last executing test programs: 13.499787624s ago: executing program 2 (id=390): bind$alg(0xffffffffffffffff, 0x0, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(0x0, 0x0, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000040), 0x6) r2 = socket$unix(0x1, 0x1, 0x0) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000140)={0x1f, 0xffff, 0x2}, 0x6) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r2, 0x84, 0x6, &(0x7f0000000340)={0x0, @in6={{0xa, 0x4e24, 0x7, @local, 0xe7}}}, &(0x7f0000000100)=0x84) r6 = socket$inet6(0x10, 0x3, 0x0) sendmsg$inet(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r4, 0x84, 0x7b, &(0x7f0000000400)={r5, 0x5}, 0x8) socket$inet_sctp(0x2, 0x1, 0x84) openat$comedi(0xffffff9c, &(0x7f0000000040)='/dev/comedi3\x00', 0x2000, 0x0) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCDELRT(r4, 0x890c, &(0x7f0000000480)={0x0, @llc={0x1a, 0x338, 0x8, 0x0, 0x6, 0x9}, @vsock={0x28, 0x0, 0xffffffff, @hyper}, @l2={0x1f, 0x7ff, @any, 0xf, 0x1}, 0xfff6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4f66bf67, 0x5, 0x9e}) ioctl$HCIINQUIRY(r7, 0x400448ca, 0x0) syz_80211_inject_frame(&(0x7f00000000c0), &(0x7f0000000100)=ANY=[], 0x36) bind$bt_hci(r7, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000600)=ANY=[@ANYBLOB], 0x294}, 0x1, 0x0, 0x0, 0x631c431b469d7641}, 0x20010010) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x10, 0x0, 0x0) 12.134775975s ago: executing program 2 (id=391): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000032680)=""/102400, 0x19000) r1 = socket$netlink(0x10, 0x3, 0x15) writev(r1, &(0x7f0000000100)=[{&(0x7f0000000380)="5800000014000300000000000000679abeff3d425f9cc3f4ff7f4e32f61bcdf1e422000000000100804824cabecc4b381eaadc28f23457e792945f64009400050028925aaa000000c600000000000000feff2c707f8f00ff5a60525808f91cb2cd3d8586dd77daf2f7a5512cd5f0c6456c6fa101e8c10d18a759023acdc938c9eab14910348ac0e2b7cde8f59f2c59690d89c9e7b0f911aaef7612061fbef38104ba0e16", 0xa4}], 0x1) r2 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r2, 0xc004500a, &(0x7f00000001c0)=0x10001) ioctl$SNDCTL_DSP_SETFMT(r2, 0xc0045005, &(0x7f0000000040)=0x10000) read$dsp(r2, &(0x7f00000000c0)=""/108, 0x6c) prlimit64(0x0, 0x8, &(0x7f00000002c0)={0x2, 0x800000088}, 0x0) sched_setscheduler(0x0, 0x5, 0x0) r3 = getpid() bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_buf(r4, 0x29, 0x22, &(0x7f0000000000), 0x6b) mount(&(0x7f0000000000)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='jfs\x00', 0x1a0c000, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x10010, 0xffffffffffffffff, 0xb3d68000) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) sched_setscheduler(r3, 0x2, &(0x7f0000000240)=0x2) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x16, 0x16, &(0x7f0000000240)=ANY=[@ANYBLOB="61124c00000000006113500000000000bf2000000000000007000000180000003d030100000000009500f000000000006926000000000000bf67000000000000560602000fff07006706000020000000170200000ee60000bf050000000000002d350000000000006507000002080000070700004c0000001f75000000000000bf54000000000000070400000400f9ffad35010000000000840400000000000014000000000000009500000000000000db13d5d8b741f2cdaabc83df03395287fd51a700ea6553f304000000815dcf00c3eebc52267b042d196bde7c382d21ff79a8583a7482c5994747e19325b1ee980cbd800d845dacbcf5ad8cdbc7abf9"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector}, 0x48) openat$cgroup(0xffffffffffffffff, &(0x7f00000005c0)='syz1\x00', 0x200002, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000780)=[{{0x0, 0x0, &(0x7f0000000340)=[{0x0}, {0x0}], 0x2, &(0x7f00000004c0)=""/193, 0xc1}, 0x7f}], 0x1, 0x40012042, 0x0) 10.564233798s ago: executing program 3 (id=395): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x60a80, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x2a}, 0x94) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000000180)=""/246) writev(r1, &(0x7f0000001a80)=[{&(0x7f0000000600)="52d55b4341bb24", 0x7}, {0x0}], 0x2) 9.908871839s ago: executing program 3 (id=396): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@remote, @in6=@dev, 0x0, 0x0, 0x4e20, 0x0, 0xa}, {0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x10000, 0x5}, {}, 0x4, 0x0, 0x0, 0x0, 0x0, 0x1}, {{@in=@multicast1, 0x0, 0x2b}, 0x0, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x1}}, 0xe8) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="020b000102"], 0x10}}, 0x0) sendmsg$key(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x158) recvmmsg(r1, &(0x7f0000001100)=[{{0x0, 0x0, 0x0}, 0x8}, {{0x0, 0x0, 0x0}, 0x7}], 0x2, 0x0, 0x0) 9.907519079s ago: executing program 1 (id=397): socket$nl_xfrm(0x10, 0x3, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000400)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000002c0)=0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000004c0)='rcu_utilization\x00', r3}, 0x18) syz_emit_ethernet(0x1e, &(0x7f0000000180)=ANY=[@ANYBLOB="aaaaaaaaaaaafc9c370000f2000d03020000c0050100002d9e19d3f794ab2c"], 0x0) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x0, &(0x7f0000000300)='usrquota') chdir(0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) quotactl_fd$Q_SETQUOTA(r4, 0xffffffff80000800, 0x0, 0x0) r5 = openat(0xffffffffffffff9c, 0x0, 0x42, 0x1ff) write$binfmt_elf64(r5, 0x0, 0x78) close(r5) open(&(0x7f00000000c0)='./file0\x00', 0x60c2, 0x0) rename(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='./file1\x00') fsopen(&(0x7f0000000140)='erofs\x00', 0x0) r6 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = eventfd2(0x0, 0x80801) ioctl$KVM_IOEVENTFD(r7, 0x4040ae79, &(0x7f0000000040)={0x3, 0xf000, 0x0, r8, 0x8}) ioctl$KVM_IOEVENTFD(r7, 0x4040ae79, &(0x7f0000000900)={0x0, 0x0, 0x4, r8, 0x9}) 9.767170421s ago: executing program 3 (id=398): add_key$keyring(&(0x7f00000001c0), &(0x7f0000000000)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) keyctl$join(0x1, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet_smc(0x2b, 0x1, 0x0) r0 = syz_io_uring_setup(0x9e, &(0x7f0000000000)={0x0, 0xec25, 0x0, 0x2, 0x4000032f}, &(0x7f0000000240)=0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000002000)=""/102400, 0x19000) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) io_uring_enter(r0, 0x47ba, 0x0, 0x0, 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup\x00', 0x0, 0x13) r4 = openat$cgroup_ro(r3, &(0x7f0000000000)='pids.events\x00', 0x0, 0x0) read$FUSE(r4, &(0x7f0000002540)={0x2020}, 0x2020) r5 = openat$adsp1(0xffffffffffffff9c, 0x0, 0x402, 0x0) ioctl$SNDCTL_DSP_SPEED(r5, 0xc0045002, &(0x7f00000001c0)) ioctl$SNDCTL_DSP_CHANNELS(0xffffffffffffffff, 0xc0045006, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0f000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0xd, &(0x7f0000000f80)=ANY=[@ANYBLOB="1800000000000f00000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000085000000a000000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 8.865689275s ago: executing program 1 (id=399): bind$alg(0xffffffffffffffff, 0x0, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(0x0, 0x0, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000040), 0x6) r2 = socket$unix(0x1, 0x1, 0x0) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000140)={0x1f, 0xffff, 0x2}, 0x6) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r2, 0x84, 0x6, &(0x7f0000000340)={0x0, @in6={{0xa, 0x4e24, 0x7, @local, 0xe7}}}, &(0x7f0000000100)=0x84) r6 = socket$inet6(0x10, 0x3, 0x0) sendmsg$inet(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r4, 0x84, 0x7b, &(0x7f0000000400)={r5, 0x5}, 0x8) socket$inet_sctp(0x2, 0x1, 0x84) openat$comedi(0xffffff9c, &(0x7f0000000040)='/dev/comedi3\x00', 0x2000, 0x0) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCDELRT(r4, 0x890c, &(0x7f0000000480)={0x0, @llc={0x1a, 0x338, 0x8, 0x0, 0x6, 0x9}, @vsock={0x28, 0x0, 0xffffffff, @hyper}, @l2={0x1f, 0x7ff, @any, 0xf, 0x1}, 0xfff6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4f66bf67, 0x5, 0x9e}) ioctl$HCIINQUIRY(r7, 0x400448ca, 0x0) syz_80211_inject_frame(&(0x7f00000000c0), &(0x7f0000000100)=ANY=[], 0x36) bind$bt_hci(r7, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000600)=ANY=[@ANYBLOB], 0x294}, 0x1, 0x0, 0x0, 0x631c431b469d7641}, 0x20010010) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x10, 0x0, 0x0) 8.256068084s ago: executing program 2 (id=400): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x1f, 0x10, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x80}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x20000002}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0xa6}}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0xa8}}]}, &(0x7f0000000000)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r2 = getpid() r3 = syz_pidfd_open(r2, 0x0) syz_usb_connect(0x6, 0x2d0, &(0x7f0000000a80)=ANY=[], &(0x7f0000000280)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x300, 0x4, 0x2, 0xf4, 0x20, 0x93}, 0x27, &(0x7f00000001c0)=ANY=[], 0x1, [{0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x406}}]}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) process_madvise(r3, &(0x7f00000001c0)=[{&(0x7f0000000340)="82892997849e91b1ed0381f660a4ae1fa8b70e90aa69141282d407f028b91e26107a64b4b0b274f3768bd506103861279999f8bca04b875f05a42813a256dc8cfb3d8c037fcd66a2fb9eaa152a716cf718b8c4e7ff06960fb9ed664e7db61fd7f482ed89b0178beaa99afdb46e89f374e2205deed071bc7e36a286c603761a96666c7a1f3ae66f7be5d607a209f5de21738b6d0e06b0ff3f20fe06173dcc0f03ceb4c435eaf923d9f49f97b9ca5936cd5ea0e2d1669a88ea245c4f83cb5c0f15391d45f6b7aae89a0bb14b5116", 0xcd}, {&(0x7f0000000600)="bc093cd690a4e52bbe7f5f6965d26a68f378763a8805d5c9ff097aaae1b03b07169dc11bde908af2528698e2a00b8efe3c07e84c123c73f391aad1b38f9f793402d3472ee549457581f5eb0b28df41824c2660a039dff08361746bd9c3cffa9254d0c25301fdf8b83e864319220e0003c287f73700076cba9ddbd1e1b25d8f1d426362ee6fc1072873fa320d1e201c4b9e640af525b96d3f7b30a15b7ba831e1c09178e741a65bef55db87c64d6520d2990113e033d04b2573e5f996a62681dc2c4801af442b8299aa62a672540198700b18ee388d0288d7f6924739289b580b5f9f19c637643c13d11816bec6", 0xed}, {&(0x7f0000000800)="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", 0x1000}], 0x3, 0x2, 0x0) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket(0x5, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x4) r7 = creat(&(0x7f00000005c0)='./file0\x00', 0x0) write$P9_RSTATu(r7, 0x0, 0x5a) mount(&(0x7f00000000c0)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)='rootfs\x00', 0xa08010, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x8) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40186f40, &(0x7f0000000440)=0x1f) setns(r3, 0x24020000) syz_clone(0x120e1100, 0x0, 0x0, 0x0, 0x0, 0x0) 8.184010005s ago: executing program 1 (id=401): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[], 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) munmap(&(0x7f0000002000/0x3000)=nil, 0x3000) syz_open_procfs(0x0, &(0x7f0000002200)='net/ip_mr_vif\x00') keyctl$read(0xb, 0x0, 0x0, 0x0) syz_usb_connect$cdc_ncm(0x6, 0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000280)={0x2, &(0x7f00000001c0)=[{0x20, 0x0, 0x0, 0x8}, {0x4e2c, 0x2, 0x1, 0x2}]}) syz_open_dev$admmidi(&(0x7f00000000c0), 0x4, 0x686c80) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x840, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './cgroup\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mmap$snddsp(&(0x7f00003c6000/0x1000)=nil, 0x1000, 0x2000004, 0xc010, 0xffffffffffffffff, 0x2000) r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000005d00)=ANY=[@ANYBLOB="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"], 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) mbind(&(0x7f0000a45000/0x1000)=nil, 0x1000, 0x2, 0x0, 0x3, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x3, &(0x7f0000004240)=0x40000006, 0x4) 7.344162098s ago: executing program 0 (id=402): mkdirat(0xffffffffffffff9c, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) r4 = open(&(0x7f0000000000)='.\x00', 0x0, 0x4) fcntl$notify(r4, 0x402, 0x8000003d) close_range(r3, r4, 0x0) 6.212487675s ago: executing program 0 (id=403): clock_gettime(0x3, &(0x7f0000000040)) fanotify_init(0x40, 0x1400) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='fdinfo/3\x00') openat$cgroup_subtree(r0, &(0x7f00000002c0), 0x2, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) bind$inet(0xffffffffffffffff, 0x0, 0x0) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f00000001c0)=0x9a, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8d}, 0x0) gettid() mknod(&(0x7f0000000180)='./file0\x00', 0x1ffa, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000100)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000002700)=""/102392, 0x18ff8) setsockopt$packet_int(r1, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000240)=@req3={0x1000, 0x1, 0x1000, 0x1, 0x8, 0xf85, 0x3}, 0x1c) syz_emit_ethernet(0x3e, &(0x7f00000004c0)=ANY=[], 0x0) read$eventfd(r0, &(0x7f0000000080), 0x51) write$P9_RWSTAT(r0, &(0x7f00000000c0)={0x7, 0x7f, 0x1}, 0x7) recvfrom$inet(0xffffffffffffffff, &(0x7f0000000100)=""/75, 0x4b, 0x10000, &(0x7f0000000280)={0x2, 0x4e23, @multicast2}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) 5.505547636s ago: executing program 0 (id=404): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) symlink(&(0x7f0000000000)='.\x00', &(0x7f0000000040)='./file0\x00') socket$netlink(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x80801) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0xa031, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x4}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@ipv4_newroute={0x1c, 0x1a, 0x1, 0x70bd29, 0x0, {0x2, 0x20, 0x20, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2000}}, 0x1c}}, 0x0) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000940)=@newtfilter={0x158, 0x2c, 0xd27, 0x70bd25, 0x8000, {0x0, 0x0, 0x0, r5, {0x0, 0x7}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_flower={{0xb}, {0x128, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS_MASK={0x8, 0x55, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0x4}]}, @TCA_FLOWER_KEY_ENC_OPTS={0x1c, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0xc, 0x2, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x5}]}, @TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0xc, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_INDEX={0x8, 0x2, 0x49}]}]}, @TCA_FLOWER_KEY_CT_ZONE={0x6, 0x5d, 0x5}, @TCA_FLOWER_KEY_ENC_OPTS_MASK={0xdc, 0x55, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0x3c, 0x2, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x4}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x3000000}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0xc00}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0xff}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x2}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x9}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x5ac}]}, @TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0x2c, 0x2, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x86}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x6}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x1}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x6}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x8}]}, @TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0x34, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_GENEVE_CLASS={0x6, 0x1, 0x19d}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_DATA={0x5, 0x3, 0x3}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_CLASS={0x6, 0x1, 0x4}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_TYPE={0x5, 0x2, 0x6}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_CLASS={0x6, 0x1, 0x9}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_DATA={0x5, 0x3, 0xe7}]}, @TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0x4}, @TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0x2c, 0x2, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x7}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x5}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0xf2}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0xffff}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x5}]}, @TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0xc, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_GENEVE_DATA={0x5, 0x3, 0xb5}]}]}, @TCA_FLOWER_KEY_ARP_THA={0xa, 0x41, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x37}}, @TCA_FLOWER_KEY_TCP_SRC={0x6}, @TCA_FLOWER_KEY_ICMPV6_CODE={0x5}]}}]}, 0x158}, 0x1, 0x0, 0x0, 0x80}, 0x800) 5.437955137s ago: executing program 3 (id=405): syz_pidfd_open(0x0, 0x0) r0 = epoll_create1(0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) fcntl$dupfd(r0, 0x0, r0) r2 = socket(0x1, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)=ANY=[@ANYRES32=r3, @ANYRES32, @ANYBLOB='&'], 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) getpid() bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r3, &(0x7f0000000180), &(0x7f00000000c0)=@tcp6=r2}, 0x20) bind$unix(r2, &(0x7f0000000240)=@file={0x1, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000001680)=[{{&(0x7f0000000380)=@file={0x1, './file0\x00'}, 0x6e, 0x0}}], 0x1, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/fib_triestat\x00') 5.073144542s ago: executing program 2 (id=406): sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x84) syz_emit_ethernet(0x52, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa"], 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r0 = add_key$user(&(0x7f00000002c0), &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000280)="d25a9850a9d7", 0x6, 0xfffffffffffffffe) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000018c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB='H'], 0x48}, 0x1, 0x0, 0x0, 0x4000011}, 0x0) r1 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r0, r1, r0}, 0x0, 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0) add_key$user(&(0x7f0000000080), 0x0, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = dup(r3) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x3, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r3, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 4.975362614s ago: executing program 1 (id=407): socket$nl_xfrm(0x10, 0x3, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000400)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000002c0)=0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000004c0)='rcu_utilization\x00', r3}, 0x18) syz_emit_ethernet(0x1e, &(0x7f0000000180)=ANY=[@ANYBLOB="aaaaaaaaaaaafc9c370000f2000d03020000c0050100002d9e19d3f794ab2c"], 0x0) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x0, &(0x7f0000000300)='usrquota') chdir(0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) quotactl_fd$Q_SETQUOTA(r4, 0xffffffff80000800, 0x0, 0x0) r5 = openat(0xffffffffffffff9c, 0x0, 0x42, 0x1ff) write$binfmt_elf64(r5, 0x0, 0x78) close(r5) open(&(0x7f00000000c0)='./file0\x00', 0x60c2, 0x0) rename(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='./file1\x00') fsopen(&(0x7f0000000140)='erofs\x00', 0x0) r6 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = eventfd2(0x0, 0x80801) ioctl$KVM_IOEVENTFD(r7, 0x4040ae79, &(0x7f0000000040)={0x3, 0xf000, 0x0, r8, 0x8}) ioctl$KVM_IOEVENTFD(r7, 0x4040ae79, &(0x7f0000000900)={0x0, 0x0, 0x4, r8, 0x9}) 3.976353569s ago: executing program 0 (id=408): bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0a0000000400000004000000"], 0x50) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_TTL={0x5, 0x4, 0x3}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20040001}, 0x1) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df85000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000180), 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) syz_open_dev$sg(0x0, 0x80000000, 0x103001) socket$vsock_stream(0x28, 0x1, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0, 0x2cc}, 0x1, 0x0, 0x0, 0xc000}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10}, 0x40004) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="340000003e000900000000000008000003000000040004"], 0x34}}, 0x84) r3 = socket$kcm(0x29, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x94) r5 = socket$kcm(0x2, 0x1, 0x0) sendmsg$inet(r5, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x20000811) ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x89e0, &(0x7f0000000040)={r5, r4}) sendmsg$kcm(r3, &(0x7f0000002080)={0x0, 0x0, &(0x7f0000002000)=[{&(0x7f0000000880)="1a", 0x100000}], 0x1}, 0x0) close(r3) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000ac0), 0x141a02, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) 3.95875863s ago: executing program 3 (id=409): bind$alg(0xffffffffffffffff, 0x0, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(0x0, 0x0, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000040), 0x6) r2 = socket$unix(0x1, 0x1, 0x0) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000140)={0x1f, 0xffff, 0x2}, 0x6) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r2, 0x84, 0x6, &(0x7f0000000340)={0x0, @in6={{0xa, 0x4e24, 0x7, @local, 0xe7}}}, &(0x7f0000000100)=0x84) r6 = socket$inet6(0x10, 0x3, 0x0) sendmsg$inet(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r4, 0x84, 0x7b, &(0x7f0000000400)={r5, 0x5}, 0x8) socket$inet_sctp(0x2, 0x1, 0x84) openat$comedi(0xffffff9c, &(0x7f0000000040)='/dev/comedi3\x00', 0x2000, 0x0) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCDELRT(r4, 0x890c, &(0x7f0000000480)={0x0, @llc={0x1a, 0x338, 0x8, 0x0, 0x6, 0x9}, @vsock={0x28, 0x0, 0xffffffff, @hyper}, @l2={0x1f, 0x7ff, @any, 0xf, 0x1}, 0xfff6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4f66bf67, 0x5, 0x9e}) ioctl$HCIINQUIRY(r7, 0x400448ca, 0x0) syz_80211_inject_frame(&(0x7f00000000c0), &(0x7f0000000100)=ANY=[], 0x36) bind$bt_hci(r7, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000600)=ANY=[@ANYBLOB], 0x294}, 0x1, 0x0, 0x0, 0x631c431b469d7641}, 0x20010010) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x10, 0x0, 0x0) 2.288750185s ago: executing program 2 (id=410): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) ioctl$IOCTL_VMCI_VERSION2(0xffffffffffffffff, 0x7a7, &(0x7f00000007c0)=0x90000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8) socket$inet_mptcp(0x2, 0x1, 0x106) r0 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f00000003c0), 0x200, 0x0) ioctl$TCXONC(r0, 0x540a, 0x0) ioctl$TCXONC(r0, 0x540a, 0x2) 2.175470837s ago: executing program 0 (id=411): mkdirat(0xffffffffffffff9c, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) r4 = open(&(0x7f0000000000)='.\x00', 0x0, 0x4) fcntl$notify(r4, 0x402, 0x8000003d) close_range(r3, r4, 0x0) 1.95908622s ago: executing program 1 (id=412): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec8500000075000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = gettid() timer_create(0x0, &(0x7f00000003c0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000000380)) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, 0x0, 0x0, 0x2, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r5, 0x0, 0x0, 0x20000841, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @empty}, 0x1c) r6 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x149a82, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r7, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000580)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010000000000000000001400000018000180140002006e657464657673696d3000000000140005000c000100000008001300ffff000005000b00010000000800090057240b2b080002000101000008000e"], 0x5c}, 0x1, 0x0, 0x0, 0x4000840}, 0x0) add_key$fscrypt_v1(0x0, &(0x7f0000000440)={'fscrypt:', @desc3}, 0x0, 0x0, 0xfffffffffffffffe) sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0x28, 0x1, 0x4, 0x101, 0x0, 0x0, {0x1, 0x0, 0x5}, [@NFULA_CFG_MODE={0xa, 0x2, {0x5}}, @NFULA_CFG_NLBUFSIZ={0x8, 0x3, 0x1, 0x0, 0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) write$cgroup_int(r6, 0x0, 0x0) io_uring_register$IORING_REGISTER_CLONE_BUFFERS(0xffffffffffffffff, 0x1e, &(0x7f0000000000), 0x1) 1.214185291s ago: executing program 0 (id=413): add_key$keyring(&(0x7f00000001c0), &(0x7f0000000000)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) keyctl$join(0x1, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet_smc(0x2b, 0x1, 0x0) r0 = syz_io_uring_setup(0x9e, &(0x7f0000000000)={0x0, 0xec25, 0x0, 0x2, 0x4000032f}, &(0x7f0000000240)=0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000002000)=""/102400, 0x19000) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) io_uring_enter(r0, 0x47ba, 0x0, 0x0, 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup\x00', 0x0, 0x13) r4 = openat$cgroup_ro(r3, &(0x7f0000000000)='pids.events\x00', 0x0, 0x0) read$FUSE(r4, &(0x7f0000002540)={0x2020}, 0x2020) r5 = openat$adsp1(0xffffffffffffff9c, 0x0, 0x402, 0x0) ioctl$SNDCTL_DSP_SPEED(r5, 0xc0045002, &(0x7f00000001c0)) ioctl$SNDCTL_DSP_CHANNELS(0xffffffffffffffff, 0xc0045006, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0f000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0xd, &(0x7f0000000f80)=ANY=[@ANYBLOB="1800000000000f00000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000085000000a000000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.110329393s ago: executing program 2 (id=414): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x1, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d) ioctl$sock_netdev_private(r1, 0x8914, &(0x7f0000000000)) r2 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_rose_SIOCADDRT(r2, 0x890b, &(0x7f0000000380)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0x6, @null, @bpq0, 0x0, [@bcast, @bcast, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}) socket(0x2, 0x80805, 0x0) r3 = syz_init_net_socket$rose(0xb, 0x5, 0x0) connect$rose(r3, &(0x7f0000000040)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x1, @default}, 0x1c) connect$rose(r3, &(0x7f0000000100)=@full={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x0, [@null, @null, @null, @default, @bcast, @default]}, 0x40) socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x13, &(0x7f0000000040)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207baaf8ff00000000bda106000000000047010000f8ffffffb602000008000000b70300000000000085000000050000001801000020696c250000000000202020d31af8ff51000000bda102000000000007010000f8ffffffb702000008000000b703000000000000850000007b00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 56.626399ms ago: executing program 3 (id=415): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x1f, 0x10, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x80}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x20000002}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0xa6}}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0xa8}}]}, &(0x7f0000000000)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r2 = getpid() r3 = syz_pidfd_open(r2, 0x0) syz_usb_connect(0x6, 0x2d0, &(0x7f0000000a80)=ANY=[], &(0x7f0000000280)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x300, 0x4, 0x2, 0xf4, 0x20, 0x93}, 0x27, &(0x7f00000001c0)=ANY=[], 0x1, [{0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x406}}]}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) process_madvise(r3, &(0x7f00000001c0)=[{&(0x7f0000000340)="82892997849e91b1ed0381f660a4ae1fa8b70e90aa69141282d407f028b91e26107a64b4b0b274f3768bd506103861279999f8bca04b875f05a42813a256dc8cfb3d8c037fcd66a2fb9eaa152a716cf718b8c4e7ff06960fb9ed664e7db61fd7f482ed89b0178beaa99afdb46e89f374e2205deed071bc7e36a286c603761a96666c7a1f3ae66f7be5d607a209f5de21738b6d0e06b0ff3f20fe06173dcc0f03ceb4c435eaf923d9f49f97b9ca5936cd5ea0e2d1669a88ea245c4f83cb5c0f15391d45f6b7aae89a0bb14b5116", 0xcd}, {&(0x7f0000000600)="bc093cd690a4e52bbe7f5f6965d26a68f378763a8805d5c9ff097aaae1b03b07169dc11bde908af2528698e2a00b8efe3c07e84c123c73f391aad1b38f9f793402d3472ee549457581f5eb0b28df41824c2660a039dff08361746bd9c3cffa9254d0c25301fdf8b83e864319220e0003c287f73700076cba9ddbd1e1b25d8f1d426362ee6fc1072873fa320d1e201c4b9e640af525b96d3f7b30a15b7ba831e1c09178e741a65bef55db87c64d6520d2990113e033d04b2573e5f996a62681dc2c4801af442b8299aa62a672540198700b18ee388d0288d7f6924739289b580b5f9f19c637643c13d11816bec6", 0xed}, {&(0x7f0000000800)="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", 0x1000}], 0x3, 0x2, 0x0) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket(0x5, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x4) r7 = creat(&(0x7f00000005c0)='./file0\x00', 0x0) write$P9_RSTATu(r7, 0x0, 0x5a) mount(&(0x7f00000000c0)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)='rootfs\x00', 0xa08010, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x8) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40186f40, &(0x7f0000000440)=0x1f) setns(r3, 0x24020000) syz_clone(0x120e1100, 0x0, 0x0, 0x0, 0x0, 0x0) 0s ago: executing program 1 (id=416): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r0, &(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8822d55593a2179}, 0xc) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r2, 0x0, 0xd}, 0x18) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0x80280, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0x1}], 0x1) syz_io_uring_setup(0x117, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x3a6}, 0x0, 0x0) bind$alg(0xffffffffffffffff, &(0x7f00000007c0)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_sha512\x00'}, 0x58) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r4 = accept$unix(0xffffffffffffffff, &(0x7f0000000040)=@abs, &(0x7f0000000180)=0x6e) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) io_uring_setup(0x5323, &(0x7f00000000c0)={0x0, 0x6852, 0x10, 0x3, 0x2002}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000f40), r5) sendmsg$IPVS_CMD_NEW_SERVICE(r5, &(0x7f0000001100)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f00000001c0)={0x70, r6, 0x1, 0x70bd67, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_SERVICE={0x5c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@remote}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'wrr\x00'}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x2e, 0x5}}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x27}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x11}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x9}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x15}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x20004084}, 0x20008800) creat(&(0x7f0000000200)='./file0\x00', 0x35) r7 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000f00), 0x2, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r7, 0xc0d05604, &(0x7f0000000f40)={0x2, @sliced}) r8 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r8, 0x8933, 0x0) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="3c010000190001000000000000000000e0000001000000000000000000000000fe8000000000000000000000000000aa4e220000000000000a000000", @ANYRES32=0x0, @ANYRES64=r0, @ANYBLOB="00000000000000000104000000000000feffffffffffffff030000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000008400050020010000000000000000000000000000000000002b00000000000000000000000000000000000000000500000000000002000700000000000000000000000000e00000020000000000000000000000004000000033"], 0x13c}}, 0x20040880) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001ac0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) socket$inet6(0xa, 0x2, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.122' (ED25519) to the list of known hosts. [ 79.959985][ T5775] cgroup: Unknown subsys name 'net' [ 80.094147][ T5775] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 81.828697][ T5775] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 83.678147][ T50] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 83.687141][ T50] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 83.695701][ T5805] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 83.725842][ T5806] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 83.738718][ T5796] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 83.755441][ T5806] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 83.761947][ T5803] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 83.765927][ T50] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 83.772500][ T5803] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 83.776607][ T5806] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 83.784074][ T5803] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 83.798065][ T50] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 83.800820][ T5803] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 83.806987][ T50] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 83.825797][ T5802] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 83.827598][ T5806] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 83.841024][ T50] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 83.848522][ T5802] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 83.856031][ T5802] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 83.863557][ T5802] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 83.871090][ T50] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 83.892328][ T5103] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 83.900674][ T5103] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 83.909246][ T5103] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 84.424767][ T5790] chnl_net:caif_netlink_parms(): no params data found [ 84.482208][ T5799] chnl_net:caif_netlink_parms(): no params data found [ 84.494388][ T5797] chnl_net:caif_netlink_parms(): no params data found [ 84.582959][ T5788] chnl_net:caif_netlink_parms(): no params data found [ 84.640294][ T5790] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.647757][ T5790] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.655355][ T5790] bridge_slave_0: entered allmulticast mode [ 84.662480][ T5790] bridge_slave_0: entered promiscuous mode [ 84.705888][ T5790] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.713133][ T5790] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.720515][ T5790] bridge_slave_1: entered allmulticast mode [ 84.728380][ T5790] bridge_slave_1: entered promiscuous mode [ 84.753056][ T5799] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.760239][ T5799] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.767836][ T5799] bridge_slave_0: entered allmulticast mode [ 84.774653][ T5799] bridge_slave_0: entered promiscuous mode [ 84.813415][ T5799] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.820788][ T5799] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.828416][ T5799] bridge_slave_1: entered allmulticast mode [ 84.835875][ T5799] bridge_slave_1: entered promiscuous mode [ 84.878201][ T5797] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.885415][ T5797] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.892593][ T5797] bridge_slave_0: entered allmulticast mode [ 84.900106][ T5797] bridge_slave_0: entered promiscuous mode [ 84.926664][ T5790] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 84.936462][ T5797] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.943643][ T5797] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.951853][ T5797] bridge_slave_1: entered allmulticast mode [ 84.959725][ T5797] bridge_slave_1: entered promiscuous mode [ 84.973153][ T5799] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 84.984723][ T5790] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 85.031623][ T5799] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 85.079133][ T5788] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.086376][ T5788] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.093659][ T5788] bridge_slave_0: entered allmulticast mode [ 85.101540][ T5788] bridge_slave_0: entered promiscuous mode [ 85.134294][ T5797] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 85.144144][ T5788] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.151499][ T5788] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.158762][ T5788] bridge_slave_1: entered allmulticast mode [ 85.166114][ T5788] bridge_slave_1: entered promiscuous mode [ 85.175944][ T5799] team0: Port device team_slave_0 added [ 85.197395][ T5790] team0: Port device team_slave_0 added [ 85.206391][ T5797] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 85.217782][ T5799] team0: Port device team_slave_1 added [ 85.251808][ T5790] team0: Port device team_slave_1 added [ 85.319313][ T5788] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 85.341464][ T5799] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 85.348751][ T5799] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 85.374769][ T5799] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 85.388467][ T5799] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 85.395603][ T5799] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 85.422433][ T5799] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 85.436651][ T5797] team0: Port device team_slave_0 added [ 85.445432][ T5788] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 85.455730][ T5790] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 85.462703][ T5790] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 85.489180][ T5790] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 85.506792][ T5790] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 85.513779][ T5790] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 85.539833][ T5790] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 85.553510][ T5797] team0: Port device team_slave_1 added [ 85.587986][ T5788] team0: Port device team_slave_0 added [ 85.639096][ T5788] team0: Port device team_slave_1 added [ 85.663814][ T5799] hsr_slave_0: entered promiscuous mode [ 85.670887][ T5799] hsr_slave_1: entered promiscuous mode [ 85.702896][ T5788] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 85.710057][ T5788] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 85.736095][ T5788] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 85.751632][ T5797] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 85.758668][ T5797] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 85.785505][ T5797] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 85.821193][ T5788] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 85.828476][ T5788] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 85.854769][ T5788] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 85.866217][ T5802] Bluetooth: hci3: command tx timeout [ 85.890743][ T5797] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 85.897865][ T5797] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 85.923960][ T5797] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 85.935222][ T5802] Bluetooth: hci0: command tx timeout [ 85.935245][ T5103] Bluetooth: hci1: command tx timeout [ 85.950875][ T5790] hsr_slave_0: entered promiscuous mode [ 85.958894][ T5790] hsr_slave_1: entered promiscuous mode [ 85.965148][ T5790] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 85.972998][ T5790] Cannot create hsr debugfs directory [ 86.015935][ T5802] Bluetooth: hci2: command tx timeout [ 86.065302][ T5788] hsr_slave_0: entered promiscuous mode [ 86.071750][ T5788] hsr_slave_1: entered promiscuous mode [ 86.078757][ T5788] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 86.086636][ T5788] Cannot create hsr debugfs directory [ 86.197504][ T5797] hsr_slave_0: entered promiscuous mode [ 86.207057][ T5797] hsr_slave_1: entered promiscuous mode [ 86.213247][ T5797] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 86.221179][ T5797] Cannot create hsr debugfs directory [ 86.494096][ T5799] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 86.513086][ T5799] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 86.523100][ T5799] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 86.555616][ T5799] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 86.630526][ T5790] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 86.650764][ T5790] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 86.661798][ T5790] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 86.673927][ T5790] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 86.770219][ T5788] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 86.792496][ T5788] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 86.803475][ T5788] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 86.813576][ T5788] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 86.898240][ T9] cfg80211: failed to load regulatory.db [ 86.934109][ T5797] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 86.948503][ T5797] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 86.966243][ T5799] 8021q: adding VLAN 0 to HW filter on device bond0 [ 86.979488][ T5797] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 86.996347][ T5797] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 87.043604][ T5799] 8021q: adding VLAN 0 to HW filter on device team0 [ 87.071059][ T5790] 8021q: adding VLAN 0 to HW filter on device bond0 [ 87.089809][ T3495] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.097087][ T3495] bridge0: port 1(bridge_slave_0) entered forwarding state [ 87.119111][ T3495] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.126331][ T3495] bridge0: port 2(bridge_slave_1) entered forwarding state [ 87.172217][ T5790] 8021q: adding VLAN 0 to HW filter on device team0 [ 87.203999][ T3495] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.211189][ T3495] bridge0: port 1(bridge_slave_0) entered forwarding state [ 87.234115][ T1088] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.241267][ T1088] bridge0: port 2(bridge_slave_1) entered forwarding state [ 87.300128][ T5799] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 87.351781][ T5788] 8021q: adding VLAN 0 to HW filter on device bond0 [ 87.431517][ T5797] 8021q: adding VLAN 0 to HW filter on device bond0 [ 87.451530][ T5788] 8021q: adding VLAN 0 to HW filter on device team0 [ 87.497829][ T3538] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.505057][ T3538] bridge0: port 1(bridge_slave_0) entered forwarding state [ 87.547020][ T5797] 8021q: adding VLAN 0 to HW filter on device team0 [ 87.559513][ T3538] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.566716][ T3538] bridge0: port 2(bridge_slave_1) entered forwarding state [ 87.629877][ T48] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.637110][ T48] bridge0: port 1(bridge_slave_0) entered forwarding state [ 87.653068][ T48] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.660225][ T48] bridge0: port 2(bridge_slave_1) entered forwarding state [ 87.739938][ T5788] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 87.867258][ T5799] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 87.909457][ T5790] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 87.935827][ T5802] Bluetooth: hci3: command tx timeout [ 88.017389][ T5802] Bluetooth: hci0: command tx timeout [ 88.018220][ T5103] Bluetooth: hci1: command tx timeout [ 88.073438][ T5790] veth0_vlan: entered promiscuous mode [ 88.098229][ T5103] Bluetooth: hci2: command tx timeout [ 88.111838][ T5790] veth1_vlan: entered promiscuous mode [ 88.202158][ T5799] veth0_vlan: entered promiscuous mode [ 88.211021][ T5788] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 88.244599][ T5799] veth1_vlan: entered promiscuous mode [ 88.259752][ T5790] veth0_macvtap: entered promiscuous mode [ 88.281308][ T5790] veth1_macvtap: entered promiscuous mode [ 88.312066][ T5797] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 88.336887][ T5790] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 88.363453][ T5788] veth0_vlan: entered promiscuous mode [ 88.396990][ T5790] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 88.427846][ T5788] veth1_vlan: entered promiscuous mode [ 88.451306][ T5799] veth0_macvtap: entered promiscuous mode [ 88.462339][ T5790] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.472468][ T5790] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.481714][ T5790] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.493158][ T5790] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.523586][ T5797] veth0_vlan: entered promiscuous mode [ 88.531449][ T5799] veth1_macvtap: entered promiscuous mode [ 88.580988][ T5797] veth1_vlan: entered promiscuous mode [ 88.630243][ T5799] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 88.641303][ T5799] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.653740][ T5799] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 88.708397][ T5788] veth0_macvtap: entered promiscuous mode [ 88.728025][ T58] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.746851][ T58] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.766873][ T5799] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 88.778170][ T5799] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.791791][ T5799] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 88.805424][ T5788] veth1_macvtap: entered promiscuous mode [ 88.813082][ T5799] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.822570][ T5799] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.831666][ T5799] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.841389][ T5799] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.889058][ T5797] veth0_macvtap: entered promiscuous mode [ 88.902990][ T5797] veth1_macvtap: entered promiscuous mode [ 88.920684][ T3495] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.929247][ T3495] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.998686][ T5797] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 89.017859][ T5797] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.028267][ T5797] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 89.039223][ T5797] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.051366][ T5797] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 89.069703][ T5788] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 89.081430][ T5788] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.091696][ T5788] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 89.102733][ T5788] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.113931][ T5788] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 89.124687][ T5788] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.138706][ T5788] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 89.154622][ T5797] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 89.166200][ T5797] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.178616][ T5797] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 89.190065][ T5797] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.201446][ T5797] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 89.214125][ T5797] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.224853][ T5797] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.233811][ T5797] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.242829][ T5797] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.273763][ T5788] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 89.286086][ T5788] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.298413][ T5788] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 89.309314][ T5788] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.320534][ T5788] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 89.345656][ T5788] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.377844][ T5788] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 89.399706][ T5788] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.400207][ T1088] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.418818][ T5788] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.428159][ T1088] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.429616][ T5880] Zero length message leads to an empty skb [ 89.442043][ T5788] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.451027][ T5788] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.020505][ T5103] Bluetooth: hci3: command tx timeout [ 90.068860][ T3495] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.077329][ T3495] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.095131][ T5103] Bluetooth: hci1: command tx timeout [ 90.105197][ T5103] Bluetooth: hci0: command tx timeout [ 90.175715][ T5103] Bluetooth: hci2: command tx timeout [ 90.291720][ T58] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.304036][ T58] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.443028][ T1088] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.470480][ T1088] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.565458][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.573363][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.596117][ T58] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.603994][ T58] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.641029][ T5891] netlink: 72 bytes leftover after parsing attributes in process `syz.0.6'. [ 90.645752][ T0] NOHZ tick-stop error: local softirq work is pending, handler #300!!! [ 91.158033][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 91.465514][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 91.670069][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 91.772559][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 92.079604][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 92.085413][ T5899] syz.2.7: attempt to access beyond end of device [ 92.085413][ T5899] loop2: rw=0, sector=16, nr_sectors = 2 limit=0 [ 92.113687][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 92.127539][ T5103] Bluetooth: hci3: command tx timeout [ 92.175736][ T5103] Bluetooth: hci0: command tx timeout [ 92.188661][ T5103] Bluetooth: hci1: command tx timeout [ 92.255070][ T5103] Bluetooth: hci2: command tx timeout [ 92.284436][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 92.288940][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 92.302041][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 92.497543][ T5909] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 93.546472][ T9] usb 3-1: new full-speed USB device number 2 using dummy_hcd [ 93.970867][ T9] usb 3-1: config 0 has an invalid interface number: 213 but max is 0 [ 94.161696][ T9] usb 3-1: config 0 has no interface number 0 [ 94.216798][ T9] usb 3-1: New USB device found, idVendor=0079, idProduct=85eb, bcdDevice=90.b7 [ 94.262052][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 94.280361][ T9] usb 3-1: Product: syz [ 94.288885][ T9] usb 3-1: Manufacturer: syz [ 94.305416][ T9] usb 3-1: SerialNumber: syz [ 94.334028][ T9] usb 3-1: config 0 descriptor?? [ 94.526312][ T5933] netlink: 72 bytes leftover after parsing attributes in process `syz.3.15'. [ 95.685247][ T9] usb 3-1: USB disconnect, device number 2 [ 96.133887][ T5957] netlink: 4 bytes leftover after parsing attributes in process `syz.1.22'. [ 97.052775][ T5971] netlink: 72 bytes leftover after parsing attributes in process `syz.0.27'. [ 99.265144][ T5777] usb 3-1: new full-speed USB device number 3 using dummy_hcd [ 99.454054][ T5777] usb 3-1: config 0 has an invalid interface number: 213 but max is 0 [ 99.468738][ T5777] usb 3-1: config 0 has no interface number 0 [ 99.490849][ T5777] usb 3-1: New USB device found, idVendor=0079, idProduct=85eb, bcdDevice=90.b7 [ 99.521952][ T5777] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 99.557062][ T5777] usb 3-1: Product: syz [ 99.571554][ T5777] usb 3-1: Manufacturer: syz [ 99.581011][ T5777] usb 3-1: SerialNumber: syz [ 99.614399][ T5777] usb 3-1: config 0 descriptor?? [ 101.884761][ T5834] usb 3-1: USB disconnect, device number 3 [ 102.289934][ T6010] netlink: 72 bytes leftover after parsing attributes in process `syz.3.38'. [ 102.900607][ T6017] syz.1.39: attempt to access beyond end of device [ 102.900607][ T6017] loop1: rw=0, sector=16, nr_sectors = 2 limit=0 [ 104.239413][ T6023] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 105.266862][ T6033] tipc: Started in network mode [ 105.272212][ T6033] tipc: Node identity ac14140f, cluster identity 4711 [ 105.281650][ T6033] tipc: New replicast peer: 255.255.255.255 [ 105.290429][ T6033] tipc: Enabled bearer , priority 10 [ 106.267457][ T6043] netlink: 72 bytes leftover after parsing attributes in process `syz.3.47'. [ 106.297276][ T5777] tipc: Node number set to 2886997007 [ 106.457721][ T6043] syz.3.47: attempt to access beyond end of device [ 106.457721][ T6043] nbd3: rw=0, sector=64, nr_sectors = 8 limit=0 [ 106.609408][ T6043] syz.3.47: attempt to access beyond end of device [ 106.609408][ T6043] nbd3: rw=0, sector=120, nr_sectors = 8 limit=0 [ 106.631108][ T6043] Mount JFS Failure: -5 [ 108.069599][ T6060] netlink: 72 bytes leftover after parsing attributes in process `syz.2.50'. [ 109.455133][ T6068] netlink: 6028 bytes leftover after parsing attributes in process `syz.2.53'. [ 109.841730][ T6065] syz.0.52: attempt to access beyond end of device [ 109.841730][ T6065] loop0: rw=0, sector=16, nr_sectors = 2 limit=0 [ 111.346762][ T6086] netlink: 72 bytes leftover after parsing attributes in process `syz.2.57'. [ 111.800576][ T6086] syz.2.57: attempt to access beyond end of device [ 111.800576][ T6086] nbd2: rw=0, sector=64, nr_sectors = 8 limit=0 [ 111.814020][ T6086] syz.2.57: attempt to access beyond end of device [ 111.814020][ T6086] nbd2: rw=0, sector=120, nr_sectors = 8 limit=0 [ 111.827555][ T6086] Mount JFS Failure: -5 [ 114.483795][ T6115] netlink: 12 bytes leftover after parsing attributes in process `syz.0.65'. [ 117.089860][ T6153] tipc: Enabling of bearer rejected, already enabled [ 118.754781][ T6161] netlink: 12 bytes leftover after parsing attributes in process `syz.1.75'. [ 120.646421][ T23] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 121.545668][ T23] usb 4-1: device descriptor read/64, error -71 [ 121.847950][ T23] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 122.715075][ T23] usb 4-1: device descriptor read/64, error -71 [ 122.843456][ T23] usb usb4-port1: attempt power cycle [ 123.625241][ T6210] netlink: 12 bytes leftover after parsing attributes in process `syz.2.87'. [ 126.203576][ T6234] program syz.3.94 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 128.154144][ T6249] netlink: 12 bytes leftover after parsing attributes in process `syz.0.97'. [ 129.184989][ T6257] syz.3.99: attempt to access beyond end of device [ 129.184989][ T6257] loop3: rw=0, sector=16, nr_sectors = 2 limit=0 [ 130.485328][ T5793] usb 2-1: new full-speed USB device number 2 using dummy_hcd [ 130.989850][ T5793] usb 2-1: config 0 has an invalid interface number: 213 but max is 0 [ 131.003331][ T5793] usb 2-1: config 0 has no interface number 0 [ 131.023867][ T5793] usb 2-1: New USB device found, idVendor=0079, idProduct=85eb, bcdDevice=90.b7 [ 131.033146][ T5793] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 131.042390][ T5793] usb 2-1: Product: syz [ 131.051197][ T5793] usb 2-1: Manufacturer: syz [ 131.056293][ T5793] usb 2-1: SerialNumber: syz [ 131.085313][ T5793] usb 2-1: config 0 descriptor?? [ 132.893359][ T6293] ubi31: attaching mtd0 [ 132.909445][ T6293] ubi31: scanning is finished [ 132.914256][ T6293] ubi31: empty MTD device detected [ 133.066080][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.075289][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.394541][ T6293] ubi31: attached mtd0 (name "mtdram test device", size 0 MiB) [ 133.402337][ T6293] ubi31: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 133.409715][ T6293] ubi31: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 133.416794][ T6293] ubi31: VID header offset: 64 (aligned 64), data offset: 128 [ 133.424257][ T6293] ubi31: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 133.431160][ T6293] ubi31: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 133.439265][ T6293] ubi31: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 3756587320 [ 133.449579][ T6293] ubi31: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 133.485138][ T6298] ubi31: background thread "ubi_bgt31d" started, PID 6298 [ 133.524150][ T5834] usb 2-1: USB disconnect, device number 2 [ 138.927205][ T785] usb 3-1: new full-speed USB device number 4 using dummy_hcd [ 139.137996][ T785] usb 3-1: config 0 has an invalid interface number: 213 but max is 0 [ 139.148705][ T785] usb 3-1: config 0 has no interface number 0 [ 139.225333][ T785] usb 3-1: New USB device found, idVendor=0079, idProduct=85eb, bcdDevice=90.b7 [ 139.295990][ T785] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 139.371885][ T785] usb 3-1: Product: syz [ 139.416886][ T785] usb 3-1: Manufacturer: syz [ 139.467733][ T785] usb 3-1: SerialNumber: syz [ 139.590643][ T785] usb 3-1: config 0 descriptor?? [ 141.116926][ T9] usb 3-1: USB disconnect, device number 4 [ 142.945401][ T5103] Bluetooth: hci2: Malformed Event: 0x02 [ 147.997401][ T3495] af_packet: tpacket_rcv: packet too big, clamped from 74 to 4294967286. macoff=82 [ 149.469476][ T6451] tipc: Started in network mode [ 149.474414][ T6451] tipc: Node identity ., cluster identity 4711 [ 149.513185][ T6451] tipc: Enabling of bearer rejected, failed to enable media [ 150.610009][ T6457] syz.1.151: attempt to access beyond end of device [ 150.610009][ T6457] nbd1: rw=0, sector=64, nr_sectors = 8 limit=0 [ 150.623005][ T6457] syz.1.151: attempt to access beyond end of device [ 150.623005][ T6457] nbd1: rw=0, sector=120, nr_sectors = 8 limit=0 [ 150.635943][ T6457] Mount JFS Failure: -5 [ 150.835023][ T785] usb 4-1: new full-speed USB device number 5 using dummy_hcd [ 151.046487][ T785] usb 4-1: config 0 has an invalid interface number: 213 but max is 0 [ 151.076005][ T785] usb 4-1: config 0 has no interface number 0 [ 151.092353][ T785] usb 4-1: New USB device found, idVendor=0079, idProduct=85eb, bcdDevice=90.b7 [ 151.112174][ T6474] netlink: 12 bytes leftover after parsing attributes in process `syz.2.156'. [ 151.114391][ T785] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 151.131500][ T785] usb 4-1: Product: syz [ 151.139825][ T785] usb 4-1: Manufacturer: syz [ 151.146981][ T785] usb 4-1: SerialNumber: syz [ 151.176829][ T785] usb 4-1: config 0 descriptor?? [ 151.275127][ T6477] netlink: 4 bytes leftover after parsing attributes in process `syz.1.155'. [ 151.993716][ T6486] random: crng reseeded on system resumption [ 152.982257][ T6492] syz.0.161: attempt to access beyond end of device [ 152.982257][ T6492] loop0: rw=0, sector=16, nr_sectors = 2 limit=0 [ 153.340984][ T5834] usb 4-1: USB disconnect, device number 5 [ 153.831926][ T6499] netlink: 12 bytes leftover after parsing attributes in process `syz.3.165'. [ 156.848917][ T6532] syz.2.173: attempt to access beyond end of device [ 156.848917][ T6532] loop2: rw=0, sector=16, nr_sectors = 2 limit=0 [ 157.252202][ T6522] bond1 (unregistering): Released all slaves [ 157.540908][ T5887] usb 1-1: new full-speed USB device number 2 using dummy_hcd [ 157.837758][ T5887] usb 1-1: config 0 has an invalid interface number: 213 but max is 0 [ 157.855198][ T5887] usb 1-1: config 0 has no interface number 0 [ 157.894460][ T5887] usb 1-1: New USB device found, idVendor=0079, idProduct=85eb, bcdDevice=90.b7 [ 157.904612][ T5887] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 157.912820][ T5887] usb 1-1: Product: syz [ 157.918297][ T5887] usb 1-1: Manufacturer: syz [ 157.923148][ T5887] usb 1-1: SerialNumber: syz [ 157.978521][ T5887] usb 1-1: config 0 descriptor?? [ 158.096022][ T6537] netlink: 12 bytes leftover after parsing attributes in process `syz.1.175'. [ 158.146926][ T6541] netlink: 72 bytes leftover after parsing attributes in process `syz.3.177'. [ 158.555713][ T6548] ubi31: detaching mtd0 [ 159.366995][ T6548] ubi31: mtd0 is detached [ 159.550142][ T5834] usb 1-1: USB disconnect, device number 2 [ 160.919221][ T6564] netlink: 28 bytes leftover after parsing attributes in process `syz.2.183'. [ 161.041880][ T6567] syz.1.185: attempt to access beyond end of device [ 161.041880][ T6567] loop1: rw=0, sector=16, nr_sectors = 2 limit=0 [ 161.117190][ T6570] netlink: 12 bytes leftover after parsing attributes in process `syz.3.186'. [ 164.412183][ T8] usb 4-1: new full-speed USB device number 6 using dummy_hcd [ 164.584832][ T6603] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 164.722004][ T6607] netlink: 12 bytes leftover after parsing attributes in process `syz.0.195'. [ 164.869367][ T8] usb 4-1: config 0 has an invalid interface number: 213 but max is 0 [ 164.894670][ T8] usb 4-1: config 0 has no interface number 0 [ 165.127151][ T8] usb 4-1: New USB device found, idVendor=0079, idProduct=85eb, bcdDevice=90.b7 [ 165.227657][ T8] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 165.236048][ T8] usb 4-1: Product: syz [ 165.240331][ T8] usb 4-1: Manufacturer: syz [ 165.246337][ T8] usb 4-1: SerialNumber: syz [ 165.255922][ T8] usb 4-1: config 0 descriptor?? [ 166.682642][ T6617] netlink: 28 bytes leftover after parsing attributes in process `syz.2.197'. [ 168.332310][ T8] usb 4-1: USB disconnect, device number 6 [ 169.161809][ T6639] netlink: 12 bytes leftover after parsing attributes in process `syz.3.204'. [ 169.657443][ T6642] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 171.424472][ T6647] sched: RT throttling activated [ 172.081283][ T6656] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 172.088171][ T6656] comedi comedi3: 8255: I/O port conflict (0x2,4) [ 172.094886][ T6656] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 172.102449][ T6656] comedi comedi3: 8255: I/O port conflict (0x5c95239c,4) [ 172.109838][ T6656] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 172.116557][ T6656] comedi comedi3: 8255: I/O port conflict (0x3ff,4) [ 172.123613][ T6656] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 172.130436][ T6656] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 172.137039][ T6656] comedi comedi3: 8255: I/O port conflict (0x9,4) [ 172.144206][ T6656] comedi comedi3: 8255: I/O port conflict (0x6,4) [ 172.150858][ T6656] comedi comedi3: 8255: I/O port conflict (0x4,4) [ 172.157746][ T6656] comedi comedi3: 8255: I/O port conflict (0x3,4) [ 172.164667][ T6656] comedi comedi3: 8255: I/O port conflict (0xffffffff80000089,4) [ 172.172665][ T6656] comedi comedi3: 8255: I/O port conflict (0xfffffffffffffffe,4) [ 172.180670][ T6656] comedi comedi3: 8255: I/O port conflict (0xb,4) [ 172.187415][ T6656] comedi comedi3: 8255: I/O port conflict (0xfffffffffffffff5,4) [ 172.195366][ T6656] comedi comedi3: 8255: I/O port conflict (0xffffffffffffeadb,4) [ 172.203308][ T6656] comedi comedi3: 8255: I/O port conflict (0x3,4) [ 172.210177][ T6656] comedi comedi3: 8255: I/O port conflict (0x8,4) [ 172.217061][ T6656] comedi comedi3: 8255: I/O port conflict (0x4,4) [ 172.223679][ T6656] comedi comedi3: 8255: I/O port conflict (0x8000000,4) [ 172.230823][ T6656] comedi comedi3: 8255: I/O port conflict (0xffffffffdffffffa,4) [ 173.585722][ T6665] netlink: 28 bytes leftover after parsing attributes in process `syz.2.209'. [ 174.455021][ T8] usb 2-1: new full-speed USB device number 3 using dummy_hcd [ 175.327246][ T8] usb 2-1: config 0 has an invalid interface number: 213 but max is 0 [ 175.355095][ T8] usb 2-1: config 0 has no interface number 0 [ 175.463017][ T8] usb 2-1: New USB device found, idVendor=0079, idProduct=85eb, bcdDevice=90.b7 [ 175.480869][ T8] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 175.521735][ T8] usb 2-1: Product: syz [ 175.539002][ T8] usb 2-1: Manufacturer: syz [ 175.550320][ T8] usb 2-1: SerialNumber: syz [ 175.699147][ T6691] netlink: 12 bytes leftover after parsing attributes in process `syz.2.216'. [ 175.954048][ T8] usb 2-1: config 0 descriptor?? [ 176.207013][ T8] usb 2-1: can't set config #0, error -71 [ 176.255292][ T8] usb 2-1: USB disconnect, device number 3 [ 178.747296][ T6697] [U]  [ 181.000082][ T5103] Bluetooth: hci1: Malformed Event: 0x02 [ 181.028467][ T6727] netlink: 28 bytes leftover after parsing attributes in process `syz.2.223'. [ 182.955040][ T5777] usb 4-1: new full-speed USB device number 7 using dummy_hcd [ 183.623232][ T5777] usb 4-1: config 0 has an invalid interface number: 213 but max is 0 [ 183.632535][ T5777] usb 4-1: config 0 has no interface number 0 [ 183.682900][ T5777] usb 4-1: New USB device found, idVendor=0079, idProduct=85eb, bcdDevice=90.b7 [ 183.707126][ T5777] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 183.725149][ T5777] usb 4-1: Product: syz [ 183.735385][ T5777] usb 4-1: Manufacturer: syz [ 183.745133][ T5777] usb 4-1: SerialNumber: syz [ 183.762074][ T5777] usb 4-1: config 0 descriptor?? [ 184.945693][ T6761] random: crng reseeded on system resumption [ 185.874080][ T5793] usb 4-1: USB disconnect, device number 7 [ 189.822104][ T6787] netlink: 28 bytes leftover after parsing attributes in process `syz.2.239'. [ 189.865238][ T5793] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 190.065139][ T5793] usb 2-1: Using ep0 maxpacket: 8 [ 190.084385][ T5793] usb 2-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 190.135591][ T5793] usb 2-1: config 16 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 190.165157][ T5793] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 190.174852][ T5793] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 190.296931][ T5793] usbtmc 2-1:16.0: bulk endpoints not found [ 190.676374][ T8] usb 2-1: USB disconnect, device number 4 [ 191.123180][ T6799] ubi31: attaching mtd0 [ 191.128959][ T6799] ubi31: scanning is finished [ 191.193150][ T6799] ubi31: attached mtd0 (name "mtdram test device", size 0 MiB) [ 191.228671][ T6799] ubi31: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 191.246347][ T6799] ubi31: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 191.274821][ T6799] ubi31: VID header offset: 64 (aligned 64), data offset: 128 [ 191.315638][ T6799] ubi31: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 191.345209][ T6799] ubi31: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 191.416573][ T6799] ubi31: max/mean erase counter: 1/1, WL threshold: 4096, image sequence number: 3756587320 [ 191.481905][ T6799] ubi31: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 191.496998][ T6800] ubi31: background thread "ubi_bgt31d" started, PID 6800 [ 192.265563][ T5103] Bluetooth: hci3: Malformed Event: 0x02 [ 194.419972][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 195.125691][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 196.119349][ T6819] ubi31: detaching mtd0 [ 196.712014][ T6819] ubi31: mtd0 is detached [ 197.935527][ T5793] IPVS: starting estimator thread 0... [ 198.085925][ T6831] IPVS: using max 19 ests per chain, 45600 per kthread [ 198.865025][ T5777] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 199.885017][ T5777] usb 2-1: Using ep0 maxpacket: 8 [ 199.967376][ T5777] usb 2-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 199.981000][ T5777] usb 2-1: config 16 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 199.995499][ T5777] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 200.012563][ T5777] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 200.031005][ T5777] usbtmc 2-1:16.0: bulk endpoints not found [ 200.367414][ T5777] usb 2-1: USB disconnect, device number 5 [ 200.799687][ T5103] Bluetooth: hci1: Malformed Event: 0x02 [ 201.051319][ T6865] ntfs3: nullb0: Primary boot signature is not NTFS. [ 201.059127][ T6865] ntfs3: nullb0: try to read out of volume at offset 0x3e7ffffe00 [ 206.827463][ T5792] Bluetooth: hci1: command 0x0406 tx timeout [ 206.827873][ T5806] Bluetooth: hci2: command 0x0406 tx timeout [ 206.853308][ T50] Bluetooth: hci3: command 0x0406 tx timeout [ 207.359305][ T6904] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 208.092324][ T6912] netlink: 72 bytes leftover after parsing attributes in process `syz.1.274'. [ 208.130458][ T6912] syz.1.274: attempt to access beyond end of device [ 208.130458][ T6912] nbd1: rw=0, sector=64, nr_sectors = 8 limit=0 [ 208.143487][ T6912] syz.1.274: attempt to access beyond end of device [ 208.143487][ T6912] nbd1: rw=0, sector=120, nr_sectors = 8 limit=0 [ 208.256430][ T6912] Mount JFS Failure: -5 [ 209.857865][ T6929] netlink: 72 bytes leftover after parsing attributes in process `syz.1.280'. [ 212.150850][ T6953] netlink: 72 bytes leftover after parsing attributes in process `syz.3.286'. [ 212.182130][ T6953] syz.3.286: attempt to access beyond end of device [ 212.182130][ T6953] nbd3: rw=0, sector=64, nr_sectors = 8 limit=0 [ 212.195955][ T6953] syz.3.286: attempt to access beyond end of device [ 212.195955][ T6953] nbd3: rw=0, sector=120, nr_sectors = 8 limit=0 [ 212.443301][ T6956] xt_SECMARK: invalid mode: 2 [ 212.450486][ T6953] Mount JFS Failure: -5 [ 216.005231][ T5887] IPVS: starting estimator thread 0... [ 217.025040][ T6996] IPVS: using max 21 ests per chain, 50400 per kthread [ 228.266440][ T7069] xt_SECMARK: invalid mode: 2 [ 234.391097][ T7119] xt_SECMARK: invalid mode: 2 [ 239.072544][ T7164] ubi31: attaching mtd0 [ 239.086896][ T7164] ubi31: scanning is finished [ 239.573383][ T7164] ubi31: attached mtd0 (name "mtdram test device", size 0 MiB) [ 239.581169][ T7164] ubi31: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 239.588662][ T7164] ubi31: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 239.595818][ T7164] ubi31: VID header offset: 64 (aligned 64), data offset: 128 [ 239.603316][ T7164] ubi31: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 239.610321][ T7164] ubi31: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 239.618485][ T7164] ubi31: max/mean erase counter: 1/1, WL threshold: 4096, image sequence number: 3756587320 [ 239.630852][ T7164] ubi31: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 239.652779][ T7171] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 239.663196][ T7169] ubi31: background thread "ubi_bgt31d" started, PID 7169 [ 239.873651][ T785] IPVS: starting estimator thread 0... [ 239.985242][ T7176] IPVS: using max 18 ests per chain, 43200 per kthread [ 244.582563][ T7238] ubi: mtd0 is already attached to ubi31 [ 249.355168][ T7270] ubi31: detaching mtd0 [ 249.393154][ T7270] ubi31: mtd0 is detached [ 252.284934][ T7289] xt_SECMARK: invalid mode: 2 [ 256.018139][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.024698][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 257.204296][ T7342] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 257.490800][ T7346] ubi31: attaching mtd0 [ 257.533886][ T7346] ubi31: scanning is finished [ 257.961004][ T7346] ubi31: attached mtd0 (name "mtdram test device", size 0 MiB) [ 257.969167][ T7346] ubi31: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 257.976663][ T7346] ubi31: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 257.983846][ T7346] ubi31: VID header offset: 64 (aligned 64), data offset: 128 [ 257.991432][ T7346] ubi31: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 257.998548][ T7346] ubi31: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 258.006727][ T7346] ubi31: max/mean erase counter: 1/1, WL threshold: 4096, image sequence number: 3756587320 [ 258.016990][ T7346] ubi31: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 258.028428][ T7349] ubi31: background thread "ubi_bgt31d" started, PID 7349 [ 258.691062][ T7352] netlink: 72 bytes leftover after parsing attributes in process `syz.2.391'. [ 258.933566][ T7352] syz.2.391: attempt to access beyond end of device [ 258.933566][ T7352] nbd2: rw=0, sector=64, nr_sectors = 8 limit=0 [ 259.889203][ T7352] syz.2.391: attempt to access beyond end of device [ 259.889203][ T7352] nbd2: rw=0, sector=120, nr_sectors = 8 limit=0 [ 259.913989][ T7352] Mount JFS Failure: -5 [ 261.070481][ T23] usb 1-1: new full-speed USB device number 3 using dummy_hcd [ 261.599087][ T23] usb 1-1: config 0 has an invalid interface number: 213 but max is 0 [ 261.633700][ T23] usb 1-1: config 0 has no interface number 0 [ 261.674726][ T23] usb 1-1: New USB device found, idVendor=0079, idProduct=85eb, bcdDevice=90.b7 [ 261.702454][ T23] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 261.760428][ T23] usb 1-1: Product: syz [ 261.764734][ T23] usb 1-1: Manufacturer: syz [ 261.772463][ T23] usb 1-1: SerialNumber: syz [ 261.803184][ T23] usb 1-1: config 0 descriptor?? [ 261.867884][ T7378] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 262.038536][ T9] usb 1-1: USB disconnect, device number 3 [ 267.407447][ T7424] netlink: 28 bytes leftover after parsing attributes in process `syz.0.408'. [ 268.340698][ T7423] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 268.651286][ T7427] [U]  [ 270.681526][ T7440] ================================================================== [ 270.690090][ T7440] BUG: KASAN: slab-use-after-free in rose_transmit_link+0x5ba/0x740 [ 270.698143][ T7440] Read of size 1 at addr ffff888026df0c32 by task syz.2.414/7440 [ 270.706093][ T7440] [ 270.708440][ T7440] CPU: 1 PID: 7440 Comm: syz.2.414 Not tainted 6.6.99-syzkaller #0 [ 270.716363][ T7440] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 270.726453][ T7440] Call Trace: [ 270.729755][ T7440] [ 270.732720][ T7440] dump_stack_lvl+0x16c/0x230 [ 270.737428][ T7440] ? __lock_acquire+0x7c80/0x7c80 [ 270.742484][ T7440] ? show_regs_print_info+0x20/0x20 [ 270.747724][ T7440] ? load_image+0x3b0/0x3b0 [ 270.752275][ T7440] ? _raw_spin_lock_irqsave+0xb4/0xf0 [ 270.757674][ T7440] ? __virt_addr_valid+0x18c/0x540 [ 270.762792][ T7440] ? __virt_addr_valid+0x469/0x540 [ 270.767910][ T7440] print_report+0xac/0x200 [ 270.772416][ T7440] ? rose_transmit_link+0x5ba/0x740 [ 270.777630][ T7440] kasan_report+0x117/0x150 [ 270.782140][ T7440] ? kmem_cache_alloc_node+0x17f/0x330 [ 270.787605][ T7440] ? rose_transmit_link+0x5ba/0x740 [ 270.792824][ T7440] rose_transmit_link+0x5ba/0x740 [ 270.797872][ T7440] ? skb_put+0x11b/0x210 [ 270.802141][ T7440] rose_write_internal+0x11d1/0x1ab0 [ 270.807435][ T7440] ? rose_validate_nr+0x120/0x120 [ 270.812459][ T7440] ? __timer_delete+0x6b/0x290 [ 270.817226][ T7440] ? skb_queue_purge_reason+0x6c/0x1c0 [ 270.822697][ T7440] rose_release+0x24e/0x510 [ 270.827201][ T7440] sock_close+0xbd/0x230 [ 270.831472][ T7440] ? sock_mmap+0xa0/0xa0 [ 270.835730][ T7440] __fput+0x234/0x970 [ 270.839729][ T7440] task_work_run+0x1ce/0x250 [ 270.844328][ T7440] ? task_work_cancel+0x240/0x240 [ 270.849359][ T7440] get_signal+0x1235/0x1400 [ 270.853869][ T7440] ? task_work_add+0x3a3/0x440 [ 270.858648][ T7440] ? __ia32_sys_pidfd_getfd+0x90/0x90 [ 270.864034][ T7440] ? wake_bit_function+0x200/0x200 [ 270.869170][ T7440] ? __might_fault+0xaa/0x120 [ 270.873853][ T7440] arch_do_signal_or_restart+0x96/0x780 [ 270.879414][ T7440] ? __sys_connect+0x240/0x420 [ 270.884180][ T7440] ? get_sigframe_size+0x20/0x20 [ 270.889149][ T7440] ? exit_to_user_mode_loop+0x3b/0x110 [ 270.894613][ T7440] exit_to_user_mode_loop+0x70/0x110 [ 270.899898][ T7440] exit_to_user_mode_prepare+0xb1/0x140 [ 270.905448][ T7440] syscall_exit_to_user_mode+0x1a/0x50 [ 270.910906][ T7440] do_syscall_64+0x61/0xb0 [ 270.915322][ T7440] ? clear_bhb_loop+0x40/0x90 [ 270.919997][ T7440] ? clear_bhb_loop+0x40/0x90 [ 270.924672][ T7440] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 270.930572][ T7440] RIP: 0033:0x7f34d0b8e9a9 [ 270.934997][ T7440] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 270.954607][ T7440] RSP: 002b:00007f34d1918038 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 270.963036][ T7440] RAX: fffffffffffffe00 RBX: 00007f34d0db6160 RCX: 00007f34d0b8e9a9 [ 270.971017][ T7440] RDX: 0000000000000040 RSI: 0000200000000100 RDI: 000000000000000b [ 270.979013][ T7440] RBP: 00007f34d0c10d69 R08: 0000000000000000 R09: 0000000000000000 [ 270.986991][ T7440] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 270.994968][ T7440] R13: 0000000000000000 R14: 00007f34d0db6160 R15: 00007ffe34d6f588 [ 271.002984][ T7440] [ 271.006042][ T7440] [ 271.008396][ T7440] Allocated by task 6075: [ 271.012722][ T7440] kasan_set_track+0x4e/0x70 [ 271.017311][ T7440] __kasan_kmalloc+0x8f/0xa0 [ 271.021901][ T7440] rose_add_node+0x23a/0xdd0 [ 271.026487][ T7440] rose_rt_ioctl+0xa42/0xfb0 [ 271.031123][ T7440] rose_ioctl+0x3cf/0x8b0 [ 271.035477][ T7440] sock_do_ioctl+0xd7/0x2f0 [ 271.040028][ T7440] sock_ioctl+0x623/0x7a0 [ 271.044362][ T7440] __se_sys_ioctl+0xfd/0x170 [ 271.048955][ T7440] do_syscall_64+0x55/0xb0 [ 271.053370][ T7440] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 271.059266][ T7440] [ 271.061584][ T7440] Freed by task 7439: [ 271.065589][ T7440] kasan_set_track+0x4e/0x70 [ 271.070184][ T7440] kasan_save_free_info+0x2e/0x50 [ 271.075210][ T7440] ____kasan_slab_free+0x126/0x1e0 [ 271.080324][ T7440] slab_free_freelist_hook+0x130/0x1b0 [ 271.085780][ T7440] __kmem_cache_free+0xba/0x1f0 [ 271.090637][ T7440] rose_rt_device_down+0x43d/0x490 [ 271.095765][ T7440] rose_device_event+0x604/0x690 [ 271.100698][ T7440] notifier_call_chain+0x197/0x390 [ 271.105808][ T7440] __dev_notify_flags+0x18e/0x2e0 [ 271.110829][ T7440] dev_change_flags+0xe8/0x1a0 [ 271.115590][ T7440] dev_ifsioc+0x6a7/0xe20 [ 271.119924][ T7440] dev_ioctl+0x7e2/0x1170 [ 271.124250][ T7440] sock_do_ioctl+0x226/0x2f0 [ 271.128849][ T7440] sock_ioctl+0x623/0x7a0 [ 271.133185][ T7440] __se_sys_ioctl+0xfd/0x170 [ 271.137779][ T7440] do_syscall_64+0x55/0xb0 [ 271.142221][ T7440] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 271.148133][ T7440] [ 271.150456][ T7440] Last potentially related work creation: [ 271.156162][ T7440] kasan_save_stack+0x3e/0x60 [ 271.160838][ T7440] __kasan_record_aux_stack+0xaf/0xc0 [ 271.166226][ T7440] call_rcu+0x158/0x930 [ 271.170404][ T7440] ip6_route_info_create+0x9c0/0x1200 [ 271.175780][ T7440] ip6_route_add+0x28/0x130 [ 271.180291][ T7440] addrconf_prefix_route+0x211/0x2b0 [ 271.185576][ T7440] inet6_addr_add+0x64a/0xb60 [ 271.190243][ T7440] inet6_rtm_newaddr+0x68d/0x940 [ 271.195257][ T7440] rtnetlink_rcv_msg+0x7c7/0xf10 [ 271.200193][ T7440] netlink_rcv_skb+0x216/0x480 [ 271.204953][ T7440] netlink_unicast+0x751/0x8d0 [ 271.209712][ T7440] netlink_sendmsg+0x8c1/0xbe0 [ 271.214488][ T7440] __sys_sendto+0x46a/0x620 [ 271.218989][ T7440] __x64_sys_sendto+0xde/0xf0 [ 271.223667][ T7440] do_syscall_64+0x55/0xb0 [ 271.228085][ T7440] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 271.233991][ T7440] [ 271.236324][ T7440] The buggy address belongs to the object at ffff888026df0c00 [ 271.236324][ T7440] which belongs to the cache kmalloc-512 of size 512 [ 271.250383][ T7440] The buggy address is located 50 bytes inside of [ 271.250383][ T7440] freed 512-byte region [ffff888026df0c00, ffff888026df0e00) [ 271.264117][ T7440] [ 271.266470][ T7440] The buggy address belongs to the physical page: [ 271.272880][ T7440] page:ffffea00009b7c00 refcount:1 mapcount:0 mapping:0000000000000000 index:0xffff888026df0000 pfn:0x26df0 [ 271.284339][ T7440] head:ffffea00009b7c00 order:2 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 271.293262][ T7440] flags: 0xfff00000000840(slab|head|node=0|zone=1|lastcpupid=0x7ff) [ 271.301259][ T7440] page_type: 0xffffffff() [ 271.305600][ T7440] raw: 00fff00000000840 ffff888017841c80 ffffea0000c3a510 ffffea000097b810 [ 271.314172][ T7440] raw: ffff888026df0000 000000000010000c 00000001ffffffff 0000000000000000 [ 271.322742][ T7440] page dumped because: kasan: bad access detected [ 271.329152][ T7440] page_owner tracks the page as allocated [ 271.334861][ T7440] page last allocated via order 2, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 2409, tgid 2409 (kworker/u4:0), ts 15229817014, free_ts 0 [ 271.355391][ T7440] post_alloc_hook+0x1cd/0x210 [ 271.360165][ T7440] get_page_from_freelist+0x195c/0x19f0 [ 271.365709][ T7440] __alloc_pages+0x1e3/0x460 [ 271.370316][ T7440] alloc_slab_page+0x5d/0x170 [ 271.375009][ T7440] new_slab+0x87/0x2e0 [ 271.379092][ T7440] ___slab_alloc+0xc6d/0x12f0 [ 271.383766][ T7440] __kmem_cache_alloc_node+0x1a2/0x260 [ 271.389226][ T7440] kmalloc_trace+0x2a/0xe0 [ 271.393647][ T7440] alloc_bprm+0x56/0x9c0 [ 271.397907][ T7440] kernel_execve+0x98/0x9c0 [ 271.402418][ T7440] call_usermodehelper_exec_async+0x20b/0x350 [ 271.408493][ T7440] ret_from_fork+0x48/0x80 [ 271.412917][ T7440] ret_from_fork_asm+0x11/0x20 [ 271.417687][ T7440] page_owner free stack trace missing [ 271.423054][ T7440] [ 271.425392][ T7440] Memory state around the buggy address: [ 271.431034][ T7440] ffff888026df0b00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 271.439108][ T7440] ffff888026df0b80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 271.447188][ T7440] >ffff888026df0c00: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 271.455247][ T7440] ^ [ 271.460883][ T7440] ffff888026df0c80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 271.468942][ T7440] ffff888026df0d00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 271.476998][ T7440] ================================================================== [ 271.646659][ T7440] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 271.653964][ T7440] CPU: 0 PID: 7440 Comm: syz.2.414 Not tainted 6.6.99-syzkaller #0 [ 271.661855][ T7440] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 271.671914][ T7440] Call Trace: [ 271.675194][ T7440] [ 271.678126][ T7440] dump_stack_lvl+0x16c/0x230 [ 271.682808][ T7440] ? show_regs_print_info+0x20/0x20 [ 271.688015][ T7440] ? load_image+0x3b0/0x3b0 [ 271.692531][ T7440] panic+0x2c0/0x710 [ 271.696433][ T7440] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 271.702589][ T7440] ? bpf_jit_dump+0xd0/0xd0 [ 271.707095][ T7440] ? _raw_spin_unlock_irqrestore+0xfa/0x110 [ 271.712985][ T7440] ? _raw_spin_unlock+0x40/0x40 [ 271.717875][ T7440] ? rose_transmit_link+0x5ba/0x740 [ 271.723075][ T7440] check_panic_on_warn+0x84/0xa0 [ 271.728025][ T7440] ? rose_transmit_link+0x5ba/0x740 [ 271.733240][ T7440] end_report+0x6f/0x140 [ 271.737480][ T7440] kasan_report+0x128/0x150 [ 271.742006][ T7440] ? kmem_cache_alloc_node+0x17f/0x330 [ 271.747556][ T7440] ? rose_transmit_link+0x5ba/0x740 [ 271.752748][ T7440] rose_transmit_link+0x5ba/0x740 [ 271.757766][ T7440] ? skb_put+0x11b/0x210 [ 271.762045][ T7440] rose_write_internal+0x11d1/0x1ab0 [ 271.767332][ T7440] ? rose_validate_nr+0x120/0x120 [ 271.772348][ T7440] ? __timer_delete+0x6b/0x290 [ 271.777196][ T7440] ? skb_queue_purge_reason+0x6c/0x1c0 [ 271.782678][ T7440] rose_release+0x24e/0x510 [ 271.787180][ T7440] sock_close+0xbd/0x230 [ 271.791422][ T7440] ? sock_mmap+0xa0/0xa0 [ 271.795671][ T7440] __fput+0x234/0x970 [ 271.799669][ T7440] task_work_run+0x1ce/0x250 [ 271.804261][ T7440] ? task_work_cancel+0x240/0x240 [ 271.809291][ T7440] get_signal+0x1235/0x1400 [ 271.813796][ T7440] ? task_work_add+0x3a3/0x440 [ 271.818558][ T7440] ? __ia32_sys_pidfd_getfd+0x90/0x90 [ 271.823927][ T7440] ? wake_bit_function+0x200/0x200 [ 271.829040][ T7440] ? __might_fault+0xaa/0x120 [ 271.833714][ T7440] arch_do_signal_or_restart+0x96/0x780 [ 271.839290][ T7440] ? __sys_connect+0x240/0x420 [ 271.844055][ T7440] ? get_sigframe_size+0x20/0x20 [ 271.849017][ T7440] ? exit_to_user_mode_loop+0x3b/0x110 [ 271.854482][ T7440] exit_to_user_mode_loop+0x70/0x110 [ 271.859767][ T7440] exit_to_user_mode_prepare+0xb1/0x140 [ 271.865318][ T7440] syscall_exit_to_user_mode+0x1a/0x50 [ 271.870785][ T7440] do_syscall_64+0x61/0xb0 [ 271.875201][ T7440] ? clear_bhb_loop+0x40/0x90 [ 271.879874][ T7440] ? clear_bhb_loop+0x40/0x90 [ 271.884551][ T7440] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 271.890456][ T7440] RIP: 0033:0x7f34d0b8e9a9 [ 271.894880][ T7440] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 271.914496][ T7440] RSP: 002b:00007f34d1918038 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 271.922909][ T7440] RAX: fffffffffffffe00 RBX: 00007f34d0db6160 RCX: 00007f34d0b8e9a9 [ 271.930882][ T7440] RDX: 0000000000000040 RSI: 0000200000000100 RDI: 000000000000000b [ 271.938848][ T7440] RBP: 00007f34d0c10d69 R08: 0000000000000000 R09: 0000000000000000 [ 271.946813][ T7440] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 271.954800][ T7440] R13: 0000000000000000 R14: 00007f34d0db6160 R15: 00007ffe34d6f588 [ 271.962781][ T7440] [ 271.966128][ T7440] Kernel Offset: disabled [ 271.970457][ T7440] Rebooting in 86400 seconds..