last executing test programs: 19m15.04064919s ago: executing program 3 (id=463): r0 = socket$kcm(0xa, 0x2, 0x3a) sendmsg$kcm(r0, 0x0, 0x0) recvmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000880)=""/163, 0xa3}], 0x1}, 0x0) 19m14.005632755s ago: executing program 3 (id=469): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'geneve0\x00', 0x8000}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001780)={0x0, 0x0, 0x0}, 0x0) recvmsg$unix(r0, &(0x7f0000001b40)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[@rights={{0x10}}], 0x10}, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x41, &(0x7f0000000400), 0x4) 19m13.824582116s ago: executing program 3 (id=471): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0xe) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x13, 0x10, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000020000006b8a00fe00000000c7080000010000007b8af0ff00000000bda100000000000007000000f8ffffffbfa400000000000007040000f0ffffffb7020000080000fa18230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000008"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 19m13.725045643s ago: executing program 3 (id=474): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000700)=ANY=[], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB='\x00\x00\b'], 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$hidraw(&(0x7f0000000100), 0x0, 0xd02) read$hidraw(r1, 0x0, 0x0) 19m13.103448773s ago: executing program 0 (id=481): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="b800000000010104000000000000000002000000240001801400018008000100e000000108000200000000000c00028005000100000000002c0002800c00028005000100000000001400018008000100e000000108000200ac1e0001060003400000000008000740000000004c001080080003400000013308000240000000cd08000140000005ff0400"], 0xb8}}, 0x0) 19m12.925368798s ago: executing program 0 (id=483): syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f00000003c0)={0x2c, &(0x7f0000000080)=ANY=[@ANYBLOB="000008000000080482"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_ep_write(0xffffffffffffffff, 0x81, 0x1, &(0x7f00000004c0)='P') 19m12.252480696s ago: executing program 0 (id=488): bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'ghash-generic\x00'}, 0x58) syz_emit_vhci(&(0x7f0000000100)=ANY=[@ANYBLOB="041c0502544b8752af91d0a71c9fad8186948befff6bbbc24dec01d3c14dfd051d3229423b54dfa692344107b351ddcafa7821abcefdbb3a88a68fc0ee27f2c582af0a86", @ANYRES32=0x0], 0x8) 19m12.227481742s ago: executing program 0 (id=489): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0xf2, 0x30, 0x39, 0x20, 0x2c42, 0x1202, 0x8540, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0xc, 0x2, 0x2, 0xc1, 0x7f, 0xc, 0x0, [], [{{0x9, 0x5, 0x2, 0x2, 0x200, 0x2}}, {{0x9, 0x5, 0x82, 0x2, 0x200}}]}}]}}]}}, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000500)={0x44, &(0x7f0000000180)={0x40, 0x12, 0x1, "b4"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000400)={0x1c, &(0x7f00000001c0)={0x20, 0x7, 0x3, "97e703"}, 0x0, 0x0, 0x0, 0x0, 0x0}) 19m10.624272667s ago: executing program 3 (id=490): bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/net\x00') r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180000002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r6, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg(r5, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=""/4096, 0x1000}, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000004c0)={r0, 0x3, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x44) 19m10.49663624s ago: executing program 3 (id=491): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x50) r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r1, 0xf, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) socketpair$unix(0x1, 0x1, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x6, 0x17, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000218110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000000000000850000008600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7020000000000008500000017000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0xfca804a0, 0xe, 0x0, &(0x7f0000000580)="b80022ab98d1db1b883e04000000", 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 19m9.940547336s ago: executing program 0 (id=492): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f0000000a40)=ANY=[@ANYBLOB="1801000000050000000000000000ea0485000000d000"], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000340)='percpu_alloc_percpu\x00', r0}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f0000000cc0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x50) 19m9.92642634s ago: executing program 0 (id=493): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x183081, 0x0) close(r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000500)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) write$cgroup_subtree(r0, &(0x7f0000000380)=ANY=[@ANYBLOB="8fedcb5d07081196f37538e486dd6372ce22667f2c00dbf6e97158b33d4fec877f1b6d76745b686158bbcfe8875afdef0001000000ff89"], 0x280) 18m55.150978428s ago: executing program 32 (id=491): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x50) r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r1, 0xf, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) socketpair$unix(0x1, 0x1, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x6, 0x17, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000218110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000000000000850000008600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7020000000000008500000017000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0xfca804a0, 0xe, 0x0, &(0x7f0000000580)="b80022ab98d1db1b883e04000000", 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 18m54.637601069s ago: executing program 33 (id=493): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x183081, 0x0) close(r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000500)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) write$cgroup_subtree(r0, &(0x7f0000000380)=ANY=[@ANYBLOB="8fedcb5d07081196f37538e486dd6372ce22667f2c00dbf6e97158b33d4fec877f1b6d76745b686158bbcfe8875afdef0001000000ff89"], 0x280) 18m16.728091839s ago: executing program 1 (id=709): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x18, 0x3, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3}}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000007c0)=ANY=[@ANYRES32=r4, @ANYRES32=r3, @ANYBLOB='&'], 0x10) sendmsg$inet(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000bc0)=[{&(0x7f0000000080)='}', 0x1}], 0x1}, 0x2400c0b5) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r4}, &(0x7f0000000000), &(0x7f00000002c0)=r1}, 0x20) sendmsg$inet(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x1}], 0x1}, 0x0) 18m16.577719544s ago: executing program 1 (id=711): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r0}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x2, 0x4, 0x1, 0xbf22}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000500)={{r1, 0xffffffffffffffff}, &(0x7f0000000280), &(0x7f0000000400)}, 0x20) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000740), &(0x7f00000007c0), 0xffffd6c0, r2, 0x0, 0x20}, 0x38) 18m16.336293994s ago: executing program 1 (id=713): bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x1, 0xe, &(0x7f0000001100)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x0, 0x5}, 0x8, 0x10, &(0x7f0000000340)={0x0, 0xfffffffd}, 0x10}, 0x94) 18m16.291923884s ago: executing program 1 (id=714): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) 18m16.216690254s ago: executing program 1 (id=715): mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30) mount$bpf(0x200000000000, &(0x7f0000000200)='./file0\x00', 0x0, 0x206002, 0x0) mount$bpf(0x0, 0x0, 0x0, 0x140070, &(0x7f0000000340)={[], [{@seclabel}]}) 18m16.209449844s ago: executing program 1 (id=716): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000019100)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x528}, 0x1, 0x0, 0x0, 0x4000}, 0xc000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, 0x0, 0x0) sched_setattr(0x0, 0x0, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50) r3 = openat$comedi(0xffffff9c, &(0x7f0000000040)='/dev/comedi2\x00', 0xa400, 0x0) ioctl$COMEDI_DEVCONFIG(r3, 0x40946400, &(0x7f0000000140)={'c6xdigio\x00', [0xb02f, 0x7ff, 0xe2, 0x3, 0x88d3, 0x8d, 0x1007, 0x1, 0x1002, 0xffffffff, 0x200, 0x7, 0x10000009, 0x1, 0x5, 0x401, 0x8, 0x3, 0x9, 0x8e, 0x8, 0x4003, 0x7, 0xa, 0x5, 0x1, 0xb0c4, 0x8, 0xff, 0x400002, 0x4000001]}) r4 = syz_open_procfs(0x0, 0x0) pread64(r4, &(0x7f0000000080)=""/102356, 0x18fd4, 0x200) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, 0xffffffffffffffff, &(0x7f0000019080)={0xc0000000}) request_key(&(0x7f0000000140)='keyring\x00', &(0x7f00000001c0)={'syz', 0x3}, &(0x7f0000000380)='/dev/ttyS3\x00', 0xffffffffffffffff) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socketpair$nbd(0x1, 0x1, 0x0, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000900)={'bridge0\x00', @random="000000000100"}) bpf$MAP_CREATE(0x0, 0x0, 0x50) sched_getattr(0x0, &(0x7f00000190c0)={0x38}, 0x38, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000400)) r5 = socket$inet6(0xa, 0x2, 0x3a) sendmmsg$inet6(r5, &(0x7f0000000e40)=[{{&(0x7f00000000c0)={0xa, 0xfffe, 0xffffffff, @loopback={0xff00000000000000}, 0x1000101}, 0x1c, &(0x7f0000000180), 0x0, 0x0, 0x18}}], 0x1, 0x4000884) mincore(&(0x7f0000ffd000/0x1000)=nil, 0x1000, &(0x7f0000000200)=""/208) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="d336a37e3c56000000009500"/24], 0x0, 0x0, 0x0, 0x0, 0x41100}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r6}, 0x10) 18m1.008807905s ago: executing program 34 (id=716): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000019100)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x528}, 0x1, 0x0, 0x0, 0x4000}, 0xc000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, 0x0, 0x0) sched_setattr(0x0, 0x0, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50) r3 = openat$comedi(0xffffff9c, &(0x7f0000000040)='/dev/comedi2\x00', 0xa400, 0x0) ioctl$COMEDI_DEVCONFIG(r3, 0x40946400, &(0x7f0000000140)={'c6xdigio\x00', [0xb02f, 0x7ff, 0xe2, 0x3, 0x88d3, 0x8d, 0x1007, 0x1, 0x1002, 0xffffffff, 0x200, 0x7, 0x10000009, 0x1, 0x5, 0x401, 0x8, 0x3, 0x9, 0x8e, 0x8, 0x4003, 0x7, 0xa, 0x5, 0x1, 0xb0c4, 0x8, 0xff, 0x400002, 0x4000001]}) r4 = syz_open_procfs(0x0, 0x0) pread64(r4, &(0x7f0000000080)=""/102356, 0x18fd4, 0x200) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, 0xffffffffffffffff, &(0x7f0000019080)={0xc0000000}) request_key(&(0x7f0000000140)='keyring\x00', &(0x7f00000001c0)={'syz', 0x3}, &(0x7f0000000380)='/dev/ttyS3\x00', 0xffffffffffffffff) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socketpair$nbd(0x1, 0x1, 0x0, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000900)={'bridge0\x00', @random="000000000100"}) bpf$MAP_CREATE(0x0, 0x0, 0x50) sched_getattr(0x0, &(0x7f00000190c0)={0x38}, 0x38, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000400)) r5 = socket$inet6(0xa, 0x2, 0x3a) sendmmsg$inet6(r5, &(0x7f0000000e40)=[{{&(0x7f00000000c0)={0xa, 0xfffe, 0xffffffff, @loopback={0xff00000000000000}, 0x1000101}, 0x1c, &(0x7f0000000180), 0x0, 0x0, 0x18}}], 0x1, 0x4000884) mincore(&(0x7f0000ffd000/0x1000)=nil, 0x1000, &(0x7f0000000200)=""/208) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="d336a37e3c56000000009500"/24], 0x0, 0x0, 0x0, 0x0, 0x41100}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r6}, 0x10) 4m44.469803187s ago: executing program 7 (id=3875): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0xbd, 0x16, 0xf, 0x40, 0x8086, 0x110, 0xbfad, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xa0, 0x12, 0x24}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$sierra_net(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 4m40.645765406s ago: executing program 7 (id=3882): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r4, 0x0, 0x0, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x2, 0x0) sendfile(r6, r5, 0x0, 0x6) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'tunl0\x00'}) sendmsg$nl_route_sched(r0, 0x0, 0x4000010) socketpair$tipc(0x1e, 0x2, 0x0, 0x0) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000240)={0x40, 0x4, 0x2}, 0x10) ioctl$KVM_GET_STATS_FD_cpu(0xffffffffffffffff, 0xaece) socket$nl_rdma(0x10, 0x3, 0x14) syz_open_dev$I2C(&(0x7f0000000040), 0x0, 0x20000) r7 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r7, 0xc004743e, &(0x7f00000000c0)=0x4) 4m36.713826107s ago: executing program 7 (id=3894): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec85"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000400)={0x0, &(0x7f00000004c0)=""/160, 0x0, 0xa0, 0x0, 0x3, 0xe590d75b13ca84cc}, 0x28) bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000580)=@base={0x14, 0x4, 0x8, 0x6, 0x0, 0x1}, 0x50) socket$inet6(0xa, 0x80002, 0x0) r4 = socket(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r6) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r7, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@newqdisc={0x30, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x4}}]}, 0x30}}, 0x0) 4m30.730535961s ago: executing program 7 (id=3910): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000380)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) r1 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r1, &(0x7f0000000440), 0x10) listen(r1, 0x0) accept4$vsock_stream(r1, 0x0, 0x0, 0x0) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r3 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r3, &(0x7f0000000280)={0x28, 0x0, 0x0, @local}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b700000000000000"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x10) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0x8000000000}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0xfffffffffffffffc}, 0x0, 0x0) 4m29.688182742s ago: executing program 7 (id=3916): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1c759000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) setsockopt$bt_BT_POWER(r3, 0x112, 0x9, 0x0, 0x0) 4m28.640282895s ago: executing program 7 (id=3919): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x2, 0x81, 0x475, 0x4, 0x3}, 0x1c) r3 = socket(0x1e, 0x4, 0x0) r4 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x4003, 0x2, 0x81, 0x1ff, 0x1, 0x1}, 0x1c) recvmsg$unix(r4, &(0x7f0000000100)={0x0, 0x1d, &(0x7f0000000080)=[{&(0x7f0000000180)=""/254, 0xfe}], 0x1}, 0x20) sendmmsg(r4, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) recvmsg$unix(r3, 0x0, 0x20) recvmsg$unix(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000700)=""/4080, 0xff0}], 0x1}, 0x20) syz_open_dev$video4linux(&(0x7f0000000000), 0x3, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0xffffffffffffffff, 0x0, &(0x7f0000000080), &(0x7f0000000240), 0x1800, 0xffffffffffffffff, 0x0, 0x500}, 0x38) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg(r5, 0x0, 0x20000004) ioctl$FS_IOC_GETVERSION(r5, 0x80087601, &(0x7f0000000040)) syz_usb_connect(0x0, 0x24, &(0x7f00000007c0)={{0x12, 0x1, 0x0, 0x5a, 0x99, 0xe6, 0x20, 0x13d3, 0x3393, 0x6bed, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x6d, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x8f, 0x47, 0xe1}}]}}]}}, 0x0) 4m11.998050166s ago: executing program 35 (id=3919): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x2, 0x81, 0x475, 0x4, 0x3}, 0x1c) r3 = socket(0x1e, 0x4, 0x0) r4 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x4003, 0x2, 0x81, 0x1ff, 0x1, 0x1}, 0x1c) recvmsg$unix(r4, &(0x7f0000000100)={0x0, 0x1d, &(0x7f0000000080)=[{&(0x7f0000000180)=""/254, 0xfe}], 0x1}, 0x20) sendmmsg(r4, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) recvmsg$unix(r3, 0x0, 0x20) recvmsg$unix(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000700)=""/4080, 0xff0}], 0x1}, 0x20) syz_open_dev$video4linux(&(0x7f0000000000), 0x3, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0xffffffffffffffff, 0x0, &(0x7f0000000080), &(0x7f0000000240), 0x1800, 0xffffffffffffffff, 0x0, 0x500}, 0x38) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg(r5, 0x0, 0x20000004) ioctl$FS_IOC_GETVERSION(r5, 0x80087601, &(0x7f0000000040)) syz_usb_connect(0x0, 0x24, &(0x7f00000007c0)={{0x12, 0x1, 0x0, 0x5a, 0x99, 0xe6, 0x20, 0x13d3, 0x3393, 0x6bed, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x6d, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x8f, 0x47, 0xe1}}]}}]}}, 0x0) 3m7.352132316s ago: executing program 4 (id=4102): syz_emit_ethernet(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0/file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r3, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r3, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000200)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r3, 0xc02064b6, &(0x7f0000000040)={r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_SETCRTC(r3, 0xc06864a2, &(0x7f0000000400)={0x0, 0x0, r5, 0x0, 0x0, 0x1f5, 0x1, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "b4bc323ef77d1f000071849800000008dfff00"}}) r6 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r6, 0xc04064a0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r6, 0xc05064a7, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r7}) 3m6.351987019s ago: executing program 4 (id=4103): socket(0x10, 0x3, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000180)) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f00000000c0)) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x4, 0x0, 0x0, 0x41100, 0x43, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7fff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x40001e0, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mremap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000ffe000/0x1000)=nil) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000180)={0x60, 0x0, &(0x7f0000000500)=[@release={0x40046306, 0x2}, @reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48, 0x18, &(0x7f00000005c0)={@flat=@handle={0x73682a85, 0x10a, 0x1}, @flat=@handle={0x73682a85, 0x200b, 0x1}, @flat=@binder={0x73622a85, 0x101, 0x1}}, &(0x7f00000001c0)={0x0, 0x18, 0x30}}, 0x400}, @release={0x40046306, 0x2}, @register_looper], 0x0, 0x0, 0x0}) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f0000000a80)={{0x2, 0x0, @empty}, {0x0, @link_local}, 0x4a, {}, 'lo\x00'}) 3m5.233200117s ago: executing program 4 (id=4106): sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0, 0x0) r4 = fanotify_init(0xf00, 0x1000) fanotify_mark(r4, 0x105, 0x5000003a, r3, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./bus\x00', 0x42, 0x0) ioctl$SNDRV_PCM_IOCTL_HWSYNC(r5, 0x4122, 0x0) readv(r4, &(0x7f0000000c40)=[{&(0x7f0000000500)=""/169, 0xffffffa0}], 0x1) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000000000000000000001000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000280)='netlink_extack\x00', r6}, 0x10) r7 = socket(0x10, 0x3, 0x0) sendto$inet6(r7, &(0x7f0000000080)="7800000018002507b9409b14ffff00000204be04020506050e020409430009003f000c00100000000d0085a168d0bf46d32345653600648d0a0012000a000a0000005ade4a460c89b6ec0cff3959547f509058ba86c902000000004a32000400160005000a0000000000e000e218d1ddf66ed538f2523250", 0x78, 0x0, 0x0, 0x0) 3m3.230898041s ago: executing program 4 (id=4109): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r0}, 0x10) r1 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r1, &(0x7f0000000040), 0x10) listen(r1, 0x0) r2 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r2, &(0x7f0000000080), 0x10) 3m3.115043534s ago: executing program 4 (id=4110): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f0000000040)={{0x0, 0x3}}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', 0xffffffffffffffff, 0x0, 0x3}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mount(0x0, 0x0, &(0x7f0000000040)='autofs\x00', 0x0, 0x0) r3 = socket(0x10, 0x3, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000001340)={&(0x7f00000000c0)=ANY=[@ANYBLOB="4c0000001800010d00000000000000850a000000000000000500000014000500200100000000000000000100000000001c00090008000000", @ANYRES32=r3, @ANYRES16=r4], 0x4c}}, 0x40000) sendmmsg(r3, &(0x7f0000000000), 0x4000000000001f2, 0xfc) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1f, 0xf, &(0x7f0000000500)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x6}, {}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f00000000c0)='GPL\x00', 0x3, 0x0, 0x0, 0x41100, 0x12, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xebfb}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r5}, 0xc) r6 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r6, 0xc01064bd, &(0x7f0000000280)={&(0x7f00000008c0), 0xffa4}) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) sendmmsg(r7, &(0x7f00000002c0), 0x40000000000009f, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0}, 0x18) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="280500003d0007010000000000000000027c"], 0x528}, 0x1, 0x0, 0x0, 0x4000}, 0xc000) 2m58.928992392s ago: executing program 4 (id=4123): socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00') unshare(0x6a040000) r0 = socket(0x8, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(0x0, r1) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r2, &(0x7f0000000140)={0x0, 0xffffffe1, &(0x7f00000003c0)={&(0x7f0000000700)=ANY=[@ANYRES32], 0x20}, 0x1, 0x0, 0x0, 0x44040}, 0x20000800) ioctl$sock_netrom_SIOCADDRT(r0, 0x61f0, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, 0x0, 0x800) sendmsg$nl_route_sched(r0, 0x0, 0x880) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) r4 = openat$ppp(0xffffffffffffff9c, 0x0, 0xc0802, 0x0) ioctl$PPPIOCSDEBUG(r4, 0x40047440, &(0x7f0000000040)=0xcb) socket$netlink(0x10, 0x3, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000500)={0xffffffffffffffff}) recvmsg(r5, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000380), 0x0, &(0x7f0000000740)=""/235, 0xeb}, 0x0) sendmsg$tipc(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000440)="b8d3d8e48974aae5039847936746be1d81a34f9b68100dbf05177b2436f9d642df271fd6b9aa6701365ffc723899ad120c5a54b1f6fcf2fbb053e277a04d3f44e3f9bafec64080f64f103ee1de769e5e9dd8cbb68869a662eaad499c52a16f40cb3a1f6f3d5f8df14c53", 0x6a}, {&(0x7f0000000040)="8d03ca", 0x3}], 0x2, 0x0, 0x0, 0x24044840}, 0x4000000) ioctl$PPPIOCNEWUNIT(r4, 0xc004743e, &(0x7f00000000c0)) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') 2m43.272684775s ago: executing program 36 (id=4123): socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00') unshare(0x6a040000) r0 = socket(0x8, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(0x0, r1) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r2, &(0x7f0000000140)={0x0, 0xffffffe1, &(0x7f00000003c0)={&(0x7f0000000700)=ANY=[@ANYRES32], 0x20}, 0x1, 0x0, 0x0, 0x44040}, 0x20000800) ioctl$sock_netrom_SIOCADDRT(r0, 0x61f0, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, 0x0, 0x800) sendmsg$nl_route_sched(r0, 0x0, 0x880) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) r4 = openat$ppp(0xffffffffffffff9c, 0x0, 0xc0802, 0x0) ioctl$PPPIOCSDEBUG(r4, 0x40047440, &(0x7f0000000040)=0xcb) socket$netlink(0x10, 0x3, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000500)={0xffffffffffffffff}) recvmsg(r5, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000380), 0x0, &(0x7f0000000740)=""/235, 0xeb}, 0x0) sendmsg$tipc(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000440)="b8d3d8e48974aae5039847936746be1d81a34f9b68100dbf05177b2436f9d642df271fd6b9aa6701365ffc723899ad120c5a54b1f6fcf2fbb053e277a04d3f44e3f9bafec64080f64f103ee1de769e5e9dd8cbb68869a662eaad499c52a16f40cb3a1f6f3d5f8df14c53", 0x6a}, {&(0x7f0000000040)="8d03ca", 0x3}], 0x2, 0x0, 0x0, 0x24044840}, 0x4000000) ioctl$PPPIOCNEWUNIT(r4, 0xc004743e, &(0x7f00000000c0)) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') 8.996445068s ago: executing program 9 (id=4924): r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) listen(r0, 0x27f8) accept4$x25(r0, 0x0, 0x0, 0x80800) 8.002632302s ago: executing program 9 (id=4935): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x54, '\x00', 0x0, @fallback=0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB], 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000010001000900000001"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000c80)={{r0}, &(0x7f0000000c00), &(0x7f0000000c40)='%-5lx \x00'}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='tlb_flush\x00', r1}, 0x10) 7.836631629s ago: executing program 9 (id=4936): r0 = socket(0x11, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000005c0)={'gre0\x00', 0x0}) bind$packet(r0, &(0x7f0000000180)={0x11, 0x0, r2}, 0x14) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000000)=0xe9, 0x4) sendmsg$netlink(r0, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000480)=ANY=[@ANYBLOB="02011400a8dc18000e3580009f000114600000060600"], 0xdd12}], 0x1}, 0x20040051) 7.586130697s ago: executing program 9 (id=4938): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, 0x0, 0x40000) 7.476560966s ago: executing program 9 (id=4940): r0 = socket$kcm(0x10, 0x400000002, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x7, 0x2, 0x1}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4040001}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001300)=@newtfilter={0x40, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0xfff0, 0xe}, {}, {0x7}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_CLASSID={0x8, 0x1, {0x2, 0xb}}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x10}, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=@newtfilter={0x24, 0x2c, 0xd27, 0x30bd29, 0x21dfdbfc, {0x0, 0x0, 0x0, r4, {0x0, 0xf}, {}, {0x7}}}, 0x24}, 0x1, 0x0, 0x0, 0x24000014}, 0x200c4004) sendmsg$inet(r0, &(0x7f0000000100)={0x0, 0x2, &(0x7f0000000080)=[{&(0x7f0000000140)="600000002e000d190a762d7f089e", 0xfca2}, {&(0x7f0000000280)="68cabf2dfb58fc0a1d6b689866f05d490d010088a8ffff0200258f2e4409b8f9e6aaeb88bea123dc2c6726e89b1ae2f6e8bcb5ee52dcd7298d39093c510293bca0b646a3ce904f6e6b788b3204c233e60ddc", 0x52}], 0x2}, 0x0) 7.042124196s ago: executing program 9 (id=4947): r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCGIFADDR(r0, 0x8915, &(0x7f00000000c0)={'batadv_slave_1\x00', {0x2, 0x0, @initdev}}) unshare(0x6a040000) socket$inet6_sctp(0xa, 0x1, 0x84) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$pppl2tp(0x18, 0x1, 0x1) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001800010000000000000000000a000000000000000000000008000400", @ANYRES32=r3, @ANYBLOB="06001500070000000c00168008000100", @ANYRES8=r2], 0x38}}, 0x50) unshare(0x44000000) socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r4, 0x0) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r5, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x40) sendmsg$TEAM_CMD_OPTIONS_SET(r5, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x800) r6 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), r1) sendmsg$L2TP_CMD_SESSION_CREATE(r1, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000340)={&(0x7f00000001c0)={0x38, r6, 0x100, 0x70bd2c, 0x25dfdbfd, {}, [@L2TP_ATTR_IP6_DADDR={0x14, 0x20, @private1={0xfc, 0x1, '\x00', 0x5}}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e23}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x4}]}, 0x38}, 0x1, 0x0, 0x0, 0x10}, 0x4008840) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) setsockopt$inet_int(r0, 0x0, 0x13, &(0x7f0000000300)=0x7, 0x4) syz_emit_ethernet(0x2a, &(0x7f0000000080)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x8}}}}}, 0x0) 5.907022137s ago: executing program 6 (id=4956): r0 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) syz_open_dev$sndctrl(&(0x7f0000000e00), 0x0, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r1 = io_uring_setup(0x6, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0x400000c1}) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000340)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x1}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, 0x0, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r6 = syz_open_dev$sndpcmc(&(0x7f0000000480), 0x1, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_REFINE_OLD(r6, 0xc1004110, &(0x7f0000000000)={0x0, [0x6, 0xffff1337, 0x3], [{0x0, 0x0, 0x0, 0x1}, {0x35, 0x39}, {0x0, 0x8}, {0x800000, 0x800001}, {0xffff}, {0x1ff}, {0x0, 0x1000}, {}, {}, {}, {}, {0x0, 0xe68b}], 0xc}) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x20) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0x48083) getdents(0xffffffffffffffff, &(0x7f00000010c0)=""/201, 0xc9) setsockopt$netlink_NETLINK_NO_ENOBUFS(r0, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4) sendmsg$netlink(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000b00)={0x1c, 0x5a, 0x1, 0x0, 0x0, "", [@nested={0x4, 0x3ffd}, @nested={0x8, 0x2, 0x0, 0x1, [@generic="cff80291"]}]}, 0x1c}], 0x1}, 0x0) 5.391564221s ago: executing program 2 (id=4959): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x54, '\x00', 0x0, @fallback=0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="180200009b1aecb60000000000"], 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000010001000900000001"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000c80)={{r0}, &(0x7f0000000c00), &(0x7f0000000c40)='%-5lx \x00'}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='tlb_flush\x00', r1}, 0x10) 4.569816286s ago: executing program 6 (id=4960): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="010000000400000004000000"], 0x50) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0xf1) mkdir(&(0x7f00000004c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000140)='./bus\x00', &(0x7f0000000380), 0x0, &(0x7f0000000180)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x92) mknodat(r0, &(0x7f00000003c0)='./file0\x00', 0x0, 0x0) chdir(&(0x7f00000000c0)='./bus\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) mkdir(&(0x7f0000000240)='./bus\x00', 0x0) chdir(&(0x7f0000000080)='./bus\x00') renameat2(r1, &(0x7f00000001c0)='./file0\x00', r1, &(0x7f0000000200)='./bus/file0\x00', 0x0) getdents64(0xffffffffffffffff, 0x0, 0x0) r2 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents(r2, &(0x7f0000001fc0)=""/184, 0xb8) 4.569513463s ago: executing program 8 (id=4961): syz_usb_connect(0x0, 0x36, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) io_uring_setup(0x2471, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002000)=""/102400, 0x19000) write$FUSE_NOTIFY_RESEND(0xffffffffffffffff, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x80001, 0x0) 3.960706321s ago: executing program 2 (id=4963): r0 = socket(0xa, 0x5, 0x0) getsockopt$inet_int(r0, 0x0, 0x16, 0x0, &(0x7f0000000140)) 3.83558147s ago: executing program 2 (id=4964): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) socket(0xa, 0x3, 0x3a) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000000c0)={'ip6_vti0\x00', &(0x7f0000000040)={'ip6_vti0\x00', 0x0, 0x29, 0x6, 0x15, 0xffffffff, 0x0, @dev={0xfe, 0x80, '\x00', 0x32}, @dev={0xfe, 0x80, '\x00', 0x22}, 0x7, 0x700, 0x4, 0xc5}}) ioctl$sock_inet6_SIOCSIFADDR(r3, 0x8916, &(0x7f0000000100)={@remote, 0x6c, r4}) close(r3) r5 = accept4(r2, &(0x7f0000000200), &(0x7f0000000180)=0x80, 0x80000) sendmsg$nl_route(r5, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000380)={&(0x7f00000002c0)=@ipv6_getaddrlabel={0x84, 0x4a, 0x10, 0x70bd26, 0x6, {0xa, 0x0, 0x38, 0x0, r4, 0xa5}, [@IFAL_ADDRESS={0x14, 0x1, @private2={0xfc, 0x2, '\x00', 0x1}}, @IFAL_LABEL={0x8, 0x2, 0x7}, @IFAL_ADDRESS={0x14, 0x1, @private0}, @IFAL_LABEL={0x8, 0x2, 0x6}, @IFAL_ADDRESS={0x14, 0x1, @ipv4={'\x00', '\xff\xff', @multicast1}}, @IFAL_LABEL={0x8, 0x2, 0xb}, @IFAL_ADDRESS={0x14, 0x1, @remote}]}, 0x84}, 0x1, 0x0, 0x0, 0x8841}, 0x40000) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000040000000800000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r7}, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000140)={'batadv_slave_0\x00'}) sendmsg$netlink(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000005d00)={0x114, 0x2e, 0x1, 0x0, 0x25dfdbfc, "", [@nested={0x104, 0xf2, 0x0, 0x1, [@typed={0xc, 0x18, 0x0, 0x0, @u64=0xfac08}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x16}}}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a46cf26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f00ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82", @typed={0x4, 0xe9}]}]}, 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_TSINFO_GET(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)={0x20, r8, 0x6a98047402e98331, 0x0, 0x0, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x7}]}]}, 0x20}}, 0x0) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f0000000280)=0x0) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f00000002c0)=0x0) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000740)={0x2c, 0x34, 0x1, 0x70bd25, 0x25dfdbff, "", [@nested={0x1c, 0x0, 0x0, 0x1, [@typed={0x8, 0x22, 0x0, 0x0, @fd=r0}, @typed={0x8, 0x1, 0x0, 0x0, @pid=r9}, @typed={0x8, 0x2d, 0x0, 0x0, @uid=r10}]}]}, 0x2c}], 0x1, 0x0, 0x0, 0x4008000}, 0x0) r11 = epoll_create1(0x0) r12 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r12, 0x1, r11, &(0x7f00000008c0)={0x1}) epoll_ctl$EPOLL_CTL_ADD(r11, 0x1, r12, &(0x7f0000000000)) socketpair(0x1e, 0xa, 0xf, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r14 = syz_genetlink_get_family_id$tipc(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_NODES(r13, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, r14, 0x2, 0x70bd28, 0x25dfdbfe, {}, ["", "", ""]}, 0x1c}}, 0x200408c4) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000300)=@nat={'nat\x00', 0x1b, 0x5, 0x3c8, 0x288, 0x330, 0xffffffff, 0x288, 0x0, 0x330, 0x330, 0xffffffff, 0x330, 0x330, 0x5, &(0x7f0000000080), {[{{@uncond, 0x0, 0xf0, 0x128, 0x0, {}, [@common=@addrtype={{0x30}, {0x424, 0x140}}, @common=@osf={{0x50}, {'syz1\x00', 0x0, 0x9}}]}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0x6, @multicast1, @remote, @icmp_id=0x64, @port=0x4e21}}}}, {{@uncond, 0x0, 0x70, 0xb8}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x8, @ipv6=@private0={0xfc, 0x0, '\x00', 0x1}, @ipv4=@rand_addr=0x64010100, @icmp_id=0x65, @icmp_id=0x64}}}, {{@ip={@private=0xa010101, @dev={0xac, 0x14, 0x14, 0x26}, 0xffffff00, 0xffffffff, 'team_slave_1\x00', 'wlan0\x00', {0xff}, {0xff}, 0x21, 0x1, 0x40}, 0x0, 0x70, 0xa8}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x1, @remote, @dev={0xac, 0x14, 0x14, 0x33}, @icmp_id=0x67, @icmp_id=0x65}}}}, {{@ip={@empty, @loopback, 0xff000000, 0xffffff00, 'ip6gretap0\x00', 'netpci0\x00', {}, {}, 0x1d, 0x3, 0x8}, 0x0, 0x70, 0xa8}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x0, @loopback, @rand_addr=0x64010102, @port=0x4e24, @port=0x4e21}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x428) 3.411950749s ago: executing program 6 (id=4967): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x40000) 3.410486328s ago: executing program 5 (id=4968): socket$packet(0x11, 0xa, 0x300) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0xfffe}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x11}, @NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x12}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x78}, 0x1, 0x0, 0x0, 0x840}, 0x0) r1 = socket$inet6(0xa, 0x80002, 0x0) sendmmsg$inet6(r1, &(0x7f0000003cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4001c00) 3.244344631s ago: executing program 5 (id=4969): socket$packet(0x11, 0xa, 0x300) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0xfffe}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x11}, @NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x12}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x78}, 0x1, 0x0, 0x0, 0x840}, 0x0) 3.243811008s ago: executing program 6 (id=4970): r0 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) syz_open_dev$sndctrl(&(0x7f0000000e00), 0x0, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r1 = io_uring_setup(0x6, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0x400000c1}) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000340)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x1}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, 0x0, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r6 = syz_open_dev$sndpcmc(&(0x7f0000000480), 0x1, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_REFINE_OLD(r6, 0xc1004110, &(0x7f0000000000)={0x0, [0x6, 0xffff1337, 0x3], [{0x0, 0x0, 0x0, 0x1}, {0x35, 0x39}, {0x0, 0x8}, {0x800000, 0x800001}, {0xffff}, {0x1ff}, {0x0, 0x1000}, {}, {}, {}, {}, {0x0, 0xe68b}], 0xc}) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x20) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0x48083) getdents(0xffffffffffffffff, &(0x7f00000010c0)=""/201, 0xc9) setsockopt$netlink_NETLINK_NO_ENOBUFS(r0, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4) sendmsg$netlink(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000b00)={0x1c, 0x5a, 0x1, 0x0, 0x0, "", [@nested={0x4, 0x3ffd}, @nested={0x8, 0x2, 0x0, 0x1, [@generic="cff80291"]}]}, 0x1c}], 0x1}, 0x0) 3.214878247s ago: executing program 8 (id=4971): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getpid() getpid() gettid() sendmmsg$unix(r0, &(0x7f0000000440)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8801}}], 0x1, 0x0) ioctl$sock_TIOCINQ(r1, 0x541b, &(0x7f0000000100)) 3.120384142s ago: executing program 8 (id=4972): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) mount$fuse(0x0, 0x0, &(0x7f0000002100), 0x12, &(0x7f00000003c0)=ANY=[@ANYRESHEX=r0, @ANYBLOB, @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) fspick(0xffffffffffffff9c, &(0x7f00000000c0)='./file0/file1\x00', 0x1) getresuid(&(0x7f0000000100), &(0x7f0000000140), &(0x7f00000002c0)) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, 0x0, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94) socket$inet6(0xa, 0x802, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x5, &(0x7f0000000280)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000005c0)='sched_switch\x00', r1}, 0x18) prlimit64(0x0, 0xe, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bind$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, 0x0, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x14}}}, 0x1c) r4 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$ARPT_SO_GET_REVISION_TARGET(r4, 0x0, 0x63, &(0x7f0000000040)={'ipvs\x00'}, &(0x7f0000000000)=0x1e) acct(&(0x7f0000000240)='./file0/file1\x00') write$FUSE_INIT(r0, &(0x7f0000000440)={0x50, 0x0, 0x0, {0x7, 0x29, 0x80000, 0x104032, 0x2, 0x2, 0xfffffffd, 0xffffdffc, 0x0, 0x0, 0x0, 0x7ffbffff}}, 0x50) 1.613255012s ago: executing program 6 (id=4973): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r3}, 0x10) r4 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r4, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) 1.60379764s ago: executing program 8 (id=4974): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) getrusage(0x0, &(0x7f00000002c0)) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 1.600855131s ago: executing program 5 (id=4975): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(serpent)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg(r1, &(0x7f0000000d00)=[{{0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000880)="6442740e247b17bd4d19bd1c3479aa6b61e51e45a4ad19e06610cf34114ffff5fb2f594acecc29734a7acec71e4d5b3ce05bae0b340b4d2876079233eff3cc471c9d307222d237ec184324d0a6abfdbb9d3e8e408ec4bcd5deb573f5999c49f7281bdc243b62ef5f33c487dba59f52304381e9dd7f3084", 0x77}, {&(0x7f0000000940)="431892f7b6e52b6659416138702f0fd658122d85468d4d814c549c8651bbf881dcbe242abd08a5d2499bd3e24add3598d455ddec7c5ecc6bd9d67ddf174512aa1182a7381928d9e7fb20003894ed", 0x4e}], 0x2}}], 0x1, 0x4048810) recvmsg$unix(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000001f00)=""/4096, 0x1000}], 0x1}, 0x12060) 1.335339767s ago: executing program 5 (id=4976): sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0xc000) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8b19, &(0x7f0000000000)={'wlan0\x00'}) 592.038864ms ago: executing program 8 (id=4977): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="010000000400000004000000"], 0x50) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0xf1) mkdir(&(0x7f00000004c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000140)='./bus\x00', &(0x7f0000000380), 0x0, &(0x7f0000000180)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x92) mknodat(r0, &(0x7f00000003c0)='./file0\x00', 0x0, 0x0) chdir(&(0x7f00000000c0)='./bus\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) mkdir(&(0x7f0000000240)='./bus\x00', 0x0) chdir(&(0x7f0000000080)='./bus\x00') renameat2(r1, &(0x7f00000001c0)='./file0\x00', r1, &(0x7f0000000200)='./bus/file0\x00', 0x0) getdents64(0xffffffffffffffff, 0x0, 0x0) r2 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents(r2, &(0x7f0000001fc0)=""/184, 0xb8) 591.653694ms ago: executing program 6 (id=4978): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r4) r5 = socket$unix(0x1, 0x5, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000007c0)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_BURST={0x8, 0x6, 0x7f}, @TCA_TBF_PARMS={0x28, 0x1, {{0x40, 0x1, 0xfff8, 0x7, 0x8, 0x200}, {0x20, 0x1, 0xb, 0x9, 0x9}, 0x3, 0xfffffffb, 0x67}}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r9, {}, {0x2, 0xb}, {0xa, 0xfff3}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x4008000) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 491.175609ms ago: executing program 5 (id=4979): socket$packet(0x11, 0xa, 0x300) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0xfffe}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x11}, @NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x12}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x78}, 0x1, 0x0, 0x0, 0x840}, 0x0) r1 = socket$inet6(0xa, 0x80002, 0x0) sendmmsg$inet6(r1, &(0x7f0000003cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4001c00) 356.641069ms ago: executing program 2 (id=4980): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x40000) 296.186943ms ago: executing program 2 (id=4981): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000140), 0x4) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x2e}}, 0x10) ioctl$sock_SIOCINQ(r0, 0x541b, &(0x7f0000000380)) 208.395616ms ago: executing program 2 (id=4982): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000005000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) close(r0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x18, 0x6, &(0x7f00000001c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80ffffff}, [@jmp={0x5, 0x0, 0x849aee721dcc84be, 0x0, 0x0, 0x2}, @jmp={0x5, 0x0, 0xc, 0x0, 0x0, 0xfffffffffffffffc}, @jmp={0x5, 0x0, 0x8, 0x0, 0x0, 0xfffffffffffffffe, 0xd1}]}, &(0x7f00000000c0)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x10, 0x4, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0, r1, 0x0, 0xd}, 0x18) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="c0260000410007010000000007000000017c"], 0x26c0}}, 0x4010) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.net/syz0\x00', 0x200002, 0x0) mkdirat$cgroup(r4, &(0x7f0000000280)='syz1\x00', 0x1ff) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000004c0)={0x68, 0x2, 0x6, 0x5, 0x0, 0x0, {0x7}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0xffff}]}, @IPSET_ATTR_DATA={0x2c, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x2}, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x9}, @IPSET_ATTR_CIDR={0x5, 0x3, 0xc}, @IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x2}, @IPSET_ATTR_CIDR={0x5, 0x3, 0x3}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x68}, 0x1, 0x0, 0x0, 0x810}, 0x20004000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='virtio_transport_alloc_pkt\x00', r0}, 0x18) r5 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r5, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10) 56.520104ms ago: executing program 5 (id=4983): r0 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) syz_open_dev$sndctrl(&(0x7f0000000e00), 0x0, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r1 = io_uring_setup(0x6, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0x400000c1}) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000340)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x1}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, 0x0, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r6 = syz_open_dev$sndpcmc(&(0x7f0000000480), 0x1, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_REFINE_OLD(r6, 0xc1004110, &(0x7f0000000000)={0x0, [0x6, 0xffff1337, 0x3], [{0x0, 0x0, 0x0, 0x1}, {0x35, 0x39}, {0x0, 0x8}, {0x800000, 0x800001}, {0xffff}, {0x1ff}, {0x0, 0x1000}, {}, {}, {}, {}, {0x0, 0xe68b}], 0xc}) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x20) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0x48083) getdents(0xffffffffffffffff, &(0x7f00000010c0)=""/201, 0xc9) setsockopt$netlink_NETLINK_NO_ENOBUFS(r0, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4) sendmsg$netlink(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000b00)={0x1c, 0x5a, 0x1, 0x0, 0x0, "", [@nested={0x4, 0x3ffd}, @nested={0x8, 0x2, 0x0, 0x1, [@generic="cff80291"]}]}, 0x1c}], 0x1}, 0x0) 0s ago: executing program 8 (id=4984): recvmsg(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0) sendmsg$802154_dgram(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4008090}, 0x810) r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r0, 0x0, 0x0) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r1, &(0x7f0000000300)={{0x6, @rose, 0x2}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default]}, 0x48) listen(r0, 0x1ad72f7) accept4(r0, 0x0, 0x0, 0x80000) r2 = accept4$netrom(r0, 0x0, 0x0, 0x80000) writev(r2, &(0x7f00000001c0), 0x7) kernel console output (not intermixed with test programs): hcd: release socket [ 961.479564][ T1498] vhci_hcd: disconnect device [ 961.554726][T16600] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 961.974104][ T37] audit: type=1326 audit(1760505831.377:105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16724 comm="syz.5.3706" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff91b4eec9 code=0x7ffc0000 [ 961.977948][ T37] audit: type=1326 audit(1760505831.377:106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16724 comm="syz.5.3706" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff91b4eec9 code=0x7ffc0000 [ 961.977998][ T37] audit: type=1326 audit(1760505831.387:107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16724 comm="syz.5.3706" exe="/root/syz-executor" sig=0 arch=c000003e syscall=7 compat=0 ip=0x7eff91b4eec9 code=0x7ffc0000 [ 961.985560][ T37] audit: type=1326 audit(1760505831.397:108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16724 comm="syz.5.3706" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff91b4eec9 code=0x7ffc0000 [ 961.985602][ T37] audit: type=1326 audit(1760505831.397:109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16724 comm="syz.5.3706" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff91b4eec9 code=0x7ffc0000 [ 962.018798][ T37] audit: type=1326 audit(1760505831.427:110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16724 comm="syz.5.3706" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7eff91b4eec9 code=0x7ffc0000 [ 962.018849][ T37] audit: type=1326 audit(1760505831.427:111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16724 comm="syz.5.3706" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff91b4eec9 code=0x7ffc0000 [ 962.018891][ T37] audit: type=1326 audit(1760505831.427:112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16724 comm="syz.5.3706" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7eff91b4eec9 code=0x7ffc0000 [ 962.018931][ T37] audit: type=1326 audit(1760505831.427:113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16724 comm="syz.5.3706" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff91b4eec9 code=0x7ffc0000 [ 962.521862][T16600] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 962.552043][T16600] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 962.644697][T16600] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 963.189931][T16600] 8021q: adding VLAN 0 to HW filter on device bond0 [ 963.321527][T16600] 8021q: adding VLAN 0 to HW filter on device team0 [ 963.333836][T12929] bridge0: port 1(bridge_slave_0) entered blocking state [ 963.337763][T12929] bridge0: port 1(bridge_slave_0) entered forwarding state [ 963.352215][T12929] bridge0: port 2(bridge_slave_1) entered blocking state [ 963.352423][T12929] bridge0: port 2(bridge_slave_1) entered forwarding state [ 964.376698][ T44] vhci_hcd: vhci_device speed not set [ 964.509792][T16767] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3715'. [ 966.636480][ C0] vkms_vblank_simulate: vblank timer overrun [ 966.856422][ C0] vkms_vblank_simulate: vblank timer overrun [ 966.862630][T16600] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 967.029847][ C0] vkms_vblank_simulate: vblank timer overrun [ 967.325800][T14561] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 967.475792][T14561] usb 5-1: New USB device found, idVendor=8086, idProduct=0110, bcdDevice=bf.ad [ 967.475810][T14561] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 967.479454][T14561] usb 5-1: config 0 descriptor?? [ 967.518674][T14561] gspca_main: spca508-2.14.0 probing 8086:0110 [ 967.709643][T14561] gspca_spca508: reg_read err -32 [ 967.885535][ T37] kauditd_printk_skb: 7 callbacks suppressed [ 967.885553][ T37] audit: type=1326 audit(1760505837.297:121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16799 comm="syz.7.3726" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd07b94eec9 code=0x7ffc0000 [ 967.886434][ T37] audit: type=1326 audit(1760505837.297:122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16799 comm="syz.7.3726" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd07b94eec9 code=0x7ffc0000 [ 967.889206][ T37] audit: type=1326 audit(1760505837.297:123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16799 comm="syz.7.3726" exe="/root/syz-executor" sig=0 arch=c000003e syscall=7 compat=0 ip=0x7fd07b94eec9 code=0x7ffc0000 [ 967.970068][ T37] audit: type=1326 audit(1760505837.377:124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16799 comm="syz.7.3726" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd07b94eec9 code=0x7ffc0000 [ 967.996757][ T37] audit: type=1326 audit(1760505837.377:125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16799 comm="syz.7.3726" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd07b94eec9 code=0x7ffc0000 [ 968.080100][ T37] audit: type=1326 audit(1760505837.487:126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16799 comm="syz.7.3726" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fd07b94eec9 code=0x7ffc0000 [ 968.116754][T14561] gspca_spca508: reg_read err -71 [ 968.117176][T14561] gspca_spca508: reg_read err -71 [ 968.120106][ T37] audit: type=1326 audit(1760505837.527:127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16799 comm="syz.7.3726" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd07b94eec9 code=0x7ffc0000 [ 968.120169][ T37] audit: type=1326 audit(1760505837.527:128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16799 comm="syz.7.3726" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd07b94eec9 code=0x7ffc0000 [ 968.121229][ T37] audit: type=1326 audit(1760505837.527:129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16799 comm="syz.7.3726" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fd07b94eec9 code=0x7ffc0000 [ 968.121279][ T37] audit: type=1326 audit(1760505837.527:130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16799 comm="syz.7.3726" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd07b94eec9 code=0x7ffc0000 [ 968.121466][T14561] gspca_spca508: reg_read err -71 [ 968.137033][T14561] gspca_spca508: reg write: error -71 [ 968.137088][T14561] spca508 5-1:0.0: probe with driver spca508 failed with error -71 [ 968.918013][ C0] vkms_vblank_simulate: vblank timer overrun [ 969.015358][T16600] veth0_vlan: entered promiscuous mode [ 969.017623][T14561] usb 5-1: USB disconnect, device number 28 [ 969.093800][T16600] veth1_vlan: entered promiscuous mode [ 969.282029][ C0] vkms_vblank_simulate: vblank timer overrun [ 969.328582][T16600] veth0_macvtap: entered promiscuous mode [ 969.429812][T16814] netlink: 40 bytes leftover after parsing attributes in process `syz.5.3727'. [ 969.432608][ C0] vkms_vblank_simulate: vblank timer overrun [ 970.125741][T16600] veth1_macvtap: entered promiscuous mode [ 970.281496][ C0] vkms_vblank_simulate: vblank timer overrun [ 970.370013][T16600] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 970.675178][ C0] vkms_vblank_simulate: vblank timer overrun [ 971.141372][ C0] vkms_vblank_simulate: vblank timer overrun [ 971.307620][T16600] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 971.368061][T12929] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 971.369427][T12929] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 971.369908][T12929] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 971.371101][T12929] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 972.965483][T16844] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(7) [ 972.965550][T16844] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 972.967641][T16844] vhci_hcd vhci_hcd.0: Device attached [ 973.011999][ T1228] usb 8-1: new high-speed USB device number 19 using dummy_hcd [ 973.174209][ T1228] usb 8-1: Using ep0 maxpacket: 16 [ 973.209466][ T1228] usb 8-1: config 0 has no interfaces? [ 973.244321][ T5873] usb 41-1: new high-speed USB device number 6 using vhci_hcd [ 973.252930][ T1228] usb 8-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 973.252957][ T1228] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 973.252976][ T1228] usb 8-1: Product: syz [ 973.252989][ T1228] usb 8-1: Manufacturer: syz [ 973.253004][ T1228] usb 8-1: SerialNumber: syz [ 973.475984][ T1228] usb 8-1: config 0 descriptor?? [ 973.641644][T16845] vhci_hcd: connection reset by peer [ 973.670274][T12930] vhci_hcd: stop threads [ 973.670326][T12930] vhci_hcd: release socket [ 973.671799][T12930] vhci_hcd: disconnect device [ 974.214874][T16728] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 974.214895][T16728] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 974.457098][T16841] usb 8-1: USB disconnect, device number 19 [ 974.680430][T16728] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 974.680444][T16728] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 977.090451][ T5811] Bluetooth: Unexpected continuation frame (len 16) [ 978.637307][T16879] netlink: 1296 bytes leftover after parsing attributes in process `syz.4.3745'. [ 978.906906][ T5873] vhci_hcd: vhci_device speed not set [ 978.952943][ C1] vkms_vblank_simulate: vblank timer overrun [ 979.132341][ T37] kauditd_printk_skb: 10 callbacks suppressed [ 979.132359][ T37] audit: type=1326 audit(1760505848.537:141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16887 comm="syz.4.3749" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fe9b5e6eec9 code=0x0 [ 979.431135][ C1] vkms_vblank_simulate: vblank timer overrun [ 980.427003][ C1] vkms_vblank_simulate: vblank timer overrun [ 981.236505][ C1] vkms_vblank_simulate: vblank timer overrun [ 983.566718][T16841] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 983.734075][T16841] usb 3-1: Using ep0 maxpacket: 16 [ 983.756520][T16841] usb 3-1: config 0 has no interfaces? [ 983.845521][T16841] usb 3-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 983.845550][T16841] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 983.845570][T16841] usb 3-1: Product: syz [ 983.845583][T16841] usb 3-1: Manufacturer: syz [ 983.845596][T16841] usb 3-1: SerialNumber: syz [ 983.851208][T16841] usb 3-1: config 0 descriptor?? [ 985.700188][ T5873] usb 3-1: USB disconnect, device number 38 [ 986.578478][T16940] netlink: 1296 bytes leftover after parsing attributes in process `syz.6.3759'. [ 986.752957][ C1] vkms_vblank_simulate: vblank timer overrun [ 987.005119][ C1] vkms_vblank_simulate: vblank timer overrun [ 987.443508][ T37] audit: type=1326 audit(1760505856.847:142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16954 comm="syz.5.3765" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7eff91b4eec9 code=0x0 [ 987.938246][ C1] vkms_vblank_simulate: vblank timer overrun [ 989.194615][ C1] vkms_vblank_simulate: vblank timer overrun [ 989.322153][T16973] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3770'. [ 990.030309][ C1] vkms_vblank_simulate: vblank timer overrun [ 990.293816][ C1] vkms_vblank_simulate: vblank timer overrun [ 990.423023][T16981] netlink: 1296 bytes leftover after parsing attributes in process `syz.2.3774'. [ 991.137350][ C1] vkms_vblank_simulate: vblank timer overrun [ 991.188642][ C1] vkms_vblank_simulate: vblank timer overrun [ 991.590773][ C1] vkms_vblank_simulate: vblank timer overrun [ 992.540849][ C1] vkms_vblank_simulate: vblank timer overrun [ 992.750608][ C1] vkms_vblank_simulate: vblank timer overrun [ 992.895008][ C1] vkms_vblank_simulate: vblank timer overrun [ 993.113612][ T1319] ieee802154 phy0 wpan0: encryption failed: -22 [ 993.113680][ T1319] ieee802154 phy1 wpan1: encryption failed: -22 [ 993.262246][ T37] audit: type=1326 audit(1760505862.667:143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16994 comm="syz.5.3778" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff91b4eec9 code=0x7ffc0000 [ 993.262298][ T37] audit: type=1326 audit(1760505862.667:144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16994 comm="syz.5.3778" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff91b4eec9 code=0x7ffc0000 [ 993.264493][ T37] audit: type=1326 audit(1760505862.677:145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16994 comm="syz.5.3778" exe="/root/syz-executor" sig=0 arch=c000003e syscall=7 compat=0 ip=0x7eff91b4eec9 code=0x7ffc0000 [ 993.316365][ T37] audit: type=1326 audit(1760505862.687:146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16994 comm="syz.5.3778" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff91b4eec9 code=0x7ffc0000 [ 993.367419][ T37] audit: type=1326 audit(1760505862.727:147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16994 comm="syz.5.3778" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7eff91b4eec9 code=0x7ffc0000 [ 993.367453][ T37] audit: type=1326 audit(1760505862.777:148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16994 comm="syz.5.3778" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff91b4eec9 code=0x7ffc0000 [ 993.367476][ T37] audit: type=1326 audit(1760505862.777:149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16994 comm="syz.5.3778" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff91b4eec9 code=0x7ffc0000 [ 993.368238][ T37] audit: type=1326 audit(1760505862.777:150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16994 comm="syz.5.3778" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7eff91b4eec9 code=0x7ffc0000 [ 993.368266][ T37] audit: type=1326 audit(1760505862.777:151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16994 comm="syz.5.3778" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff91b4eec9 code=0x7ffc0000 [ 993.368520][ T37] audit: type=1326 audit(1760505862.777:152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16994 comm="syz.5.3778" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7eff91b4eec9 code=0x7ffc0000 [ 993.527738][ C1] vkms_vblank_simulate: vblank timer overrun [ 993.810492][T17000] tipc: Started in network mode [ 993.810524][T17000] tipc: Node identity ac14140f, cluster identity 4711 [ 993.810858][T17000] tipc: New replicast peer: 255.255.255.255 [ 993.811815][T17000] tipc: Enabled bearer , priority 10 [ 994.274070][ C1] vkms_vblank_simulate: vblank timer overrun [ 995.355127][ C1] vkms_vblank_simulate: vblank timer overrun [ 995.439933][ C1] vkms_vblank_simulate: vblank timer overrun [ 995.440642][T16390] tipc: Node number set to 2886997007 [ 995.681595][ C1] vkms_vblank_simulate: vblank timer overrun [ 996.323118][ C1] vkms_vblank_simulate: vblank timer overrun [ 996.659487][ C1] vkms_vblank_simulate: vblank timer overrun [ 997.506323][ C1] vkms_vblank_simulate: vblank timer overrun [ 997.614122][T14561] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 997.670400][T17042] tipc: Started in network mode [ 997.670419][T17042] tipc: Node identity ac14140f, cluster identity 4711 [ 997.670680][T17042] tipc: New replicast peer: 255.255.255.255 [ 997.671236][T17042] tipc: Enabled bearer , priority 10 [ 997.764117][T14561] usb 5-1: Using ep0 maxpacket: 16 [ 997.766579][T14561] usb 5-1: config 0 has no interfaces? [ 997.784938][T14561] usb 5-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 997.784984][T14561] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 997.785003][T14561] usb 5-1: Product: syz [ 997.785016][T14561] usb 5-1: Manufacturer: syz [ 997.785027][T14561] usb 5-1: SerialNumber: syz [ 997.790587][T14561] usb 5-1: config 0 descriptor?? [ 998.002999][T17052] fuse: Bad value for 'fd' [ 998.011713][ C1] vkms_vblank_simulate: vblank timer overrun [ 998.169379][ C1] vkms_vblank_simulate: vblank timer overrun [ 998.412305][ C1] vkms_vblank_simulate: vblank timer overrun [ 998.451763][T16390] usb 5-1: USB disconnect, device number 29 [ 998.704266][ C1] vkms_vblank_simulate: vblank timer overrun [ 998.724099][T10675] tipc: Node number set to 2886997007 [ 998.912219][T17073] tipc: Enabling of bearer rejected, already enabled [ 999.022203][ C1] vkms_vblank_simulate: vblank timer overrun [ 999.722506][ C1] vkms_vblank_simulate: vblank timer overrun [ 999.841021][T17082] fuse: Bad value for 'fd' [ 999.935954][ C1] vkms_vblank_simulate: vblank timer overrun [ 999.971730][ T37] kauditd_printk_skb: 9 callbacks suppressed [ 999.971748][ T37] audit: type=1326 audit(1760505869.377:162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17083 comm="syz.5.3811" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7eff91b4eec9 code=0x0 [ 1000.017549][ C1] vkms_vblank_simulate: vblank timer overrun [ 1000.054123][T17086] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(7) [ 1000.054144][T17086] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 1000.054203][T17086] vhci_hcd vhci_hcd.0: Device attached [ 1000.424484][T16390] usb 43-1: new high-speed USB device number 4 using vhci_hcd [ 1000.687822][T17087] vhci_hcd: connection reset by peer [ 1000.688931][T12934] vhci_hcd: stop threads [ 1000.688947][T12934] vhci_hcd: release socket [ 1000.689160][T12934] vhci_hcd: disconnect device [ 1000.966100][ C1] vkms_vblank_simulate: vblank timer overrun [ 1001.305867][ C1] vkms_vblank_simulate: vblank timer overrun [ 1001.883694][ C1] vkms_vblank_simulate: vblank timer overrun [ 1001.962104][ C1] vkms_vblank_simulate: vblank timer overrun [ 1002.672989][ C1] vkms_vblank_simulate: vblank timer overrun [ 1002.755687][T17112] kvm: kvm [17111]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc1) = 0x1b4000000000 [ 1002.774831][T17112] kvm: kvm [17111]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x11e) = 0xe00000000000 [ 1002.775466][T17112] kvm: kvm [17111]: vcpu0, guest rIP: 0x1b8 Unhandled WRMSR(0x11e) = 0xbe702111 [ 1002.844289][T14561] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 1002.901582][ C1] vkms_vblank_simulate: vblank timer overrun [ 1003.042964][T17126] fuse: Bad value for 'fd' [ 1003.393368][ C1] vkms_vblank_simulate: vblank timer overrun [ 1003.581863][ T37] audit: type=1800 audit(1760505872.767:163): pid=17129 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.6.3825" name="SYSV00000000" dev="tmpfs" ino=0 res=0 errno=0 [ 1003.594135][T14561] usb 6-1: Using ep0 maxpacket: 16 [ 1003.608520][T14561] usb 6-1: config 0 has no interfaces? [ 1003.617754][T14561] usb 6-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 1003.617781][T14561] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1003.617798][T14561] usb 6-1: Product: syz [ 1003.617811][T14561] usb 6-1: Manufacturer: syz [ 1003.617823][T14561] usb 6-1: SerialNumber: syz [ 1003.636860][T14561] usb 6-1: config 0 descriptor?? [ 1004.117977][ C1] vkms_vblank_simulate: vblank timer overrun [ 1005.139147][T17151] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3829'. [ 1005.859830][T16390] vhci_hcd: vhci_device speed not set [ 1005.862056][ T44] usb 6-1: USB disconnect, device number 18 [ 1005.921634][T17161] fuse: Bad value for 'fd' [ 1009.340389][ T37] audit: type=1800 audit(1760505878.747:164): pid=17172 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.7.3840" name="SYSV00000000" dev="tmpfs" ino=2 res=0 errno=0 [ 1009.464107][T14561] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 1010.395918][T14561] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1010.395955][T14561] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1010.399506][T14561] usb 5-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 1010.399533][T14561] usb 5-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 1010.399552][T14561] usb 5-1: Manufacturer: syz [ 1010.427450][T14561] usb 5-1: config 0 descriptor?? [ 1010.759958][T14561] usb 5-1: can't set config #0, error -71 [ 1010.772249][T14561] usb 5-1: USB disconnect, device number 30 [ 1011.174181][T17205] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3848'. [ 1011.828432][ C0] vkms_vblank_simulate: vblank timer overrun [ 1013.305748][ T5811] Bluetooth: Unexpected continuation frame (len 16) [ 1013.466869][T14561] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 1013.596466][ C0] vkms_vblank_simulate: vblank timer overrun [ 1013.876371][ C0] vkms_vblank_simulate: vblank timer overrun [ 1013.888904][ T1228] usb 8-1: new full-speed USB device number 20 using dummy_hcd [ 1013.918181][ T37] audit: type=1800 audit(1760505883.327:165): pid=17217 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.5.3855" name="SYSV00000000" dev="tmpfs" ino=0 res=0 errno=0 [ 1014.035135][ T1228] usb 8-1: no configurations [ 1014.035154][ T1228] usb 8-1: can't read configurations, error -22 [ 1014.058191][T14561] usb 3-1: New USB device found, idVendor=8086, idProduct=0110, bcdDevice=bf.ad [ 1014.058210][T14561] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1014.109693][T14561] usb 3-1: config 0 descriptor?? [ 1014.130854][T14561] gspca_main: spca508-2.14.0 probing 8086:0110 [ 1014.174574][ T1228] usb 8-1: new full-speed USB device number 21 using dummy_hcd [ 1014.783202][T14561] gspca_spca508: reg_read err -110 [ 1014.791164][T14561] gspca_spca508: reg_read err -32 [ 1014.800916][ T1228] usb 8-1: no configurations [ 1014.800933][ T1228] usb 8-1: can't read configurations, error -22 [ 1014.801434][ T1228] usb usb8-port1: attempt power cycle [ 1014.839369][T14561] gspca_spca508: reg_read err -32 [ 1014.861001][T14561] gspca_spca508: reg_read err -32 [ 1014.861749][T14561] gspca_spca508: reg_read err -32 [ 1014.862025][ C0] raw-gadget.0 gadget.2: ignoring, device is not running [ 1014.862156][T14561] gspca_spca508: reg write: error -32 [ 1014.862242][T14561] spca508 3-1:0.0: probe with driver spca508 failed with error -32 [ 1014.876125][T14561] usb 3-1: USB disconnect, device number 39 [ 1015.294156][ T1228] usb 8-1: new full-speed USB device number 22 using dummy_hcd [ 1015.401500][ C0] vkms_vblank_simulate: vblank timer overrun [ 1015.901162][ T1228] usb 8-1: no configurations [ 1015.901182][ T1228] usb 8-1: can't read configurations, error -22 [ 1015.944667][ T5811] Bluetooth: hci2: command 0x0406 tx timeout [ 1016.075205][ C0] vkms_vblank_simulate: vblank timer overrun [ 1016.144192][ T1228] usb 8-1: new full-speed USB device number 23 using dummy_hcd [ 1016.280065][ T1228] usb 8-1: device descriptor read/8, error -71 [ 1016.384533][ T1228] usb usb8-port1: unable to enumerate USB device [ 1018.216414][T17256] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3864'. [ 1018.824943][ C0] vkms_vblank_simulate: vblank timer overrun [ 1019.829521][ C0] vkms_vblank_simulate: vblank timer overrun [ 1019.831378][T17222] Bluetooth: hci2: ACL packet for unknown connection handle 200 [ 1020.508617][ C0] vkms_vblank_simulate: vblank timer overrun [ 1020.926382][ C0] vkms_vblank_simulate: vblank timer overrun [ 1021.077889][ C0] vkms_vblank_simulate: vblank timer overrun [ 1021.205088][ C0] vkms_vblank_simulate: vblank timer overrun [ 1022.121834][ C0] vkms_vblank_simulate: vblank timer overrun [ 1022.254094][ T1228] usb 3-1: new full-speed USB device number 40 using dummy_hcd [ 1022.254260][T14561] usb 8-1: new high-speed USB device number 24 using dummy_hcd [ 1022.405233][ T1228] usb 3-1: no configurations [ 1022.405252][ T1228] usb 3-1: can't read configurations, error -22 [ 1022.430356][T14561] usb 8-1: New USB device found, idVendor=8086, idProduct=0110, bcdDevice=bf.ad [ 1022.430373][T14561] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1022.462172][T14561] usb 8-1: config 0 descriptor?? [ 1022.476078][T14561] gspca_main: spca508-2.14.0 probing 8086:0110 [ 1022.534111][ T1228] usb 3-1: new full-speed USB device number 41 using dummy_hcd [ 1022.682078][T14561] gspca_spca508: reg_read err -32 [ 1022.692251][T14561] gspca_spca508: reg_read err -32 [ 1022.705142][ T1228] usb 3-1: no configurations [ 1022.705161][ T1228] usb 3-1: can't read configurations, error -22 [ 1022.705838][ T1228] usb usb3-port1: attempt power cycle [ 1022.729531][T14561] gspca_spca508: reg_read err -32 [ 1022.749792][T14561] gspca_spca508: reg_read err -71 [ 1022.751232][T14561] gspca_spca508: reg_read err -71 [ 1022.767962][T14561] gspca_spca508: reg write: error -71 [ 1022.768079][T14561] spca508 8-1:0.0: probe with driver spca508 failed with error -71 [ 1022.789584][T14561] usb 8-1: USB disconnect, device number 24 [ 1023.054134][ T1228] usb 3-1: new full-speed USB device number 42 using dummy_hcd [ 1023.075443][ T1228] usb 3-1: no configurations [ 1023.075455][ T1228] usb 3-1: can't read configurations, error -22 [ 1023.279232][ T1228] usb 3-1: new full-speed USB device number 43 using dummy_hcd [ 1023.305675][ T1228] usb 3-1: no configurations [ 1023.305695][ T1228] usb 3-1: can't read configurations, error -22 [ 1023.306119][ T1228] usb usb3-port1: unable to enumerate USB device [ 1024.215599][ C0] vkms_vblank_simulate: vblank timer overrun [ 1025.385346][ C0] vkms_vblank_simulate: vblank timer overrun [ 1025.386319][T17222] Bluetooth: hci5: ACL packet for unknown connection handle 200 [ 1025.735773][T17304] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3880'. [ 1026.278167][ C0] vkms_vblank_simulate: vblank timer overrun [ 1026.610595][ C0] vkms_vblank_simulate: vblank timer overrun [ 1027.174298][ C0] vkms_vblank_simulate: vblank timer overrun [ 1028.292784][T17222] Bluetooth: Unexpected continuation frame (len 16) [ 1031.514955][T17346] netlink: 64 bytes leftover after parsing attributes in process `syz.4.3897'. [ 1031.621207][T17348] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3894'. [ 1031.847992][T16841] usb 7-1: new full-speed USB device number 5 using dummy_hcd [ 1032.135776][T16841] usb 7-1: no configurations [ 1032.135796][T16841] usb 7-1: can't read configurations, error -22 [ 1032.294911][T14561] usb 3-1: new high-speed USB device number 44 using dummy_hcd [ 1032.941170][T16841] usb 7-1: new full-speed USB device number 6 using dummy_hcd [ 1033.084338][T14561] usb 3-1: Using ep0 maxpacket: 16 [ 1033.096716][T14561] usb 3-1: config 0 has no interfaces? [ 1033.114408][T14561] usb 3-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 1033.114434][T14561] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1033.114454][T14561] usb 3-1: Product: syz [ 1033.114468][T14561] usb 3-1: Manufacturer: syz [ 1033.114481][T14561] usb 3-1: SerialNumber: syz [ 1033.121808][T14561] usb 3-1: config 0 descriptor?? [ 1033.815641][T17222] Bluetooth: hci3: ACL packet for unknown connection handle 200 [ 1034.882982][T17372] netlink: 'syz.5.3904': attribute type 4 has an invalid length. [ 1034.929828][T10675] usb 3-1: USB disconnect, device number 44 [ 1035.154325][ T37] audit: type=1326 audit(1760505904.567:166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17376 comm="syz.6.3906" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f98a55aeec9 code=0x0 [ 1035.509277][T17388] netlink: 64 bytes leftover after parsing attributes in process `syz.4.3909'. [ 1035.608898][T17389] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(8) [ 1035.609149][T17389] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 1035.633381][T17389] vhci_hcd vhci_hcd.0: Device attached [ 1035.918281][T10675] usb 45-1: new high-speed USB device number 2 using vhci_hcd [ 1036.187959][T17392] vhci_hcd: connection reset by peer [ 1036.188636][ T9124] vhci_hcd: stop threads [ 1036.188652][ T9124] vhci_hcd: release socket [ 1036.188726][ T9124] vhci_hcd: disconnect device [ 1039.218901][ T5873] usb 8-1: new high-speed USB device number 25 using dummy_hcd [ 1040.654082][ T5873] usb 8-1: Using ep0 maxpacket: 32 [ 1041.044238][T10675] vhci_hcd: vhci_device speed not set [ 1041.639452][T17443] netlink: 64 bytes leftover after parsing attributes in process `syz.5.3925'. [ 1041.774464][T16390] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 1041.924734][T16390] usb 7-1: Using ep0 maxpacket: 16 [ 1042.384988][T16390] usb 7-1: config 0 has no interfaces? [ 1042.410923][T16390] usb 7-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 1042.410952][T16390] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1042.410971][T16390] usb 7-1: Product: syz [ 1042.410985][T16390] usb 7-1: Manufacturer: syz [ 1042.410998][T16390] usb 7-1: SerialNumber: syz [ 1042.449883][T16390] usb 7-1: config 0 descriptor?? [ 1042.974608][T17455] syzkaller0: entered promiscuous mode [ 1042.974627][T17455] syzkaller0: entered allmulticast mode [ 1043.041558][T14561] usb 7-1: USB disconnect, device number 7 [ 1043.166731][T17458] fuse: Bad value for 'fd' [ 1048.545056][T17491] fuse: Bad value for 'fd' [ 1049.602184][T17504] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3945'. [ 1050.107565][T17222] Bluetooth: Unexpected continuation frame (len 16) [ 1052.817129][ T37] audit: type=1326 audit(1760505922.227:167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17513 comm="syz.2.3951" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fafe40beec9 code=0x7ffc0000 [ 1052.817182][ T37] audit: type=1326 audit(1760505922.227:168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17513 comm="syz.2.3951" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fafe40beec9 code=0x7ffc0000 [ 1052.820744][ T37] audit: type=1326 audit(1760505922.227:169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17513 comm="syz.2.3951" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7fafe40beec9 code=0x7ffc0000 [ 1052.820795][ T37] audit: type=1326 audit(1760505922.227:170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17513 comm="syz.2.3951" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fafe40beec9 code=0x7ffc0000 [ 1052.820839][ T37] audit: type=1326 audit(1760505922.227:171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17513 comm="syz.2.3951" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7fafe40beec9 code=0x7ffc0000 [ 1052.820881][ T37] audit: type=1326 audit(1760505922.227:172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17513 comm="syz.2.3951" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fafe40beec9 code=0x7ffc0000 [ 1052.820925][ T37] audit: type=1326 audit(1760505922.227:173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17513 comm="syz.2.3951" exe="/root/syz-executor" sig=0 arch=c000003e syscall=431 compat=0 ip=0x7fafe40beec9 code=0x7ffc0000 [ 1052.820967][ T37] audit: type=1326 audit(1760505922.227:174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17513 comm="syz.2.3951" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fafe40beec9 code=0x7ffc0000 [ 1052.821011][ T37] audit: type=1326 audit(1760505922.227:175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17513 comm="syz.2.3951" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fafe40beec9 code=0x7ffc0000 [ 1052.821054][ T37] audit: type=1326 audit(1760505922.227:176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17513 comm="syz.2.3951" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fafe40beec9 code=0x7ffc0000 [ 1052.838232][ T5873] usb 8-1: New USB device found, idVendor=13d3, idProduct=3393, bcdDevice=6b.ed [ 1052.838261][ T5873] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1052.838285][ T5873] usb 8-1: Product: syz [ 1052.838298][ T5873] usb 8-1: Manufacturer: syz [ 1052.885883][ T5873] usb 8-1: config 0 descriptor?? [ 1053.109308][ T5873] usb 8-1: can't set config #0, error -32 [ 1054.031961][ T5873] usb 8-1: USB disconnect, device number 25 [ 1054.711064][ T1319] ieee802154 phy0 wpan0: encryption failed: -22 [ 1054.711139][ T1319] ieee802154 phy1 wpan1: encryption failed: -22 [ 1055.504108][ T5873] usb 3-1: new full-speed USB device number 45 using dummy_hcd [ 1055.683787][ T5873] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1055.683802][ T5873] usb 3-1: config 0 has no interfaces? [ 1055.696182][ T5873] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1055.696208][ T5873] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1055.696218][ T5873] usb 3-1: Product: syz [ 1055.696225][ T5873] usb 3-1: Manufacturer: syz [ 1055.696232][ T5873] usb 3-1: SerialNumber: syz [ 1055.733819][ T5873] usb 3-1: config 0 descriptor?? [ 1056.039026][ T5811] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1056.043218][ T5811] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1056.061847][ T5811] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1056.071487][ T5811] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1056.073424][ T5811] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1058.252458][ T5811] Bluetooth: hci4: command tx timeout [ 1058.328026][ T5873] usb 3-1: USB disconnect, device number 45 [ 1058.764489][T17544] chnl_net:caif_netlink_parms(): no params data found [ 1061.334067][ T5811] Bluetooth: hci4: command tx timeout [ 1062.114102][ T5871] usb 5-1: new full-speed USB device number 31 using dummy_hcd [ 1063.058460][ T5871] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1063.058485][ T5871] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1063.062012][ T5871] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1063.062041][ T5871] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1063.062059][ T5871] usb 5-1: Product: syz [ 1063.062073][ T5871] usb 5-1: Manufacturer: syz [ 1063.062086][ T5871] usb 5-1: SerialNumber: syz [ 1063.083465][ T5871] usb 5-1: config 0 descriptor?? [ 1063.311227][T17615] netlink: 'syz.6.3981': attribute type 1 has an invalid length. [ 1063.311254][T17615] netlink: 32 bytes leftover after parsing attributes in process `syz.6.3981'. [ 1063.355675][ T5811] Bluetooth: hci4: command tx timeout [ 1063.925272][T12930] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1064.264610][T17628] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 1065.083103][T14561] usb 5-1: USB disconnect, device number 31 [ 1065.434250][ T5811] Bluetooth: hci4: command tx timeout [ 1066.025811][T12930] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1066.081291][T17544] bridge0: port 1(bridge_slave_0) entered blocking state [ 1066.081476][T17544] bridge0: port 1(bridge_slave_0) entered disabled state [ 1066.081791][T17544] bridge_slave_0: entered allmulticast mode [ 1066.119358][T17544] bridge_slave_0: entered promiscuous mode [ 1066.485341][T17644] bond1: (slave ip6gretap1): Enslaving as an active interface with an up link [ 1066.556639][T17645] bond1 (unregistering): (slave ip6gretap1): Releasing backup interface [ 1066.627233][T17645] bond1 (unregistering): Released all slaves [ 1066.685091][T17544] bridge0: port 2(bridge_slave_1) entered blocking state [ 1066.685201][T17544] bridge0: port 2(bridge_slave_1) entered disabled state [ 1066.685396][T17544] bridge_slave_1: entered allmulticast mode [ 1066.687271][T17544] bridge_slave_1: entered promiscuous mode [ 1067.431169][T12930] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1067.647381][T17660] netlink: 48 bytes leftover after parsing attributes in process `syz.5.3995'. [ 1068.094131][T16841] usb 7-1: new full-speed USB device number 8 using dummy_hcd [ 1068.150736][T12930] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1068.918116][T16841] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1068.918151][T16841] usb 7-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1068.946028][T16841] usb 7-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1068.946167][T16841] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1068.946191][T16841] usb 7-1: Product: syz [ 1068.946207][T16841] usb 7-1: Manufacturer: syz [ 1068.946223][T16841] usb 7-1: SerialNumber: syz [ 1068.953464][T16841] usb 7-1: config 0 descriptor?? [ 1069.119958][T17660] netlink: 48 bytes leftover after parsing attributes in process `syz.5.3995'. [ 1069.139754][T17544] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1069.158706][T17544] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1069.811834][ T37] kauditd_printk_skb: 5 callbacks suppressed [ 1069.811895][ T37] audit: type=1326 audit(1760505939.217:182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17675 comm="syz.5.4003" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7eff91b4eec9 code=0x0 [ 1070.340424][T17680] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(8) [ 1070.340450][T17680] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 1070.347744][T17680] vhci_hcd vhci_hcd.0: Device attached [ 1070.588078][T17681] vhci_hcd: connection closed [ 1070.588555][T12944] vhci_hcd: stop threads [ 1070.588569][T12944] vhci_hcd: release socket [ 1070.589554][T12944] vhci_hcd: disconnect device [ 1070.635681][ T5871] vhci_hcd: vhci_device speed not set [ 1071.489234][T14561] usb 7-1: USB disconnect, device number 8 [ 1072.790231][T17544] team0: Port device team_slave_0 added [ 1072.843114][T17544] team0: Port device team_slave_1 added [ 1073.968963][T17544] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1073.968980][T17544] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1073.969006][T17544] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1073.976843][T17544] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1073.976858][T17544] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1073.976882][T17544] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1074.885115][ T1228] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 1074.982557][T17713] netlink: 48 bytes leftover after parsing attributes in process `syz.4.4012'. [ 1075.285662][ T1228] usb 6-1: Using ep0 maxpacket: 16 [ 1075.287967][ T1228] usb 6-1: config 0 has no interfaces? [ 1075.295817][ T1228] usb 6-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 1075.295842][ T1228] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1075.295860][ T1228] usb 6-1: Product: syz [ 1075.295874][ T1228] usb 6-1: Manufacturer: syz [ 1075.295887][ T1228] usb 6-1: SerialNumber: syz [ 1075.304892][ T1228] usb 6-1: config 0 descriptor?? [ 1075.383497][T17713] netlink: 48 bytes leftover after parsing attributes in process `syz.4.4012'. [ 1075.440773][T17544] hsr_slave_0: entered promiscuous mode [ 1075.451679][T17544] hsr_slave_1: entered promiscuous mode [ 1075.452791][T17544] debugfs: 'hsr0' already exists in 'hsr' [ 1075.452815][T17544] Cannot create hsr debugfs directory [ 1075.650198][ T37] audit: type=1326 audit(1760505945.057:183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17725 comm="syz.4.4017" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fe9b5e6eec9 code=0x0 [ 1075.794784][T17733] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(8) [ 1075.794810][T17733] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 1075.797507][T17733] vhci_hcd vhci_hcd.0: Device attached [ 1075.857614][ T1228] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 1075.921607][T16390] usb 6-1: USB disconnect, device number 19 [ 1076.034138][T10675] usb 41-1: new high-speed USB device number 7 using vhci_hcd [ 1076.046181][ T1228] usb 7-1: config 220 has an invalid interface number: 76 but max is 2 [ 1076.046206][ T1228] usb 7-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 1076.046224][ T1228] usb 7-1: config 220 has no interface number 2 [ 1076.046300][ T1228] usb 7-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 1076.046326][ T1228] usb 7-1: config 220 interface 0 has no altsetting 0 [ 1076.046343][ T1228] usb 7-1: config 220 interface 76 has no altsetting 0 [ 1076.046360][ T1228] usb 7-1: config 220 interface 1 has no altsetting 0 [ 1076.048879][ T1228] usb 7-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 1076.048905][ T1228] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1076.048931][ T1228] usb 7-1: Product: syz [ 1076.048944][ T1228] usb 7-1: Manufacturer: syz [ 1076.048957][ T1228] usb 7-1: SerialNumber: syz [ 1076.480375][T17734] vhci_hcd: connection reset by peer [ 1076.481081][T12927] vhci_hcd: stop threads [ 1076.481096][T12927] vhci_hcd: release socket [ 1076.481169][T12927] vhci_hcd: disconnect device [ 1076.719245][ T1228] usb 7-1: selecting invalid altsetting 0 [ 1076.723221][ T1228] uvcvideo 7-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 1076.723279][ T1228] uvcvideo 7-1:220.0: No valid video chain found. [ 1076.733046][ T1228] usb 7-1: selecting invalid altsetting 0 [ 1076.733081][ T1228] usbtest 7-1:220.1: probe with driver usbtest failed with error -22 [ 1076.737252][ T1228] usb 7-1: USB disconnect, device number 9 [ 1076.945625][T17748] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 1076.945659][T17748] comedi comedi3: 8255: I/O port conflict (0x2,4) [ 1076.945709][T17748] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 1076.945783][T17748] comedi comedi3: 8255: I/O port conflict (0x5c942399,4) [ 1076.945811][T17748] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 1076.945836][T17748] comedi comedi3: 8255: I/O port conflict (0x3ff,4) [ 1076.945906][T17748] comedi comedi3: 8255: I/O port conflict (0xb,4) [ 1076.945935][T17748] comedi comedi3: 8255: I/O port conflict (0x200001,4) [ 1076.946073][T17748] comedi comedi3: 8255: I/O port conflict (0x9,4) [ 1076.946127][T17748] comedi comedi3: 8255: I/O port conflict (0x4,4) [ 1076.946153][T17748] comedi comedi3: 8255: I/O port conflict (0x4,4) [ 1076.946178][T17748] comedi comedi3: 8255: I/O port conflict (0x4,4) [ 1076.946228][T17748] comedi comedi3: 8255: I/O port conflict (0xffffffff80000089,4) [ 1076.946254][T17748] comedi comedi3: 8255: I/O port conflict (0xfffffffffffffffd,4) [ 1076.946279][T17748] comedi comedi3: 8255: I/O port conflict (0x20000000,4) [ 1076.946488][T17748] comedi comedi3: 8255: I/O port conflict (0x3,4) [ 1076.946516][T17748] comedi comedi3: 8255: I/O port conflict (0x3,4) [ 1076.946592][T17748] comedi comedi3: 8255: I/O port conflict (0x4,4) [ 1076.946620][T17748] comedi comedi3: 8255: I/O port conflict (0x3,4) [ 1076.946645][T17748] comedi comedi3: 8255: I/O port conflict (0xffffffffdffffffd,4) [ 1077.114327][T17222] Bluetooth: hci0: command 0x0406 tx timeout [ 1081.184148][T10675] vhci_hcd: vhci_device speed not set [ 1082.690044][T12930] bond0 (unregistering): Released all slaves [ 1082.700601][T12930] bond1 (unregistering): Released all slaves [ 1082.830978][T17764] netlink: 48 bytes leftover after parsing attributes in process `syz.4.4026'. [ 1082.845276][T17764] netlink: 48 bytes leftover after parsing attributes in process `syz.4.4026'. [ 1082.880174][T12930] tipc: Disabling bearer [ 1082.880381][T12930] tipc: Left network mode [ 1083.119595][T17759] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1083.119693][T17759] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 1083.189782][ T37] audit: type=1326 audit(1760505952.597:184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17781 comm="syz.2.4032" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fafe40beec9 code=0x0 [ 1083.255159][T17759] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 1083.255241][T17759] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 1083.390795][T17759] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1083.426822][T17785] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(8) [ 1083.426847][T17785] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 1083.426941][T17785] vhci_hcd vhci_hcd.0: Device attached [ 1083.438018][T17759] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 1083.615577][T17759] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1083.615662][T17759] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 1083.670465][ T5873] usb 37-1: new high-speed USB device number 3 using vhci_hcd [ 1083.728290][T17759] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1083.728433][T17759] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 1083.781274][T17759] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 1083.997277][T17786] vhci_hcd: connection reset by peer [ 1084.001352][ T3565] vhci_hcd: stop threads [ 1084.001370][ T3565] vhci_hcd: release socket [ 1084.001440][ T3565] vhci_hcd: disconnect device [ 1086.279364][ T5811] Bluetooth: hci5: command 0x0406 tx timeout [ 1086.379368][ T5811] Bluetooth: hci3: command 0x0406 tx timeout [ 1086.379602][ T5811] Bluetooth: hci2: command 0x0406 tx timeout [ 1086.379658][ T5811] Bluetooth: hci0: command 0x0406 tx timeout [ 1086.379674][ T5811] Bluetooth: hci4: command 0x0c1a tx timeout [ 1087.898201][T12930] hsr_slave_0: left promiscuous mode [ 1087.947532][T12930] hsr_slave_1: left promiscuous mode [ 1088.040042][T12930] veth1_macvtap: left promiscuous mode [ 1088.040155][T12930] veth0_macvtap: left promiscuous mode [ 1088.040471][T12930] veth1_vlan: left promiscuous mode [ 1088.040672][T12930] veth0_vlan: left promiscuous mode [ 1088.317429][T17222] Bluetooth: hci5: command 0x0406 tx timeout [ 1088.430970][ T5811] Bluetooth: hci0: command 0x0406 tx timeout [ 1088.435313][ T5811] Bluetooth: hci2: command 0x0406 tx timeout [ 1088.435342][ T5811] Bluetooth: hci3: command 0x0406 tx timeout [ 1088.436380][T17222] Bluetooth: hci4: command 0x0c1a tx timeout [ 1088.866334][ T5873] vhci_hcd: vhci_device speed not set [ 1091.536664][T17825] Bluetooth: hci4: command 0x0c1a tx timeout [ 1091.969545][ T37] audit: type=1326 audit(1760505961.377:185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17845 comm="syz.4.4049" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fe9b5e6eec9 code=0x0 [ 1092.320489][T17855] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(8) [ 1092.320507][T17855] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 1092.320591][T17855] vhci_hcd vhci_hcd.0: Device attached [ 1092.566548][ T1228] usb 41-1: new high-speed USB device number 8 using vhci_hcd [ 1092.695966][T17861] qnx6: unable to read the first superblock [ 1092.715857][T17861] qnx6: unable to read the first superblock [ 1092.715896][T17861] qnx6: unable to read the first superblock [ 1092.784842][T17857] vhci_hcd: connection reset by peer [ 1092.814091][T12931] vhci_hcd: stop threads [ 1092.814108][T12931] vhci_hcd: release socket [ 1092.833634][T12931] vhci_hcd: disconnect device [ 1097.804275][ T1228] vhci_hcd: vhci_device speed not set [ 1099.195196][T17825] Bluetooth: hci5: ACL packet for unknown connection handle 200 [ 1103.476359][T17909] lo speed is unknown, defaulting to 1000 [ 1104.854238][T17544] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 1104.925994][T17909] lo speed is unknown, defaulting to 1000 [ 1104.970566][T17544] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 1105.027984][T17930] random: crng reseeded on system resumption [ 1105.144177][T17909] lo speed is unknown, defaulting to 1000 [ 1105.171339][T17544] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 1105.172959][T17909] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 1105.308802][T17544] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 1105.541879][T17909] lo speed is unknown, defaulting to 1000 [ 1105.571528][T17909] lo speed is unknown, defaulting to 1000 [ 1105.582815][T17909] lo speed is unknown, defaulting to 1000 [ 1105.597645][T17909] lo speed is unknown, defaulting to 1000 [ 1105.599641][T17909] lo speed is unknown, defaulting to 1000 [ 1105.762610][T17909] lo speed is unknown, defaulting to 1000 [ 1106.051048][T17949] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 1106.051150][T17949] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 1106.509466][T17954] pim6reg: entered allmulticast mode [ 1106.528302][T17957] pim6reg: left allmulticast mode [ 1106.906300][T17544] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1107.842561][T17544] 8021q: adding VLAN 0 to HW filter on device team0 [ 1107.896514][T12934] bridge0: port 1(bridge_slave_0) entered blocking state [ 1107.896653][T12934] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1108.944798][T12930] bridge0: port 2(bridge_slave_1) entered blocking state [ 1108.944935][T12930] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1110.311049][T17544] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1113.727072][T18017] netlink: 'syz.5.4087': attribute type 21 has an invalid length. [ 1114.101828][T18017] netlink: 'syz.5.4087': attribute type 6 has an invalid length. [ 1114.101851][T18017] netlink: 132 bytes leftover after parsing attributes in process `syz.5.4087'. [ 1114.123261][T17544] veth0_vlan: entered promiscuous mode [ 1114.233514][T17544] veth1_vlan: entered promiscuous mode [ 1115.942014][ T1319] ieee802154 phy0 wpan0: encryption failed: -22 [ 1115.942085][ T1319] ieee802154 phy1 wpan1: encryption failed: -22 [ 1116.414622][ T5873] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 1116.415367][ C0] raw-gadget.0 gadget.6: ignoring, device is not running [ 1116.574708][ T5873] usb 7-1: device descriptor read/64, error -32 [ 1117.294068][ T5873] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 1117.469667][ T5873] usb 7-1: config index 0 descriptor too short (expected 12336, got 82) [ 1117.469696][ T5873] usb 7-1: config 48 has too many interfaces: 48, using maximum allowed: 32 [ 1117.469716][ T5873] usb 7-1: config 48 has an invalid descriptor of length 0, skipping remainder of the config [ 1117.469735][ T5873] usb 7-1: config 48 has 0 interfaces, different from the descriptor's value: 48 [ 1117.473167][ T5873] usb 7-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice=39.48 [ 1117.473196][ T5873] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1117.473214][ T5873] usb 7-1: Product: syz [ 1117.473228][ T5873] usb 7-1: Manufacturer: syz [ 1117.473242][ T5873] usb 7-1: SerialNumber: syz [ 1117.542255][ T37] audit: type=1326 audit(1760505986.947:186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18051 comm="syz.5.4098" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7eff91b4eec9 code=0x0 [ 1117.702095][T18058] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(8) [ 1117.702123][T18058] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 1117.703512][T18058] vhci_hcd vhci_hcd.0: Device attached [ 1117.909165][ T5873] usb 7-1: USB disconnect, device number 11 [ 1118.071093][ T61] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1118.094071][T14561] usb 43-1: new high-speed USB device number 6 using vhci_hcd [ 1118.100722][ T61] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1118.102990][ T61] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1118.129644][ T61] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1118.130871][ T61] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1118.237152][T18060] vhci_hcd: connection reset by peer [ 1118.237840][T17919] vhci_hcd: stop threads [ 1118.237854][T17919] vhci_hcd: release socket [ 1118.237924][T17919] vhci_hcd: disconnect device [ 1120.303356][T17825] Bluetooth: hci1: command tx timeout [ 1120.817686][T18054] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 1121.699323][T18088] netlink: 'syz.4.4106': attribute type 5 has an invalid length. [ 1122.594112][T17825] Bluetooth: hci1: command tx timeout [ 1123.384240][T14561] vhci_hcd: vhci_device speed not set [ 1123.520252][T18104] netlink: 1296 bytes leftover after parsing attributes in process `syz.4.4110'. [ 1124.054564][T18063] lo speed is unknown, defaulting to 1000 [ 1124.604020][ C0] vkms_vblank_simulate: vblank timer overrun [ 1124.639518][ C0] vkms_vblank_simulate: vblank timer overrun [ 1124.639651][ T61] Bluetooth: hci1: command tx timeout [ 1124.719894][ C0] vkms_vblank_simulate: vblank timer overrun [ 1124.775435][ C0] vkms_vblank_simulate: vblank timer overrun [ 1124.987073][ C0] vkms_vblank_simulate: vblank timer overrun [ 1125.200470][ C0] vkms_vblank_simulate: vblank timer overrun [ 1125.511545][T18111] netlink: 277 bytes leftover after parsing attributes in process `syz.6.4114'. [ 1125.812822][ C0] vkms_vblank_simulate: vblank timer overrun [ 1126.634528][ C0] vkms_vblank_simulate: vblank timer overrun [ 1126.796014][ T61] Bluetooth: hci1: command tx timeout [ 1126.799758][ C0] vkms_vblank_simulate: vblank timer overrun [ 1126.891434][ C0] vkms_vblank_simulate: vblank timer overrun [ 1127.104089][ C0] vkms_vblank_simulate: vblank timer overrun [ 1127.830474][T18141] lo speed is unknown, defaulting to 1000 [ 1128.657383][T18155] syz.6.4127 (18155) used greatest stack depth: 15432 bytes left [ 1128.731723][ C0] vkms_vblank_simulate: vblank timer overrun [ 1128.949537][ C0] vkms_vblank_simulate: vblank timer overrun [ 1128.974760][ C0] vkms_vblank_simulate: vblank timer overrun [ 1129.454103][ T5873] usb 7-1: new full-speed USB device number 12 using dummy_hcd [ 1129.610936][ T5873] usb 7-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1129.610965][ T5873] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1129.610985][ T5873] usb 7-1: Product: syz [ 1129.610998][ T5873] usb 7-1: Manufacturer: syz [ 1129.611013][ T5873] usb 7-1: SerialNumber: syz [ 1129.621693][ T5873] usb 7-1: config 0 descriptor?? [ 1129.876733][ T5873] usb 7-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1129.928124][T18171] netlink: 1296 bytes leftover after parsing attributes in process `syz.2.4132'. [ 1130.005702][T12929] bridge_slave_1: left allmulticast mode [ 1130.005731][T12929] bridge_slave_1: left promiscuous mode [ 1130.005983][T12929] bridge0: port 2(bridge_slave_1) entered disabled state [ 1130.069411][ T5873] dvb_usb_rtl28xxu 7-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 1130.085519][T12929] bridge_slave_0: left allmulticast mode [ 1130.085545][T12929] bridge_slave_0: left promiscuous mode [ 1130.085997][T12929] bridge0: port 1(bridge_slave_0) entered disabled state [ 1130.428426][ C1] vkms_vblank_simulate: vblank timer overrun [ 1130.623616][ C1] vkms_vblank_simulate: vblank timer overrun [ 1130.914123][T16390] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 1131.078680][T16390] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1131.078715][T16390] usb 6-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1131.078753][T16390] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1131.078774][T16390] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1131.094934][T18174] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 1131.126778][ C1] vkms_vblank_simulate: vblank timer overrun [ 1131.134591][T16390] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 1131.209685][ C1] vkms_vblank_simulate: vblank timer overrun [ 1131.935426][T16390] usb 7-1: USB disconnect, device number 12 [ 1131.982519][ T5886] usb 6-1: USB disconnect, device number 20 [ 1132.215017][ C1] vkms_vblank_simulate: vblank timer overrun [ 1132.741852][ C1] vkms_vblank_simulate: vblank timer overrun [ 1132.984807][ C1] vkms_vblank_simulate: vblank timer overrun [ 1133.042271][ C1] vkms_vblank_simulate: vblank timer overrun [ 1136.935103][T12929] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1137.014729][T12929] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1137.067243][T12929] bond0 (unregistering): Released all slaves [ 1137.168664][T18214] netlink: 124 bytes leftover after parsing attributes in process `syz.6.4145'. [ 1137.168871][T18214] block nbd0: not configured, cannot reconfigure [ 1137.264119][T14561] usb 3-1: new full-speed USB device number 46 using dummy_hcd [ 1137.422307][T14561] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1137.422336][T14561] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1137.422355][T14561] usb 3-1: Product: syz [ 1137.422368][T14561] usb 3-1: Manufacturer: syz [ 1137.422378][T14561] usb 3-1: SerialNumber: syz [ 1137.427260][T14561] usb 3-1: config 0 descriptor?? [ 1137.461258][T18063] chnl_net:caif_netlink_parms(): no params data found [ 1138.221519][T14561] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1138.269003][T18223] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4148'. [ 1138.304238][T12929] hsr_slave_0: left promiscuous mode [ 1138.334174][T12929] hsr_slave_1: left promiscuous mode [ 1138.339644][T12929] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1138.391181][T12929] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1138.429515][T14561] dvb_usb_rtl28xxu 3-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 1138.509305][T12929] veth1_vlan: left promiscuous mode [ 1138.509550][T12929] veth0_vlan: left promiscuous mode [ 1140.033780][T16390] usb 3-1: USB disconnect, device number 46 [ 1140.134975][T12929] team0 (unregistering): Port device team_slave_1 removed [ 1140.395150][T12929] team0 (unregistering): Port device team_slave_0 removed [ 1142.854139][T18239] tipc: Enabling of bearer rejected, already enabled [ 1143.317984][T18246] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4153'. [ 1144.491554][ T61] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1144.556354][ T61] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1144.561769][ T61] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1144.614394][ T61] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1144.618343][ T61] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1145.627310][T18063] bridge0: port 1(bridge_slave_0) entered blocking state [ 1145.627446][T18063] bridge0: port 1(bridge_slave_0) entered disabled state [ 1145.627643][T18063] bridge_slave_0: entered allmulticast mode [ 1145.630440][T18063] bridge_slave_0: entered promiscuous mode [ 1145.941776][T18063] bridge0: port 2(bridge_slave_1) entered blocking state [ 1145.941921][T18063] bridge0: port 2(bridge_slave_1) entered disabled state [ 1145.942159][T18063] bridge_slave_1: entered allmulticast mode [ 1145.945457][T18063] bridge_slave_1: entered promiscuous mode [ 1146.655395][ T61] Bluetooth: hci4: command tx timeout [ 1147.015167][T18063] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1147.248966][ T61] Bluetooth: hci5: ACL packet for unknown connection handle 200 [ 1147.623715][T18063] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1147.789124][T18257] lo speed is unknown, defaulting to 1000 [ 1149.014121][ T61] Bluetooth: hci4: command tx timeout [ 1149.686437][T18063] team0: Port device team_slave_0 added [ 1149.727944][T18063] team0: Port device team_slave_1 added [ 1150.047111][T18063] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1150.047130][T18063] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1150.047145][T18063] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1150.484486][T18335] gfs2: error -5 reading superblock [ 1151.035047][ T61] Bluetooth: hci4: command tx timeout [ 1151.063407][T18063] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1151.063418][T18063] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1151.063433][T18063] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1151.509147][T12929] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1151.821460][T18357] netlink: 'syz.6.4190': attribute type 10 has an invalid length. [ 1152.437796][T18357] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4190'. [ 1152.437823][T18357] netlink: 68 bytes leftover after parsing attributes in process `syz.6.4190'. [ 1152.437840][T18357] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4190'. [ 1152.438118][T18357] netlink: 68 bytes leftover after parsing attributes in process `syz.6.4190'. [ 1153.122415][ T61] Bluetooth: hci4: command tx timeout [ 1153.346083][T12929] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1153.430128][T18063] hsr_slave_0: entered promiscuous mode [ 1153.444710][T18063] hsr_slave_1: entered promiscuous mode [ 1153.932837][T12929] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1155.767174][T12929] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1158.519415][T18257] chnl_net:caif_netlink_parms(): no params data found [ 1158.607680][T18419] bond1 (unregistering): Released all slaves [ 1159.679130][T18444] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4216'. [ 1159.679162][T18444] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4216'. [ 1159.726385][T12929] bridge_slave_1: left allmulticast mode [ 1159.726412][T12929] bridge_slave_1: left promiscuous mode [ 1159.726661][T12929] bridge0: port 2(bridge_slave_1) entered disabled state [ 1159.815160][T12929] bridge_slave_0: left allmulticast mode [ 1159.815191][T12929] bridge_slave_0: left promiscuous mode [ 1159.815350][T12929] bridge0: port 1(bridge_slave_0) entered disabled state [ 1160.416474][ T5873] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 1160.568255][ T5873] usb 6-1: config 0 has no interfaces? [ 1160.572291][ T5873] usb 6-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice=39.48 [ 1160.572309][ T5873] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1160.572319][ T5873] usb 6-1: Product: syz [ 1160.572326][ T5873] usb 6-1: Manufacturer: syz [ 1160.572333][ T5873] usb 6-1: SerialNumber: syz [ 1160.613591][ T5873] usb 6-1: config 0 descriptor?? [ 1160.829276][ T5873] usb 6-1: USB disconnect, device number 21 [ 1163.785753][T12929] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1163.844805][T12929] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1163.866685][T12929] bond0 (unregistering): Released all slaves [ 1164.089992][T18468] tipc: Started in network mode [ 1164.090023][T18468] tipc: Node identity 9e621b827987, cluster identity 4711 [ 1164.090218][T18468] tipc: Enabled bearer , priority 0 [ 1164.094767][T18469] syzkaller0: entered promiscuous mode [ 1164.094794][T18469] syzkaller0: entered allmulticast mode [ 1164.103210][T18483] tipc: Resetting bearer [ 1164.131118][T18257] bridge0: port 1(bridge_slave_0) entered blocking state [ 1164.131338][T18257] bridge0: port 1(bridge_slave_0) entered disabled state [ 1164.131571][T18257] bridge_slave_0: entered allmulticast mode [ 1164.155649][T18257] bridge_slave_0: entered promiscuous mode [ 1164.158870][T12929] tipc: Disabling bearer [ 1164.159058][T12929] tipc: Left network mode [ 1164.194361][T18466] tipc: Resetting bearer [ 1164.306260][T18466] tipc: Disabling bearer [ 1164.426370][T18257] bridge0: port 2(bridge_slave_1) entered blocking state [ 1164.426500][T18257] bridge0: port 2(bridge_slave_1) entered disabled state [ 1164.426744][T18257] bridge_slave_1: entered allmulticast mode [ 1164.428653][T18257] bridge_slave_1: entered promiscuous mode [ 1165.753301][T18257] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1165.864822][T18257] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1167.254171][T12929] hsr_slave_0: left promiscuous mode [ 1167.294225][T12929] hsr_slave_1: left promiscuous mode [ 1167.295201][T12929] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1167.295226][T12929] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1167.357709][T12929] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1167.357737][T12929] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1167.463454][T12929] veth1_macvtap: left promiscuous mode [ 1167.463561][T12929] veth0_macvtap: left promiscuous mode [ 1167.463818][T12929] veth1_vlan: left promiscuous mode [ 1167.475040][T12929] veth0_vlan: left promiscuous mode [ 1169.874666][T12929] team0 (unregistering): Port device team_slave_1 removed [ 1170.076343][T12929] team0 (unregistering): Port device team_slave_0 removed [ 1172.596804][T18257] team0: Port device team_slave_0 added [ 1172.684424][T18517] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4232'. [ 1172.824755][T18257] team0: Port device team_slave_1 added [ 1173.177660][T18257] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1173.177678][T18257] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1173.177704][T18257] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1173.180999][T18257] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1173.181014][T18257] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1173.181039][T18257] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1174.684673][T18257] hsr_slave_0: entered promiscuous mode [ 1174.686248][T18257] hsr_slave_1: entered promiscuous mode [ 1174.687402][T18257] debugfs: 'hsr0' already exists in 'hsr' [ 1174.687427][T18257] Cannot create hsr debugfs directory [ 1175.403811][T17825] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1175.431256][T17825] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1175.432669][T17825] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1175.449884][T17825] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1175.451203][T17825] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1175.875633][T18557] gfs2: error -5 reading superblock [ 1176.213243][T18546] lo speed is unknown, defaulting to 1000 [ 1176.256625][T12929] IPVS: stop unused estimator thread 0... [ 1176.324103][T16841] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 1176.454227][T16841] usb 6-1: device descriptor read/64, error -71 [ 1176.694101][T16841] usb 6-1: new high-speed USB device number 23 using dummy_hcd [ 1176.824155][T16841] usb 6-1: device descriptor read/64, error -71 [ 1176.934452][T16841] usb usb6-port1: attempt power cycle [ 1177.274182][T16841] usb 6-1: new high-speed USB device number 24 using dummy_hcd [ 1177.295753][T16841] usb 6-1: device descriptor read/8, error -71 [ 1177.348169][T18257] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 1177.360956][ T1319] ieee802154 phy0 wpan0: encryption failed: -22 [ 1177.361023][ T1319] ieee802154 phy1 wpan1: encryption failed: -22 [ 1177.393728][T18257] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 1177.516350][T17825] Bluetooth: hci3: command tx timeout [ 1177.518205][T18257] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 1177.534095][T16841] usb 6-1: new high-speed USB device number 25 using dummy_hcd [ 1177.565976][T16841] usb 6-1: device descriptor read/8, error -71 [ 1177.580760][T18257] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 1177.618003][T18546] chnl_net:caif_netlink_parms(): no params data found [ 1177.676739][T16841] usb usb6-port1: unable to enumerate USB device [ 1177.931981][T18546] bridge0: port 1(bridge_slave_0) entered blocking state [ 1177.932157][T18546] bridge0: port 1(bridge_slave_0) entered disabled state [ 1177.932355][T18546] bridge_slave_0: entered allmulticast mode [ 1177.961206][T18546] bridge_slave_0: entered promiscuous mode [ 1178.022060][T18546] bridge0: port 2(bridge_slave_1) entered blocking state [ 1178.022437][T18546] bridge0: port 2(bridge_slave_1) entered disabled state [ 1178.022649][T18546] bridge_slave_1: entered allmulticast mode [ 1178.046432][T18546] bridge_slave_1: entered promiscuous mode [ 1178.333286][T18546] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1178.403122][T18546] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1178.472631][ T37] audit: type=1326 audit(1760506047.877:187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18603 comm="syz.2.4261" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fafe40beec9 code=0x0 [ 1178.708362][T18607] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(8) [ 1178.708388][T18607] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 1178.708480][T18607] vhci_hcd vhci_hcd.0: Device attached [ 1178.974996][ T5873] usb 37-1: new high-speed USB device number 4 using vhci_hcd [ 1179.359580][T18608] vhci_hcd: connection reset by peer [ 1179.362366][ T3497] vhci_hcd: stop threads [ 1179.362382][ T3497] vhci_hcd: release socket [ 1179.362452][ T3497] vhci_hcd: disconnect device [ 1179.417640][T18546] team0: Port device team_slave_0 added [ 1179.421127][T12929] bridge_slave_1: left allmulticast mode [ 1179.421153][T12929] bridge_slave_1: left promiscuous mode [ 1179.421386][T12929] bridge0: port 2(bridge_slave_1) entered disabled state [ 1179.616109][T17825] Bluetooth: hci3: command 0x041b tx timeout [ 1179.977815][T12929] bridge_slave_0: left allmulticast mode [ 1179.977836][T12929] bridge_slave_0: left promiscuous mode [ 1179.978006][T12929] bridge0: port 1(bridge_slave_0) entered disabled state [ 1180.214519][T18617] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4264'. [ 1180.421328][T18621] fuse: Bad value for 'fd' [ 1180.547730][T12929] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1180.625004][T12929] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1180.683225][T12929] bond0 (unregistering): Released all slaves [ 1180.751328][T18546] team0: Port device team_slave_1 added [ 1181.014342][T16841] usb 6-1: new high-speed USB device number 26 using dummy_hcd [ 1181.249623][T18546] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1181.249634][T18546] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1181.249649][T18546] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1181.264327][T16841] usb 6-1: device descriptor read/64, error -71 [ 1181.449057][T12929] hsr_slave_0: left promiscuous mode [ 1181.464604][T12929] hsr_slave_1: left promiscuous mode [ 1181.465237][T12929] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1181.514313][T16841] usb 6-1: new high-speed USB device number 27 using dummy_hcd [ 1181.518066][T12929] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1181.664382][T16841] usb 6-1: device descriptor read/64, error -71 [ 1181.674302][ T61] Bluetooth: hci3: command 0x041b tx timeout [ 1181.777656][T16841] usb usb6-port1: attempt power cycle [ 1182.114295][T16841] usb 6-1: new high-speed USB device number 28 using dummy_hcd [ 1182.169396][T16841] usb 6-1: device descriptor read/8, error -71 [ 1182.454907][T16841] usb 6-1: new high-speed USB device number 29 using dummy_hcd [ 1182.478447][T12929] team0 (unregistering): Port device team_slave_1 removed [ 1182.489333][T16841] usb 6-1: device descriptor read/8, error -71 [ 1182.598119][T16841] usb usb6-port1: unable to enumerate USB device [ 1182.678883][T12929] team0 (unregistering): Port device team_slave_0 removed [ 1183.563478][T18655] gfs2: error -5 reading superblock [ 1183.754108][ T61] Bluetooth: hci3: command 0x041b tx timeout [ 1183.761240][T18546] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1183.761256][T18546] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1183.761283][T18546] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1184.095307][ T5873] vhci_hcd: vhci_device speed not set [ 1184.740616][T14561] usb 3-1: new high-speed USB device number 47 using dummy_hcd [ 1184.885777][T14561] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1184.885810][T14561] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1184.885833][T14561] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1184.885845][T14561] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1184.890598][T18667] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1184.914211][T14561] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 1184.988372][T18669] bond2 (unregistering): Released all slaves [ 1185.218428][T18546] hsr_slave_0: entered promiscuous mode [ 1185.219859][T18546] hsr_slave_1: entered promiscuous mode [ 1185.311237][ T44] usb 3-1: USB disconnect, device number 47 [ 1185.673234][T18257] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1185.744090][ T5873] usb 6-1: new high-speed USB device number 30 using dummy_hcd [ 1185.834991][ T61] Bluetooth: hci3: command 0x041b tx timeout [ 1185.946515][ T5873] usb 6-1: device descriptor read/64, error -71 [ 1186.137666][T18257] 8021q: adding VLAN 0 to HW filter on device team0 [ 1186.195007][ T5873] usb 6-1: new high-speed USB device number 31 using dummy_hcd [ 1186.686495][ T5873] usb 6-1: device descriptor read/64, error -71 [ 1186.794434][ T5873] usb usb6-port1: attempt power cycle [ 1186.994356][ T1443] bridge0: port 1(bridge_slave_0) entered blocking state [ 1186.994559][ T1443] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1187.051554][ T3497] bridge0: port 2(bridge_slave_1) entered blocking state [ 1187.051713][ T3497] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1187.134197][ T5873] usb 6-1: new high-speed USB device number 32 using dummy_hcd [ 1187.167225][ T5873] usb 6-1: device descriptor read/8, error -71 [ 1187.414173][ T5873] usb 6-1: new high-speed USB device number 33 using dummy_hcd [ 1187.438885][ T5873] usb 6-1: device descriptor read/8, error -71 [ 1187.696304][ T5873] usb usb6-port1: unable to enumerate USB device [ 1187.760074][T18722] gfs2: error -5 reading superblock [ 1188.316097][T18546] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 1188.354089][T18546] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 1188.392466][T18546] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 1188.432615][T18546] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 1188.537957][T18257] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1188.761081][T18546] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1189.086701][T18755] gfs2: error -5 reading superblock [ 1189.483549][T18546] 8021q: adding VLAN 0 to HW filter on device team0 [ 1189.511950][ T3497] bridge0: port 1(bridge_slave_0) entered blocking state [ 1189.512138][ T3497] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1189.530506][T12931] bridge0: port 2(bridge_slave_1) entered blocking state [ 1189.531339][T12931] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1189.721776][T18546] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1189.900130][T18257] veth0_vlan: entered promiscuous mode [ 1189.920166][T18257] veth1_vlan: entered promiscuous mode [ 1189.972912][T18257] veth0_macvtap: entered promiscuous mode [ 1189.987811][T18257] veth1_macvtap: entered promiscuous mode [ 1190.017115][T18257] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1190.171496][T18257] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1190.214458][T12929] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1190.215108][T12929] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1190.215583][T12929] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1190.216016][T12929] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1190.664955][T12931] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1190.664973][T12931] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1190.750650][T12929] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1190.750671][T12929] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1190.804055][T18290] usb 6-1: new high-speed USB device number 34 using dummy_hcd [ 1190.934085][T18290] usb 6-1: device descriptor read/64, error -71 [ 1190.939959][T18546] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1191.184170][T18290] usb 6-1: new high-speed USB device number 35 using dummy_hcd [ 1191.314250][T18290] usb 6-1: device descriptor read/64, error -71 [ 1192.328797][T18290] usb usb6-port1: attempt power cycle [ 1192.595290][T18546] veth0_vlan: entered promiscuous mode [ 1192.629682][T18546] veth1_vlan: entered promiscuous mode [ 1192.674105][T18290] usb 6-1: new high-speed USB device number 36 using dummy_hcd [ 1192.682336][T18546] veth0_macvtap: entered promiscuous mode [ 1192.698654][T18290] usb 6-1: device descriptor read/8, error -71 [ 1192.702831][T18546] veth1_macvtap: entered promiscuous mode [ 1192.734756][T18546] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1192.740099][T18546] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1192.922514][ T3497] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1192.950791][ T3497] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1192.952499][ T3497] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1193.834457][ T3497] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1194.232310][T18290] usb 6-1: new high-speed USB device number 37 using dummy_hcd [ 1194.434127][T18290] usb 6-1: device not accepting address 37, error -71 [ 1194.439483][T18290] usb usb6-port1: unable to enumerate USB device [ 1194.713915][ T9124] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1194.714306][ T9124] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1194.824406][T12931] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1194.824426][T12931] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1195.040734][ T37] audit: type=1326 audit(1760506064.447:188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18831 comm="syz.6.4333" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f98a55aeec9 code=0x0 [ 1196.104580][T18840] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(8) [ 1196.109149][T18840] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 1196.109243][T18840] vhci_hcd vhci_hcd.0: Device attached [ 1196.364205][T10675] usb 45-1: new high-speed USB device number 3 using vhci_hcd [ 1196.364619][T18844] vhci_hcd: sendmsg failed!, ret=-32 for 48 [ 1196.366913][ T58] vhci_hcd: stop threads [ 1196.367043][ T58] vhci_hcd: release socket [ 1196.367503][ T58] vhci_hcd: disconnect device [ 1196.714110][ T44] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 1196.865098][ T44] usb 9-1: too many configurations: 48, using maximum allowed: 8 [ 1196.867691][ T44] usb 9-1: unable to read config index 0 descriptor/start: -61 [ 1196.867725][ T44] usb 9-1: can't read configurations, error -61 [ 1196.994471][ T44] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 1197.786805][ T44] usb 9-1: too many configurations: 48, using maximum allowed: 8 [ 1197.788494][ T44] usb 9-1: unable to read config index 0 descriptor/start: -61 [ 1197.788528][ T44] usb 9-1: can't read configurations, error -61 [ 1197.791036][ T44] usb usb9-port1: attempt power cycle [ 1198.330608][ T44] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 1198.345610][ T44] usb 9-1: too many configurations: 48, using maximum allowed: 8 [ 1198.347968][ T44] usb 9-1: unable to read config index 0 descriptor/start: -61 [ 1198.348004][ T44] usb 9-1: can't read configurations, error -61 [ 1199.294111][ T44] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 1199.315441][ T44] usb 9-1: too many configurations: 48, using maximum allowed: 8 [ 1199.317183][ T44] usb 9-1: unable to read config index 0 descriptor/start: -61 [ 1199.317217][ T44] usb 9-1: can't read configurations, error -61 [ 1199.317654][ T44] usb usb9-port1: unable to enumerate USB device [ 1199.876911][T18881] gfs2: error -5 reading superblock [ 1200.190147][T18890] netlink: 'syz.5.4351': attribute type 2 has an invalid length. [ 1200.211709][T18890] : entered promiscuous mode [ 1201.705268][T10675] vhci_hcd: vhci_device speed not set [ 1201.871603][T18923] gfs2: error -5 reading superblock [ 1201.954165][T16841] usb 3-1: new high-speed USB device number 48 using dummy_hcd [ 1202.325106][T16841] usb 3-1: too many configurations: 48, using maximum allowed: 8 [ 1202.329529][T16841] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 1202.329566][T16841] usb 3-1: can't read configurations, error -61 [ 1202.454336][T16841] usb 3-1: new high-speed USB device number 49 using dummy_hcd [ 1202.866179][T16841] usb 3-1: too many configurations: 48, using maximum allowed: 8 [ 1202.868613][T16841] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 1202.868645][T16841] usb 3-1: can't read configurations, error -61 [ 1202.869058][T16841] usb usb3-port1: attempt power cycle [ 1203.714206][T16841] usb 3-1: new high-speed USB device number 50 using dummy_hcd [ 1203.735955][T16841] usb 3-1: too many configurations: 48, using maximum allowed: 8 [ 1203.738423][T16841] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 1203.738457][T16841] usb 3-1: can't read configurations, error -61 [ 1203.977202][T18964] netlink: 277 bytes leftover after parsing attributes in process `syz.8.4379'. [ 1204.294399][T16841] usb 3-1: new high-speed USB device number 51 using dummy_hcd [ 1204.434064][T16841] usb 3-1: device descriptor read/8, error -71 [ 1204.443525][T18968] netlink: 'syz.6.4380': attribute type 1 has an invalid length. [ 1204.443546][T18968] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1204.544547][T16841] usb usb3-port1: unable to enumerate USB device [ 1204.592220][T18972] tipc: Enabling of bearer rejected, already enabled [ 1204.754749][ T44] usb 7-1: new full-speed USB device number 13 using dummy_hcd [ 1206.137645][ T44] usb 7-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1206.137674][ T44] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1206.137691][ T44] usb 7-1: Product: syz [ 1206.137704][ T44] usb 7-1: Manufacturer: syz [ 1206.137717][ T44] usb 7-1: SerialNumber: syz [ 1206.178572][ T44] usb 7-1: config 0 descriptor?? [ 1206.395331][ T44] usb 7-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1206.454140][T16390] usb 6-1: new high-speed USB device number 38 using dummy_hcd [ 1206.605183][T16390] usb 6-1: too many configurations: 48, using maximum allowed: 8 [ 1206.608463][T16390] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 1206.608498][T16390] usb 6-1: can't read configurations, error -61 [ 1206.734144][T16390] usb 6-1: new high-speed USB device number 39 using dummy_hcd [ 1206.885164][T16390] usb 6-1: too many configurations: 48, using maximum allowed: 8 [ 1206.887974][T16390] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 1206.888009][T16390] usb 6-1: can't read configurations, error -61 [ 1206.888631][T16390] usb usb6-port1: attempt power cycle [ 1207.224090][T16390] usb 6-1: new high-speed USB device number 40 using dummy_hcd [ 1207.248048][T16390] usb 6-1: too many configurations: 48, using maximum allowed: 8 [ 1207.265074][T16390] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 1207.265111][T16390] usb 6-1: can't read configurations, error -61 [ 1207.394352][T16390] usb 6-1: new high-speed USB device number 41 using dummy_hcd [ 1207.416037][T16390] usb 6-1: too many configurations: 48, using maximum allowed: 8 [ 1207.419487][T16390] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 1207.419525][T16390] usb 6-1: can't read configurations, error -61 [ 1207.420244][T16390] usb usb6-port1: unable to enumerate USB device [ 1207.620034][ T44] dvb_usb_rtl28xxu 7-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 1207.623632][ T44] usb 7-1: USB disconnect, device number 13 [ 1207.699576][T19012] gfs2: error -5 reading superblock [ 1208.514038][ T37] audit: type=1326 audit(1760506077.917:189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19019 comm="syz.9.4401" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f7e8d51eec9 code=0x0 [ 1208.747282][T19029] vhci_hcd vhci_hcd.0: pdev(9) rhport(0) sockfd(7) [ 1208.747308][T19029] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 1208.751489][T19029] vhci_hcd vhci_hcd.0: Device attached [ 1209.008592][T14561] usb 51-1: new high-speed USB device number 2 using vhci_hcd [ 1209.240971][T19031] vhci_hcd: connection reset by peer [ 1209.241952][ T1498] vhci_hcd: stop threads [ 1209.241968][ T1498] vhci_hcd: release socket [ 1209.242434][ T1498] vhci_hcd: disconnect device [ 1210.457797][T19051] gfs2: error -5 reading superblock [ 1211.857603][ T44] usb 6-1: new high-speed USB device number 42 using dummy_hcd [ 1212.789362][ T44] usb 6-1: too many configurations: 48, using maximum allowed: 8 [ 1212.804959][ T44] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 1212.804995][ T44] usb 6-1: can't read configurations, error -61 [ 1212.954247][ T44] usb 6-1: new high-speed USB device number 43 using dummy_hcd [ 1213.061449][ T37] audit: type=1326 audit(1760506082.467:190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19089 comm="syz.6.4425" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f98a55aeec9 code=0x0 [ 1213.105154][ T44] usb 6-1: too many configurations: 48, using maximum allowed: 8 [ 1213.107285][ T44] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 1213.107320][ T44] usb 6-1: can't read configurations, error -61 [ 1213.107733][ T44] usb usb6-port1: attempt power cycle [ 1213.460909][T19102] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(7) [ 1213.460924][T19102] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 1213.461002][T19102] vhci_hcd vhci_hcd.0: Device attached [ 1213.507949][ T44] usb 6-1: new high-speed USB device number 44 using dummy_hcd [ 1213.525741][ T44] usb 6-1: too many configurations: 48, using maximum allowed: 8 [ 1213.540734][ T44] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 1213.540772][ T44] usb 6-1: can't read configurations, error -61 [ 1213.694056][ T44] usb 6-1: new high-speed USB device number 45 using dummy_hcd [ 1213.715865][ T44] usb 6-1: too many configurations: 48, using maximum allowed: 8 [ 1213.893883][T19103] vhci_hcd: connection closed [ 1213.899046][ T1016] vhci_hcd: stop threads [ 1213.899067][ T1016] vhci_hcd: release socket [ 1213.899136][ T1016] vhci_hcd: disconnect device [ 1213.899270][T16841] vhci_hcd: vhci_device speed not set [ 1213.930141][ T44] usb 6-1: unable to read config index 0 descriptor/start: -71 [ 1213.930180][ T44] usb 6-1: can't read configurations, error -71 [ 1213.930605][ T44] usb usb6-port1: unable to enumerate USB device [ 1213.997947][T19107] netlink: 'syz.8.4433': attribute type 2 has an invalid length. [ 1214.019386][T19107] : entered promiscuous mode [ 1214.156308][T14561] vhci_hcd: vhci_device speed not set [ 1214.516759][T19116] gfs2: error -5 reading superblock [ 1214.711596][T19121] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4436'. [ 1214.742425][T19121] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.4436'. [ 1214.742451][T19121] openvswitch: netlink: Message has 512 unknown bytes. [ 1215.507673][T19133] lo speed is unknown, defaulting to 1000 [ 1216.087963][ T44] usb 9-1: new high-speed USB device number 6 using dummy_hcd [ 1216.234892][ T44] usb 9-1: too many configurations: 48, using maximum allowed: 8 [ 1216.238339][ T44] usb 9-1: unable to read config index 0 descriptor/start: -61 [ 1216.238371][ T44] usb 9-1: can't read configurations, error -61 [ 1216.374129][ T44] usb 9-1: new high-speed USB device number 7 using dummy_hcd [ 1216.538966][ T44] usb 9-1: too many configurations: 48, using maximum allowed: 8 [ 1216.541142][ T44] usb 9-1: unable to read config index 0 descriptor/start: -61 [ 1216.541177][ T44] usb 9-1: can't read configurations, error -61 [ 1216.541965][ T44] usb usb9-port1: attempt power cycle [ 1216.714159][T16841] usb 6-1: new high-speed USB device number 46 using dummy_hcd [ 1216.866358][T16841] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1216.866392][T16841] usb 6-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1216.866428][T16841] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1216.866449][T16841] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1216.872667][T19167] netlink: 20 bytes leftover after parsing attributes in process `syz.9.4455'. [ 1216.878389][ T44] usb 9-1: new high-speed USB device number 8 using dummy_hcd [ 1216.910989][T19153] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 1216.912607][ T44] usb 9-1: too many configurations: 48, using maximum allowed: 8 [ 1216.914907][ T44] usb 9-1: unable to read config index 0 descriptor/start: -61 [ 1216.914940][ T44] usb 9-1: can't read configurations, error -61 [ 1216.972091][T16841] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 1217.044077][ T44] usb 9-1: new high-speed USB device number 9 using dummy_hcd [ 1217.065883][ T44] usb 9-1: too many configurations: 48, using maximum allowed: 8 [ 1217.068109][ T44] usb 9-1: unable to read config index 0 descriptor/start: -61 [ 1217.068143][ T44] usb 9-1: can't read configurations, error -61 [ 1217.068527][ T44] usb usb9-port1: unable to enumerate USB device [ 1217.289578][T14561] usb 6-1: USB disconnect, device number 46 [ 1217.787279][T19187] lo speed is unknown, defaulting to 1000 [ 1218.193380][T19205] tipc: Enabled bearer , priority 0 [ 1218.216127][T19205] syzkaller0: entered promiscuous mode [ 1218.216152][T19205] syzkaller0: entered allmulticast mode [ 1218.248088][T19205] tipc: Resetting bearer [ 1218.322359][T19203] tipc: Resetting bearer [ 1218.488834][T19210] gfs2: error -5 reading superblock [ 1218.526355][T19203] tipc: Disabling bearer [ 1219.597110][T19237] netlink: 1296 bytes leftover after parsing attributes in process `syz.8.4477'. [ 1220.513321][ C0] vkms_vblank_simulate: vblank timer overrun [ 1221.437765][ C0] vkms_vblank_simulate: vblank timer overrun [ 1221.697848][T19270] netlink: 1296 bytes leftover after parsing attributes in process `syz.5.4491'. [ 1221.716289][ C0] vkms_vblank_simulate: vblank timer overrun [ 1222.383271][ C0] vkms_vblank_simulate: vblank timer overrun [ 1222.746485][T19284] netlink: 60 bytes leftover after parsing attributes in process `syz.5.4497'. [ 1222.929695][T19288] netlink: 'syz.8.4499': attribute type 2 has an invalid length. [ 1223.223163][T19297] netlink: 44 bytes leftover after parsing attributes in process `syz.2.4500'. [ 1223.637657][ C0] vkms_vblank_simulate: vblank timer overrun [ 1225.670922][ C0] vkms_vblank_simulate: vblank timer overrun [ 1226.049837][T19314] gfs2: error -5 reading superblock [ 1226.624475][ C0] vkms_vblank_simulate: vblank timer overrun [ 1226.758235][ C0] vkms_vblank_simulate: vblank timer overrun [ 1226.858863][ C0] vkms_vblank_simulate: vblank timer overrun [ 1227.264184][T16841] usb 9-1: new high-speed USB device number 10 using dummy_hcd [ 1227.429578][T16841] usb 9-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1227.429613][T16841] usb 9-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1227.429653][T16841] usb 9-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1227.429676][T16841] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1227.523367][T19332] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 1227.546809][T16841] usb 9-1: Quirk or no altset; falling back to MIDI 1.0 [ 1228.386110][T19359] gfs2: error -5 reading superblock [ 1228.795537][ T37] audit: type=1326 audit(1760506098.207:191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19365 comm="syz.5.4523" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7eff91b4eec9 code=0x0 [ 1228.848189][T19374] netlink: 6 bytes leftover after parsing attributes in process `syz.9.4524'. [ 1228.865636][T19374] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1228.945020][T19372] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(8) [ 1228.945036][T19372] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 1228.945095][T19372] vhci_hcd vhci_hcd.0: Device attached [ 1229.284366][T10675] usb 43-1: new high-speed USB device number 7 using vhci_hcd [ 1230.362528][T19377] vhci_hcd: connection reset by peer [ 1230.369576][T17919] vhci_hcd: stop threads [ 1230.369595][T17919] vhci_hcd: release socket [ 1230.369671][T17919] vhci_hcd: disconnect device [ 1230.771481][T19393] netlink: 'syz.6.4528': attribute type 10 has an invalid length. [ 1230.834521][T19393] team0: Port device dummy0 added [ 1230.837616][T19395] netlink: 'syz.6.4528': attribute type 10 has an invalid length. [ 1230.841007][T19395] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 1231.064624][T19395] team0: Failed to send options change via netlink (err -105) [ 1231.064769][T19395] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 1231.065128][T19395] team0: Port device dummy0 removed [ 1231.068444][T19395] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 1232.520197][ T5858] usb 9-1: USB disconnect, device number 10 [ 1233.405338][T19425] netlink: 'syz.8.4540': attribute type 10 has an invalid length. [ 1233.649511][T19425] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 1234.294415][T18290] usb 7-1: new high-speed USB device number 14 using dummy_hcd [ 1234.394280][T10675] vhci_hcd: vhci_device speed not set [ 1234.461735][T18290] usb 7-1: unable to read config index 0 descriptor/start: -61 [ 1234.461777][T18290] usb 7-1: can't read configurations, error -61 [ 1234.584062][T18290] usb 7-1: new high-speed USB device number 15 using dummy_hcd [ 1234.929831][T18290] usb 7-1: unable to read config index 0 descriptor/start: -61 [ 1234.929868][T18290] usb 7-1: can't read configurations, error -61 [ 1234.934535][T18290] usb usb7-port1: attempt power cycle [ 1235.221240][T19492] gfs2: error -5 reading superblock [ 1236.026787][T18290] usb 7-1: new high-speed USB device number 16 using dummy_hcd [ 1236.051184][T18290] usb 7-1: unable to read config index 0 descriptor/start: -61 [ 1236.051222][T18290] usb 7-1: can't read configurations, error -61 [ 1236.204070][T18290] usb 7-1: new high-speed USB device number 17 using dummy_hcd [ 1236.228040][T18290] usb 7-1: unable to read config index 0 descriptor/start: -61 [ 1236.228079][T18290] usb 7-1: can't read configurations, error -61 [ 1236.228452][T18290] usb usb7-port1: unable to enumerate USB device [ 1236.409727][T19500] netlink: 1296 bytes leftover after parsing attributes in process `syz.2.4571'. [ 1237.103420][ C0] vkms_vblank_simulate: vblank timer overrun [ 1237.305385][T19504] netlink: 'syz.2.4574': attribute type 2 has an invalid length. [ 1237.347993][T19504] : entered promiscuous mode [ 1237.616348][T19514] overlayfs: failed to resolve './file1': -2 [ 1237.712088][ C0] vkms_vblank_simulate: vblank timer overrun [ 1237.906824][ C0] vkms_vblank_simulate: vblank timer overrun [ 1238.263765][ C0] vkms_vblank_simulate: vblank timer overrun [ 1238.284705][ C0] vkms_vblank_simulate: vblank timer overrun [ 1238.650071][ C0] vkms_vblank_simulate: vblank timer overrun [ 1238.741536][ C0] vkms_vblank_simulate: vblank timer overrun [ 1238.891030][ C0] vkms_vblank_simulate: vblank timer overrun [ 1239.155415][ T1319] ieee802154 phy0 wpan0: encryption failed: -22 [ 1239.156049][ T1319] ieee802154 phy1 wpan1: encryption failed: -22 [ 1239.434611][ C0] vkms_vblank_simulate: vblank timer overrun [ 1240.110805][ C0] vkms_vblank_simulate: vblank timer overrun [ 1240.122965][T19532] netlink: 1296 bytes leftover after parsing attributes in process `syz.2.4585'. [ 1240.726302][ C0] vkms_vblank_simulate: vblank timer overrun [ 1240.986900][T19550] overlayfs: failed to resolve './file1': -2 [ 1241.112031][ C0] vkms_vblank_simulate: vblank timer overrun [ 1241.907678][ C0] vkms_vblank_simulate: vblank timer overrun [ 1242.742871][T19574] netlink: 'syz.5.4599': attribute type 2 has an invalid length. [ 1242.963476][ C0] vkms_vblank_simulate: vblank timer overrun [ 1243.204433][T19587] overlayfs: failed to resolve './file1': -2 [ 1243.292603][T19589] netlink: 1296 bytes leftover after parsing attributes in process `syz.8.4603'. [ 1243.581686][ C0] vkms_vblank_simulate: vblank timer overrun [ 1243.798340][ C0] vkms_vblank_simulate: vblank timer overrun [ 1244.294950][ C0] vkms_vblank_simulate: vblank timer overrun [ 1244.404805][ C0] vkms_vblank_simulate: vblank timer overrun [ 1244.451242][ C0] vkms_vblank_simulate: vblank timer overrun [ 1244.634825][ C0] vkms_vblank_simulate: vblank timer overrun [ 1244.770754][ C0] vkms_vblank_simulate: vblank timer overrun [ 1245.006951][ C0] vkms_vblank_simulate: vblank timer overrun [ 1245.433315][ C0] vkms_vblank_simulate: vblank timer overrun [ 1246.200177][T19630] netlink: 'syz.8.4619': attribute type 2 has an invalid length. [ 1246.726174][ C0] vkms_vblank_simulate: vblank timer overrun [ 1247.033863][ C0] vkms_vblank_simulate: vblank timer overrun [ 1247.134328][ C0] vkms_vblank_simulate: vblank timer overrun [ 1247.641980][T19660] netlink: 1296 bytes leftover after parsing attributes in process `syz.5.4620'. [ 1247.754589][ C0] vkms_vblank_simulate: vblank timer overrun [ 1248.036287][T19669] netlink: 'syz.2.4635': attribute type 2 has an invalid length. [ 1248.141324][T19674] netlink: 60 bytes leftover after parsing attributes in process `syz.6.4638'. [ 1248.274213][ C0] vkms_vblank_simulate: vblank timer overrun [ 1249.144006][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1249.485183][ C0] vkms_vblank_simulate: vblank timer overrun [ 1249.633000][ C0] vkms_vblank_simulate: vblank timer overrun [ 1249.644078][ T1228] usb 3-1: new high-speed USB device number 52 using dummy_hcd [ 1250.271900][ T1228] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 1250.271926][ T1228] usb 3-1: can't read configurations, error -61 [ 1250.396021][ T1228] usb 3-1: new high-speed USB device number 53 using dummy_hcd [ 1250.654327][ T1228] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 1250.654374][ T1228] usb 3-1: can't read configurations, error -61 [ 1250.654802][ T1228] usb usb3-port1: attempt power cycle [ 1250.828445][T19716] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4655'. [ 1250.994133][ T1228] usb 3-1: new high-speed USB device number 54 using dummy_hcd [ 1251.017980][ T1228] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 1251.018021][ T1228] usb 3-1: can't read configurations, error -61 [ 1251.090417][T19725] netlink: 20 bytes leftover after parsing attributes in process `syz.6.4660'. [ 1251.144254][ T1228] usb 3-1: new high-speed USB device number 55 using dummy_hcd [ 1251.168638][ T1228] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 1251.168676][ T1228] usb 3-1: can't read configurations, error -61 [ 1251.169087][ T1228] usb usb3-port1: unable to enumerate USB device [ 1251.344527][T19730] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1251.736536][T19740] lo speed is unknown, defaulting to 1000 [ 1252.175994][T19745] lo speed is unknown, defaulting to 1000 [ 1252.256292][ C0] vkms_vblank_simulate: vblank timer overrun [ 1253.185956][T19766] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4675'. [ 1253.278258][T19767] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1253.433054][T19773] fuse: Unknown parameter '0x0000000000000004' [ 1253.594217][T16390] usb 6-1: new high-speed USB device number 47 using dummy_hcd [ 1253.759039][T16390] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 1253.759076][T16390] usb 6-1: can't read configurations, error -61 [ 1253.901390][T16390] usb 6-1: new high-speed USB device number 48 using dummy_hcd [ 1254.205858][T16390] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 1254.206519][T16390] usb 6-1: can't read configurations, error -61 [ 1254.223265][T16390] usb usb6-port1: attempt power cycle [ 1254.714274][T16390] usb 6-1: new high-speed USB device number 49 using dummy_hcd [ 1254.747954][T16390] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 1254.747993][T16390] usb 6-1: can't read configurations, error -61 [ 1255.034657][T16390] usb 6-1: new high-speed USB device number 50 using dummy_hcd [ 1255.061331][T16390] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 1255.061368][T16390] usb 6-1: can't read configurations, error -61 [ 1255.061801][T16390] usb usb6-port1: unable to enumerate USB device [ 1255.521393][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1256.667890][T19810] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4693'. [ 1257.584106][T18290] usb 6-1: new high-speed USB device number 51 using dummy_hcd [ 1257.744093][T18290] usb 6-1: Using ep0 maxpacket: 16 [ 1257.750932][T18290] usb 6-1: no configurations [ 1257.750948][T18290] usb 6-1: can't read configurations, error -22 [ 1258.278480][T18290] usb 6-1: new high-speed USB device number 52 using dummy_hcd [ 1258.444060][T18290] usb 6-1: Using ep0 maxpacket: 16 [ 1258.444925][T18290] usb 6-1: no configurations [ 1258.444941][T18290] usb 6-1: can't read configurations, error -22 [ 1258.445664][T18290] usb usb6-port1: attempt power cycle [ 1258.507950][T19840] netlink: 60 bytes leftover after parsing attributes in process `syz.8.4704'. [ 1258.804084][T18290] usb 6-1: new high-speed USB device number 53 using dummy_hcd [ 1258.837534][T18290] usb 6-1: Using ep0 maxpacket: 16 [ 1258.838399][T18290] usb 6-1: no configurations [ 1258.838415][T18290] usb 6-1: can't read configurations, error -22 [ 1258.971249][T18290] usb 6-1: new high-speed USB device number 54 using dummy_hcd [ 1259.063313][T18290] usb 6-1: Using ep0 maxpacket: 16 [ 1259.233344][T18290] usb 6-1: no configurations [ 1259.235040][T18290] usb 6-1: can't read configurations, error -22 [ 1259.380707][T18290] usb usb6-port1: unable to enumerate USB device [ 1260.870508][T19878] fuse: Unknown parameter 'fd0x0000000000000004' [ 1261.190852][T19886] netlink: 8 bytes leftover after parsing attributes in process `syz.9.4724'. [ 1261.489488][T18290] usb 7-1: new high-speed USB device number 18 using dummy_hcd [ 1261.641554][T18290] usb 7-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1261.641588][T18290] usb 7-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1261.641626][T18290] usb 7-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1261.641647][T18290] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1261.648265][T19874] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 1261.668750][T18290] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 1261.880689][T16841] usb 9-1: new high-speed USB device number 11 using dummy_hcd [ 1262.031069][T16841] usb 9-1: Using ep0 maxpacket: 16 [ 1262.042281][T16841] usb 9-1: no configurations [ 1262.042300][T16841] usb 9-1: can't read configurations, error -22 [ 1262.164209][T16841] usb 9-1: new high-speed USB device number 12 using dummy_hcd [ 1262.925321][T16841] usb 9-1: Using ep0 maxpacket: 16 [ 1262.933602][T16841] usb 9-1: no configurations [ 1262.933621][T16841] usb 9-1: can't read configurations, error -22 [ 1262.950548][T16841] usb usb9-port1: attempt power cycle [ 1263.000264][T18290] usb 7-1: USB disconnect, device number 18 [ 1263.024325][T19908] fuse: Unknown parameter 'fd0x0000000000000004' [ 1263.288395][T16841] usb 9-1: new high-speed USB device number 13 using dummy_hcd [ 1263.510792][T16841] usb 9-1: Using ep0 maxpacket: 16 [ 1263.511861][T16841] usb 9-1: no configurations [ 1263.511877][T16841] usb 9-1: can't read configurations, error -22 [ 1263.592541][T19913] syz.5.4732: vmalloc error: size 16777216, failed to allocated page array size 32768, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 1263.593018][T19913] CPU: 1 UID: 0 PID: 19913 Comm: syz.5.4732 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1263.593042][T19913] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1263.593059][T19913] Call Trace: [ 1263.593070][T19913] [ 1263.593079][T19913] dump_stack_lvl+0x189/0x250 [ 1263.593113][T19913] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1263.593211][T19913] ? __pfx__printk+0x10/0x10 [ 1263.593235][T19913] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 1263.593263][T19913] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 1263.593292][T19913] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 1263.593323][T19913] warn_alloc+0x22e/0x3b0 [ 1263.593357][T19913] ? __pfx_warn_alloc+0x10/0x10 [ 1263.593390][T19913] ? __get_vm_area_node+0x2bc/0x350 [ 1263.593410][T19913] ? xp_alloc_tx_descs+0x6d/0xc0 [ 1263.593443][T19913] __vmalloc_node_range_noprof+0x690/0x12d0 [ 1263.593465][T19913] ? __alloc_frozen_pages_noprof+0x9f/0x370 [ 1263.593529][T19913] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 1263.593558][T19913] ? rcu_is_watching+0x15/0xb0 [ 1263.593587][T19913] __kvmalloc_node_noprof+0x4a3/0x920 [ 1263.593610][T19913] ? xp_alloc_tx_descs+0x6d/0xc0 [ 1263.593637][T19913] ? xp_alloc_tx_descs+0x6d/0xc0 [ 1263.593665][T19913] ? dev_get_by_index+0x22/0x2e0 [ 1263.593693][T19913] xp_alloc_tx_descs+0x6d/0xc0 [ 1263.593722][T19913] xsk_bind+0xb9e/0xe20 [ 1263.593766][T19913] __sys_bind+0x2cc/0x3e0 [ 1263.593795][T19913] ? __pfx___sys_bind+0x10/0x10 [ 1263.593833][T19913] ? rcu_is_watching+0x15/0xb0 [ 1263.593866][T19913] __x64_sys_bind+0x7a/0x90 [ 1263.593892][T19913] do_syscall_64+0xfa/0xfa0 [ 1263.593919][T19913] ? lockdep_hardirqs_on+0x9c/0x150 [ 1263.593948][T19913] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1263.593964][T19913] ? clear_bhb_loop+0x60/0xb0 [ 1263.593986][T19913] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1263.594003][T19913] RIP: 0033:0x7eff91b4eec9 [ 1263.594027][T19913] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1263.594044][T19913] RSP: 002b:00007eff8fd95038 EFLAGS: 00000246 ORIG_RAX: 0000000000000031 [ 1263.594062][T19913] RAX: ffffffffffffffda RBX: 00007eff91da6090 RCX: 00007eff91b4eec9 [ 1263.594078][T19913] RDX: 0000000000000010 RSI: 0000200000000240 RDI: 0000000000000003 [ 1263.594091][T19913] RBP: 00007eff91bd1f91 R08: 0000000000000000 R09: 0000000000000000 [ 1263.594103][T19913] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1263.594115][T19913] R13: 00007eff91da6128 R14: 00007eff91da6090 R15: 00007ffdfada1c78 [ 1263.594151][T19913] [ 1263.595822][T19913] Mem-Info: [ 1263.595835][T19913] active_anon:273 inactive_anon:7916 isolated_anon:0 [ 1263.595835][T19913] active_file:16299 inactive_file:36687 isolated_file:0 [ 1263.595835][T19913] unevictable:768 dirty:143 writeback:0 [ 1263.595835][T19913] slab_reclaimable:7460 slab_unreclaimable:106603 [ 1263.595835][T19913] mapped:32442 shmem:4446 pagetables:1214 [ 1263.595835][T19913] sec_pagetables:0 bounce:0 [ 1263.595835][T19913] kernel_misc_reclaimable:0 [ 1263.595835][T19913] free:1305791 free_pcp:5620 free_cma:0 [ 1263.595892][T19913] Node 0 active_anon:1092kB inactive_anon:31664kB active_file:64992kB inactive_file:146748kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:129768kB dirty:572kB writeback:0kB shmem:16248kB kernel_stack:13056kB pagetables:4716kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 1263.595940][T19913] Node 1 active_anon:0kB inactive_anon:0kB active_file:204kB inactive_file:0kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB kernel_stack:48kB pagetables:140kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 1263.595982][T19913] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1263.596038][T19913] lowmem_reserve[]: 0 2514 2515 2515 2515 [ 1263.596072][T19913] Node 0 DMA32 free:1307048kB boost:0kB min:3940kB low:6484kB high:9028kB reserved_highatomic:0KB free_highatomic:0KB active_anon:1092kB inactive_anon:31664kB active_file:64992kB inactive_file:146748kB unevictable:1536kB writepending:572kB zspages:0kB present:3129332kB managed:2574612kB mlocked:0kB bounce:0kB free_pcp:22480kB local_pcp:15876kB free_cma:0kB [ 1263.596131][T19913] lowmem_reserve[]: 0 0 1 1 1 [ 1263.596162][T19913] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:1388kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1263.596214][T19913] lowmem_reserve[]: 0 0 0 0 0 [ 1263.596245][T19913] Node 1 Normal free:3900756kB boost:0kB min:6360kB low:10468kB high:14576kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:204kB inactive_file:0kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1263.596301][T19913] lowmem_reserve[]: 0 0 0 0 0 [ 1263.596332][T19913] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 1263.596447][T19913] Node 0 DMA32: 3*4kB (UME) 86*8kB (ME) 33*16kB (E) 137*32kB (UME) 176*64kB (UME) 105*128kB (UME) 79*256kB (ME) 24*512kB (UME) 13*1024kB (UME) 5*2048kB (UM) 298*4096kB (M) = 1306988kB [ 1263.596595][T19913] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1263.596698][T19913] Node 1 Normal: 215*4kB (UME) 45*8kB (UME) 37*16kB (UME) 232*32kB (UME) 109*64kB (UME) 24*128kB (UME) 16*256kB (UME) 7*512kB (UM) 3*1024kB (UME) 2*2048kB (UE) 944*4096kB (M) = 3900756kB [ 1263.597147][T19913] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1263.597163][T19913] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1263.597180][T19913] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1263.597196][T19913] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1263.597211][T19913] 57454 total pagecache pages [ 1263.597222][T19913] 0 pages in swap cache [ 1263.597230][T19913] Free swap = 124996kB [ 1263.597237][T19913] Total swap = 124996kB [ 1263.597245][T19913] 2097051 pages RAM [ 1263.597252][T19913] 0 pages HighMem/MovableOnly [ 1263.597259][T19913] 421436 pages reserved [ 1263.597265][T19913] 0 pages cma reserved [ 1263.657992][T16841] usb 9-1: new high-speed USB device number 14 using dummy_hcd [ 1263.734247][T16841] usb 9-1: Using ep0 maxpacket: 16 [ 1263.744217][T16841] usb 9-1: no configurations [ 1263.744235][T16841] usb 9-1: can't read configurations, error -22 [ 1263.794150][T16841] usb usb9-port1: unable to enumerate USB device [ 1265.492350][T19930] netlink: 1296 bytes leftover after parsing attributes in process `syz.9.4739'. [ 1265.746544][T19936] tipc: Enabled bearer , priority 0 [ 1265.748921][T19933] syzkaller0: entered promiscuous mode [ 1265.748943][T19933] syzkaller0: entered allmulticast mode [ 1265.754210][ C0] vkms_vblank_simulate: vblank timer overrun [ 1265.832227][ C0] vkms_vblank_simulate: vblank timer overrun [ 1265.834072][T19933] tipc: Resetting bearer [ 1265.884228][T19932] tipc: Resetting bearer [ 1266.744930][T19932] tipc: Disabling bearer [ 1266.774141][T18289] tipc: Node number set to 3890551682 [ 1268.310967][T19958] gfs2: error -5 reading superblock [ 1268.700914][T19961] netlink: 20 bytes leftover after parsing attributes in process `syz.6.4751'. [ 1269.015227][ C0] vkms_vblank_simulate: vblank timer overrun [ 1269.191825][ C0] vkms_vblank_simulate: vblank timer overrun [ 1269.236753][T19957] netlink: 60 bytes leftover after parsing attributes in process `syz.9.4750'. [ 1270.147659][ C0] vkms_vblank_simulate: vblank timer overrun [ 1270.494750][T19985] tipc: Enabled bearer , priority 0 [ 1270.495895][T19985] syzkaller0: entered promiscuous mode [ 1270.495918][T19985] syzkaller0: entered allmulticast mode [ 1270.499640][T19985] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 1270.546261][T19987] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4760'. [ 1270.565829][ C0] vkms_vblank_simulate: vblank timer overrun [ 1270.704270][T19984] tipc: Resetting bearer [ 1270.916717][T19984] tipc: Disabling bearer [ 1271.594129][T17825] Bluetooth: hci4: command 0x0406 tx timeout [ 1271.903857][T20001] netlink: 1296 bytes leftover after parsing attributes in process `syz.9.4761'. [ 1272.483353][ C0] vkms_vblank_simulate: vblank timer overrun [ 1272.860242][T20012] lo speed is unknown, defaulting to 1000 [ 1273.697723][ C0] vkms_vblank_simulate: vblank timer overrun [ 1273.822965][ C0] vkms_vblank_simulate: vblank timer overrun [ 1273.911259][ C0] vkms_vblank_simulate: vblank timer overrun [ 1273.931450][ C0] vkms_vblank_simulate: vblank timer overrun [ 1273.992286][ C0] vkms_vblank_simulate: vblank timer overrun [ 1274.098584][ C0] vkms_vblank_simulate: vblank timer overrun [ 1274.114811][T20030] tipc: Enabled bearer , priority 0 [ 1274.116845][T20035] syzkaller0: entered promiscuous mode [ 1274.116867][T20035] syzkaller0: entered allmulticast mode [ 1274.127978][T20030] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 1274.311953][ C0] vkms_vblank_simulate: vblank timer overrun [ 1274.370475][ C0] vkms_vblank_simulate: vblank timer overrun [ 1274.854422][T20028] tipc: Resetting bearer [ 1274.908088][T20054] netlink: 1296 bytes leftover after parsing attributes in process `syz.5.4779'. [ 1275.137434][T20028] tipc: Disabling bearer [ 1276.638419][ C0] vkms_vblank_simulate: vblank timer overrun [ 1276.859664][ C0] vkms_vblank_simulate: vblank timer overrun [ 1277.059892][ T37] audit: type=1326 audit(1760506146.467:192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20081 comm="syz.5.4793" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7eff91b4eec9 code=0x0 [ 1277.143498][T20087] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(7) [ 1277.143521][T20087] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 1277.143585][T20087] vhci_hcd vhci_hcd.0: Device attached [ 1277.434169][T16841] usb 43-1: new high-speed USB device number 8 using vhci_hcd [ 1278.246322][ C0] vkms_vblank_simulate: vblank timer overrun [ 1278.365091][T20094] vhci_hcd: connection reset by peer [ 1278.386446][T18220] vhci_hcd: stop threads [ 1278.386465][T18220] vhci_hcd: release socket [ 1278.386541][T18220] vhci_hcd: disconnect device [ 1278.747912][ C0] vkms_vblank_simulate: vblank timer overrun [ 1278.796722][ C0] vkms_vblank_simulate: vblank timer overrun [ 1279.074213][T14561] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 1279.107081][T20126] netlink: 24 bytes leftover after parsing attributes in process `syz.8.4808'. [ 1279.134210][T20127] netlink: 220 bytes leftover after parsing attributes in process `syz.6.4806'. [ 1279.144791][T20127] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input14 [ 1279.242122][T14561] usb 10-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1279.242144][T14561] usb 10-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1279.242166][T14561] usb 10-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1279.242178][T14561] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1279.292217][T20116] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 1279.308589][T14561] usb 10-1: Quirk or no altset; falling back to MIDI 1.0 [ 1279.476124][ C0] vkms_vblank_simulate: vblank timer overrun [ 1279.671960][ C0] vkms_vblank_simulate: vblank timer overrun [ 1280.064438][ C0] vkms_vblank_simulate: vblank timer overrun [ 1280.320821][ T44] usb 10-1: USB disconnect, device number 2 [ 1280.655512][T20154] netlink: 277 bytes leftover after parsing attributes in process `syz.6.4819'. [ 1281.251618][T20166] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 1282.230244][T20209] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4841'. [ 1282.257271][T20206] lo speed is unknown, defaulting to 1000 [ 1282.424271][T18290] usb 7-1: new high-speed USB device number 19 using dummy_hcd [ 1282.544404][T16841] vhci_hcd: vhci_device speed not set [ 1282.576539][T18290] usb 7-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1282.576571][T18290] usb 7-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1282.576610][T18290] usb 7-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1282.576631][T18290] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1282.583330][T20201] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 1282.590154][T18290] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 1282.754233][ T1228] usb 6-1: new high-speed USB device number 55 using dummy_hcd [ 1282.924243][ T1228] usb 6-1: Using ep0 maxpacket: 16 [ 1282.931010][ T1228] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 1282.931054][ T1228] usb 6-1: can't read configurations, error -61 [ 1283.084344][ T1228] usb 6-1: new high-speed USB device number 56 using dummy_hcd [ 1283.673800][ T1228] usb 6-1: Using ep0 maxpacket: 16 [ 1283.677463][ T1228] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 1283.677498][ T1228] usb 6-1: can't read configurations, error -61 [ 1283.678039][ T1228] usb usb6-port1: attempt power cycle [ 1284.456661][T16841] usb 7-1: USB disconnect, device number 19 [ 1284.475338][ T1228] usb 6-1: new high-speed USB device number 57 using dummy_hcd [ 1284.494826][ T1228] usb 6-1: Using ep0 maxpacket: 16 [ 1284.497750][ T1228] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 1284.497785][ T1228] usb 6-1: can't read configurations, error -61 [ 1284.624094][ T1228] usb 6-1: new high-speed USB device number 58 using dummy_hcd [ 1284.644885][ T1228] usb 6-1: Using ep0 maxpacket: 16 [ 1284.649361][ T1228] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 1284.649397][ T1228] usb 6-1: can't read configurations, error -61 [ 1284.649832][ T1228] usb usb6-port1: unable to enumerate USB device [ 1286.000905][T20261] netlink: 60 bytes leftover after parsing attributes in process `syz.2.4861'. [ 1286.958228][T20278] netlink: 28 bytes leftover after parsing attributes in process `syz.5.4865'. [ 1288.425828][T18290] usb 6-1: new high-speed USB device number 59 using dummy_hcd [ 1288.586072][ T44] usb 3-1: new high-speed USB device number 56 using dummy_hcd [ 1288.824523][T18290] usb 6-1: Using ep0 maxpacket: 16 [ 1289.121847][T18290] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 1289.121886][T18290] usb 6-1: can't read configurations, error -61 [ 1289.123131][ T44] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1289.123168][ T44] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1289.123206][ T44] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1289.123238][ T44] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1289.191196][T20294] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1289.213363][ T44] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 1289.336572][T20307] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4877'. [ 1289.424510][T18290] usb 6-1: new high-speed USB device number 60 using dummy_hcd [ 1289.653190][T18290] usb 6-1: Using ep0 maxpacket: 16 [ 1289.962477][T18290] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 1289.962513][T18290] usb 6-1: can't read configurations, error -61 [ 1289.962880][T18290] usb usb6-port1: attempt power cycle [ 1290.127302][T14561] usb 3-1: USB disconnect, device number 56 [ 1290.324148][T18290] usb 6-1: new high-speed USB device number 61 using dummy_hcd [ 1290.344802][T18290] usb 6-1: Using ep0 maxpacket: 16 [ 1290.352812][T18290] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 1290.352835][T18290] usb 6-1: can't read configurations, error -61 [ 1290.489489][T18290] usb 6-1: new high-speed USB device number 62 using dummy_hcd [ 1290.804157][T18290] usb 6-1: Using ep0 maxpacket: 16 [ 1290.820582][T18290] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 1290.820620][T18290] usb 6-1: can't read configurations, error -61 [ 1290.820934][T18290] usb usb6-port1: unable to enumerate USB device [ 1291.263566][T20329] bond0: entered promiscuous mode [ 1291.263602][T20329] bond_slave_0: entered promiscuous mode [ 1291.263839][T20329] bond_slave_1: entered promiscuous mode [ 1291.297979][T20329] batadv0: entered promiscuous mode [ 1291.333574][T20329] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 1291.835711][T20343] netlink: 1296 bytes leftover after parsing attributes in process `syz.2.4892'. [ 1292.413749][ C0] vkms_vblank_simulate: vblank timer overrun [ 1292.536471][ C0] vkms_vblank_simulate: vblank timer overrun [ 1292.588508][ C0] vkms_vblank_simulate: vblank timer overrun [ 1292.686672][ C0] vkms_vblank_simulate: vblank timer overrun [ 1292.706611][ C0] vkms_vblank_simulate: vblank timer overrun [ 1292.934560][T20365] netlink: 20 bytes leftover after parsing attributes in process `syz.6.4900'. [ 1293.188200][T20380] netlink: 20 bytes leftover after parsing attributes in process `syz.6.4907'. [ 1295.639742][ C0] vkms_vblank_simulate: vblank timer overrun [ 1297.218644][T20427] netlink: 20 bytes leftover after parsing attributes in process `syz.5.4922'. [ 1297.409836][T20433] netlink: 60 bytes leftover after parsing attributes in process `syz.2.4925'. [ 1297.928528][T20446] bond0: entered promiscuous mode [ 1297.928552][T20446] bond_slave_0: entered promiscuous mode [ 1297.928788][T20446] bond_slave_1: entered promiscuous mode [ 1297.931644][T20446] batadv0: entered promiscuous mode [ 1297.977675][T20446] debugfs: 'hsr1' already exists in 'hsr' [ 1297.981437][T20446] Cannot create hsr debugfs directory [ 1297.982281][T20446] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 1298.532792][T20460] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4933'. [ 1298.549767][ T44] usb 9-1: new high-speed USB device number 15 using dummy_hcd [ 1298.680642][T20468] netlink: 60 bytes leftover after parsing attributes in process `syz.9.4940'. [ 1298.694244][ T44] usb 9-1: Using ep0 maxpacket: 16 [ 1298.698185][ T44] usb 9-1: unable to read config index 0 descriptor/start: -61 [ 1298.698220][ T44] usb 9-1: can't read configurations, error -61 [ 1298.954422][ T44] usb 9-1: new high-speed USB device number 16 using dummy_hcd [ 1299.114447][ T44] usb 9-1: Using ep0 maxpacket: 16 [ 1299.117650][ T44] usb 9-1: unable to read config index 0 descriptor/start: -61 [ 1299.117686][ T44] usb 9-1: can't read configurations, error -61 [ 1299.123124][ T44] usb usb9-port1: attempt power cycle [ 1299.222055][T20482] lo speed is unknown, defaulting to 1000 [ 1299.605184][ T44] usb 9-1: new high-speed USB device number 17 using dummy_hcd [ 1299.834841][ T44] usb 9-1: Using ep0 maxpacket: 16 [ 1299.836887][ T44] usb 9-1: unable to read config index 0 descriptor/start: -61 [ 1299.836909][ T44] usb 9-1: can't read configurations, error -61 [ 1299.911925][T20488] Bluetooth: MGMT ver 1.23 [ 1299.968573][ T44] usb 9-1: new high-speed USB device number 18 using dummy_hcd [ 1299.973695][T20489] lo speed is unknown, defaulting to 1000 [ 1299.999765][ T44] usb 9-1: Using ep0 maxpacket: 16 [ 1300.002866][ T44] usb 9-1: unable to read config index 0 descriptor/start: -61 [ 1300.002903][ T44] usb 9-1: can't read configurations, error -61 [ 1300.003427][ T44] usb usb9-port1: unable to enumerate USB device [ 1300.262524][ T1319] ieee802154 phy0 wpan0: encryption failed: -22 [ 1300.262597][ T1319] ieee802154 phy1 wpan1: encryption failed: -22 [ 1302.478044][T20531] netlink: 'syz.2.4964': attribute type 1 has an invalid length. [ 1302.478070][T20531] netlink: 224 bytes leftover after parsing attributes in process `syz.2.4964'. [ 1305.758802][T20566] tipc: Enabled bearer , priority 0 [ 1305.763409][T20566] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 1305.900974][T20575] tipc: Resetting bearer [ 1305.991866][T20578] netlink: 9896 bytes leftover after parsing attributes in process `syz.2.4982'. [ 1306.466568][T20582] BUG: sleeping function called from invalid context at kernel/locking/spinlock_rt.c:48 [ 1306.466583][T20582] in_atomic(): 1, irqs_disabled(): 0, non_block: 0, pid: 20582, name: syz.2.4982 [ 1306.466592][T20582] preempt_count: 1, expected: 0 [ 1306.466597][T20582] RCU nest depth: 2, expected: 2 [ 1306.466603][T20582] 5 locks held by syz.2.4982/20582: [ 1306.466610][T20582] #0: ffff88803120d950 (sk_lock-AF_VSOCK){+.+.}-{0:0}, at: vsock_connect+0x152/0xe20 [ 1306.466649][T20582] #1: ffffffff8d7aa4c0 (rcu_read_lock){....}-{1:3}, at: bpf_trace_run9+0x1ec/0x500 [ 1306.466675][T20582] #2: ffff8880b8832c88 ((stream_local_lock)){+.+.}-{3:3}, at: __bpf_stream_push_str+0x211/0xbe0 [ 1306.466703][T20582] #3: ffffffff8d7aa4c0 (rcu_read_lock){....}-{1:3}, at: rt_spin_trylock+0x10d/0x2b0 [ 1306.466730][T20582] #4: ffff8880b883f6e8 (&s->lock_key#5){+.+.}-{3:3}, at: ___slab_alloc+0x12f/0x13f0 [ 1306.466759][T20582] Preemption disabled at: [ 1306.466762][T20582] [] __slab_alloc+0xea/0x1f0 [ 1306.466782][T20582] CPU: 0 UID: 0 PID: 20582 Comm: syz.2.4982 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1306.466794][T20582] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1306.466801][T20582] Call Trace: [ 1306.466805][T20582] [ 1306.466811][T20582] dump_stack_lvl+0x189/0x250 [ 1306.466826][T20582] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1306.466839][T20582] ? __pfx__printk+0x10/0x10 [ 1306.466854][T20582] ? print_lock_name+0xde/0x100 [ 1306.466866][T20582] ? __slab_alloc+0xea/0x1f0 [ 1306.466882][T20582] __might_resched+0x44b/0x5d0 [ 1306.466899][T20582] ? __slab_alloc+0xea/0x1f0 [ 1306.466911][T20582] ? __pfx___might_resched+0x10/0x10 [ 1306.466925][T20582] ? ___slab_alloc+0x12f/0x13f0 [ 1306.466940][T20582] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 1306.466956][T20582] ? lockdep_hardirqs_on+0x9c/0x150 [ 1306.466974][T20582] rt_spin_lock+0xc7/0x3e0 [ 1306.466988][T20582] ? __pfx_rt_spin_lock+0x10/0x10 [ 1306.467000][T20582] ? __lock_acquire+0xab9/0xd20 [ 1306.467015][T20582] ___slab_alloc+0x12f/0x13f0 [ 1306.467031][T20582] ? __set_page_owner+0x25c/0x490 [ 1306.467045][T20582] __slab_alloc+0xc6/0x1f0 [ 1306.467057][T20582] ? __set_page_owner+0x25c/0x490 [ 1306.467068][T20582] __kmalloc_cache_noprof+0xec/0x6c0 [ 1306.467079][T20582] ? __set_page_owner+0x25c/0x490 [ 1306.467091][T20582] __set_page_owner+0x25c/0x490 [ 1306.467103][T20582] ? __pfx___set_page_owner+0x10/0x10 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1306.467113][T20582] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 1306.467130][T20582] post_alloc_hook+0x240/0x2a0 [ 1306.467143][T20582] get_page_from_freelist+0x28c0/0x2960 [ 1306.467164][T20582] ? lockdep_unlock+0x89/0x120 [ 1306.467177][T20582] ? __lock_acquire+0xab9/0xd20 [ 1306.467198][T20582] alloc_frozen_pages_nolock_noprof+0xbc/0x150 [ 1306.467218][T20582] alloc_pages_nolock_noprof+0xa/0x30 [ 1306.467232][T20582] bpf_stream_page_replace+0x19/0x1e0 [ 1306.467246][T20582] __bpf_stream_push_str+0x35c/0xbe0 [ 1306.467264][T20582] ? __pfx___bpf_stream_push_str+0x10/0x10 [ 1306.467284][T20582] bpf_stream_stage_printk+0x14e/0x1c0 [ 1306.467296][T20582] ? __pfx_find_from_stack_cb+0x10/0x10 [ 1306.467307][T20582] ? arch_bpf_stack_walk+0x112/0x170 [ 1306.467322][T20582] ? __pfx_bpf_stream_stage_printk+0x10/0x10 [ 1306.467338][T20582] ? arch_stack_walk+0xfc/0x150 [ 1306.467355][T20582] bpf_prog_report_may_goto_violation+0xc4/0x190 [ 1306.467371][T20582] ? __pfx_bpf_prog_report_may_goto_violation+0x10/0x10 [ 1306.467387][T20582] ? irqentry_exit+0x74/0x90 [ 1306.467413][T20582] ? read_tsc+0x9/0x20 [ 1306.467429][T20582] bpf_check_timed_may_goto+0xaa/0xb0 [ 1306.467446][T20582] arch_bpf_timed_may_goto+0x21/0x40 [ 1306.467463][T20582] bpf_prog_6fd842a53d323cc5+0x53/0x5f [ 1306.467474][T20582] bpf_trace_run9+0x2de/0x500 [ 1306.467486][T20582] ? bpf_trace_run9+0x1ec/0x500 [ 1306.467497][T20582] ? __pfx_bpf_trace_run9+0x10/0x10 [ 1306.467522][T20582] __bpf_trace_virtio_transport_alloc_pkt+0x2d7/0x340 [ 1306.467541][T20582] ? __pfx___bpf_trace_virtio_transport_alloc_pkt+0x10/0x10 [ 1306.467552][T20582] ? kmem_cache_alloc_node_noprof+0x291/0x6e0 [ 1306.467568][T20582] ? __alloc_skb+0x112/0x2d0 [ 1306.467590][T20582] ? __alloc_skb+0x1bc/0x2d0 [ 1306.467609][T20582] ? __local_bh_enable+0x28c/0x410 [ 1306.467628][T20582] virtio_transport_alloc_skb+0x10cc/0x1130 [ 1306.467653][T20582] ? __pfx_virtio_transport_alloc_skb+0x10/0x10 [ 1306.467672][T20582] ? rt_spin_unlock+0x150/0x200 [ 1306.467686][T20582] virtio_transport_send_pkt_info+0x6be/0x1100 [ 1306.467712][T20582] virtio_transport_connect+0xa7/0x100 [ 1306.467725][T20582] ? __pfx_virtio_transport_connect+0x10/0x10 [ 1306.467741][T20582] ? __pfx_vsock_auto_bind+0x10/0x10 [ 1306.467756][T20582] ? vsock_assign_transport+0x5ed/0x770 [ 1306.467773][T20582] vsock_connect+0xb8b/0xe20 [ 1306.467798][T20582] ? __might_fault+0xb0/0x130 [ 1306.467809][T20582] ? __pfx_vsock_connect+0x10/0x10 [ 1306.467825][T20582] ? __pfx_autoremove_wake_function+0x10/0x10 [ 1306.467847][T20582] ? bpf_lsm_socket_connect+0x9/0x20 [ 1306.467860][T20582] __sys_connect+0x323/0x450 [ 1306.467876][T20582] ? __pfx___sys_connect+0x10/0x10 [ 1306.467897][T20582] ? rcu_is_watching+0x15/0xb0 [ 1306.467915][T20582] __x64_sys_connect+0x7a/0x90 [ 1306.467930][T20582] do_syscall_64+0xfa/0xfa0 [ 1306.467944][T20582] ? lockdep_hardirqs_on+0x9c/0x150 [ 1306.467959][T20582] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1306.467970][T20582] ? clear_bhb_loop+0x60/0xb0 [ 1306.467982][T20582] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1306.467992][T20582] RIP: 0033:0x7fafe40beec9 [ 1306.468003][T20582] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1306.468012][T20582] RSP: 002b:00007fafe22fd038 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 1306.468022][T20582] RAX: ffffffffffffffda RBX: 00007fafe4316090 RCX: 00007fafe40beec9 [ 1306.468030][T20582] RDX: 0000000000000010 RSI: 0000200000000100 RDI: 0000000000000008 [ 1306.468037][T20582] RBP: 00007fafe4141f91 R08: 0000000000000000 R09: 0000000000000000 [ 1306.468044][T20582] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1306.468051][T20582] R13: 00007fafe4316128 R14: 00007fafe4316090 R15: 00007ffdead379f8 [ 1306.468069][T20582] [ 1307.254707][T20565] tipc: Disabling bearer [ 1309.926712][T18925] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1310.160128][T18925] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1310.397228][T18925] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1310.618632][T18925] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1313.053111][T18925] bond0 (unregistering): Released all slaves [ 1313.066806][T18925] bond1 (unregistering): Released all slaves [ 1313.176623][T18925] : left promiscuous mode [ 1313.374293][T18925] tipc: Left network mode [ 1314.214260][T18925] hsr_slave_0: left promiscuous mode [ 1314.238066][T18925] hsr_slave_1: left promiscuous mode [ 1314.282171][T18925] veth1_macvtap: left promiscuous mode [ 1314.282250][T18925] veth0_macvtap: left promiscuous mode [ 1314.282400][T18925] veth1_vlan: left promiscuous mode [ 1314.282490][T18925] veth0_vlan: left promiscuous mode