 [ 340.790072][ T30] #2: ffff888022ed8250 (&devlink->lock_key#5){+.+.}-{4:4}, at: nsim_dev_trap_report_work+0x57/0xb80 [ 340.802874][ T30] [ 340.805686][ T30] ============================================= [ 340.805686][ T30] [ 340.815037][ T30] NMI backtrace for cpu 0 [ 340.815081][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 340.815109][ T30] Tainted: [L]=SOFTLOCKUP [ 340.815117][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 340.815129][ T30] Call Trace: [ 340.815137][ T30] [ 340.815150][ T30] dump_stack_lvl+0xe8/0x150 [ 340.815178][ T30] nmi_cpu_backtrace+0x274/0x2d0 [ 340.815197][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 340.815220][ T30] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 340.815240][ T30] sys_info+0x135/0x170 [ 340.815253][ T30] watchdog+0xfd9/0x1030 [ 340.815272][ T30] ? watchdog+0x21a/0x1030 [ 340.815298][ T30] kthread+0x388/0x470 [ 340.815314][ T30] ? __pfx_watchdog+0x10/0x10 [ 340.815327][ T30] ? __pfx_kthread+0x10/0x10 [ 340.815343][ T30] ret_from_fork+0x51e/0xb90 [ 340.815366][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 340.815386][ T30] ? __switch_to+0xc7d/0x1450 [ 340.815406][ T30] ? __pfx_kthread+0x10/0x10 [ 340.815422][ T30] ret_from_fork_asm+0x1a/0x30 [ 340.815446][ T30] [ 340.815452][ T30] Sending NMI from CPU 0 to CPUs 1: [ 340.944495][ C1] NMI backtrace for cpu 1 [ 340.944518][ C1] CPU: 1 UID: 0 PID: 7092 Comm: kworker/u8:12 Tainted: G L syzkaller #0 PREEMPT(full) [ 340.944543][ C1] Tainted: [L]=SOFTLOCKUP [ 340.944550][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 340.944561][ C1] Workqueue: events_unbound toggle_allocation_gate [ 340.944591][ C1] RIP: 0010:lock_acquire+0x50/0x2e0 [ 340.944619][ C1] Code: 8b 05 34 8b 79 11 48 89 44 24 30 0f 1f 44 00 00 65 8b 05 37 8b 79 11 83 f8 08 0f 83 77 01 00 00 89 c0 48 0f a3 05 a0 55 70 0e <73> 0d e8 d9 29 09 00 84 c0 0f 84 bc 01 00 00 83 3d 9a 88 70 0e 00 [ 340.944634][ C1] RSP: 0018:ffffc9000258f690 EFLAGS: 00000297 [ 340.944648][ C1] RAX: 0000000000000001 RBX: 00002aaaaaaab000 RCX: 0000000000000002 [ 340.944660][ C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffffff8e760620 [ 340.944671][ C1] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 340.944680][ C1] R10: dffffc0000000000 R11: fffff940000111e9 R12: 0000000000000002 [ 340.944692][ C1] R13: ffffffff8e760620 R14: 0000000000000000 R15: 0000000000000000 [ 340.944704][ C1] FS: 0000000000000000(0000) GS:ffff888125570000(0000) knlGS:0000000000000000 [ 340.944718][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 340.944730][ C1] CR2: 00007f1df8de82f8 CR3: 000000000e54c000 CR4: 00000000003526f0 [ 340.944746][ C1] Call Trace: [ 340.944752][ C1] [ 340.944763][ C1] ? __kmalloc_node_noprof+0x109/0x7c0 [ 340.944785][ C1] __pte_offset_map+0x45/0x240 [ 340.944813][ C1] ? __pte_offset_map+0x29/0x240 [ 340.944839][ C1] ? pte_offset_map_lock+0x2d/0x210 [ 340.944854][ C1] ? __kmalloc_node_noprof+0x109/0x7c0 [ 340.944873][ C1] pte_offset_map_lock+0x46/0x210 [ 340.944889][ C1] ? __kmalloc_node_noprof+0x109/0x7c0 [ 340.944909][ C1] ? __kmalloc_node_noprof+0x109/0x7c0 [ 340.944932][ C1] __text_poke+0x2d3/0x9a0 [ 340.944953][ C1] ? __pfx_text_poke_memcpy+0x10/0x10 [ 340.944971][ C1] ? __pfx_perf_event_text_poke+0x10/0x10 [ 340.944990][ C1] ? __kmalloc_node_noprof+0x109/0x7c0 [ 340.945015][ C1] ? __pfx___text_poke+0x10/0x10 [ 340.945038][ C1] smp_text_poke_batch_finish+0x923/0x1160 [ 340.945063][ C1] ? __pfx_smp_text_poke_batch_finish+0x10/0x10 [ 340.945085][ C1] ? arch_jump_label_transform_queue+0x97/0x110 [ 340.945114][ C1] arch_jump_label_transform_apply+0x1c/0x30 [ 340.945136][ C1] static_key_disable_cpuslocked+0xc5/0x1a0 [ 340.945167][ C1] static_key_disable+0x1a/0x20 [ 340.945192][ C1] toggle_allocation_gate+0x1fe/0x290 [ 340.945213][ C1] ? __pfx_toggle_allocation_gate+0x10/0x10 [ 340.945234][ C1] ? __pfx_autoremove_wake_function+0x10/0x10 [ 340.945259][ C1] ? process_one_work+0x87c/0x1650 [ 340.945284][ C1] ? process_one_work+0x87c/0x1650 [ 340.945306][ C1] process_one_work+0x949/0x1650 [ 340.945340][ C1] ? __pfx_process_one_work+0x10/0x10 [ 340.945361][ C1] ? do_raw_spin_lock+0x12b/0x2f0 [ 340.945388][ C1] worker_thread+0xb46/0x1140 [ 340.945425][ C1] kthread+0x388/0x470 [ 340.945443][ C1] ? __pfx_worker_thread+0x10/0x10 [ 340.945466][ C1] ? __pfx_kthread+0x10/0x10 [ 340.945484][ C1] ret_from_fork+0x51e/0xb90 [ 340.945509][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 340.945531][ C1] ? __switch_to+0xc7d/0x1450 [ 340.945553][ C1] ? __pfx_kthread+0x10/0x10 [ 340.945571][ C1] ret_from_fork_asm+0x1a/0x30 [ 340.945596][ C1] [ 341.305297][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 341.312459][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 341.323734][ T30] Tainted: [L]=SOFTLOCKUP [ 341.328174][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 341.338742][ T30] Call Trace: [ 341.342330][ T30] [ 341.345361][ T30] vpanic+0x56c/0xa60 [ 341.349779][ T30] ? __pfx___schedule+0x10/0x10 [ 341.354990][ T30] ? __pfx_vpanic+0x10/0x10 [ 341.360409][ T30] ? __pfx_console_unlock+0x10/0x10 [ 341.365942][ T30] panic+0xc5/0xd0 [ 341.369778][ T30] ? __pfx_panic+0x10/0x10 [ 341.374899][ T30] ? preempt_schedule_thunk+0x16/0x30 [ 341.380931][ T30] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 341.387479][ T30] watchdog+0x1023/0x1030 [ 341.392014][ T30] ? watchdog+0x21a/0x1030 [ 341.397094][ T30] kthread+0x388/0x470 [ 341.401559][ T30] ? __pfx_watchdog+0x10/0x10 [ 341.406351][ T30] ? __pfx_kthread+0x10/0x10 [ 341.411325][ T30] ret_from_fork+0x51e/0xb90 [ 341.416215][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 341.421386][ T30] ? __switch_to+0xc7d/0x1450 [ 341.426292][ T30] ? __pfx_kthread+0x10/0x10 [ 341.431180][ T30] ret_from_fork_asm+0x1a/0x30 [ 341.436070][ T30] [ 341.439396][ T30] Kernel Offset: disabled [ 341.444184][ T30] Rebooting in 86400 seconds..