last executing test programs: 34m20.702031638s ago: executing program 4 (id=62): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000040)) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x35, 0x7, 0x2, 0x180, 0x5, 0x10, 0xf1, 0x50, 0x12, 0x5, 0x0, 0x29, 0x0, 0x6, 0x0, 0xbdb], 0xffff1001, 0x43100}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) setrlimit(0x40000000000008, &(0x7f0000000080)={0x0, 0x6}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000003c0)={[0x60000000002, 0x1000000000, 0x0, 0x43, 0x2000001, 0x0, 0x2004cb, 0x0, 0x1000000, 0x68ff, 0x5, 0x9, 0x3], 0xeeee8000, 0xa02}) ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f00000001c0)={{0x8080000, 0xeeee0000, 0x8, 0x8, 0xb, 0xe4, 0x40, 0x0, 0x0, 0x2e, 0x80}, {0x5000, 0x4000, 0x3, 0x0, 0x42, 0x5, 0x5, 0x6, 0x15, 0x3, 0x2, 0x87}, {0x6000, 0x1, 0xe, 0x5, 0x3, 0x7, 0x0, 0x9, 0x1, 0xa4, 0x5, 0x5}, {0x1, 0xeeee0000, 0xd, 0x6, 0x4, 0x42, 0xb, 0xff, 0x2, 0x7, 0xe}, {0xeeee0000, 0xd000, 0xf, 0x3, 0x15, 0x7, 0xab, 0x8, 0x9, 0x83, 0xf7, 0x83}, {0x1000, 0x3909e40c33606d9c, 0xe, 0xa0, 0xb1, 0x8, 0x1, 0xa0, 0x82, 0xf, 0x1, 0xad}, {0x3000, 0x3000, 0x4, 0x5, 0x7, 0x5, 0x7, 0x3, 0x8, 0x81, 0x40, 0x70}, {0xd000, 0x4000, 0xe, 0x5, 0xcd, 0x7, 0x1, 0x9, 0x2, 0xc, 0xb0, 0x9}, {0xeeef0000, 0x30}, {0x8000000, 0x7}, 0x80000031, 0x0, 0x0, 0x2024, 0x0, 0x1500, 0x3000, [0x6800000000000000, 0x204, 0x5b, 0x8]}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x42, 0x120) ioctl$VHOST_SET_VRING_ERR(0xffffffffffffffff, 0x4008af22, &(0x7f00000000c0)={0x1, r3}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 34m18.658666158s ago: executing program 4 (id=67): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) r1 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r1, &(0x7f0000000940), 0x10) listen(r1, 0x0) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r2, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10) writev(r2, &(0x7f00000002c0)=[{&(0x7f0000000080)='?', 0x20000081}], 0x1) shutdown(r2, 0x1) socketpair$unix(0x1, 0x2, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) 34m17.712911808s ago: executing program 4 (id=70): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) setresuid(0xee01, 0x0, 0x0) getpriority(0x2, 0x0) 34m15.377119249s ago: executing program 4 (id=73): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000040)={0x100000011, @multicast2, 0x0, 0x0, 'rr\x00', 0xd, 0x4000ffc, 0x2004a}, 0x2c) r1 = socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, 0x0, 0x0) getrlimit(0x4, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000200)=0x7) setrlimit(0x8, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@abs, 0x6e) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) socket$isdn(0x22, 0x2, 0x23) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0100000000000000000003000000400001802c0004001400010002000000ac1414aa00000000000000001400020002000000e000000200000000000004000d0001007564703a73"], 0x54}}, 0x0) 34m10.076729145s ago: executing program 4 (id=78): r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000140)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x0, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='coredump_filter\x00') read$FUSE(r4, &(0x7f0000002140)={0x2020}, 0x2020) 34m7.529786907s ago: executing program 4 (id=80): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = timerfd_create(0x8, 0x0) timerfd_settime(r3, 0x3, &(0x7f0000000040)={{0x77359400}, {0x0, 0x989680}}, 0x0) 33m57.075763489s ago: executing program 1 (id=96): sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000035c0)={{{@in6=@loopback, @in=@loopback}}, {{@in6=@remote}, 0x0, @in=@loopback}}, 0x0) socket(0x10, 0x3, 0x0) inotify_init() socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) setregid(0x0, 0x0) r0 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) bind$llc(r0, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x42}, 0x10) connect$llc(r0, &(0x7f0000000240)={0x1a, 0x20, 0x0, 0x8, 0x2, 0x2, @remote}, 0x10) r1 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) bind$llc(r1, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x42}, 0x10) 33m56.801683765s ago: executing program 1 (id=97): ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000400007b8af8ff00000000bfa200000000000007020000fcffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) 33m55.213198381s ago: executing program 1 (id=98): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x15) syz_clone(0x20000, 0x0, 0x0, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x5) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 33m53.912447209s ago: executing program 1 (id=100): socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) shutdown(r2, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x2, @void}, 0x10) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r3, 0xaf01, 0x0) r4 = eventfd(0xffffffff) ioctl$VHOST_SET_LOG_FD(r3, 0x4004af07, &(0x7f0000000240)=r4) ioctl$VHOST_SET_VRING_KICK(r3, 0x4008af20, &(0x7f0000000040)={0x1, r4}) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000600)=""/79, 0x0, 0x10000}) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_SET_MEM_TABLE(r3, 0x4008af03, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0xfffffeac, &(0x7f00000001c0)=""/115}]}) ioctl$VHOST_VSOCK_SET_RUNNING(r3, 0x4004af61, &(0x7f0000000000)=0x1) 33m51.797144154s ago: executing program 32 (id=80): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = timerfd_create(0x8, 0x0) timerfd_settime(r3, 0x3, &(0x7f0000000040)={{0x77359400}, {0x0, 0x989680}}, 0x0) 33m42.833133306s ago: executing program 1 (id=113): r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000010c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r5, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x22fe0}], 0x1}, 0x0) recvfrom(r4, &(0x7f0000004000)=""/4112, 0xfffffffffffffedc, 0x2080, 0x0, 0x0) 33m41.502002573s ago: executing program 1 (id=115): open_tree(0xffffffffffffff9c, 0x0, 0x89901) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x101e01, 0x0) ioctl$TIOCSETD(r0, 0x5423, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB], 0x48) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={0x0, r4}, 0x18) ioctl$TIOCSSOFTCAR(r0, 0x541a, 0x0) 33m26.373724924s ago: executing program 33 (id=115): open_tree(0xffffffffffffff9c, 0x0, 0x89901) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x101e01, 0x0) ioctl$TIOCSETD(r0, 0x5423, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB], 0x48) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={0x0, r4}, 0x18) ioctl$TIOCSSOFTCAR(r0, 0x541a, 0x0) 25m32.9806555s ago: executing program 6 (id=1226): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r1 = syz_io_uring_setup(0x9e, &(0x7f0000000640)={0x0, 0x5865, 0x10, 0x2, 0x24d}, &(0x7f00000006c0)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f00000002c0)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x4000, @fd=r0, 0x0, 0x0, 0x0, 0x0, 0x1}) io_uring_enter(r1, 0x100847c0, 0x0, 0x1, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = ioctl$KVM_GET_STATS_FD_vm(0xffffffffffffffff, 0xaece) ioctl$DRM_IOCTL_GET_MAP(r4, 0xc0286404, &(0x7f0000000180)={&(0x7f0000ffc000/0x1000)=nil}) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x2}, 0x94) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYRES32], 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r5 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000001780)=ANY=[@ANYBLOB="0200000004000000060000000500"], 0x48) r7 = socket$inet6(0xa, 0x3, 0x8000000003c) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x40, &(0x7f00000014c0)=@raw={'raw\x00', 0x8, 0x3, 0x4c8, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'team_slave_0\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @private0={0xfc, 0x0, '\x00', 0x1}, [], [0xff], 'erspan0\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0x0, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x528) connect$inet6(r7, &(0x7f0000000200)={0xa, 0x4ea4, 0x0, @local, 0x9}, 0x1c) sendmsg(r7, &(0x7f00000000c0)={0x0, 0x953a, &(0x7f0000000100)=[{&(0x7f0000000000)="2c10", 0xffd0}], 0x1, 0x0, 0x0, 0x2c}, 0x44004) socket$nl_netfilter(0x10, 0x3, 0xc) 25m31.7605836s ago: executing program 6 (id=1236): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='sys_enter\x00', r0}, 0x10) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) add_key$fscrypt_v1(&(0x7f0000000040), 0x0, 0x0, 0x0, 0xffffffffffffffff) 25m31.463695877s ago: executing program 6 (id=1238): prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x36, 0x36}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) read(r1, &(0x7f00000001c0)=""/64, 0x40) sendmsg$IPSET_CMD_SAVE(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001100)=ANY=[@ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x10) 25m30.470869427s ago: executing program 6 (id=1245): pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_GET_UNIQUE(r3, 0xc0106401, &(0x7f0000000400)={0x0, 0x0}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.current\x00', 0x275a, 0x0) lseek(r2, 0x8000000000000003, 0x0) io_setup(0x222, &(0x7f0000000180)=0x0) io_submit(r5, 0x1a, &(0x7f00000000c0)=[&(0x7f0000000200)={0x0, 0x0, 0x8, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000000)='%', 0x1a000}, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) writev(r4, &(0x7f0000000e00)=[{&(0x7f00000002c0)="aa", 0x1}], 0x1) r6 = socket$qrtr(0x2a, 0x2, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r7, 0x40086602, &(0x7f00000002c0)=0x20) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(r1, 0xf504, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) bind$unix(r8, &(0x7f00000002c0)=@abs={0x1, 0x0, 0x4e24}, 0x6e) bind$unix(r8, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r9 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$SO_TIMESTAMP(r9, 0x1, 0x3f, &(0x7f00000001c0)=0xffff8001, 0x4) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x300000a, 0x12, r9, 0x852ac000) setsockopt$SO_TIMESTAMPING(r9, 0x1, 0x41, &(0x7f0000000000)=0x397, 0x4) sendto$inet6(r9, 0x0, 0x0, 0x0, &(0x7f0000000180)={0xa, 0x4e20, 0xffffffff, @loopback, 0xbf}, 0x1c) setsockopt$inet6_int(r9, 0x29, 0x4a, &(0x7f0000000280)=0x6c, 0x4) recvmmsg(r9, &(0x7f0000000140)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000fc0)=""/4110, 0x100e}, 0x7ffffffe}], 0x1, 0x40002000, 0x0) bind$qrtr(r6, &(0x7f0000000300)={0x2a, 0x1, 0xfffffffe}, 0xc) splice(r0, 0x0, r2, 0x0, 0x4ffe6, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0x7, &(0x7f0000000040)={0x81, 0xffff, 0x8, 0x36}, 0x10) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000140)={'team0\x00'}) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f00000001c0), &(0x7f0000000240)=0xc) 25m29.693935869s ago: executing program 6 (id=1250): r0 = socket$packet(0x11, 0x3, 0x300) syz_emit_ethernet(0x14, &(0x7f00000001c0)={@empty, @broadcast, @val={@void, {0x8100, 0x6, 0x0, 0x3}}, {@mpls_mc={0x8848, {[], @generic="a465"}}}}, 0x0) setsockopt$packet_int(r0, 0x107, 0x8, &(0x7f0000000000)=0x10, 0x4) recvfrom$packet(r0, 0x0, 0x0, 0x2, 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000080)={0x500, 0x0, 0x640, 0x6c0, 0x4, 0x2, 0x0, 0x1, {0xd, 0x5, 0x1}, {0x0, 0x7eb5, 0x200}, {0xb, 0x2}, {0x5, 0xfff}, 0x2, 0x10, 0xb337, 0xffffc31c, 0x0, 0xa848, 0xe, 0x5, 0xff, 0x7, 0xc06, 0x2, 0x4, 0x1, 0x0, 0x5}) sendmsg$RDMA_NLDEV_CMD_DELLINK(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="50000000041400032bbd7000fcdbdf2508000100000000fb0800010000000000080001000200"], 0x50}, 0x1, 0x0, 0x0, 0x4001}, 0x4000000) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000007c0000007c00000003000000010000000500008b9b3e9f7767757c06040000000f0000000300000008000000560000000200000006000000090000000600000006000000fbffffff04000000"], 0x0, 0x97, 0x0, 0x1, 0x3}, 0x28) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f00000000c0)={&(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff2000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ff2000/0x2000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ff3000/0x1000)=nil, 0x0, 0xfffffffffffffe43}, 0x68) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_usb_connect(0x0, 0x34, &(0x7f00000006c0)={{0x12, 0x1, 0x0, 0x7c, 0x96, 0x5c, 0x40, 0x2013, 0x251, 0xe86e, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x22, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0xff, 0xff, 0xff, 0x0, [], [{{0x9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [@generic={0x7, 0x5, "839935191f"}]}}]}}]}}]}}, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) 25m26.601567325s ago: executing program 6 (id=1263): socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000680)=""/233, 0xe9}], 0x20, &(0x7f0000001d00)=""/4080, 0xff0}, 0x40000020) close(r0) 25m25.680480056s ago: executing program 34 (id=1263): socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000680)=""/233, 0xe9}], 0x20, &(0x7f0000001d00)=""/4080, 0xff0}, 0x40000020) close(r0) 23m17.522571694s ago: executing program 7 (id=1660): r0 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000440)="580000001400192340834b80040d8c560a067fbc45ff810500000000000058000b480400945f64009400050028925a01000000000000008000f0fffeffe809000000fff5dd00000010000100030808004149014006040800", 0x58}], 0x1) 23m15.580828213s ago: executing program 7 (id=1665): syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) iopl(0x3) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000500)={@map=0x1, 0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) 23m13.602934366s ago: executing program 7 (id=1669): pipe2(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) fcntl$setpipe(r0, 0x407, 0x0) 23m12.079893176s ago: executing program 7 (id=1671): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000400)=[{0x6, 0x1, 0x2, 0x7fff7ffc}]}) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r1, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_MCAST_MSFILTER(r1, 0x0, 0x30, &(0x7f00000012c0)=ANY=[@ANYBLOB="020000000000000002000000e0000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000002000000e0000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000007f00000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000002000000e000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002"], 0x290) close_range(r0, 0xffffffffffffffff, 0x0) 23m11.595895467s ago: executing program 7 (id=1672): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000b, 0x12, 0xffffffffffffffff, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x0) r1 = syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000032680)=""/102400, 0x19000) socketpair$unix(0x1, 0x5, 0x0, 0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_opts(r3, 0x29, 0x37, 0x0, 0x0) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0x5}, 0x1c) sendmmsg$inet6(r3, &(0x7f0000007e40)=[{{&(0x7f0000000340)={0xa, 0x4e20, 0x0, @dev}, 0x18, 0x0}}], 0x6c00, 0x48) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000000280)={0xa, 0x4e22, 0x9, @private2, 0x200006}, 0x1c) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r5, 0x29, 0x4e, &(0x7f0000000000)=0x6, 0x4) bind$inet6(r5, &(0x7f00000009c0)={0xa, 0x4e22, 0x100fe1d, @loopback={0xe0}, 0x9371}, 0x1c) sendto$inet6(r5, 0x0, 0x0, 0x20000050, &(0x7f00000001c0)={0xa, 0x4e22, 0x40000000, @local, 0x1}, 0x1c) 23m9.79423089s ago: executing program 7 (id=1673): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) fcntl$setown(0xffffffffffffffff, 0x8, r1) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r4 = socket$inet(0x2, 0x1, 0x0) shutdown(r4, 0x0) recvmmsg(r4, &(0x7f00000066c0), 0xa0d, 0x0, 0x0) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)={0x2c, 0x0, 0x1, 0x70bd28, 0x25dfdbf9, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_TX_RATES={0x10, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0xc, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x5, 0x2, [{0x2, 0x7}]}]}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4080}, 0x4000) 22m54.06629692s ago: executing program 35 (id=1673): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) fcntl$setown(0xffffffffffffffff, 0x8, r1) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r4 = socket$inet(0x2, 0x1, 0x0) shutdown(r4, 0x0) recvmmsg(r4, &(0x7f00000066c0), 0xa0d, 0x0, 0x0) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)={0x2c, 0x0, 0x1, 0x70bd28, 0x25dfdbf9, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_TX_RATES={0x10, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0xc, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x5, 0x2, [{0x2, 0x7}]}]}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4080}, 0x4000) 21m51.533863289s ago: executing program 2 (id=1817): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f00000002c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000080)={0x50, 0x0, r1, {0x7, 0x29, 0x9, 0xffffffff90acedc6, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x9}}, 0x50) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x18) syz_fuse_handle_req(r0, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006380)={0x20, 0x0, 0x0, {0x0, 0x1c}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, &(0x7f00000063c0)="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", 0x2000, &(0x7f0000001240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000007c0)={0xd8, 0x0, 0xfffffffffffffff9, [{{0x5, 0x2, 0x3, 0x2, 0x5, 0x8, {0x6, 0x9, 0x0, 0xff, 0x3, 0x0, 0x7fffffff, 0x57, 0x3, 0x8000, 0x3ff, 0x0, r2, 0x4, 0x4}}, {0x20000000000000, 0x537, 0x2b, 0x9, ':-(\\\xc9\x80\x00\x00\x00\xc3\x00\x00\xf39}\xd8mM\x92\x8d$\xd3\xa4a\xb6\x02E\x89\x85V\xc6\x00\x00\x00\x00\x00\x00+\x13;\x00\x00\x00'}}]}, 0x0, 0x0, 0x0}) getdents64(r3, 0x0, 0x0) syz_fuse_handle_req(r0, &(0x7f00000083c0)="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", 0x2000, &(0x7f0000001e00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getdents64(r3, 0x0, 0xc0) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) close_range(r4, 0xffffffffffffffff, 0x0) 21m50.852925994s ago: executing program 2 (id=1821): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) fcntl$getflags(r0, 0x40a) bind$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @none, 0x0, 0x1}, 0x4d) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r1) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) ptrace(0x10, r1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00'}, 0x10) socket$inet(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f0000000000), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) openat$ttyS3(0xffffffffffffff9c, &(0x7f00000001c0), 0x400, 0x0) 21m47.65904063s ago: executing program 2 (id=1825): setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './cgroup\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x8ffff) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000002, 0x12, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x5}) creat(&(0x7f0000000200)='./file1\x00', 0x12e) 21m45.856878258s ago: executing program 2 (id=1826): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_open_procfs$namespace(r1, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) 21m43.47938432s ago: executing program 2 (id=1829): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(0xffffffffffffffff, 0x54a2) r3 = open(&(0x7f0000000580)='./file1\x00', 0x80242, 0x1df2a23c5997fa5f) write$FUSE_CREATE_OPEN(r3, &(0x7f0000000180)={0xa0, 0xfffffffffffffffe, 0x0, {{0x6, 0x1, 0x8000000004007, 0xac, 0x3, 0x4, {0x0, 0x4000000180, 0x20fe, 0x40000000005, 0x85, 0xd614, 0x9, 0x7fffffff, 0xfffffffe, 0xc000, 0x0, 0xee00, 0x0, 0x3ff, 0x401}}, {0x0, 0x11}}}, 0xa0) r4 = inotify_init() inotify_add_watch(r4, &(0x7f0000000640)='.\x00', 0x4000423) sendfile(r3, r3, &(0x7f0000000080), 0x7f03) 21m38.290180875s ago: executing program 2 (id=1833): bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x0, 0xc, &(0x7f00000000c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x79, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$packet(0x11, 0xa, 0x300) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f066bbeee, 0x8031, 0xffffffffffffffff, 0xffffc000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_clone3(&(0x7f00000002c0)={0x8040810, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) socket$netlink(0x10, 0x3, 0x4) syz_clone(0x1000, 0x0, 0x0, 0x0, 0x0, 0x0) unshare(0x40020480) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x6, 0x4, 0x7, 0x5, 0x0, 0xffffffffffffffff, 0x4}, 0x50) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=@newtaction={0x15c, 0x13, 0x53b, 0x1, 0x0, {}, [{0x148, 0x1, [@m_mpls={0x50, 0x1a, 0x0, 0x0, {{0x9}, {0x24, 0x2, 0x0, 0x1, [@TCA_MPLS_LABEL={0x8, 0x5, 0xb591e}, @TCA_MPLS_PROTO={0x6, 0x4, 0x809b}, @TCA_MPLS_BOS={0x5}, @TCA_MPLS_TTL={0x5, 0x7, 0xc}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x3}}}}, @m_simple={0xf4, 0x5, 0x0, 0x0, {{0xb}, {0x4}, {0xc8, 0x6, "08d510ba32dc11dcdd890743b4e608523c5f55eaab79c628ea356d89c2cdde891cbf4b0c334b8db6405b23083762a562e03484054b04cdb31762c8f4ca2e07671cb6fef652c6556da745385045749650f76db55c316516ac3982811d03139b699fb1f9ad9ffd7e91dffc6c4bae2e1b75050fe5bf162454915e58dbb797a97dbd1084c6933d23960249fafb08db0cb2cbd2a4a3c621327e972ef99093e1f19861ed8c0c0926c2f44e21aa68120e66143d7b034a5e88b07c0ca83322152fe9e26ec9647b22"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x1}}}}]}]}, 0x15c}, 0x1, 0x0, 0x0, 0x40810}, 0x20040080) 21m22.889959015s ago: executing program 36 (id=1833): bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x0, 0xc, &(0x7f00000000c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x79, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$packet(0x11, 0xa, 0x300) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f066bbeee, 0x8031, 0xffffffffffffffff, 0xffffc000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_clone3(&(0x7f00000002c0)={0x8040810, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) socket$netlink(0x10, 0x3, 0x4) syz_clone(0x1000, 0x0, 0x0, 0x0, 0x0, 0x0) unshare(0x40020480) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x6, 0x4, 0x7, 0x5, 0x0, 0xffffffffffffffff, 0x4}, 0x50) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=@newtaction={0x15c, 0x13, 0x53b, 0x1, 0x0, {}, [{0x148, 0x1, [@m_mpls={0x50, 0x1a, 0x0, 0x0, {{0x9}, {0x24, 0x2, 0x0, 0x1, [@TCA_MPLS_LABEL={0x8, 0x5, 0xb591e}, @TCA_MPLS_PROTO={0x6, 0x4, 0x809b}, @TCA_MPLS_BOS={0x5}, @TCA_MPLS_TTL={0x5, 0x7, 0xc}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x3}}}}, @m_simple={0xf4, 0x5, 0x0, 0x0, {{0xb}, {0x4}, {0xc8, 0x6, "08d510ba32dc11dcdd890743b4e608523c5f55eaab79c628ea356d89c2cdde891cbf4b0c334b8db6405b23083762a562e03484054b04cdb31762c8f4ca2e07671cb6fef652c6556da745385045749650f76db55c316516ac3982811d03139b699fb1f9ad9ffd7e91dffc6c4bae2e1b75050fe5bf162454915e58dbb797a97dbd1084c6933d23960249fafb08db0cb2cbd2a4a3c621327e972ef99093e1f19861ed8c0c0926c2f44e21aa68120e66143d7b034a5e88b07c0ca83322152fe9e26ec9647b22"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x1}}}}]}]}, 0x15c}, 0x1, 0x0, 0x0, 0x40810}, 0x20040080) 18.978352748s ago: executing program 8 (id=5555): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=[@assoc={0x18, 0x117, 0x4, 0x1fd}], 0x18}, 0x28000054) sendmsg$nl_route_sched_retired(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000012100), 0xe078}}, 0x0) recvmmsg(r1, &(0x7f0000000180)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000008c0)=""/223, 0xdf}, {&(0x7f0000000300)=""/131, 0x83}, {&(0x7f0000000600)=""/134, 0x86}, {0x0}], 0x4}, 0x4}], 0x2, 0x61, 0x0) 18.187490296s ago: executing program 9 (id=5556): socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) ioperm(0x9, 0x8, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000fd0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@xino_auto}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000002180)='./file0\x00', 0x0, 0x0) getdents64(r3, &(0x7f0000000580)=""/174, 0xae) r4 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000c80)={'lo\x00'}) quotactl$Q_SETQUOTA(0xffffffff80000800, 0x0, 0x0, 0x0) r5 = getgid() lchown(&(0x7f0000000040)='./file0\x00', 0xffffffffffffffff, r5) 18.033393212s ago: executing program 3 (id=5557): bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x7, 0x4, 0x208, 0xd9}, 0x50) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = io_uring_setup(0x9, &(0x7f0000000040)={0x0, 0x20c8a1, 0x1c881, 0x8, 0xd1}) r1 = io_uring_setup(0x1b7a, &(0x7f0000000040)={0x0, 0xa8bf, 0xc000, 0x7, 0x20002f7}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000140)={'syztnl2\x00', &(0x7f0000000000)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x5c8c, 0x0, @empty, @mcast1, 0x80, 0x0, 0x0, 0x20000000}}) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x2d, 0x0, 0x1f, 0x2}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x4) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) rt_sigqueueinfo(0x0, 0x38, &(0x7f0000000240)={0x20, 0x523}) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 17.91460622s ago: executing program 0 (id=5559): fsopen(&(0x7f00000001c0)='ramfs\x00', 0x1) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newtfilter={0x48, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0x9}, {}, {0xd, 0xfff1}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x18, 0x2, [@TCA_CGROUP_EMATCHES={0x14, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x10, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0xc, 0x1, 0x0, 0x0, {{0x3, 0x9, 0x80}}}]}]}]}}]}, 0x48}}, 0x1) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=@ipv6_newroute={0x1c, 0x18, 0x1, 0x70bd2c, 0x0, {0xa, 0x0, 0x14, 0x0, 0xfe, 0x4, 0xff, 0x6}}, 0x1c}}, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 15.970770069s ago: executing program 8 (id=5563): r0 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x161a82, 0x0) write$FUSE_LK(r0, &(0x7f0000000000)={0x28, 0x0, 0x0, {{0x2, 0x2, 0x2}}}, 0x28) 15.123396438s ago: executing program 9 (id=5564): syz_open_dev$vim2m(&(0x7f0000000100), 0x80000000, 0x2) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0xfffffffffffffffc, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x3) 14.929646648s ago: executing program 3 (id=5567): r0 = socket$packet(0x11, 0x3, 0x300) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000002c00)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x94) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000340)=r1, 0x4) syz_emit_ethernet(0x36, &(0x7f0000000200)={@broadcast, @local, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "87fb89", 0x0, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private2}}}}, 0x0) 14.905655191s ago: executing program 0 (id=5568): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x3, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x3, 0x0, @loopback}, 0x1c) sendmmsg$sock(r0, &(0x7f0000002e40)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000300)='n', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000600)="e8ea8736", 0x4}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x3, 0x4000000) connect$unix(r0, &(0x7f0000000100)=@file={0x0, './file0\x00'}, 0x6e) 12.070984708s ago: executing program 8 (id=5572): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001380)=ANY=[@ANYBLOB="200000002e000900fe"], 0x20}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 11.977127949s ago: executing program 9 (id=5574): bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000dc0)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) 11.84619396s ago: executing program 3 (id=5576): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[@ANYRESDEC], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = fsopen(&(0x7f0000000200)='affs\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, 0x0, &(0x7f00000000c0)='%(:2', 0x0) r1 = getpid() setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000280)={0x3, 0x7}, 0x4) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) prctl$PR_SET_MM(0x23, 0x4, &(0x7f0000ffd000/0x2000)=nil) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @empty, 0x7}], 0x1c) ioctl$vim2m_VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc044560f, &(0x7f0000000080)=@mmap={0x0, 0x2, 0x4, 0x0, 0x7, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "10110401"}}) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000040)={[{@xino_on}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x4, 0x80) 11.844942912s ago: executing program 0 (id=5578): fsopen(&(0x7f00000001c0)='ramfs\x00', 0x1) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newtfilter={0x48, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0x9}, {}, {0xd, 0xfff1}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x18, 0x2, [@TCA_CGROUP_EMATCHES={0x14, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x10, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0xc, 0x1, 0x0, 0x0, {{0x3, 0x9, 0x80}}}]}]}]}}]}, 0x48}}, 0x1) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=@ipv6_newroute={0x1c, 0x18, 0x1, 0x70bd2c, 0x0, {0xa, 0x0, 0x14, 0x0, 0xfe, 0x4, 0xff, 0x6}}, 0x1c}}, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 8.918383368s ago: executing program 8 (id=5581): socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_xfrm(0x10, 0x3, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r3 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, &(0x7f0000000040)={0x84, @dev={0xac, 0x14, 0x14, 0xb}, 0x15, 0x3, 'sh\x00', 0x1, 0x4, 0x72}, 0x2c) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r4, 0x0, 0x487, &(0x7f0000000000)={{0x84, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e1f, 0x3, 'lc\x00', 0x4, 0x81, 0x5}, {@rand_addr=0x64010102, 0x4e26, 0x0, 0xcb, 0x12d60, 0x9}}, 0x44) 8.90768294s ago: executing program 9 (id=5582): socket$nl_route(0x10, 0x3, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000300)={0x90000011}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x4, [@func={0x2, 0x0, 0x0, 0xc, 0x2}, @func_proto]}, {0x0, [0x0, 0x5f]}}, 0x0, 0x34}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r4, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1}, 0x90) 8.814445078s ago: executing program 3 (id=5583): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000004cc0), r0) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000004e40)={0x0, 0x0, &(0x7f0000004e00)={&(0x7f0000004d00)={0x40, r1, 0x1, 0x70bd2a, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_SECCTX={0x29, 0x7, 'system_u:object_r:memory_device_t:s0\x00'}]}, 0x40}, 0x1, 0x0, 0x0, 0x84}, 0x48040) 8.699127203s ago: executing program 0 (id=5584): r0 = socket(0x10, 0x2, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, 0x0, 0x0) 5.898831565s ago: executing program 8 (id=5592): bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000dc0)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) 5.779975128s ago: executing program 9 (id=5593): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[@ANYRESDEC], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = fsopen(&(0x7f0000000200)='affs\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, 0x0, &(0x7f00000000c0)='%(:2', 0x0) r1 = getpid() setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000280)={0x3, 0x7}, 0x4) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) prctl$PR_SET_MM(0x23, 0x4, &(0x7f0000ffd000/0x2000)=nil) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @empty, 0x7}], 0x1c) ioctl$vim2m_VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc044560f, &(0x7f0000000080)=@mmap={0x0, 0x2, 0x4, 0x0, 0x7, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "10110401"}}) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000040)={[{@xino_on}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x4, 0x80) 5.667022985s ago: executing program 3 (id=5594): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={r0, 0xffffffffffffffff}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x16, 0x1d, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x100}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1000}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0xb6}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}}]}, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r2, 0x0, 0xe, 0x0, &(0x7f00000000c0)="9dbaac999f69835fc48373a1ee57", 0x0, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 5.662904144s ago: executing program 0 (id=5595): socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) shutdown(0xffffffffffffffff, 0x1) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cpuacct.usage_sys\x00', 0x26e1, 0x0) close(r3) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, 0x3a, 0x301, 0x70bd25, 0xfffffffc, {0x10}}, 0x14}, 0x1, 0x0, 0x0, 0x448d3}, 0x8000000) recvmsg$unix(r3, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) 2.743618411s ago: executing program 8 (id=5601): dup(0xffffffffffffffff) openat$udambuf(0xffffffffffffff9c, 0x0, 0x2) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) io_uring_setup(0x3454, &(0x7f0000000080)={0x0, 0x0, 0x800, 0x0, 0xa3}) bpf$BPF_LINK_CREATE_XDP(0x25, 0x0, 0x0) mremap(&(0x7f00003eb000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f0000003000/0x1000)=nil) migrate_pages(0x0, 0x3, &(0x7f0000000040)=0x7f, &(0x7f0000000300)=0xa) 2.626409811s ago: executing program 3 (id=5602): socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_xfrm(0x10, 0x3, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) fcntl$setown(r2, 0x8, r0) r3 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, &(0x7f0000000040)={0x84, @dev={0xac, 0x14, 0x14, 0xb}, 0x15, 0x3, 'sh\x00', 0x1, 0x4, 0x72}, 0x2c) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r4, 0x0, 0x487, &(0x7f0000000000)={{0x84, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e1f, 0x3, 'lc\x00', 0x4, 0x81, 0x5}, {@rand_addr=0x64010102, 0x4e26, 0x0, 0xcb, 0x12d60, 0x9}}, 0x44) 2.619304831s ago: executing program 9 (id=5603): socket$nl_route(0x10, 0x3, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000300)={0x90000011}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x4, [@func={0x2, 0x0, 0x0, 0xc, 0x2}, @func_proto]}, {0x0, [0x0, 0x5f]}}, 0x0, 0x34}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r4, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1}, 0x90) 2.389187057s ago: executing program 0 (id=5605): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) listen(0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, 0x0, 0x0) bind$inet6(r5, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r5, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x6}]}, 0x24}}, 0x0) 1.368989436s ago: executing program 5 (id=5608): openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_freeze_timeout', 0x82802, 0xf) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0x7, &(0x7f0000000100)=0x4000200, 0x4) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f0000000080)=@req3={0x8000, 0x6, 0x300, 0xfc}, 0x1c) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0xfffffffffffffd8f}, 0x90) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0x0, 0x0, &(0x7f0000000000), 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 1.186708934s ago: executing program 5 (id=5609): socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_xfrm(0x10, 0x3, 0x6) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f0000001740)=[{0x0}], 0x1) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) fcntl$setown(r3, 0x8, r1) 121.040064ms ago: executing program 5 (id=5610): r0 = socket$inet6_icmp(0xa, 0x2, 0x3a) setsockopt$inet6_int(r0, 0x29, 0xa, 0x0, 0x0) 86.750418ms ago: executing program 5 (id=5611): bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000dc0)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) 1.472903ms ago: executing program 5 (id=5612): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, 0x0, &(0x7f0000000480)=0xfffffffffffffe2f) 0s ago: executing program 5 (id=5613): syz_usb_connect(0x0, 0x24, 0x0, 0x0) r0 = socket(0x28, 0x5, 0x0) r1 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r1, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x4880) listen(r1, 0x4) connect$vsock_stream(r0, &(0x7f0000000080), 0x10) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000005000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, 0x2}, 0x94) close(r2) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000600)={0x18, 0x6, &(0x7f00000001c0)=ANY=[@ANYBLOB="180000000000000000000000ffffff80e500020000000000c500fcff000000007f00feffd100000095"], &(0x7f00000000c0)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffff6f}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='virtio_transport_alloc_pkt\x00', r2}, 0x18) sendmmsg(r0, &(0x7f0000000b40)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000380)="1b", 0x40000}], 0x1}}], 0x1, 0x0) kernel console output (not intermixed with test programs): 756.797716][T11850] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1564'. [ 758.311198][ T5811] usb 1-1: new full-speed USB device number 88 using dummy_hcd [ 758.464125][ T5811] usb 1-1: not running at top speed; connect to a high speed hub [ 758.465684][ T5811] usb 1-1: config 2 has an invalid interface number: 229 but max is 0 [ 758.465710][ T5811] usb 1-1: config 2 has no interface number 0 [ 758.465759][ T5811] usb 1-1: config 2 interface 229 altsetting 97 endpoint 0xC has invalid maxpacket 1024, setting to 64 [ 758.465790][ T5811] usb 1-1: config 2 interface 229 altsetting 97 endpoint 0xD has invalid maxpacket 512, setting to 64 [ 758.465816][ T5811] usb 1-1: config 2 interface 229 has no altsetting 0 [ 758.468887][ T5811] usb 1-1: New USB device found, idVendor=07c0, idProduct=1500, bcdDevice=b8.6e [ 758.468915][ T5811] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 758.468936][ T5811] usb 1-1: Product: syz [ 758.468951][ T5811] usb 1-1: Manufacturer: â°´ [ 758.468965][ T5811] usb 1-1: SerialNumber: syz [ 758.560176][T11865] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 758.997265][ T5811] iowarrior 1-1:2.229: no interrupt-in endpoint found [ 759.019115][ T5811] usb 1-1: USB disconnect, device number 88 [ 759.223268][T11877] 9p: Bad value for 'uname' [ 761.911422][ T5811] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 762.100691][ T5811] usb 8-1: Using ep0 maxpacket: 8 [ 762.113926][ T5811] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 762.113966][ T5811] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 762.113990][ T5811] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 762.114013][ T5811] usb 8-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 762.114058][ T5811] usb 8-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 762.114082][ T5811] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 762.160472][ T5646] usb 4-1: new high-speed USB device number 52 using dummy_hcd [ 762.205336][ T5811] usb 8-1: config 0 descriptor?? [ 762.590368][ T5646] usb 4-1: Using ep0 maxpacket: 32 [ 762.592984][ T5646] usb 4-1: New USB device found, idVendor=041e, idProduct=403c, bcdDevice=cc.d7 [ 762.593016][ T5646] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 762.598829][ T5646] usb 4-1: config 0 descriptor?? [ 763.605990][ T5646] gspca_main: sq930x-2.14.0 probing 041e:403c [ 764.113992][ T5646] gspca_sq930x: reg_r 001f failed -110 [ 764.114105][ T5646] sq930x 4-1:0.0: probe with driver sq930x failed with error -110 [ 765.455626][ T6094] usb 8-1: USB disconnect, device number 5 [ 765.860510][ T5646] usb 4-1: USB disconnect, device number 52 [ 766.520647][ T6094] usb 4-1: new high-speed USB device number 53 using dummy_hcd [ 766.669740][ T6094] usb 4-1: Using ep0 maxpacket: 8 [ 766.671814][ T6094] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 766.671849][ T6094] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 766.671872][ T6094] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 766.671894][ T6094] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 766.671906][ T6094] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 0 [ 766.671937][ T6094] usb 4-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 766.671952][ T6094] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 766.704865][ T6094] usb 4-1: config 0 descriptor?? [ 766.758182][ T5814] Bluetooth: hci4: urb ffff8880334e2f00 submission failed (90) [ 767.153592][ T6909] usb 4-1: USB disconnect, device number 53 [ 767.441041][T11963] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input33 [ 771.602667][ T5814] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 771.603030][ T5814] Bluetooth: hci2: Injecting HCI hardware error event [ 771.704268][ T8842] Bluetooth: hci2: hardware error 0x00 [ 773.498666][ T10] usb 4-1: new high-speed USB device number 54 using dummy_hcd [ 773.658697][ T10] usb 4-1: Using ep0 maxpacket: 32 [ 773.661459][ T10] usb 4-1: config index 0 descriptor too short (expected 29220, got 36) [ 773.661488][ T10] usb 4-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 773.661510][ T10] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 773.661570][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 773.661593][ T10] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 773.661618][ T10] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 773.661661][ T10] usb 4-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 773.661685][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 773.667308][ T10] usb 4-1: config 0 descriptor?? [ 774.075299][ T10] usblp 4-1:0.0: usblp0: USB Bidirectional printer dev 54 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 774.083397][ T10] usb 4-1: USB disconnect, device number 54 [ 774.094712][ T10] usblp0: removed [ 775.038294][ T31] usb 4-1: new high-speed USB device number 55 using dummy_hcd [ 775.210227][ T31] usb 4-1: Using ep0 maxpacket: 32 [ 775.351682][ T8842] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 775.362385][ T31] usb 4-1: config index 0 descriptor too short (expected 29220, got 36) [ 775.362419][ T31] usb 4-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 775.362441][ T31] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 775.362500][ T31] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 775.362523][ T31] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 775.362548][ T31] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 775.362593][ T31] usb 4-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 775.362618][ T31] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 775.995502][ T31] usb 4-1: config 0 descriptor?? [ 776.361950][T12011] input: syz0 as /devices/virtual/input/input34 [ 776.458454][ T31] usblp 4-1:0.0: usblp0: USB Bidirectional printer dev 55 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 776.488079][ T31] usb 4-1: USB disconnect, device number 55 [ 776.510278][ T31] usblp0: removed [ 776.595934][T12020] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1620'. [ 776.595966][T12020] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1620'. [ 776.902983][T12011] loop9: detected capacity change from 0 to 7 [ 776.903388][T12011] buffer_io_error: 25 callbacks suppressed [ 776.903398][T12011] Buffer I/O error on dev loop9, logical block 0, async page read [ 776.903425][T12011] Buffer I/O error on dev loop9, logical block 0, async page read [ 776.903446][T12011] Buffer I/O error on dev loop9, logical block 0, async page read [ 776.903465][T12011] Buffer I/O error on dev loop9, logical block 0, async page read [ 776.903496][T12011] Buffer I/O error on dev loop9, logical block 0, async page read [ 776.903523][T12011] Buffer I/O error on dev loop9, logical block 0, async page read [ 776.903542][T12011] Buffer I/O error on dev loop9, logical block 0, async page read [ 776.903552][T12011] ldm_validate_partition_table(): Disk read failed. [ 776.903568][T12011] Buffer I/O error on dev loop9, logical block 0, async page read [ 776.903586][T12011] Buffer I/O error on dev loop9, logical block 0, async page read [ 776.903604][T12011] Buffer I/O error on dev loop9, logical block 0, async page read [ 776.903625][T12011] Dev loop9: unable to read RDB block 0 [ 776.903667][T12011] loop9: unable to read partition table [ 776.903795][T12011] loop9: partition table beyond EOD, truncated [ 776.903806][T12011] loop_reread_partitions: partition scan of loop9 (þ被xüŸÑø éÚ¬§½dG¤´à–ƒÝ¡¯ â·û [ 776.903806][T12011] ) failed (rc=-5) [ 776.904080][T12013] Illegal XDP return value 4294967274 on prog (id 270) dev N/A, expect packet loss! [ 777.218839][ T31] usb 4-1: new high-speed USB device number 56 using dummy_hcd [ 777.904385][ T31] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 777.904406][ T31] usb 4-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 777.904418][ T31] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 777.904448][ T31] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 777.904464][ T31] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 777.906040][ T31] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 777.906058][ T31] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 777.906069][ T31] usb 4-1: Product: syz [ 777.906078][ T31] usb 4-1: Manufacturer: syz [ 778.042319][ T31] cdc_wdm 4-1:1.0: skipping garbage [ 778.042342][ T31] cdc_wdm 4-1:1.0: skipping garbage [ 778.064818][ T31] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 778.064835][ T31] cdc_wdm 4-1:1.0: Unknown control protocol [ 778.241343][T12019] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 778.241784][T12019] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 779.384917][ T6616] usb 4-1: USB disconnect, device number 56 [ 782.907699][ T6021] usb 6-1: new high-speed USB device number 33 using dummy_hcd [ 783.007139][ T31] usb 4-1: new low-speed USB device number 57 using dummy_hcd [ 783.058258][ T6021] usb 6-1: too many configurations: 9, using maximum allowed: 8 [ 783.059869][ T6021] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 783.059924][ T6021] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 783.059942][ T6021] usb 6-1: config 0 interface 0 has no altsetting 0 [ 783.061216][ T6021] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 783.061276][ T6021] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 783.061294][ T6021] usb 6-1: config 0 interface 0 has no altsetting 0 [ 783.062593][ T6021] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 783.062646][ T6021] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 783.062674][ T6021] usb 6-1: config 0 interface 0 has no altsetting 0 [ 783.064052][ T6021] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 783.064108][ T6021] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 783.064135][ T6021] usb 6-1: config 0 interface 0 has no altsetting 0 [ 783.065221][ T6021] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 783.065275][ T6021] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 783.065292][ T6021] usb 6-1: config 0 interface 0 has no altsetting 0 [ 783.066680][ T6021] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 783.066734][ T6021] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 783.066761][ T6021] usb 6-1: config 0 interface 0 has no altsetting 0 [ 783.077626][ T6021] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 783.077685][ T6021] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 783.077710][ T6021] usb 6-1: config 0 interface 0 has no altsetting 0 [ 783.079280][ T6021] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 783.079330][ T6021] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 783.079354][ T6021] usb 6-1: config 0 interface 0 has no altsetting 0 [ 783.082321][ T6021] usb 6-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 783.082346][ T6021] usb 6-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 783.082365][ T6021] usb 6-1: Product: syz [ 783.082378][ T6021] usb 6-1: Manufacturer: syz [ 783.082391][ T6021] usb 6-1: SerialNumber: syz [ 783.092073][ T6021] usb 6-1: config 0 descriptor?? [ 783.131847][ T6021] yurex 6-1:0.0: USB YUREX device now attached to Yurex #0 [ 783.186926][ T6159] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 783.369488][ T31] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 783.369517][ T31] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 783.369573][ T31] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 26984, setting to 8 [ 783.369619][ T31] usb 4-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 783.369640][ T31] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 783.375689][T12056] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 783.431755][ T6159] usb 8-1: Using ep0 maxpacket: 8 [ 783.434951][ T31] hub 4-1:1.0: bad descriptor, ignoring hub [ 783.435132][ T6159] usb 8-1: config 0 has no interfaces? [ 783.435167][ T6159] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 783.435193][ T6159] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 783.436694][ T31] hub 4-1:1.0: probe with driver hub failed with error -5 [ 783.487714][ T31] cdc_wdm 4-1:1.0: skipping garbage [ 783.487737][ T31] cdc_wdm 4-1:1.0: skipping garbage [ 783.507029][ T6159] usb 8-1: config 0 descriptor?? [ 783.525299][ T31] cdc_wdm 4-1:1.0: cdc-wdm1: USB WDM device [ 783.525324][ T31] cdc_wdm 4-1:1.0: Unknown control protocol [ 784.576973][T12064] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1635'. [ 785.052357][ T6021] usb 4-1: USB disconnect, device number 57 [ 785.069203][ T6159] usb 8-1: USB disconnect, device number 6 [ 785.205743][ T5922] usb 6-1: USB disconnect, device number 33 [ 785.239700][ T5922] yurex 6-1:0.0: USB YUREX #0 now disconnected [ 785.584376][T12071] input: syz0 as /devices/virtual/input/input35 [ 788.116123][T11978] usb 4-1: new high-speed USB device number 58 using dummy_hcd [ 788.286117][T11978] usb 4-1: Using ep0 maxpacket: 32 [ 788.291184][T11978] usb 4-1: config 0 has an invalid interface number: 233 but max is 0 [ 788.291214][T11978] usb 4-1: config 0 has no interface number 0 [ 788.293979][T11978] usb 4-1: New USB device found, idVendor=0dba, idProduct=5000, bcdDevice=3b.a9 [ 788.294008][T11978] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 788.294028][T11978] usb 4-1: Product: syz [ 788.294043][T11978] usb 4-1: Manufacturer: syz [ 788.294058][T11978] usb 4-1: SerialNumber: syz [ 788.380761][T11978] usb 4-1: config 0 descriptor?? [ 788.399145][T11978] usb 4-1: MBOX3: Invalid descriptor size=18. [ 788.610364][ T6021] usb 4-1: USB disconnect, device number 58 [ 790.398035][ T8842] Bluetooth: hci5: unexpected event for opcode 0x0c5b [ 795.478699][T12143] 9p: Bad value for 'rfdno' [ 813.041104][ T5811] usb 6-1: new high-speed USB device number 34 using dummy_hcd [ 813.222007][ T5811] usb 6-1: Using ep0 maxpacket: 32 [ 813.225320][ T5811] usb 6-1: config 4 has an invalid interface number: 128 but max is 0 [ 813.225352][ T5811] usb 6-1: config 4 has no interface number 0 [ 813.225408][ T5811] usb 6-1: config 4 interface 128 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 813.225447][ T5811] usb 6-1: config 4 interface 128 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 813.225473][ T5811] usb 6-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 813.225487][ T5811] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 813.854993][ T5811] hub 6-1:4.128: USB hub found [ 813.934575][ T5811] hub 6-1:4.128: 16 ports detected [ 813.934661][ T5811] hub 6-1:4.128: Using single TT (err -22) [ 813.947590][ T5811] hub 6-1:4.128: insufficient power available to use all downstream ports [ 814.150059][ T1323] ieee802154 phy0 wpan0: encryption failed: -22 [ 814.150128][ T1323] ieee802154 phy1 wpan1: encryption failed: -22 [ 814.172159][ T5811] hub 6-1:4.128: hub_hub_status failed (err = -71) [ 814.172191][ T5811] hub 6-1:4.128: config failed, can't get hub status (err -71) [ 814.283067][ T5811] usb 6-1: USB disconnect, device number 34 [ 816.794184][ T37] audit: type=1326 audit(1766634188.347:1734): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12240 comm="syz.5.1693" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fbef5c7b829 code=0x7ffc0000 [ 816.794999][ T37] audit: type=1326 audit(1766634188.347:1735): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12240 comm="syz.5.1693" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fbef5c7b829 code=0x7ffc0000 [ 816.795743][ T37] audit: type=1326 audit(1766634188.347:1736): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12240 comm="syz.5.1693" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbef5cdf749 code=0x7ffc0000 [ 816.796395][ T37] audit: type=1326 audit(1766634188.347:1737): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12240 comm="syz.5.1693" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbef5cdf749 code=0x7ffc0000 [ 816.802101][ T37] audit: type=1326 audit(1766634188.347:1738): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12240 comm="syz.5.1693" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbef5cdf749 code=0x7ffc0000 [ 816.802162][ T37] audit: type=1326 audit(1766634188.347:1739): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12240 comm="syz.5.1693" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbef5cdf749 code=0x7ffc0000 [ 816.841580][ T37] audit: type=1326 audit(1766634188.347:1740): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12240 comm="syz.5.1693" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fbef5c7b829 code=0x7ffc0000 [ 816.847678][ T37] audit: type=1326 audit(1766634188.397:1741): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12240 comm="syz.5.1693" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fbef5c7b829 code=0x7ffc0000 [ 816.848391][ T37] audit: type=1326 audit(1766634188.397:1742): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12240 comm="syz.5.1693" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fbef5c7b829 code=0x7ffc0000 [ 816.849132][ T37] audit: type=1326 audit(1766634188.397:1743): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12240 comm="syz.5.1693" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fbef5c7b829 code=0x7ffc0000 [ 818.905349][ T5814] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 818.916348][ T5814] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 818.918135][ T5814] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 819.676967][ T5814] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 819.678767][ T5814] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 822.460542][ T8842] Bluetooth: hci4: command tx timeout [ 824.512083][ T8842] Bluetooth: hci4: command tx timeout [ 825.892956][ T3547] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 826.590850][ T8842] Bluetooth: hci4: command tx timeout [ 826.599019][ T3547] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 828.766071][ T8842] Bluetooth: hci4: command tx timeout [ 828.851285][T12321] input: syz0 as /devices/virtual/input/input38 [ 829.252844][ T3547] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 830.926298][ T3547] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 832.335341][T12259] chnl_net:caif_netlink_parms(): no params data found [ 835.839378][T12259] bridge0: port 1(bridge_slave_0) entered blocking state [ 835.839616][T12259] bridge0: port 1(bridge_slave_0) entered disabled state [ 835.839878][T12259] bridge_slave_0: entered allmulticast mode [ 835.842882][T12259] bridge_slave_0: entered promiscuous mode [ 835.950801][T12259] bridge0: port 2(bridge_slave_1) entered blocking state [ 835.950952][T12259] bridge0: port 2(bridge_slave_1) entered disabled state [ 835.951157][T12259] bridge_slave_1: entered allmulticast mode [ 835.955493][T12259] bridge_slave_1: entered promiscuous mode [ 836.101787][ T3547] bridge_slave_1: left allmulticast mode [ 836.101819][ T3547] bridge_slave_1: left promiscuous mode [ 836.102105][ T3547] bridge0: port 2(bridge_slave_1) entered disabled state [ 836.200093][ T3547] bridge_slave_0: left allmulticast mode [ 836.200126][ T3547] bridge_slave_0: left promiscuous mode [ 836.200429][ T3547] bridge0: port 1(bridge_slave_0) entered disabled state [ 836.718102][ T49] usb 1-1: new full-speed USB device number 89 using dummy_hcd [ 838.380262][ T49] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 838.380309][ T49] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 838.380356][ T49] usb 1-1: New USB device found, idVendor=046d, idProduct=c286, bcdDevice= 0.00 [ 838.380381][ T49] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 838.386167][ T49] usb 1-1: config 0 descriptor?? [ 838.387603][T12377] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 838.876704][ T49] logitech 0003:046D:C286.0006: hidraw0: USB HID v0.00 Device [HID 046d:c286] on usb-dummy_hcd.0-1/input0 [ 838.876743][ T49] logitech 0003:046D:C286.0006: no inputs found [ 840.095730][ T49] usb 1-1: USB disconnect, device number 89 [ 843.197007][ T5895] usb 1-1: new high-speed USB device number 90 using dummy_hcd [ 843.400016][ T5895] usb 1-1: config index 0 descriptor too short (expected 45, got 36) [ 843.400084][ T5895] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 843.400114][ T5895] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 843.400143][ T5895] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 843.400189][ T5895] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 843.400214][ T5895] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 843.409365][ T5895] usb 1-1: config 0 descriptor?? [ 843.410400][T12408] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 843.856601][ T5895] plantronics 0003:047F:FFFF.0007: reserved main item tag 0xd [ 844.142969][ T5895] plantronics 0003:047F:FFFF.0007: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 844.153499][ T5895] usb 1-1: USB disconnect, device number 90 [ 846.501226][T12422] netlink: 'syz.0.1754': attribute type 3 has an invalid length. [ 846.501249][T12422] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1754'. [ 851.356532][ T3547] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 851.396583][ T3547] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 851.421738][ T3547] bond0 (unregistering): Released all slaves [ 853.815614][T12456] kvm: emulating exchange as write [ 855.115729][T12259] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 855.122810][T12259] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 855.730177][ T5814] Bluetooth: hci5: SCO packet too small [ 857.575785][T12493] netlink: 'syz.2.1776': attribute type 7 has an invalid length. [ 857.575840][T12493] netlink: 'syz.2.1776': attribute type 8 has an invalid length. [ 859.898568][T12259] team0: Port device team_slave_0 added [ 859.943896][T12259] team0: Port device team_slave_1 added [ 869.888138][T12259] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 869.888159][T12259] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 869.888187][T12259] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 869.970590][T12259] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 869.970609][T12259] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 869.970641][T12259] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 873.745790][ T3547] hsr_slave_0: left promiscuous mode [ 873.772462][ T3547] hsr_slave_1: left promiscuous mode [ 873.773623][ T3547] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 873.798981][ T3547] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 873.799013][ T3547] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 873.898406][ T3547] veth1_macvtap: left promiscuous mode [ 873.898527][ T3547] veth0_macvtap: left promiscuous mode [ 873.898813][ T3547] veth1_vlan: left promiscuous mode [ 873.899006][ T3547] veth0_vlan: left promiscuous mode [ 876.192229][ T1323] ieee802154 phy0 wpan0: encryption failed: -22 [ 876.192314][ T1323] ieee802154 phy1 wpan1: encryption failed: -22 [ 878.719657][T12318] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 878.746522][T12318] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 878.748652][T12318] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 878.767768][T12318] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 878.768753][T12318] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 881.700871][ T5814] Bluetooth: hci2: command tx timeout [ 883.310560][ T37] kauditd_printk_skb: 32 callbacks suppressed [ 883.310582][ T37] audit: type=1326 audit(1766634254.868:1776): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12629 comm="syz.2.1821" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f93fb56f749 code=0x0 [ 883.783761][ T5814] Bluetooth: hci2: command tx timeout [ 885.940137][ T5814] Bluetooth: hci2: command tx timeout [ 888.019744][ T5814] Bluetooth: hci2: command tx timeout [ 897.848762][ T3547] team0 (unregistering): Port device team_slave_1 removed [ 898.136018][ T3547] team0 (unregistering): Port device team_slave_0 removed [ 904.129244][T12259] hsr_slave_0: entered promiscuous mode [ 904.130588][T12259] hsr_slave_1: entered promiscuous mode [ 906.648955][T12740] Invalid option length (1048180) for dns_resolver key [ 910.934717][T12318] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 910.950123][T12318] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 910.951914][T12318] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 910.953477][T12318] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 910.954463][T12318] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 913.178916][T12318] Bluetooth: hci4: command tx timeout [ 916.146113][T12318] Bluetooth: hci4: command tx timeout [ 917.082112][T12131] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 918.787942][T12318] Bluetooth: hci4: command tx timeout [ 918.880262][T12131] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 918.995763][T12800] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1869'. [ 920.814733][T12318] Bluetooth: hci4: command tx timeout [ 921.180074][T12131] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 921.359361][T12613] chnl_net:caif_netlink_parms(): no params data found [ 923.009161][T12131] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 924.663219][T12613] bridge0: port 1(bridge_slave_0) entered blocking state [ 924.664042][T12613] bridge0: port 1(bridge_slave_0) entered disabled state [ 924.664272][T12613] bridge_slave_0: entered allmulticast mode [ 924.666811][T12613] bridge_slave_0: entered promiscuous mode [ 924.871197][T12613] bridge0: port 2(bridge_slave_1) entered blocking state [ 924.871335][T12613] bridge0: port 2(bridge_slave_1) entered disabled state [ 924.871489][T12613] bridge_slave_1: entered allmulticast mode [ 924.875885][T12613] bridge_slave_1: entered promiscuous mode [ 925.882762][T12131] bridge_slave_1: left allmulticast mode [ 925.882795][T12131] bridge_slave_1: left promiscuous mode [ 925.883088][T12131] bridge0: port 2(bridge_slave_1) entered disabled state [ 925.955725][T12131] bridge_slave_0: left allmulticast mode [ 925.955759][T12131] bridge_slave_0: left promiscuous mode [ 925.956049][T12131] bridge0: port 1(bridge_slave_0) entered disabled state [ 926.238912][T12131] bridge_slave_1: left allmulticast mode [ 926.238948][T12131] bridge_slave_1: left promiscuous mode [ 926.239248][T12131] bridge0: port 2(bridge_slave_1) entered disabled state [ 926.360808][T12131] bridge_slave_0: left allmulticast mode [ 926.360842][T12131] bridge_slave_0: left promiscuous mode [ 926.361127][T12131] bridge0: port 1(bridge_slave_0) entered disabled state [ 933.571545][ T3547] smc: removing ib device syz0 [ 933.611016][T12131] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 933.693304][T12131] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 933.750498][T12131] bond0 (unregistering): Released all slaves [ 935.452995][T12131] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 935.625587][T12131] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 935.705782][T12131] bond0 (unregistering): Released all slaves [ 936.018522][T12613] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 936.207302][T12613] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 938.290793][ T1323] ieee802154 phy0 wpan0: encryption failed: -22 [ 938.290888][ T1323] ieee802154 phy1 wpan1: encryption failed: -22 [ 939.053670][T12754] chnl_net:caif_netlink_parms(): no params data found [ 939.115677][ T5814] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 939.121378][ T5814] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 939.124742][ T5814] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 939.137363][ T5814] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 939.151829][ T5814] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 941.235345][T12754] bridge0: port 1(bridge_slave_0) entered blocking state [ 941.235674][T12754] bridge0: port 1(bridge_slave_0) entered disabled state [ 941.235912][T12754] bridge_slave_0: entered allmulticast mode [ 941.264832][T12754] bridge_slave_0: entered promiscuous mode [ 941.289521][T12754] bridge0: port 2(bridge_slave_1) entered blocking state [ 941.291015][T12318] Bluetooth: hci5: command tx timeout [ 941.292354][T12754] bridge0: port 2(bridge_slave_1) entered disabled state [ 941.292604][T12754] bridge_slave_1: entered allmulticast mode [ 941.341371][T12754] bridge_slave_1: entered promiscuous mode [ 941.937121][T12754] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 942.011838][T12754] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 942.677520][T12754] team0: Port device team_slave_0 added [ 942.718131][T12754] team0: Port device team_slave_1 added [ 943.237621][T12131] : left promiscuous mode [ 943.372449][T12318] Bluetooth: hci5: command tx timeout [ 944.275707][T12754] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 944.275728][T12754] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 944.275767][T12754] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 944.276615][T12131] tipc: Left network mode [ 944.308142][T12754] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 944.308160][T12754] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 944.308185][T12754] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 945.287400][T12754] hsr_slave_0: entered promiscuous mode [ 945.297633][T12754] hsr_slave_1: entered promiscuous mode [ 945.298322][T12754] debugfs: 'hsr0' already exists in 'hsr' [ 945.316537][T12754] Cannot create hsr debugfs directory [ 945.469329][T12318] Bluetooth: hci5: command tx timeout [ 947.506011][T12958] chnl_net:caif_netlink_parms(): no params data found [ 947.539972][T12318] Bluetooth: hci5: command tx timeout [ 949.495604][T12131] hsr_slave_0: left promiscuous mode [ 949.562559][T12131] hsr_slave_1: left promiscuous mode [ 949.566924][T12131] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 949.618472][T12131] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 949.618494][T12131] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 949.650909][T12131] hsr_slave_0: left promiscuous mode [ 949.689631][T12131] hsr_slave_1: left promiscuous mode [ 949.691160][T12131] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 949.740754][T12131] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 950.253610][T12131] veth1_macvtap: left promiscuous mode [ 950.253693][T12131] veth0_macvtap: left promiscuous mode [ 950.255927][T12131] veth1_vlan: left promiscuous mode [ 950.256048][T12131] veth0_vlan: left promiscuous mode [ 968.557841][T12131] team0 (unregistering): Port device team_slave_1 removed [ 971.543274][ T5814] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 971.617277][ T5814] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 971.656249][ T5814] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 971.657530][ T5814] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 971.658363][ T5814] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 971.890610][T12131] team0 (unregistering): Port device team_slave_0 removed [ 973.975767][ T5814] Bluetooth: hci2: command tx timeout [ 976.005483][ T5814] Bluetooth: hci2: command tx timeout [ 978.086635][ T5814] Bluetooth: hci2: command tx timeout [ 980.248873][ T5814] Bluetooth: hci2: command tx timeout [ 980.969933][T13276] Invalid option length (1048180) for dns_resolver key [ 984.544762][T12131] team0 (unregistering): Port device team_slave_1 removed [ 985.776518][T13300] Invalid option length (1048180) for dns_resolver key [ 986.054613][T12131] team0 (unregistering): Port device team_slave_0 removed [ 988.499465][T12958] bridge0: port 1(bridge_slave_0) entered blocking state [ 988.499816][T12958] bridge0: port 1(bridge_slave_0) entered disabled state [ 988.500052][T12958] bridge_slave_0: entered allmulticast mode [ 988.509934][T12958] bridge_slave_0: entered promiscuous mode [ 988.521111][T12958] bridge0: port 2(bridge_slave_1) entered blocking state [ 988.521317][T12958] bridge0: port 2(bridge_slave_1) entered disabled state [ 988.521554][T12958] bridge_slave_1: entered allmulticast mode [ 988.547500][T12958] bridge_slave_1: entered promiscuous mode [ 989.048067][T12958] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 989.071263][T12958] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 990.421932][T12958] team0: Port device team_slave_0 added [ 990.445502][T12958] team0: Port device team_slave_1 added [ 990.685172][T12958] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 990.685186][T12958] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 990.685201][T12958] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 990.702641][T12958] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 990.702659][T12958] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 990.702685][T12958] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 991.075359][T12958] hsr_slave_0: entered promiscuous mode [ 991.078344][T12958] hsr_slave_1: entered promiscuous mode [ 992.987252][T13215] chnl_net:caif_netlink_parms(): no params data found [ 993.780623][T13356] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 993.922648][T13215] bridge0: port 1(bridge_slave_0) entered blocking state [ 993.922873][T13215] bridge0: port 1(bridge_slave_0) entered disabled state [ 993.923133][T13215] bridge_slave_0: entered allmulticast mode [ 993.925753][T13215] bridge_slave_0: entered promiscuous mode [ 994.023537][T12131] bridge_slave_1: left allmulticast mode [ 994.023569][T12131] bridge_slave_1: left promiscuous mode [ 994.023851][T12131] bridge0: port 2(bridge_slave_1) entered disabled state [ 994.124238][T12131] bridge_slave_0: left allmulticast mode [ 994.124273][T12131] bridge_slave_0: left promiscuous mode [ 994.124712][T12131] bridge0: port 1(bridge_slave_0) entered disabled state [ 994.221275][T12131] bridge_slave_1: left allmulticast mode [ 994.221311][T12131] bridge_slave_1: left promiscuous mode [ 994.221572][T12131] bridge0: port 2(bridge_slave_1) entered disabled state [ 994.313907][T12131] bridge_slave_0: left allmulticast mode [ 994.313938][T12131] bridge_slave_0: left promiscuous mode [ 994.314193][T12131] bridge0: port 1(bridge_slave_0) entered disabled state [ 994.793445][T12131] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 994.913031][T12131] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 995.000936][T12131] bond0 (unregistering): Released all slaves [ 995.203835][T12131] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 996.532962][T12131] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 996.622215][T12131] bond0 (unregistering): Released all slaves [ 996.678848][T13215] bridge0: port 2(bridge_slave_1) entered blocking state [ 996.679005][T13215] bridge0: port 2(bridge_slave_1) entered disabled state [ 996.679268][T13215] bridge_slave_1: entered allmulticast mode [ 996.697551][T13215] bridge_slave_1: entered promiscuous mode [ 997.399606][T13215] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 997.454033][T13215] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 999.675164][T13215] team0: Port device team_slave_0 added [ 999.703442][T12318] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 999.726437][T12318] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 999.734078][T12318] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 999.736102][T12318] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 999.736912][T12318] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1000.996505][T12131] hsr_slave_0: left promiscuous mode [ 1001.020923][T12131] hsr_slave_1: left promiscuous mode [ 1001.028142][T12131] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1001.119941][T12131] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1001.842759][T12318] Bluetooth: hci4: command tx timeout [ 1002.397684][T12131] team0 (unregistering): Port device team_slave_1 removed [ 1002.616405][T12131] team0 (unregistering): Port device team_slave_0 removed [ 1003.728649][ T1323] ieee802154 phy0 wpan0: encryption failed: -22 [ 1003.728731][ T1323] ieee802154 phy1 wpan1: encryption failed: -22 [ 1003.926553][T12318] Bluetooth: hci4: command tx timeout [ 1006.000550][T12318] Bluetooth: hci4: command tx timeout [ 1006.842467][T13215] team0: Port device team_slave_1 added [ 1008.081199][T12318] Bluetooth: hci4: command tx timeout [ 1008.658121][T13215] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1008.658186][T13215] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1008.658252][T13215] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1008.666533][T13215] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1008.666551][T13215] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1008.666575][T13215] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1009.349275][T13215] hsr_slave_0: entered promiscuous mode [ 1009.370373][T13215] hsr_slave_1: entered promiscuous mode [ 1009.371428][T13215] debugfs: 'hsr0' already exists in 'hsr' [ 1009.371453][T13215] Cannot create hsr debugfs directory [ 1011.080187][T13215] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 1011.198032][T13215] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 1011.364077][T13215] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 1011.409207][T13215] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 1011.433726][T13392] chnl_net:caif_netlink_parms(): no params data found [ 1012.023238][T13392] bridge0: port 1(bridge_slave_0) entered blocking state [ 1012.023474][T13392] bridge0: port 1(bridge_slave_0) entered disabled state [ 1012.023739][T13392] bridge_slave_0: entered allmulticast mode [ 1012.025639][T13392] bridge_slave_0: entered promiscuous mode [ 1012.063482][T13392] bridge0: port 2(bridge_slave_1) entered blocking state [ 1012.063728][T13392] bridge0: port 2(bridge_slave_1) entered disabled state [ 1012.063935][T13392] bridge_slave_1: entered allmulticast mode [ 1012.067323][T13392] bridge_slave_1: entered promiscuous mode [ 1013.413004][T13392] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1013.491374][T13392] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1014.192421][T13392] team0: Port device team_slave_0 added [ 1014.266968][T13392] team0: Port device team_slave_1 added [ 1014.734003][T13392] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1014.734024][T13392] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1014.734052][T13392] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1014.787469][T13392] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1014.787489][T13392] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1014.787518][T13392] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1015.005398][T12131] bridge_slave_1: left allmulticast mode [ 1015.005430][T12131] bridge_slave_1: left promiscuous mode [ 1015.005699][T12131] bridge0: port 2(bridge_slave_1) entered disabled state [ 1015.071113][T12131] bridge_slave_0: left allmulticast mode [ 1015.071145][T12131] bridge_slave_0: left promiscuous mode [ 1015.071438][T12131] bridge0: port 1(bridge_slave_0) entered disabled state [ 1015.616337][T12131] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1015.691203][T12131] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1015.755388][T12131] bond0 (unregistering): Released all slaves [ 1016.006107][T13392] hsr_slave_0: entered promiscuous mode [ 1016.007025][T13392] hsr_slave_1: entered promiscuous mode [ 1016.007626][T13392] debugfs: 'hsr0' already exists in 'hsr' [ 1016.007651][T13392] Cannot create hsr debugfs directory [ 1016.628924][T12131] hsr_slave_0: left promiscuous mode [ 1016.658357][T12131] hsr_slave_1: left promiscuous mode [ 1016.664891][T12131] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1016.692881][T12131] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1017.460143][T12131] team0 (unregistering): Port device team_slave_1 removed [ 1017.629224][T12131] team0 (unregistering): Port device team_slave_0 removed [ 1018.273030][T13215] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1018.576703][T13215] 8021q: adding VLAN 0 to HW filter on device team0 [ 1018.667304][T12352] bridge0: port 1(bridge_slave_0) entered blocking state [ 1018.667513][T12352] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1018.901173][T12335] bridge0: port 2(bridge_slave_1) entered blocking state [ 1018.901471][T12335] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1020.953024][ T37] audit: type=1800 audit(1766634392.520:1777): pid=13538 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.5.2102" name="bus" dev="tmpfs" ino=1638 res=0 errno=0 [ 1021.031394][T13215] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1021.567349][T13392] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 1021.635773][T13392] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 1021.713590][T13392] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 1021.760013][T13392] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 1021.938071][T13215] veth0_vlan: entered promiscuous mode [ 1021.982493][T13215] veth1_vlan: entered promiscuous mode [ 1022.130894][T13215] veth0_macvtap: entered promiscuous mode [ 1022.154796][T13215] veth1_macvtap: entered promiscuous mode [ 1022.219682][T13215] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1022.249478][T13392] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1022.256816][T13215] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1022.317535][ T1244] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1022.329988][ T1244] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1022.334777][ T1244] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1022.356476][ T1244] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1022.432944][T13392] 8021q: adding VLAN 0 to HW filter on device team0 [ 1022.621882][ T1244] bridge0: port 1(bridge_slave_0) entered blocking state [ 1022.622033][ T1244] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1022.701025][T13184] bridge0: port 2(bridge_slave_1) entered blocking state [ 1022.701212][T13184] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1022.878115][ T72] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1022.878141][ T72] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1022.990263][ T1028] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1022.990286][ T1028] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1023.502311][T13392] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1025.509094][T13596] kvm: user requested TSC rate below hardware speed [ 1025.540514][T13392] veth0_vlan: entered promiscuous mode [ 1025.561612][T13392] veth1_vlan: entered promiscuous mode [ 1025.689117][T13392] veth0_macvtap: entered promiscuous mode [ 1025.803265][T13392] veth1_macvtap: entered promiscuous mode [ 1026.126524][T13392] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1026.300312][T13392] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1026.468961][ T1028] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1026.470100][ T1028] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1026.470147][ T1028] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1026.470185][ T1028] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1026.973271][ T1028] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1026.973295][ T1028] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1027.055184][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1027.055204][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1027.478008][T13614] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1027.773574][ T5814] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1027.811496][ T5814] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1027.813351][ T5814] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1027.814799][ T5814] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1027.815713][ T5814] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1029.916641][ T5814] Bluetooth: hci5: command tx timeout [ 1030.476797][ T6021] usb 6-1: new high-speed USB device number 35 using dummy_hcd [ 1030.653481][ T6021] usb 6-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 1030.653566][ T6021] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1030.653591][ T6021] usb 6-1: too many endpoints for config 1 interface 1 altsetting 145: 217, using maximum allowed: 30 [ 1030.653618][ T6021] usb 6-1: config 1 interface 1 altsetting 145 has 0 endpoint descriptors, different from the interface descriptor's value: 217 [ 1030.653634][ T6021] usb 6-1: config 1 interface 1 has no altsetting 0 [ 1030.660752][ T6021] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1030.660784][ T6021] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1030.660803][ T6021] usb 6-1: Product: syz [ 1030.660816][ T6021] usb 6-1: Manufacturer: syz [ 1030.660829][ T6021] usb 6-1: SerialNumber: syz [ 1030.671745][ T6021] cdc_acm 6-1:1.0: probe with driver cdc_acm failed with error -22 [ 1031.854232][ T6021] usb 6-1: USB disconnect, device number 35 [ 1031.996908][ T5814] Bluetooth: hci5: command tx timeout [ 1032.145084][ T72] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1032.552700][ T72] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1032.949996][ T72] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1033.029928][T13619] chnl_net:caif_netlink_parms(): no params data found [ 1033.363413][ T72] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1034.095160][ T5814] Bluetooth: hci5: command tx timeout [ 1034.335999][ T6021] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 1034.528128][ T6021] usb 9-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 1034.528212][ T6021] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1034.528242][ T6021] usb 9-1: too many endpoints for config 1 interface 1 altsetting 145: 217, using maximum allowed: 30 [ 1034.528281][ T6021] usb 9-1: config 1 interface 1 altsetting 145 has 0 endpoint descriptors, different from the interface descriptor's value: 217 [ 1034.528318][ T6021] usb 9-1: config 1 interface 1 has no altsetting 0 [ 1034.534610][ T6021] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1034.534642][ T6021] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1034.534664][ T6021] usb 9-1: Product: syz [ 1034.534679][ T6021] usb 9-1: Manufacturer: syz [ 1034.534695][ T6021] usb 9-1: SerialNumber: syz [ 1034.555226][ T6021] cdc_acm 9-1:1.0: probe with driver cdc_acm failed with error -22 [ 1034.710882][T13619] bridge0: port 1(bridge_slave_0) entered blocking state [ 1034.711243][T13619] bridge0: port 1(bridge_slave_0) entered disabled state [ 1034.711923][T13619] bridge_slave_0: entered allmulticast mode [ 1034.732150][T13619] bridge_slave_0: entered promiscuous mode [ 1034.850048][ T6021] usb 9-1: USB disconnect, device number 2 [ 1034.935588][T13619] bridge0: port 2(bridge_slave_1) entered blocking state [ 1034.936964][T13619] bridge0: port 2(bridge_slave_1) entered disabled state [ 1034.937219][T13619] bridge_slave_1: entered allmulticast mode [ 1034.939896][T13619] bridge_slave_1: entered promiscuous mode [ 1035.179026][T13619] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1035.199415][T13619] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1035.397668][ T72] bridge_slave_1: left allmulticast mode [ 1035.397700][ T72] bridge_slave_1: left promiscuous mode [ 1035.397907][ T72] bridge0: port 2(bridge_slave_1) entered disabled state [ 1036.585707][ T5814] Bluetooth: hci5: command tx timeout [ 1036.727076][ T72] bridge_slave_0: left allmulticast mode [ 1036.727098][ T72] bridge_slave_0: left promiscuous mode [ 1036.727273][ T72] bridge0: port 1(bridge_slave_0) entered disabled state [ 1042.976921][ T72] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1043.055864][ T72] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1043.077347][ T72] bond0 (unregistering): Released all slaves [ 1044.417353][ T72] bond1 (unregistering): Released all slaves [ 1044.743541][ T37] audit: type=1326 audit(1766634416.324:1778): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13711 comm="syz.5.2161" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbef5cdf749 code=0x7ffc0000 [ 1044.767839][ T37] audit: type=1326 audit(1766634416.334:1779): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13711 comm="syz.5.2161" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbef5cdf749 code=0x7ffc0000 [ 1044.768155][ T37] audit: type=1326 audit(1766634416.334:1780): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13711 comm="syz.5.2161" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbef5cdf749 code=0x7ffc0000 [ 1044.784781][ T37] audit: type=1326 audit(1766634416.374:1781): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13711 comm="syz.5.2161" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbef5cdf749 code=0x7ffc0000 [ 1044.785075][ T37] audit: type=1326 audit(1766634416.374:1782): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13711 comm="syz.5.2161" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7fbef5cdf749 code=0x7ffc0000 [ 1044.785770][ T37] audit: type=1326 audit(1766634416.374:1783): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13711 comm="syz.5.2161" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbef5cdf749 code=0x7ffc0000 [ 1044.786046][ T37] audit: type=1326 audit(1766634416.374:1784): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13711 comm="syz.5.2161" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbef5cdf749 code=0x7ffc0000 [ 1044.805064][ T37] audit: type=1326 audit(1766634416.394:1785): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13711 comm="syz.5.2161" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbef5cdf749 code=0x7ffc0000 [ 1044.825790][ T37] audit: type=1326 audit(1766634416.394:1786): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13711 comm="syz.5.2161" exe="/root/syz-executor" sig=0 arch=c000003e syscall=292 compat=0 ip=0x7fbef5cdf749 code=0x7ffc0000 [ 1044.825844][ T37] audit: type=1326 audit(1766634416.394:1787): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13711 comm="syz.5.2161" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbef5cdf749 code=0x7ffc0000 [ 1046.353170][ T72] bond2 (unregistering): Released all slaves [ 1046.653446][ T72] tipc: Left network mode [ 1046.665795][T13619] team0: Port device team_slave_0 added [ 1046.701729][T13619] team0: Port device team_slave_1 added [ 1047.228490][T13619] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1047.228511][T13619] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1047.228540][T13619] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1047.234774][T13619] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1047.234790][T13619] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1047.234827][T13619] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1048.068731][T13619] hsr_slave_0: entered promiscuous mode [ 1048.081694][T13619] hsr_slave_1: entered promiscuous mode [ 1048.634210][ T72] hsr_slave_0: left promiscuous mode [ 1048.698301][ T72] hsr_slave_1: left promiscuous mode [ 1048.846456][ T72] veth1_macvtap: left promiscuous mode [ 1048.846529][ T72] veth0_macvtap: left promiscuous mode [ 1048.846681][ T72] veth1_vlan: left promiscuous mode [ 1048.846785][ T72] veth0_vlan: left promiscuous mode [ 1054.345215][ T72] team0 (unregistering): Port device team_slave_1 removed [ 1054.498064][ T3547] smc: removing ib device syz2 [ 1054.657809][ T72] team0 (unregistering): Port device team_slave_0 removed [ 1059.340343][T12415] syz2: Port: 1 Link DOWN [ 1064.720006][ T1323] ieee802154 phy0 wpan0: encryption failed: -22 [ 1064.720076][ T1323] ieee802154 phy1 wpan1: encryption failed: -22 [ 1064.778463][T13619] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1064.824010][T13619] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1064.855247][T13619] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1064.876215][T13619] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1065.006467][T13619] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1065.038850][T13619] 8021q: adding VLAN 0 to HW filter on device team0 [ 1065.052467][ T58] bridge0: port 1(bridge_slave_0) entered blocking state [ 1065.052694][ T58] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1065.089596][ T72] bridge0: port 2(bridge_slave_1) entered blocking state [ 1065.089716][ T72] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1065.687685][T13619] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1066.430069][T13619] veth0_vlan: entered promiscuous mode [ 1066.444722][T13619] veth1_vlan: entered promiscuous mode [ 1066.499507][T13619] veth0_macvtap: entered promiscuous mode [ 1066.586785][T13619] veth1_macvtap: entered promiscuous mode [ 1066.665394][T13619] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1066.686013][T13619] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1067.895759][T13184] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1067.920688][T13184] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1067.943165][T13184] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1067.943216][T13184] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1068.447069][T11377] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1068.447104][T11377] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1068.518588][T13184] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1068.518613][T13184] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1072.665829][T12318] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1072.681946][T12318] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1072.684234][T12318] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1072.696516][T12318] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1072.697794][T12318] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1074.709785][ T5814] Bluetooth: hci1: command tx timeout [ 1075.004244][T13884] chnl_net:caif_netlink_parms(): no params data found [ 1075.094011][T13903] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1077.466995][ T5814] Bluetooth: hci1: command tx timeout [ 1077.596515][T13184] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1079.308387][T13184] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1079.508813][ T5814] Bluetooth: hci1: command tx timeout [ 1079.693398][T13184] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1079.729215][T13884] bridge0: port 1(bridge_slave_0) entered blocking state [ 1079.729570][T13884] bridge0: port 1(bridge_slave_0) entered disabled state [ 1079.729756][T13884] bridge_slave_0: entered allmulticast mode [ 1079.731367][T13884] bridge_slave_0: entered promiscuous mode [ 1079.733870][T13884] bridge0: port 2(bridge_slave_1) entered blocking state [ 1079.733996][T13884] bridge0: port 2(bridge_slave_1) entered disabled state [ 1079.734132][T13884] bridge_slave_1: entered allmulticast mode [ 1079.735821][T13884] bridge_slave_1: entered promiscuous mode [ 1080.990420][T13184] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1081.156725][T13959] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1081.254876][T13884] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1081.284992][T13884] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1082.627229][ T5814] Bluetooth: hci1: command tx timeout [ 1082.850267][T13884] team0: Port device team_slave_0 added [ 1082.868905][T13884] team0: Port device team_slave_1 added [ 1083.058259][T13884] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1083.058276][T13884] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1083.058313][T13884] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1083.066237][T13884] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1083.066255][T13884] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1083.066285][T13884] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1083.571607][T13884] hsr_slave_0: entered promiscuous mode [ 1083.573229][T13884] hsr_slave_1: entered promiscuous mode [ 1083.574417][T13884] debugfs: 'hsr0' already exists in 'hsr' [ 1083.574444][T13884] Cannot create hsr debugfs directory [ 1086.514633][T13184] bridge_slave_1: left allmulticast mode [ 1086.514665][T13184] bridge_slave_1: left promiscuous mode [ 1086.514939][T13184] bridge0: port 2(bridge_slave_1) entered disabled state [ 1086.609343][T13184] bridge_slave_0: left allmulticast mode [ 1086.609375][T13184] bridge_slave_0: left promiscuous mode [ 1086.609683][T13184] bridge0: port 1(bridge_slave_0) entered disabled state [ 1087.392318][ T37] kauditd_printk_skb: 5 callbacks suppressed [ 1087.392338][ T37] audit: type=1326 audit(1766634458.991:1793): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14010 comm="syz.3.2273" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0acd86f749 code=0x7ffc0000 [ 1087.393550][ T37] audit: type=1326 audit(1766634458.991:1794): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14010 comm="syz.3.2273" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0acd86f749 code=0x7ffc0000 [ 1087.394891][ T37] audit: type=1326 audit(1766634458.991:1795): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14010 comm="syz.3.2273" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0acd86f749 code=0x7ffc0000 [ 1087.395198][ T37] audit: type=1326 audit(1766634458.991:1796): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14010 comm="syz.3.2273" exe="/root/syz-executor" sig=0 arch=c000003e syscall=79 compat=0 ip=0x7f0acd86f749 code=0x7ffc0000 [ 1087.395757][ T37] audit: type=1326 audit(1766634458.991:1797): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14010 comm="syz.3.2273" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0acd86f749 code=0x7ffc0000 [ 1087.395803][ T37] audit: type=1326 audit(1766634458.991:1798): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14010 comm="syz.3.2273" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0acd86f749 code=0x7ffc0000 [ 1087.396113][ T37] audit: type=1326 audit(1766634458.991:1799): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14010 comm="syz.3.2273" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0acd86f749 code=0x7ffc0000 [ 1087.396780][ T37] audit: type=1326 audit(1766634458.991:1800): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14010 comm="syz.3.2273" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0acd86f749 code=0x7ffc0000 [ 1087.397081][ T37] audit: type=1326 audit(1766634458.991:1801): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14010 comm="syz.3.2273" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7f0acd86f749 code=0x7ffc0000 [ 1087.428486][ T37] audit: type=1326 audit(1766634458.991:1802): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14010 comm="syz.3.2273" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0acd86f749 code=0x7ffc0000 [ 1087.824220][T14011] syz.3.2273 (14011) used greatest stack depth: 18208 bytes left [ 1093.257265][T13184] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1093.327373][T13184] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1093.372571][T13184] bond0 (unregistering): Released all slaves [ 1095.869203][T13184] bond1 (unregistering): Released all slaves [ 1097.510411][ T5814] Bluetooth: hci2: command 0x0406 tx timeout [ 1102.013965][T13184] hsr_slave_0: left promiscuous mode [ 1102.050331][T13184] hsr_slave_1: left promiscuous mode [ 1102.052295][T13184] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1102.088603][T13184] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1102.088637][T13184] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1102.179201][T13184] veth1_macvtap: left promiscuous mode [ 1102.179282][T13184] veth0_macvtap: left promiscuous mode [ 1102.179443][T13184] veth1_vlan: left promiscuous mode [ 1102.179548][T13184] veth0_vlan: left promiscuous mode [ 1108.355449][T13184] team0 (unregistering): Port device team_slave_1 removed [ 1110.014654][T13184] team0 (unregistering): Port device team_slave_0 removed [ 1118.056913][T13884] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1118.104443][T13884] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1118.142387][T13884] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1118.178535][T13884] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1119.615123][T13884] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1119.647689][T13884] 8021q: adding VLAN 0 to HW filter on device team0 [ 1119.671193][T12352] bridge0: port 1(bridge_slave_0) entered blocking state [ 1119.671343][T12352] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1119.733839][ T1244] bridge0: port 2(bridge_slave_1) entered blocking state [ 1119.733981][ T1244] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1120.167221][T13884] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1120.366717][T13184] IPVS: stop unused estimator thread 0... [ 1120.382947][T13884] veth0_vlan: entered promiscuous mode [ 1120.405854][T13884] veth1_vlan: entered promiscuous mode [ 1120.456477][T13884] veth0_macvtap: entered promiscuous mode [ 1120.473183][T13884] veth1_macvtap: entered promiscuous mode [ 1120.521562][T13884] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1120.539530][T13884] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1120.561232][T13184] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1120.561509][T13184] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1120.561551][T13184] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1120.561587][T13184] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1120.917379][ T1206] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1120.917403][ T1206] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1120.956480][ T1206] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1120.956504][ T1206] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1121.212492][T14320] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1126.155469][ T1323] ieee802154 phy0 wpan0: encryption failed: -22 [ 1126.155551][ T1323] ieee802154 phy1 wpan1: encryption failed: -22 [ 1146.894847][T14579] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2486'. [ 1148.837988][ T5814] Bluetooth: hci4: command 0x0406 tx timeout [ 1153.897370][ T5814] Bluetooth: hci5: command 0x0406 tx timeout [ 1187.590184][ T1323] ieee802154 phy0 wpan0: encryption failed: -22 [ 1187.590264][ T1323] ieee802154 phy1 wpan1: encryption failed: -22 [ 1210.128184][T12318] Bluetooth: hci1: command 0x0406 tx timeout [ 1249.009663][ T1323] ieee802154 phy0 wpan0: encryption failed: -22 [ 1249.009760][ T1323] ieee802154 phy1 wpan1: encryption failed: -22 [ 1310.440901][ T1323] ieee802154 phy0 wpan0: encryption failed: -22 [ 1310.441003][ T1323] ieee802154 phy1 wpan1: encryption failed: -22 [ 1371.868103][ T1323] ieee802154 phy0 wpan0: encryption failed: -22 [ 1371.868282][ T1323] ieee802154 phy1 wpan1: encryption failed: -22 [ 1433.301823][ T1323] ieee802154 phy0 wpan0: encryption failed: -22 [ 1433.301934][ T1323] ieee802154 phy1 wpan1: encryption failed: -22 [ 1494.738713][ T1323] ieee802154 phy0 wpan0: encryption failed: -22 [ 1494.738818][ T1323] ieee802154 phy1 wpan1: encryption failed: -22 [ 1556.163152][ T1323] ieee802154 phy0 wpan0: encryption failed: -22 [ 1556.163254][ T1323] ieee802154 phy1 wpan1: encryption failed: -22 [ 1617.594611][ T1323] ieee802154 phy0 wpan0: encryption failed: -22 [ 1617.594691][ T1323] ieee802154 phy1 wpan1: encryption failed: -22 [ 1676.790975][T12318] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1676.816631][T12318] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1676.825885][T12318] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1676.835429][T12318] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1676.837720][T12318] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1677.766186][ T58] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1678.062596][ T58] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1678.340088][ T58] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1678.407599][T15528] chnl_net:caif_netlink_parms(): no params data found [ 1678.580358][ T58] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1678.933653][T15528] bridge0: port 1(bridge_slave_0) entered blocking state [ 1678.933899][T15528] bridge0: port 1(bridge_slave_0) entered disabled state [ 1678.934160][T15528] bridge_slave_0: entered allmulticast mode [ 1678.936797][T15528] bridge_slave_0: entered promiscuous mode [ 1678.938788][T12318] Bluetooth: hci3: command tx timeout [ 1679.013453][T15528] bridge0: port 2(bridge_slave_1) entered blocking state [ 1679.013596][T15528] bridge0: port 2(bridge_slave_1) entered disabled state [ 1679.013855][T15528] bridge_slave_1: entered allmulticast mode [ 1679.016085][T15528] bridge_slave_1: entered promiscuous mode [ 1679.026298][ T1323] ieee802154 phy0 wpan0: encryption failed: -22 [ 1679.026396][ T1323] ieee802154 phy1 wpan1: encryption failed: -22 [ 1679.220551][T15528] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1679.256249][T15528] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1679.497204][T15528] team0: Port device team_slave_0 added [ 1679.497501][ T58] bridge_slave_1: left allmulticast mode [ 1679.497526][ T58] bridge_slave_1: left promiscuous mode [ 1679.498904][ T58] bridge0: port 2(bridge_slave_1) entered disabled state [ 1679.588860][ T58] bridge_slave_0: left allmulticast mode [ 1679.588883][ T58] bridge_slave_0: left promiscuous mode [ 1679.589119][ T58] bridge0: port 1(bridge_slave_0) entered disabled state [ 1680.818111][ T58] dvmrp1 (unregistering): left allmulticast mode [ 1681.027606][T12318] Bluetooth: hci3: command tx timeout [ 1682.198264][ T58] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1682.258890][ T58] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1682.279838][ T58] bond0 (unregistering): Released all slaves [ 1683.117329][T12318] Bluetooth: hci3: command tx timeout [ 1683.330296][ T58] bond1 (unregistering): Released all slaves [ 1683.372450][T15528] team0: Port device team_slave_1 added [ 1683.512534][ T58] tipc: Left network mode [ 1683.639340][T15528] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1683.639360][T15528] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1683.639384][T15528] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1683.640855][T15528] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1683.640869][T15528] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1683.640892][T15528] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1684.291265][T15528] hsr_slave_0: entered promiscuous mode [ 1684.292808][T15528] hsr_slave_1: entered promiscuous mode [ 1684.294257][T15528] debugfs: 'hsr0' already exists in 'hsr' [ 1684.294284][T15528] Cannot create hsr debugfs directory [ 1684.866995][ T58] hsr_slave_0: left promiscuous mode [ 1684.887078][ T58] hsr_slave_1: left promiscuous mode [ 1684.887760][ T58] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1684.928260][ T58] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1684.928292][ T58] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1685.032908][ T58] dummy0: left allmulticast mode [ 1685.033270][ T58] veth1_macvtap: left promiscuous mode [ 1685.033408][ T58] veth0_macvtap: left promiscuous mode [ 1685.176920][T12318] Bluetooth: hci3: command tx timeout [ 1687.427220][ T58] team0 (unregistering): Port device team_slave_1 removed [ 1687.717293][ T58] team0 (unregistering): Port device team_slave_0 removed [ 1692.313172][T15528] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1692.339573][T15528] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1692.359535][T15528] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1692.400460][T15528] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1692.502454][T15528] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1692.538313][T15528] 8021q: adding VLAN 0 to HW filter on device team0 [ 1692.544150][T15556] bridge0: port 1(bridge_slave_0) entered blocking state [ 1692.544299][T15556] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1692.564442][T12828] bridge0: port 2(bridge_slave_1) entered blocking state [ 1692.564647][T12828] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1692.791191][T15528] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1693.049949][T15528] veth0_vlan: entered promiscuous mode [ 1693.057702][T15528] veth1_vlan: entered promiscuous mode [ 1693.112282][T15528] veth0_macvtap: entered promiscuous mode [ 1693.122722][T15528] veth1_macvtap: entered promiscuous mode [ 1693.151155][T15528] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1693.173161][T15528] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1693.189824][T13184] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1693.190093][T13184] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1693.190132][T13184] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1693.190167][T13184] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1693.532257][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1693.532283][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1693.571668][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1693.571691][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1693.782425][T15580] tmpfs: Bad value for 'mpol' [ 1696.110127][ T37] kauditd_printk_skb: 96 callbacks suppressed [ 1696.110149][ T37] audit: type=1326 audit(1766635067.792:1899): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15603 comm="syz.5.3398" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f6ef9e3f749 code=0x0 [ 1698.348663][T15627] picdev_read: 77 callbacks suppressed [ 1698.348679][T15627] kvm: pic: non byte read [ 1698.348772][T15627] kvm: pic: non byte read [ 1698.349051][T15627] kvm: pic: non byte write [ 1698.349161][T15627] kvm: pic: non byte read [ 1698.349224][T15627] kvm: pic: non byte read [ 1698.349298][T15627] kvm: pic: non byte write [ 1698.349393][T15627] kvm: pic: non byte read [ 1698.349455][T15627] kvm: pic: non byte read [ 1698.349528][T15627] kvm: pic: non byte write [ 1698.349623][T15627] kvm: pic: non byte read [ 1698.349685][T15627] kvm: pic: non byte read [ 1698.349765][T15627] kvm: pic: non byte write [ 1698.349860][T15627] kvm: pic: non byte read [ 1698.349922][T15627] kvm: pic: non byte read [ 1698.349996][T15627] kvm: pic: non byte write [ 1698.350214][T15627] kvm: pic: non byte write [ 1698.350431][T15627] kvm: pic: non byte write [ 1698.350650][T15627] kvm: pic: non byte write [ 1698.350871][T15627] kvm: pic: non byte write [ 1698.351088][T15627] kvm: pic: non byte write [ 1702.022603][T15664] syz.5.3421 (15664) used greatest stack depth: 17984 bytes left [ 1703.623928][T15681] overlayfs: overlapping lowerdir path [ 1704.768692][T15704] overlayfs: overlapping lowerdir path [ 1707.218344][T15725] overlayfs: failed to resolve './file1/file0': -2 [ 1708.491158][T15733] overlayfs: missing 'lowerdir' [ 1708.557599][T15735] overlayfs: failed to resolve './file1/file0': -2 [ 1709.018113][T15744] overlayfs: failed to resolve './file1/file0': -2 [ 1710.343110][T15755] overlayfs: missing 'lowerdir' [ 1710.414022][T15757] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3467'. [ 1712.427416][T15780] overlayfs: missing 'lowerdir' [ 1714.059074][T15795] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 1716.867193][T15819] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 1718.729431][T15860] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 1719.043361][T15871] netlink: 'syz.5.3521': attribute type 2 has an invalid length. [ 1719.694508][T15885] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 1721.379643][T15904] program syz.5.3537 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1721.458086][T15906] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 1721.570742][T15911] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3540'. [ 1721.935932][T15923] fuse: Unknown parameter 'grou00000000000000000000' [ 1722.049911][T15927] program syz.5.3548 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1722.426077][T15931] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 1725.570076][T15950] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1725.698274][T15953] program syz.5.3559 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1726.599419][T15956] overlayfs: statfs failed on './file0' [ 1726.607699][T15955] overlayfs: statfs failed on './file0' [ 1726.798592][T15961] fuse: Bad value for 'group_id' [ 1726.798607][T15961] fuse: Bad value for 'group_id' [ 1728.569712][T15999] netlink: 21 bytes leftover after parsing attributes in process `syz.5.3581'. [ 1731.101077][T16038] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3599'. [ 1732.765563][T16063] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3610'. [ 1732.907000][T16067] overlayfs: failed to resolve './file1/file0': -2 [ 1740.456517][ T1323] ieee802154 phy0 wpan0: encryption failed: -22 [ 1740.456618][ T1323] ieee802154 phy1 wpan1: encryption failed: -22 [ 1742.364004][T16135] netlink: 21 bytes leftover after parsing attributes in process `syz.5.3646'. [ 1743.141593][T16153] fuse: Unknown parameter '0x0000000000000004' [ 1745.124621][T16178] fuse: Unknown parameter '0x0000000000000004' [ 1745.169821][T16180] fuse: Unknown parameter '0x0000000000000004' [ 1747.918979][T16202] fuse: Unknown parameter '0x0000000000000004' [ 1747.968401][T16204] syzkaller0: entered promiscuous mode [ 1747.968429][T16204] syzkaller0: entered allmulticast mode [ 1752.722840][T16253] kvm: requested 128228 ns i8254 timer period limited to 200000 ns [ 1752.723119][T16253] kvm: requested 88000 ns i8254 timer period limited to 200000 ns [ 1752.723357][T16253] kvm: requested 114819 ns i8254 timer period limited to 200000 ns [ 1752.723748][T16253] kvm: requested 119847 ns i8254 timer period limited to 200000 ns [ 1753.197114][T16262] overlayfs: overlapping lowerdir path [ 1756.959568][T16281] overlayfs: overlapping lowerdir path [ 1757.576529][T16290] syzkaller0: entered promiscuous mode [ 1757.576558][T16290] syzkaller0: entered allmulticast mode [ 1757.944587][T16294] fuse: Bad value for 'fd' [ 1762.367635][T16335] syzkaller1: entered promiscuous mode [ 1762.367655][T16335] syzkaller1: entered allmulticast mode [ 1762.713894][T16339] fuse: Unknown parameter 'grou00000000000000000000' [ 1763.134772][T16357] syzkaller1: entered promiscuous mode [ 1763.134791][T16357] syzkaller1: entered allmulticast mode [ 1770.540378][T12191] usb 6-1: new high-speed USB device number 36 using dummy_hcd [ 1770.670382][T12191] usb 6-1: device descriptor read/64, error -71 [ 1770.910273][T12191] usb 6-1: new high-speed USB device number 37 using dummy_hcd [ 1771.050359][T12191] usb 6-1: device descriptor read/64, error -71 [ 1771.165025][T12191] usb usb6-port1: attempt power cycle [ 1771.505141][T12191] usb 6-1: new high-speed USB device number 38 using dummy_hcd [ 1771.531000][T12191] usb 6-1: device descriptor read/8, error -71 [ 1771.770355][T12191] usb 6-1: new high-speed USB device number 39 using dummy_hcd [ 1771.791286][T12191] usb 6-1: device descriptor read/8, error -71 [ 1771.903929][T12191] usb usb6-port1: unable to enumerate USB device [ 1772.748016][T16425] fuse: Bad value for 'fd' [ 1775.327709][T16475] tmpfs: Unknown parameter 'aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa' [ 1778.973168][T16526] program syz.5.3836 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1779.060493][ T37] audit: type=1326 audit(1766636174.760:1900): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16529 comm="syz.5.3838" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f6ef9e3f749 code=0x0 [ 1779.926733][T16536] overlayfs: overlapping lowerdir path [ 1781.937909][T16560] bridge0: port 2(bridge_slave_1) entered disabled state [ 1781.960012][T16560] bridge0: port 1(bridge_slave_0) entered disabled state [ 1787.944211][T16632] fuse: Bad value for 'fd' [ 1788.329177][T16644] tmpfs: Bad value for 'nr_inodes' [ 1789.708092][T16665] tmpfs: Bad value for 'nr_inodes' [ 1791.049214][T16685] overlayfs: missing 'lowerdir' [ 1792.348886][T16708] overlayfs: missing 'lowerdir' [ 1792.715741][T16712] fuse: Bad value for 'fd' [ 1792.717658][T16712] overlayfs: failed to clone lowerpath [ 1792.830827][T16714] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3927'. [ 1794.061123][T16738] overlayfs: failed to clone upperpath [ 1797.575709][T16812] overlayfs: failed to clone upperpath [ 1797.824937][T16817] overlayfs: failed to clone lowerpath [ 1798.027547][T16825] fuse: Unknown parameter 'user_id00000000000000000000' [ 1798.043453][T16825] overlayfs: failed to clone lowerpath [ 1798.236266][T16833] overlayfs: failed to clone upperpath [ 1798.715111][ T37] audit: type=1326 audit(1766636194.410:1901): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16851 comm="syz.5.3991" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f6ef9e3f749 code=0x0 [ 1799.647873][T16857] overlayfs: failed to clone upperpath [ 1800.996618][ T37] audit: type=1326 audit(1766636196.690:1902): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16876 comm="syz.5.4002" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f6ef9e3f749 code=0x0 [ 1801.863805][T16883] netlink: 'syz.5.4006': attribute type 9 has an invalid length. [ 1801.896724][ T1323] ieee802154 phy0 wpan0: encryption failed: -22 [ 1801.896820][ T1323] ieee802154 phy1 wpan1: encryption failed: -22 [ 1802.621944][T16906] netlink: 'syz.5.4017': attribute type 9 has an invalid length. [ 1803.970358][ T5814] Bluetooth: hci3: command 0x0406 tx timeout [ 1805.494794][T16984] tmpfs: Bad value for 'mpol' [ 1809.809998][T17083] overlayfs: failed to clone upperpath [ 1809.845664][T17083] overlayfs: failed to clone upperpath [ 1811.424092][T17116] fuse: Bad value for 'group_id' [ 1811.424106][T17116] fuse: Bad value for 'group_id' [ 1811.425245][T17116] overlayfs: failed to clone lowerpath [ 1811.461413][T17116] overlayfs: failed to clone lowerpath [ 1811.998914][T17140] fuse: Bad value for 'group_id' [ 1811.998929][T17140] fuse: Bad value for 'group_id' [ 1812.000003][T17140] overlayfs: failed to clone lowerpath [ 1812.034054][T17140] overlayfs: failed to clone lowerpath [ 1814.904536][ T5814] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1814.918881][ T5814] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1814.922764][ T5814] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1814.937823][ T5814] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1814.938669][ T5814] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1815.358071][T17182] chnl_net:caif_netlink_parms(): no params data found [ 1815.922543][T17182] bridge0: port 1(bridge_slave_0) entered blocking state [ 1815.922686][T17182] bridge0: port 1(bridge_slave_0) entered disabled state [ 1815.922849][T17182] bridge_slave_0: entered allmulticast mode [ 1815.924430][T17182] bridge_slave_0: entered promiscuous mode [ 1815.926935][T17182] bridge0: port 2(bridge_slave_1) entered blocking state [ 1815.927072][T17182] bridge0: port 2(bridge_slave_1) entered disabled state [ 1815.927409][T17182] bridge_slave_1: entered allmulticast mode [ 1815.928981][T17182] bridge_slave_1: entered promiscuous mode [ 1816.097115][T17182] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1816.102134][T17182] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1816.253700][T17182] team0: Port device team_slave_0 added [ 1816.256291][T17182] team0: Port device team_slave_1 added [ 1816.566753][T17182] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1816.566769][T17182] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1816.566785][T17182] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1816.568504][T17182] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1816.568519][T17182] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1816.568535][T17182] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1816.778203][T17182] hsr_slave_0: entered promiscuous mode [ 1816.779156][T17182] hsr_slave_1: entered promiscuous mode [ 1816.779850][T17182] debugfs: 'hsr0' already exists in 'hsr' [ 1816.779877][T17182] Cannot create hsr debugfs directory [ 1817.020280][ T5814] Bluetooth: hci0: command tx timeout [ 1817.369527][T17182] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1817.632841][T17182] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1817.884914][T17182] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1818.092683][T17182] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1818.446365][T17182] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1818.476298][T17182] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1818.505415][T17182] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1818.545975][T17182] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1818.663876][T17182] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1818.696398][T17182] 8021q: adding VLAN 0 to HW filter on device team0 [ 1818.715790][T12352] bridge0: port 1(bridge_slave_0) entered blocking state [ 1818.715994][T12352] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1818.738608][T15312] bridge0: port 2(bridge_slave_1) entered blocking state [ 1818.738744][T15312] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1818.976660][T17182] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1819.090452][ T5814] Bluetooth: hci0: command tx timeout [ 1819.236781][T17182] veth0_vlan: entered promiscuous mode [ 1819.255171][T17182] veth1_vlan: entered promiscuous mode [ 1819.303299][T17182] veth0_macvtap: entered promiscuous mode [ 1819.307103][T17182] veth1_macvtap: entered promiscuous mode [ 1819.341957][T17182] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1819.367856][T17182] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1819.385807][T12352] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1819.386111][T12352] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1819.386151][T12352] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1819.386186][T12352] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1819.830532][T15542] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1819.830556][T15542] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1819.876804][T15312] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1819.876827][T15312] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1821.171524][ T5814] Bluetooth: hci0: command tx timeout [ 1821.861899][ T37] audit: type=1326 audit(1766636217.560:1903): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17222 comm="syz.5.4153" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f9e763af749 code=0x0 [ 1823.250403][ T5814] Bluetooth: hci0: command tx timeout [ 1824.606307][T17238] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4160'. [ 1827.336626][T17295] overlayfs: missing 'lowerdir' [ 1829.438203][T17322] netlink: 156 bytes leftover after parsing attributes in process `syz.5.4191'. [ 1829.526585][T17324] overlayfs: missing 'workdir' [ 1829.772565][T17328] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4194'. [ 1833.387256][T17346] overlayfs: missing 'workdir' [ 1833.744400][T17353] fuse: Unknown parameter 'group_id00000000000000000000' [ 1836.069997][T17370] overlayfs: missing 'workdir' [ 1839.989368][T17388] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 1844.743131][T17433] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4251'. [ 1844.754810][T17433] bond_slave_0: entered promiscuous mode [ 1844.754897][T17433] bond_slave_1: entered promiscuous mode [ 1844.757197][T17433] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 1844.766372][T17433] bond_slave_0: left promiscuous mode [ 1844.766454][T17433] bond_slave_1: left promiscuous mode [ 1845.144400][T17439] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1846.741651][T17475] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 1847.405629][T17495] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 1850.543794][T17576] 9p: Bad value for 'wfdno' [ 1851.048151][T17598] 9p: Bad value for 'wfdno' [ 1851.093563][T17600] fuse: Unknown parameter 'group_i00000000000000000000' [ 1851.095110][T17600] overlayfs: overlapping lowerdir path [ 1855.506277][T17620] fuse: Unknown parameter 'group_i00000000000000000000' [ 1855.507606][T17620] overlayfs: overlapping lowerdir path [ 1863.334132][ T1323] ieee802154 phy0 wpan0: encryption failed: -22 [ 1863.334250][ T1323] ieee802154 phy1 wpan1: encryption failed: -22 [ 1865.537357][T17681] fuse: Unknown parameter 'group_id00000000000000000000' [ 1865.538846][T17681] overlayfs: overlapping lowerdir path [ 1865.628290][T17683] fuse: Unknown parameter 'use00000000000000000000' [ 1869.076245][T17700] fuse: Unknown parameter 'group_id00000000000000000000' [ 1869.077610][T17700] overlayfs: overlapping lowerdir path [ 1869.166530][T17702] fuse: Unknown parameter 'use00000000000000000000' [ 1873.746385][T17720] netlink: 20 bytes leftover after parsing attributes in process `syz.5.4400'. [ 1873.804870][T17722] fuse: Unknown parameter 'use00000000000000000000' [ 1873.862125][T17724] evm: overlay not supported [ 1875.023952][T17743] fuse: Unknown parameter 'user_i00000000000000000000' [ 1876.179486][T17767] fuse: Unknown parameter 'user_i00000000000000000000' [ 1877.464266][T17789] fuse: Unknown parameter 'user_i00000000000000000000' [ 1878.694593][T17812] fuse: Unknown parameter 'user_id00000000000000000000' [ 1885.025702][T17894] fuse: Bad value for 'fd' [ 1887.936183][T17916] fuse: Bad value for 'fd' [ 1888.032460][T17920] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 1898.535579][T17992] Bluetooth: MGMT ver 1.23 [ 1900.610202][ T5814] Bluetooth: hci2: Opcode 0x0401 failed: -110 [ 1900.610279][T12318] Bluetooth: hci2: command 0x0406 tx timeout [ 1902.908981][T18002] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1902.918136][T18002] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 1903.057836][T18002] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1903.058118][T18002] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 1903.186366][T18002] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 1903.186489][T18002] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 1903.264105][T18002] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1903.264302][T18002] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 1903.341483][T18002] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1903.341570][T18002] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 1903.401267][T18002] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 1904.450491][ T5814] Bluetooth: hci2: command 0x0406 tx timeout [ 1905.100467][ T5814] Bluetooth: hci4: command 0x0406 tx timeout [ 1905.250219][ T5814] Bluetooth: hci5: command 0x0406 tx timeout [ 1905.330358][ T5814] Bluetooth: hci1: command 0x0406 tx timeout [ 1905.410211][ T5814] Bluetooth: hci0: command 0x0c1a tx timeout [ 1906.530463][ T5814] Bluetooth: hci2: command 0x0406 tx timeout [ 1907.170166][ T5814] Bluetooth: hci4: command 0x0406 tx timeout [ 1907.330231][ T5814] Bluetooth: hci5: command 0x0406 tx timeout [ 1907.410186][ T5814] Bluetooth: hci1: command 0x0406 tx timeout [ 1907.490202][ T5814] Bluetooth: hci0: command 0x0c1a tx timeout [ 1909.570230][ T5814] Bluetooth: hci0: command 0x0c1a tx timeout [ 1923.290242][T11978] usb 6-1: new high-speed USB device number 40 using dummy_hcd [ 1923.440223][T11978] usb 6-1: Using ep0 maxpacket: 8 [ 1923.443817][T11978] usb 6-1: config 179 has an invalid interface number: 65 but max is 0 [ 1923.443858][T11978] usb 6-1: config 179 has no interface number 0 [ 1923.443910][T11978] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 1923.443940][T11978] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 1923.443967][T11978] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1923.443992][T11978] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 1923.444017][T11978] usb 6-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 1923.444062][T11978] usb 6-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 1923.444085][T11978] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1923.448378][T18115] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1924.784916][ T1323] ieee802154 phy0 wpan0: encryption failed: -22 [ 1924.786731][ T1323] ieee802154 phy1 wpan1: encryption failed: -22 [ 1926.077498][ C1] xpad 6-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 1926.077561][ C1] xpad 6-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 1926.077909][T11978] usb 6-1: USB disconnect, device number 40 [ 1931.130330][T11978] usb 6-1: new high-speed USB device number 41 using dummy_hcd [ 1931.280213][T11978] usb 6-1: Using ep0 maxpacket: 16 [ 1931.289134][T11978] usb 6-1: New USB device found, idVendor=2137, idProduct=0001, bcdDevice=2a.35 [ 1931.289169][T11978] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1931.289192][T11978] usb 6-1: Product: syz [ 1931.289208][T11978] usb 6-1: Manufacturer: syz [ 1931.289224][T11978] usb 6-1: SerialNumber: syz [ 1931.334165][T11978] usb 6-1: config 0 descriptor?? [ 1931.360681][T11978] as10x_usb: device has been detected [ 1931.362986][T11978] dvbdev: DVB: registering new adapter (Sky IT Digital Key (green led)) [ 1931.384870][T11978] usb 6-1: DVB: registering adapter 1 frontend 0 (Sky IT Digital Key (green led))... [ 1931.471322][T11978] as10x_usb: error during firmware upload part1 [ 1931.471780][T11978] Registered device Sky IT Digital Key (green led) [ 1931.555889][T11978] usb 6-1: USB disconnect, device number 41 [ 1931.592728][T11978] Unregistered device Sky IT Digital Key (green led) [ 1931.594433][T11978] as10x_usb: device has been disconnected [ 1933.897129][T18173] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4617'. [ 1933.953731][T18174] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4617'. [ 1936.071340][T18191] netlink: 'syz.5.4626': attribute type 4 has an invalid length. [ 1937.190325][T15537] usb 6-1: new high-speed USB device number 42 using dummy_hcd [ 1937.362443][T15537] usb 6-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00 [ 1937.362465][T15537] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1937.362477][T15537] usb 6-1: Product: syz [ 1937.362486][T15537] usb 6-1: Manufacturer: syz [ 1937.362501][T15537] usb 6-1: SerialNumber: syz [ 1937.365769][T15537] usb 6-1: config 0 descriptor?? [ 1937.580419][T15537] usb-storage 6-1:0.0: USB Mass Storage device detected [ 1937.677166][T15537] usb 6-1: USB disconnect, device number 42 [ 1938.454012][T18207] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(7) [ 1938.454045][T18207] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1938.487722][T18207] vhci_hcd vhci_hcd.0: Device attached [ 1938.506029][T18207] smc: net device wlan1 applied user defined pnetid SYZ1 [ 1938.760216][ T9446] usb 44-1: SetAddress Request (2) to port 0 [ 1938.760276][ T9446] usb 44-1: new SuperSpeed USB device number 2 using vhci_hcd [ 1939.094107][T18208] vhci_hcd: connection reset by peer [ 1939.108420][ T1028] vhci_hcd vhci_hcd.5: stop threads [ 1939.108440][ T1028] vhci_hcd vhci_hcd.5: release socket [ 1939.112108][ T1028] vhci_hcd vhci_hcd.5: disconnect device [ 1940.046231][T18220] tipc: Started in network mode [ 1940.046258][T18220] tipc: Node identity 4, cluster identity 4711 [ 1940.046273][T18220] tipc: Node number set to 4 [ 1942.166558][T18249] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(5) [ 1942.166590][T18249] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1942.188023][T18249] vhci_hcd vhci_hcd.0: Device attached [ 1942.687853][T18250] vhci_hcd: connection closed [ 1942.695845][T15312] vhci_hcd vhci_hcd.5: stop threads [ 1942.695865][T15312] vhci_hcd vhci_hcd.5: release socket [ 1942.695909][T15312] vhci_hcd vhci_hcd.5: disconnect device [ 1943.890411][ T9446] usb 44-1: device descriptor read/8, error -110 [ 1944.283162][ T9446] usb usb44-port1: attempt power cycle [ 1944.855472][ T9446] usb usb44-port1: unable to enumerate USB device [ 1945.969555][T18286] overlay: Unknown parameter '/' [ 1948.539508][T18319] 9pnet_virtio: no channels available for device syz [ 1948.597639][T18319] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 1948.602143][T18319] overlayfs: overlapping lowerdir path [ 1957.001696][T18395] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 1957.002404][T18395] overlayfs: overlapping lowerdir path [ 1963.476336][T18464] fuse: Bad value for 'fd' [ 1966.671884][T18488] fuse: Bad value for 'fd' [ 1968.234043][T18514] fuse: Bad value for 'fd' [ 1968.434162][T18523] overlayfs: failed to resolve './bus': -2 [ 1968.737374][T18536] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4775'. [ 1968.780490][T18538] fuse: Bad value for 'fd' [ 1969.291032][T18547] netlink: 24 bytes leftover after parsing attributes in process `syz.5.4779'. [ 1970.835915][T18562] fuse: Invalid rootmode [ 1973.355785][T18597] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4805'. [ 1978.527343][T18630] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1978.527367][T18630] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1978.571210][T18630] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1978.571233][T18630] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1981.340224][T18646] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4827'. [ 1982.655470][T18654] 9pnet_virtio: no channels available for device syz [ 1985.315479][T18670] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4839'. [ 1986.220919][ T1323] ieee802154 phy0 wpan0: encryption failed: -22 [ 1986.221000][ T1323] ieee802154 phy1 wpan1: encryption failed: -22 [ 1993.294897][T18713] overlayfs: failed to resolve './file0': -2 [ 1993.498275][ T5814] Bluetooth: hci0: unexpected cc 0x203e length: 2 > 1 [ 1993.500244][ T5814] Bluetooth: hci0: unexpected event for opcode 0x203e [ 1994.894633][T18736] netlink: 'syz.5.4873': attribute type 12 has an invalid length. [ 1994.983726][ T5814] Bluetooth: hci0: unexpected cc 0x203e length: 2 > 1 [ 1994.983762][ T5814] Bluetooth: hci0: unexpected event for opcode 0x203e [ 1995.031924][T18742] fuse: Unknown parameter '0x0000000000000003' [ 1996.287144][ T5814] Bluetooth: hci0: unexpected cc 0x203e length: 2 > 1 [ 1996.287183][ T5814] Bluetooth: hci0: unexpected event for opcode 0x203e [ 1997.543086][T18775] sch_tbf: burst 19872 is lower than device lo mtu (11337746) ! [ 1997.570255][ T5814] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 1997.570794][ T5814] Bluetooth: hci0: Injecting HCI hardware error event [ 1997.576246][ T5814] Bluetooth: hci0: hardware error 0x00 [ 1997.827287][T12318] Bluetooth: hci0: unexpected cc 0x203e length: 2 > 1 [ 1997.827317][T12318] Bluetooth: hci0: unexpected event for opcode 0x203e [ 1998.962472][T18798] sch_tbf: burst 19872 is lower than device lo mtu (11337746) ! [ 1999.351348][T18814] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4912'. [ 1999.463820][T18818] sch_tbf: burst 19872 is lower than device lo mtu (11337746) ! [ 1999.650181][ T5814] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 2002.881190][T18852] fuse: Unknown parameter 'fd0x0000000000000003' [ 2006.801480][T18895] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4952'. [ 2006.854701][T18896] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4952'. [ 2008.782470][T18909] netlink: 16 bytes leftover after parsing attributes in process `syz.5.4958'. [ 2010.450483][T18926] netlink: 'syz.5.4965': attribute type 12 has an invalid length. [ 2012.001172][T18936] overlayfs: missing 'lowerdir' [ 2012.042002][T18936] overlayfs: failed to clone lowerpath [ 2012.120702][T18938] netlink: 48 bytes leftover after parsing attributes in process `syz.5.4970'. [ 2015.106391][T18963] netlink: 48 bytes leftover after parsing attributes in process `syz.5.4982'. [ 2015.459545][T18967] overlayfs: failed to clone lowerpath [ 2019.523168][T18988] fuse: Bad value for 'fd' [ 2020.857270][T18997] overlayfs: missing 'lowerdir' [ 2020.882291][T18997] overlayfs: failed to clone lowerpath [ 2020.961699][T18999] overlayfs: missing 'lowerdir' [ 2021.301708][T19007] netlink: 196 bytes leftover after parsing attributes in process `syz.5.5002'. [ 2023.533693][T19017] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5006'. [ 2023.903538][T12318] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 2023.928861][T12318] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 2023.939062][T12318] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 2023.964145][T12318] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 2023.966879][T12318] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 2024.616068][T19023] chnl_net:caif_netlink_parms(): no params data found [ 2025.341224][T19023] bridge0: port 1(bridge_slave_0) entered blocking state [ 2025.341530][T19023] bridge0: port 1(bridge_slave_0) entered disabled state [ 2025.341815][T19023] bridge_slave_0: entered allmulticast mode [ 2025.345333][T19023] bridge_slave_0: entered promiscuous mode [ 2025.353605][T19023] bridge0: port 2(bridge_slave_1) entered blocking state [ 2025.353807][T19023] bridge0: port 2(bridge_slave_1) entered disabled state [ 2025.354005][T19023] bridge_slave_1: entered allmulticast mode [ 2025.356928][T19023] bridge_slave_1: entered promiscuous mode [ 2025.531154][T19023] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2025.536411][T19023] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2025.704571][T19023] team0: Port device team_slave_0 added [ 2025.707058][T19023] team0: Port device team_slave_1 added [ 2025.852483][T19023] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2025.852499][T19023] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2025.852515][T19023] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2025.854250][T19023] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2025.854262][T19023] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2025.854286][T19023] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2026.051043][ T5814] Bluetooth: hci3: command tx timeout [ 2026.069736][T19023] hsr_slave_0: entered promiscuous mode [ 2026.076113][T19023] hsr_slave_1: entered promiscuous mode [ 2026.076869][T19023] debugfs: 'hsr0' already exists in 'hsr' [ 2026.076887][T19023] Cannot create hsr debugfs directory [ 2026.629822][T19023] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2027.028806][T19023] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2027.274439][T19023] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2027.529051][T19023] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2027.904612][T19023] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 2027.924000][T19023] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 2027.963971][T19023] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 2028.004350][T19023] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 2028.127336][T19023] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2028.137174][ T5814] Bluetooth: hci3: command tx timeout [ 2028.155034][T19023] 8021q: adding VLAN 0 to HW filter on device team0 [ 2028.162860][T12352] bridge0: port 1(bridge_slave_0) entered blocking state [ 2028.163371][T12352] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2028.205464][T12352] bridge0: port 2(bridge_slave_1) entered blocking state [ 2028.205930][T12352] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2028.455611][T19023] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2028.743706][T19023] veth0_vlan: entered promiscuous mode [ 2028.751524][T19023] veth1_vlan: entered promiscuous mode [ 2028.792114][T19023] veth0_macvtap: entered promiscuous mode [ 2028.796091][T19023] veth1_macvtap: entered promiscuous mode [ 2028.818163][T19023] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2028.839668][T19023] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2028.869890][ T6160] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2028.869946][ T6160] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2028.895010][ T6160] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2028.895062][ T6160] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2029.233090][T13184] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2029.233116][T13184] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2029.295517][T13184] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2029.295542][T13184] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2030.212214][ T5814] Bluetooth: hci3: command tx timeout [ 2030.707560][T19060] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 2030.862050][T19065] fuse: Bad value for 'fd' [ 2032.291064][ T5814] Bluetooth: hci3: command tx timeout [ 2032.426427][T19086] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 2032.865346][T19092] 9pnet_virtio: no channels available for device syz [ 2033.861714][T19097] 8021q: VLANs not supported on vcan0 [ 2035.726458][T19115] netlink: 'syz.5.5044': attribute type 4 has an invalid length. [ 2036.944549][T19122] netlink: 'syz.5.5047': attribute type 12 has an invalid length. [ 2037.947751][T19130] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5052'. [ 2039.176169][T19145] tipc: Started in network mode [ 2039.176186][T19145] tipc: Node identity 4, cluster identity 4711 [ 2039.176195][T19145] tipc: Node number set to 4 [ 2039.351993][T19149] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5061'. [ 2043.525684][T19178] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5076'. [ 2043.633115][T19181] netlink: 884 bytes leftover after parsing attributes in process `syz.5.5077'. [ 2045.614044][T19196] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5083'. [ 2045.654425][T19196] netlink: 24 bytes leftover after parsing attributes in process `syz.5.5083'. [ 2047.654786][ T1323] ieee802154 phy0 wpan0: encryption failed: -22 [ 2047.654948][ T1323] ieee802154 phy1 wpan1: encryption failed: -22 [ 2048.672389][T19204] netlink: 196 bytes leftover after parsing attributes in process `syz.5.5088'. [ 2050.109402][T19214] team0: Port device vlan3 added [ 2053.404379][T19226] netlink: 196 bytes leftover after parsing attributes in process `syz.5.5102'. [ 2055.707018][T19237] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5108'. [ 2059.246750][T19251] netlink: 52 bytes leftover after parsing attributes in process `syz.5.5117'. [ 2059.374196][T19257] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5120'. [ 2063.948546][T19286] overlayfs: failed to clone lowerpath [ 2078.387845][T19396] netlink: 132 bytes leftover after parsing attributes in process `syz.5.5185'. [ 2079.401082][T19401] overlayfs: failed to clone lowerpath [ 2082.136067][T19425] overlayfs: failed to clone lowerpath [ 2085.688303][T19449] overlayfs: failed to clone lowerpath [ 2088.491902][T19462] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 2091.607533][T19486] netlink: 48 bytes leftover after parsing attributes in process `syz.5.5224'. [ 2092.314998][T19494] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5228'. [ 2096.274942][T19520] Process accounting resumed [ 2098.973115][T19541] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5250'. [ 2099.223344][T19553] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5256'. [ 2099.942620][T19568] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5265'. [ 2099.943962][T19568] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5265'. [ 2101.517733][T19573] Process accounting resumed [ 2101.908481][T19582] overlayfs: failed to clone lowerpath [ 2103.847794][T19605] overlayfs: failed to clone lowerpath [ 2104.028309][T19610] netlink: 44 bytes leftover after parsing attributes in process `syz.5.5284'. [ 2104.028980][T19610] netlink: 44 bytes leftover after parsing attributes in process `syz.5.5284'. [ 2104.947572][T19617] netlink: 'syz.5.5286': attribute type 4 has an invalid length. [ 2106.131825][T19628] overlayfs: failed to clone lowerpath [ 2107.541663][T19637] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5296'. [ 2108.449604][T19660] netlink: 16 bytes leftover after parsing attributes in process `syz.5.5306'. [ 2108.501209][T19662] overlayfs: missing 'lowerdir' [ 2109.103925][ T1323] ieee802154 phy0 wpan0: encryption failed: -22 [ 2109.104023][ T1323] ieee802154 phy1 wpan1: encryption failed: -22 [ 2109.947470][T19681] netlink: 16 bytes leftover after parsing attributes in process `syz.5.5317'. [ 2109.989279][T19683] overlayfs: missing 'lowerdir' [ 2111.110355][T19696] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5324'. [ 2111.221037][T19696] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5324'. [ 2111.522103][T18428] IPVS: starting estimator thread 0... [ 2111.620278][T19702] IPVS: using max 13 ests per chain, 31200 per kthread [ 2114.149323][T19720] ceph: No mds server is up or the cluster is laggy [ 2114.186804][T12415] libceph: connect (1)[c::]:6789 error -101 [ 2114.187871][T12415] libceph: mon0 (1)[c::]:6789 connect error [ 2117.492969][T19764] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5351'. [ 2117.545786][T19766] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 2117.545813][T19766] overlayfs: option "volatile" is meaningless in a non-upper mount, ignoring it. [ 2117.545837][T19766] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 2117.641486][T19769] sch_tbf: burst 19872 is lower than device lo mtu (11337746) ! [ 2117.728027][T19773] fuse: Bad value for 'fd' [ 2118.327898][T19786] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 2118.327919][T19786] overlayfs: option "volatile" is meaningless in a non-upper mount, ignoring it. [ 2118.327942][T19786] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 2118.437324][T19788] sch_tbf: burst 19872 is lower than device lo mtu (11337746) ! [ 2118.489596][T19790] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5365'. [ 2120.430245][T19814] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 2120.430265][T19814] overlayfs: option "volatile" is meaningless in a non-upper mount, ignoring it. [ 2120.430292][T19814] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 2120.522478][T19817] sch_tbf: burst 19872 is lower than device lo mtu (11337746) ! [ 2120.574795][T19819] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5376'. [ 2122.022043][T19831] netlink: 772 bytes leftover after parsing attributes in process `syz.5.5383'. [ 2123.551416][T19833] syz.5.5384 invoked oom-killer: gfp_mask=0x400cc0(GFP_KERNEL_ACCOUNT), order=3, oom_score_adj=0 [ 2123.551447][T19833] CPU: 1 UID: 0 PID: 19833 Comm: syz.5.5384 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 2123.551476][T19833] Tainted: [L]=SOFTLOCKUP [ 2123.551481][T19833] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 2123.551489][T19833] Call Trace: [ 2123.551496][T19833] [ 2123.551501][T19833] dump_stack_lvl+0xe8/0x150 [ 2123.551525][T19833] dump_header+0xd4/0x4c0 [ 2123.551543][T19833] oom_kill_process+0x263/0x800 [ 2123.551562][T19833] out_of_memory+0xf0c/0x12b0 [ 2123.551586][T19833] ? __pfx_out_of_memory+0x10/0x10 [ 2123.551601][T19833] ? lockdep_hardirqs_on+0x7b/0x110 [ 2123.551614][T19833] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 2123.551627][T19833] ? _mutex_lock_killable+0x154/0x1d0 [ 2123.551644][T19833] ? mem_cgroup_out_of_memory+0xa1/0x240 [ 2123.551661][T19833] mem_cgroup_out_of_memory+0x145/0x240 [ 2123.551676][T19833] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 2123.551695][T19833] ? rt_spin_unlock+0x161/0x200 [ 2123.551713][T19833] ? memcg1_oom_prepare+0x37f/0x450 [ 2123.551734][T19833] try_charge_memcg+0xe62/0x1360 [ 2123.551760][T19833] ? __pfx_try_charge_memcg+0x10/0x10 [ 2123.551782][T19833] ? get_mem_cgroup_from_objcg+0x1a/0x1d0 [ 2123.551802][T19833] ? get_mem_cgroup_from_objcg+0x1b0/0x1d0 [ 2123.551818][T19833] ? get_mem_cgroup_from_objcg+0x1a/0x1d0 [ 2123.551837][T19833] obj_cgroup_charge_pages+0x1e/0xa0 [ 2123.551854][T19833] obj_cgroup_charge_account+0x422/0x780 [ 2123.551877][T19833] __memcg_slab_post_alloc_hook+0x447/0x7d0 [ 2123.551905][T19833] __kmalloc_node_track_caller_noprof+0x5ef/0x810 [ 2123.551925][T19833] ? copy_array+0x71/0x100 [ 2123.551942][T19833] ? copy_array+0x71/0x100 [ 2123.551958][T19833] krealloc_node_align_noprof+0x1ae/0x3a0 [ 2123.551977][T19833] ? __kmalloc_cache_noprof+0x1fb/0x6d0 [ 2123.551997][T19833] copy_array+0x71/0x100 [ 2123.552014][T19833] copy_verifier_state+0x997/0xf90 [ 2123.552036][T19833] do_check+0x4dbf/0xeba0 [ 2123.552051][T19833] ? __pfx_stack_trace_save+0x10/0x10 [ 2123.552106][T19833] ? __pfx_do_check+0x10/0x10 [ 2123.552121][T19833] ? init_func_state+0x1ab2/0x28d0 [ 2123.552142][T19833] do_check_common+0x19cc/0x25b0 [ 2123.552168][T19833] bpf_check+0x5e87/0x1c300 [ 2123.552197][T19833] ? __lock_acquire+0x6b6/0x2cf0 [ 2123.552225][T19833] ? __lock_acquire+0x6b6/0x2cf0 [ 2123.552244][T19833] ? do_raw_spin_lock+0x121/0x290 [ 2123.552259][T19833] ? css_rstat_updated+0x239/0x520 [ 2123.552284][T19833] ? pcpu_memcg_post_alloc_hook+0x77/0x580 [ 2123.552301][T19833] ? __pfx_bpf_check+0x10/0x10 [ 2123.552316][T19833] ? ktime_get_with_offset+0x93/0x2a0 [ 2123.552338][T19833] ? ktime_get_with_offset+0x93/0x2a0 [ 2123.552356][T19833] ? __asan_memset+0x22/0x50 [ 2123.552372][T19833] ? bpf_lsm_bpf_prog_load+0x9/0x20 [ 2123.552384][T19833] ? security_bpf_prog_load+0x125/0x3f0 [ 2123.552407][T19833] bpf_prog_load+0x13ba/0x1a10 [ 2123.552430][T19833] ? __pfx_bpf_prog_load+0x10/0x10 [ 2123.552445][T19833] ? __might_fault+0xb0/0x130 [ 2123.552481][T19833] ? bpf_lsm_bpf+0x9/0x20 [ 2123.552492][T19833] ? security_bpf+0x7e/0x300 [ 2123.552511][T19833] __sys_bpf+0x507/0x860 [ 2123.552527][T19833] ? __pfx___sys_bpf+0x10/0x10 [ 2123.552553][T19833] ? __pfx___se_sys_futex+0x10/0x10 [ 2123.552572][T19833] ? rcu_is_watching+0x15/0xb0 [ 2123.552590][T19833] __x64_sys_bpf+0x7c/0x90 [ 2123.552603][T19833] do_syscall_64+0xec/0xf80 [ 2123.552615][T19833] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2123.552628][T19833] ? trace_irq_disable+0x37/0x100 [ 2123.552641][T19833] ? clear_bhb_loop+0x60/0xb0 [ 2123.552657][T19833] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2123.552670][T19833] RIP: 0033:0x7f2c1285f749 [ 2123.552684][T19833] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2123.552695][T19833] RSP: 002b:00007f2c10ac6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 2123.552710][T19833] RAX: ffffffffffffffda RBX: 00007f2c12ab5fa0 RCX: 00007f2c1285f749 [ 2123.552719][T19833] RDX: 0000000000000094 RSI: 0000200000000840 RDI: 0000000000000005 [ 2123.552728][T19833] RBP: 00007f2c128e3f91 R08: 0000000000000000 R09: 0000000000000000 [ 2123.552735][T19833] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2123.552743][T19833] R13: 00007f2c12ab6038 R14: 00007f2c12ab5fa0 R15: 00007fff24b9d828 [ 2123.552763][T19833] [ 2123.552769][T19833] memory: usage 307192kB, limit 307200kB, failcnt 53 [ 2123.552777][T19833] memory+swap: usage 307448kB, limit 9007199254740988kB, failcnt 0 [ 2123.552786][T19833] kmem: usage 307084kB, limit 9007199254740988kB, failcnt 0 [ 2123.552794][T19833] Memory cgroup stats for /syz5: [ 2123.553078][T19833] cache 0 [ 2123.553085][T19833] rss 28672 [ 2123.553089][T19833] shmem 0 [ 2123.553094][T19833] mapped_file 0 [ 2123.553098][T19833] dirty 0 [ 2123.553102][T19833] writeback 0 [ 2123.553107][T19833] workingset_refault_anon 1796 [ 2123.553112][T19833] workingset_refault_file 0 [ 2123.553117][T19833] swap 262144 [ 2123.553121][T19833] swapcached 0 [ 2123.553125][T19833] pgpgin 1329597 [ 2123.553129][T19833] pgpgout 1329590 [ 2123.553134][T19833] pgfault 855443 [ 2123.553138][T19833] pgmajfault 271 [ 2123.553143][T19833] inactive_anon 0 [ 2123.553147][T19833] active_anon 0 [ 2123.553152][T19833] inactive_file 0 [ 2123.553156][T19833] active_file 0 [ 2123.553161][T19833] unevictable 0 [ 2123.553165][T19833] hierarchical_memory_limit 314572800 [ 2123.553170][T19833] hierarchical_memsw_limit 9223372036854771712 [ 2123.553176][T19833] total_cache 0 [ 2123.553181][T19833] total_rss 28672 [ 2123.553185][T19833] total_shmem 0 [ 2123.553189][T19833] total_mapped_file 0 [ 2123.553194][T19833] total_dirty 0 [ 2123.553198][T19833] total_writeback 0 [ 2123.553203][T19833] total_workingset_refault_anon 1796 [ 2123.553208][T19833] total_workingset_refault_file 0 [ 2123.553213][T19833] total_swap 262144 [ 2123.553218][T19833] total_swapcached 0 [ 2123.553222][T19833] total_pgpgin 1329597 [ 2123.553227][T19833] total_pgpgout 1329590 [ 2123.553232][T19833] total_pgfault 855443 [ 2123.553236][T19833] total_pgmajfault 271 [ 2123.553241][T19833] total_inactive_anon 0 [ 2123.553246][T19833] total_active_anon 0 [ 2123.553250][T19833] total_inactive_file 0 [ 2123.553255][T19833] total_active_file 0 [ 2123.553260][T19833] total_unevictable 0 [ 2123.553264][T19833] anon_cost 487 [ 2123.553269][T19833] file_cost 0 [ 2123.553273][T19833] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz5,task_memcg=/syz5,task=syz.5.5384,pid=19832,uid=0 [ 2123.553767][T19833] Memory cgroup out of memory: Killed process 19832 (syz.5.5384) total-vm:102032kB, anon-rss:1148kB, file-rss:22952kB, shmem-rss:0kB, UID:0 pgtables:132kB oom_score_adj:0 [ 2125.075328][T19840] sch_tbf: burst 19872 is lower than device lo mtu (11337746) ! [ 2125.124544][T19842] netlink: 68 bytes leftover after parsing attributes in process `syz.5.5390'. [ 2125.252839][T19848] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2125.257584][T19848] IPv6: NLM_F_CREATE should be set when creating new route [ 2125.257632][T19848] IPv6: NLM_F_CREATE should be set when creating new route [ 2125.272879][T19848] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2125.273135][T19848] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5393'. [ 2125.273153][T19848] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5393'. [ 2126.804300][T19865] sch_tbf: burst 19872 is lower than device lo mtu (11337746) ! [ 2128.503845][T19884] sch_tbf: burst 19872 is lower than device lo mtu (11337746) ! [ 2128.573687][T19886] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5412'. [ 2129.923241][T19903] overlayfs: failed to clone upperpath [ 2131.472210][T19919] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5427'. [ 2131.525637][T19920] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5427'. [ 2134.259244][T19931] overlayfs: failed to clone upperpath [ 2136.101973][T19947] sch_tbf: burst 19872 is lower than device lo mtu (11337746) ! [ 2137.880686][T19953] 9pnet_virtio: no channels available for device syz [ 2139.339168][T19968] sch_tbf: burst 19872 is lower than device lo mtu (11337746) ! [ 2147.077019][T12318] Bluetooth: hci3: command 0x0406 tx timeout [ 2152.347388][T20064] netlink: 24 bytes leftover after parsing attributes in process `syz.5.5496'. [ 2165.774286][T20159] workqueue: Failed to create a rescuer kthread for wq "ceph-completion": -EINTR [ 2169.733837][T20189] overlayfs: failed to clone lowerpath [ 2170.536319][ T1323] ieee802154 phy0 wpan0: encryption failed: -22 [ 2170.536403][ T1323] ieee802154 phy1 wpan1: encryption failed: -22 [ 2173.792374][T20216] overlayfs: failed to clone lowerpath [ 2176.134826][T20220] netlink: 860 bytes leftover after parsing attributes in process `syz.5.5565'. [ 2178.352824][T20234] FAT-fs (loop11): unable to read boot sector [ 2184.666423][T20271] netlink: get zone limit has 4 unknown bytes [ 2186.969506][T20288] workqueue: Failed to create a rescuer kthread for wq "ceph-completion": -EINTR [ 2187.266732][T20295] team0: Device gtp0 is of different type [ 2189.082381][T20311] netlink: 'syz.5.5607': attribute type 4 has an invalid length. [ 2191.432969][T20326] BUG: sleeping function called from invalid context at kernel/locking/spinlock_rt.c:48 [ 2191.432996][T20326] in_atomic(): 1, irqs_disabled(): 0, non_block: 0, pid: 20326, name: syz.5.5613 [ 2191.433016][T20326] preempt_count: 2, expected: 0 [ 2191.433027][T20326] RCU nest depth: 1, expected: 1 [ 2191.433038][T20326] 3 locks held by syz.5.5613/20326: [ 2191.433051][T20326] #0: ffff888037fd2e58 (sk_lock-AF_VSOCK){+.+.}-{0:0}, at: vsock_connectible_sendmsg+0x189/0x1040 [ 2191.433111][T20326] #1: ffffffff8d5ae940 (rcu_read_lock){....}-{1:3}, at: bpf_trace_run9+0x1ec/0x510 [ 2191.433144][T20326] #2: ffff8880b883fe88 (&s->lock_key#14){+.+.}-{3:3}, at: ___slab_alloc+0x12f/0x13e0 [ 2191.433178][T20326] Preemption disabled at: [ 2191.433181][T20326] [] count_memcg_events+0x68/0x240 [ 2191.433205][T20326] CPU: 0 UID: 0 PID: 20326 Comm: syz.5.5613 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 2191.433224][T20326] Tainted: [L]=SOFTLOCKUP [ 2191.433229][T20326] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 2191.433238][T20326] Call Trace: [ 2191.433244][T20326] [ 2191.433250][T20326] dump_stack_lvl+0xe8/0x150 [ 2191.433269][T20326] __might_resched+0x32a/0x480 [ 2191.433283][T20326] ? count_memcg_events+0x68/0x240 [ 2191.433300][T20326] rt_spin_lock+0xc7/0x3e0 [ 2191.433318][T20326] ? __pfx_rt_spin_lock+0x10/0x10 [ 2191.433333][T20326] ? __lock_acquire+0x6b6/0x2cf0 [ 2191.433359][T20326] ? __lock_acquire+0x6b6/0x2cf0 [ 2191.433376][T20326] ___slab_alloc+0x12f/0x13e0 [ 2191.433392][T20326] ? unwind_next_frame+0xa5/0x23d0 [ 2191.433407][T20326] ? lock_acquire+0x107/0x340 [ 2191.433421][T20326] ? __bpf_stream_push_str+0xa8/0x2b0 [ 2191.433436][T20326] __slab_alloc+0xc6/0x1f0 [ 2191.433449][T20326] ? __bpf_stream_push_str+0xa8/0x2b0 [ 2191.433462][T20326] kmalloc_nolock_noprof+0x1be/0x440 [ 2191.433479][T20326] ? __bpf_stream_push_str+0xa8/0x2b0 [ 2191.433493][T20326] __bpf_stream_push_str+0xa8/0x2b0 [ 2191.433505][T20326] ? __asan_memcpy+0x40/0x70 [ 2191.433522][T20326] ? __pfx___bpf_stream_push_str+0x10/0x10 [ 2191.433540][T20326] bpf_stream_stage_printk+0x14e/0x1c0 [ 2191.433551][T20326] ? __pfx_find_from_stack_cb+0x10/0x10 [ 2191.433565][T20326] ? arch_bpf_stack_walk+0x112/0x170 [ 2191.433585][T20326] ? __pfx_bpf_stream_stage_printk+0x10/0x10 [ 2191.433606][T20326] bpf_prog_report_may_goto_violation+0xc4/0x190 [ 2191.433619][T20326] ? __pfx_bpf_prog_report_may_goto_violation+0x10/0x10 [ 2191.433631][T20326] ? irqentry_exit+0x5dd/0x660 [ 2191.433643][T20326] ? trace_irq_disable+0x37/0x100 [ 2191.433658][T20326] ? read_tsc+0x9/0x20 [ 2191.433672][T20326] bpf_check_timed_may_goto+0xaa/0xb0 [ 2191.433692][T20326] arch_bpf_timed_may_goto+0x21/0x40 [ 2191.433707][T20326] bpf_prog_262a74d054ad2993+0x53/0x5f [ 2191.433721][T20326] bpf_trace_run9+0x2de/0x510 [ 2191.433736][T20326] ? bpf_trace_run9+0x1ec/0x510 [ 2191.433750][T20326] ? __pfx_bpf_trace_run9+0x10/0x10 [ 2191.433762][T20326] ? _copy_from_iter+0x215/0x1630 [ 2191.433786][T20326] ? __pfx__copy_from_iter+0x10/0x10 [ 2191.433806][T20326] __bpf_trace_virtio_transport_alloc_pkt+0x2d7/0x340 [ 2191.433827][T20326] ? __pfx___bpf_trace_virtio_transport_alloc_pkt+0x10/0x10 [ 2191.433851][T20326] ? skb_copy_datagram_from_iter_full+0x122/0x170 [ 2191.433878][T20326] virtio_transport_alloc_skb+0x10af/0x1110 [ 2191.433903][T20326] ? __pfx_virtio_transport_alloc_skb+0x10/0x10 [ 2191.433921][T20326] ? __local_bh_enable_ip+0x1af/0x2c0 [ 2191.433935][T20326] ? lockdep_hardirqs_on+0x7b/0x110 [ 2191.433950][T20326] virtio_transport_send_pkt_info+0x694/0x10b0 [ 2191.433967][T20326] ? virtio_transport_send_pkt_info+0x1ea/0x10b0 [ 2191.433989][T20326] ? virtio_transport_seqpacket_enqueue+0xba/0x1f0 [ 2191.434005][T20326] virtio_transport_seqpacket_enqueue+0x166/0x1f0 [ 2191.434019][T20326] ? reacquire_held_locks+0x104/0x190 [ 2191.434038][T20326] ? __pfx_virtio_transport_seqpacket_enqueue+0x10/0x10 [ 2191.434056][T20326] ? rt_spin_unlock+0x150/0x200 [ 2191.434083][T20326] ? rt_spin_unlock+0x161/0x200 [ 2191.434112][T20326] vsock_connectible_sendmsg+0xabf/0x1040 [ 2191.434165][T20326] ? __pfx_vsock_connectible_sendmsg+0x10/0x10 [ 2191.434201][T20326] ? __pfx_woken_wake_function+0x10/0x10 [ 2191.434218][T20326] ? lockdep_hardirqs_on+0x7b/0x110 [ 2191.434230][T20326] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 2191.434245][T20326] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 2191.434260][T20326] ? __pfx_vsock_connectible_sendmsg+0x10/0x10 [ 2191.434279][T20326] __sock_sendmsg+0x21c/0x270 [ 2191.434299][T20326] ____sys_sendmsg+0x534/0x810 [ 2191.434317][T20326] ? __pfx_____sys_sendmsg+0x10/0x10 [ 2191.434345][T20326] ? import_iovec+0x74/0xa0 [ 2191.434358][T20326] ___sys_sendmsg+0x21f/0x2a0 [ 2191.434375][T20326] ? __pfx____sys_sendmsg+0x10/0x10 [ 2191.434394][T20326] ? __pfx_futex_wake_mark+0x10/0x10 [ 2191.434421][T20326] ? __fget_files+0x2a/0x420 [ 2191.434434][T20326] ? __fget_files+0x3a6/0x420 [ 2191.434452][T20326] __sys_sendmmsg+0x22d/0x430 [ 2191.434470][T20326] ? __pfx___sys_sendmmsg+0x10/0x10 [ 2191.434484][T20326] ? do_futex+0x333/0x420 [ 2191.434517][T20326] ? rcu_is_watching+0x15/0xb0 [ 2191.434533][T20326] __x64_sys_sendmmsg+0xa0/0xc0 [ 2191.434551][T20326] do_syscall_64+0xec/0xf80 [ 2191.434563][T20326] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2191.434575][T20326] ? trace_irq_disable+0x37/0x100 [ 2191.434587][T20326] ? clear_bhb_loop+0x60/0xb0 [ 2191.434602][T20326] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2191.434614][T20326] RIP: 0033:0x7f2c1285f749 [ 2191.434626][T20326] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2191.434638][T20326] RSP: 002b:00007f2c10ac6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 2191.434652][T20326] RAX: ffffffffffffffda RBX: 00007f2c12ab5fa0 RCX: 00007f2c1285f749 [ 2191.434661][T20326] RDX: 0000000000000001 RSI: 0000200000000b40 RDI: 0000000000000003 [ 2191.434670][T20326] RBP: 00007f2c128e3f91 R08: 0000000000000000 R09: 0000000000000000 [ 2191.434677][T20326] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2191.434685][T20326] R13: 00007f2c12ab6038 R14: 00007f2c12ab5fa0 R15: 00007fff24b9d828 [ 2191.434704][T20326]