last executing test programs: 42.757403993s ago: executing program 1 (id=47): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x2c240, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000080), 0x47ffffa, 0x122c42) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r0) ioctl$BLKSECDISCARD(r0, 0x127d, 0x0) 41.462452169s ago: executing program 1 (id=50): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r0 = syz_io_uring_setup(0x5ffa, &(0x7f0000000380)={0x0, 0x4099, 0x2, 0x1, 0x100004}, &(0x7f0000000180), &(0x7f0000000280)) io_uring_enter(r0, 0x2ded, 0x1f4a, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, 0x0, 0x0) lseek(0xffffffffffffffff, 0xae7e, 0x0) getsockopt(0xffffffffffffffff, 0x200000000114, 0x2711, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4000, 0x47, @private2={0xfc, 0x2, '\x00', 0x1}, 0x4}, 0x1c) r2 = openat$audio1(0xffffffffffffff9c, 0x0, 0x60202, 0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f00000002c0)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x3, 0x7fc00100}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r3, 0xc0502100, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r3, 0xc0502100, &(0x7f0000000300)) ioctl$SNDCTL_DSP_SETFRAGMENT(r2, 0xc004500a, 0x0) write$dsp(r2, 0x0, 0x0) syz_open_dev$swradio(&(0x7f0000000000), 0x1, 0x2) openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r4) ptrace$pokeuser(0x6, r4, 0x102, 0x0) 38.563985178s ago: executing program 1 (id=58): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000040)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f00000001c0)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) readv(r0, &(0x7f0000000480)=[{&(0x7f0000000180)=""/19, 0x13}], 0x1) ioctl$DRM_IOCTL_MODE_GET_LEASE(r0, 0xc01064c8, &(0x7f0000000280)={0x1, 0x0, &(0x7f0000000200)=[0x0]}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r0, 0xc02064b9, &(0x7f00000002c0)={&(0x7f0000000240)=[0x0], &(0x7f0000000280), 0x1, r2}) socket$inet_mptcp(0x2, 0x1, 0x106) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) pselect6(0x40, &(0x7f00000045c0)={0x0, 0x2, 0x4, 0x0, 0x0, 0x0, 0x4}, 0x0, &(0x7f0000004640)={0xf8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000380)={0x401, 0x1, &(0x7f00000000c0)=[r2], &(0x7f0000000200), &(0x7f0000000300)=[r3], &(0x7f0000000580)}) 36.269191798s ago: executing program 1 (id=63): r0 = open(&(0x7f0000000340)='./file0\x00', 0x240, 0xb) r1 = socket$phonet(0x23, 0x2, 0x1) setsockopt$SO_TIMESTAMP(r1, 0x1, 0x40, &(0x7f0000000540)=0x50658a5e, 0x4) close_range(r0, 0xffffffffffffffff, 0x0) 34.578219252s ago: executing program 1 (id=66): mkdir(&(0x7f00000009c0)='./file0\x00', 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) socket$inet6_udp(0xa, 0x2, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_TPR_ACCESS_REPORTING(r2, 0xc028ae92, &(0x7f0000000000)={0x10040}) r3 = dup(r0) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) syz_io_uring_setup(0x400238, &(0x7f0000000380)={0x0, 0xfad8, 0x400, 0x3, 0x2fb, 0x0, r3}, &(0x7f0000000180)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {}, 0x1}) r6 = memfd_create(0x0, 0x4) mmap(&(0x7f0000200000/0x400000)=nil, 0x400000, 0xe, 0x2012, r6, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=@newlink={0x58, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0xffff, 0x0, 0x1c42}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @xfrm={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_XFRM_IF_ID={0x8, 0x2, 0x2}, @IFLA_XFRM_LINK={0x8, 0x1, 0x4}]}}}, @IFLA_IFNAME={0x14, 0x3, 'xfrm0\x00'}]}, 0x58}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000040)='sched_switch\x00', r7}, 0x10) r8 = syz_open_procfs(0x0, &(0x7f0000000000)='map_files\x00') getdents64(r8, &(0x7f00000000c0)=""/44, 0x2c) getdents64(r8, &(0x7f0000002f40)=""/4098, 0x1002) 31.721527656s ago: executing program 1 (id=73): syz_usb_connect(0x0, 0x2d, &(0x7f0000000200)=ANY=[@ANYBLOB="12010000d5e9bd40eb030200c0ba050000010902115c01000000000904000001b504b100090581"], 0x0) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x4, 0x183000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000240)={0x3, 0x4, 0x3, 0x6}, 0x10, 0x0, 0x0, 0x2, 0x0, &(0x7f0000000340)=[{0xfffffffe, 0x1, 0xa, 0xb}, {0x5, 0x2, 0x13, 0x2}], 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) setresuid(0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) r3 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r3, &(0x7f0000000000)={0x18, 0x2, {0x0, @dev={0xac, 0x14, 0x14, 0x10}}}, 0x1e) connect$pptp(r3, &(0x7f0000000700)={0x18, 0x2, {0x0, @multicast1}}, 0x1e) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) syz_open_dev$sndpcmc(&(0x7f0000000000), 0x0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') r5 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/4\x00') mount$9p_fd(0x0, &(0x7f0000000180)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r4}}) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000d40000000000000000000000000a20000000000a03000000000000000000010000000900010073797a3000000000bc000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000009000038008000240000000007c00038014000100626f6e64300000000000000000000000140001006970766c616e31000000000000000000140001006970766c616e300000000000000000001400010073697430000000000000fbffffffffffffff0100776c616e300000000000000000000000140001006772653000000000000000000000040008000140000000005c000000180a01010000000000000000010000000900020073797a30000000000900010073797a3000000000300003802c00038014000100626f6e64300000000000000000000000140001006970766c616e31"], 0x4b0}}, 0x0) ioctl$EVIOCSKEYCODE_V2(r0, 0x40284504, &(0x7f0000000180)={0x0, 0x8, 0x0, 0x5, "2a000000000000005a957fe0213b2e100af028f0030b2eff0b61e6e66b8f37ff"}) 19.197067257s ago: executing program 3 (id=81): r0 = syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000080)='./file1\x00', 0x2000018, &(0x7f0000000500)=ANY=[], 0xfe, 0x1c7, &(0x7f0000001100)="$eJzs3bFu00AYB/DPKSQpQ9UZMViwMFXAExShIiEiIYEywAQSTC0LLIGpI6/AW6JO3Q4lZxMcB4kAjgn8fks++e873/ksZ8rl5Y23p5+GsTAeFzE4juO4LOIwBnHzIB8/j5b99iEAYFdcphRfUtb3WACA7fD9DwD/n2fPXzy+P5mcPC3LccTFeVEdn03z58NHk5M75cLhstXFbDbdi/rcuzmfNvOrca1qfy/nZTMfxu1bOZ9nD55MVvJRvO5y4gAAAAAAAAAAAAAAAAAAAAAA0KOj8pvW/j6L/OhHea6+2x9oZf+ez3H9ytamAQAAAAAAAAAAAAAAAAAAADvt/bguPnw8fXV29ubdjhcppTSfzyatRtU9+J2rH/wFc28VEWuieuk36bBu091Q094f7LCcF0VE9LwEv/hEDZurM6hufndDLdY8Est3xKjztxAAAAAAAAAAAAAAAAAAABCNn/33PRIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA6M/y//83LNIod/ATJ6+77v6W5wkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMC/7WsAAAD//wc2Fgs=") r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0xfffffffe}, 0x1c) bind$inet6(r1, &(0x7f0000000040)={0xa, 0xe22, 0x0, @rand_addr, 0x1f0}, 0x1c) r2 = socket$netlink(0x10, 0x3, 0x8000000004) syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581", @ANYBLOB="f7", @ANYRESOCT], 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000180)={0xffffffffffffffff, 0x58, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) ioctl$sock_inet6_SIOCSIFDSTADDR(r1, 0x8918, &(0x7f00000001c0)={@private2, 0x6f, r3}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_clone(0x20001000, 0x0, 0x0, 0x0, 0x0, 0x0) writev(r2, &(0x7f0000001200)=[{&(0x7f0000000080)="580000001400add427323b472545b4560a117fffffff81004e200e227f000001925aa80020007b00090080007f000001e809000000ff0000f03ac71002000000ffffffffffffffffffe7ee00000000000000000200000000", 0x58}], 0x1) mkdir(&(0x7f0000002340)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) openat(r0, &(0x7f0000000040)='./file1\x00', 0x400c2, 0xa0) 19.074083844s ago: executing program 2 (id=82): r0 = socket$kcm(0x2, 0x5, 0x84) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000005c0)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x0, 0x4, 0x2, 0xa}, {0x2, 0x0, 0xfffffffd, 0x3}], 0x10, 0x8, @void, @value}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f00000005c0)=ANY=[@ANYBLOB="9feb010018000000000000004c0000004c00000002000000000000000000000300000000020000000200000000000000000000000000000105000000080000020000000002000005000000000000000001000000000000000000000001"], 0x0, 0x66, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r4 = creat(&(0x7f0000000180)='./bus\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r3, 0x40086602, &(0x7f0000000080)=0x20) ftruncate(r4, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000004d00), r5) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r5, &(0x7f0000004e00)={0x0, 0x0, &(0x7f0000004dc0)={&(0x7f0000004d40)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="01000000100000002000070000001400030000000000000000000000ffffe0000001140002"], 0x3c}}, 0x4000000) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r0, 0x84, 0x10, &(0x7f0000000000)=r7, 0x8) r8 = socket$nl_generic(0x10, 0x3, 0x10) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x200000005c832, 0xffffffffffffffff, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000847fff)='X', 0x1, 0x0, 0x0, 0x0) r9 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r9, 0x11b, 0x4, &(0x7f00000002c0)={&(0x7f0000000000)=""/74, 0x228000, 0x800}, 0x20) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'netdevsim0\x00', 0x0}) r11 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x1, 0x3, 0x261, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', r10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x3, 0x11, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000018110000", @ANYRES32=r11, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000085100000ffffffffc470c0ff04000000bf91000000000000b7020000000000008500000000000000b7000000000000009500000000000000"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r10, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @void, @value}, 0x94) r12 = socket$inet6(0xa, 0x80002, 0x0) r13 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r14 = ioctl$KVM_CREATE_VM(r13, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r14, 0x4020ae46, &(0x7f0000000040)={0x1, 0x2, 0x6000, 0x2000, &(0x7f0000fa2000/0x2000)=nil}) ioctl$KVM_SET_USER_MEMORY_REGION(r14, 0x4020ae46, &(0x7f0000000080)={0x26e8, 0x0, 0x0, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) close_range(r12, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x2, 0x0) 17.928415978s ago: executing program 2 (id=85): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='mountinfo\x00') r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000100)) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x8801) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount_setattr(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x1000, &(0x7f0000000280)={0x7, 0x0, 0x80000}, 0x20) 17.558406275s ago: executing program 4 (id=86): r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000030020f003176c40000000000109022472510000000009040000120701030009050102000000000009058202"], 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000e80)=ANY=[], 0x0) syz_usb_control_io(r1, 0x0, &(0x7f0000000100)={0x44, 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB=' \x00'], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) 16.09595285s ago: executing program 32 (id=73): syz_usb_connect(0x0, 0x2d, &(0x7f0000000200)=ANY=[@ANYBLOB="12010000d5e9bd40eb030200c0ba050000010902115c01000000000904000001b504b100090581"], 0x0) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x4, 0x183000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000240)={0x3, 0x4, 0x3, 0x6}, 0x10, 0x0, 0x0, 0x2, 0x0, &(0x7f0000000340)=[{0xfffffffe, 0x1, 0xa, 0xb}, {0x5, 0x2, 0x13, 0x2}], 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) setresuid(0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) r3 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r3, &(0x7f0000000000)={0x18, 0x2, {0x0, @dev={0xac, 0x14, 0x14, 0x10}}}, 0x1e) connect$pptp(r3, &(0x7f0000000700)={0x18, 0x2, {0x0, @multicast1}}, 0x1e) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) syz_open_dev$sndpcmc(&(0x7f0000000000), 0x0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') r5 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/4\x00') mount$9p_fd(0x0, &(0x7f0000000180)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r4}}) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="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"], 0x4b0}}, 0x0) ioctl$EVIOCSKEYCODE_V2(r0, 0x40284504, &(0x7f0000000180)={0x0, 0x8, 0x0, 0x5, "2a000000000000005a957fe0213b2e100af028f0030b2eff0b61e6e66b8f37ff"}) 15.671607597s ago: executing program 2 (id=89): openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0xaa01c855bb518a43, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x40102) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_open_dev$video(&(0x7f0000000000), 0x7ff, 0x0) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r2, 0xc034564b, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x80fe) syz_emit_ethernet(0x0, 0x0, 0x0) clock_getres(0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="78226e6f65786163638173733d616e792c63616368653d66736361636865"]) chdir(&(0x7f0000000280)='./file0\x00') r3 = openat(0xffffffffffffff9c, 0x0, 0x20c01, 0x0) open$dir(&(0x7f0000000240)='./file0\x00', 0x40000, 0x2) io_setup(0x1fe, &(0x7f0000000200)=0x0) io_submit(r4, 0x1, &(0x7f0000000040)=[&(0x7f0000000440)={0x18, 0x7000000, 0x4, 0x1, 0x4000, r3, &(0x7f0000000180)='\x00', 0xf000, 0x2}]) socketpair$unix(0x1, 0x1, 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0xffffffff, 0x4000007) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x6) r6 = openat$mixer(0xffffffffffffff9c, &(0x7f00000016c0), 0x20840, 0x0) ioctl$SOUND_MIXER_READ_VOLUME(r6, 0x40086603, &(0x7f0000000040)) bpf$MAP_CREATE(0x300000000000000, &(0x7f0000000100)=ANY=[], 0x48) r7 = syz_io_uring_setup(0x7db0, &(0x7f0000000380)={0x0, 0x1ffffe, 0x10100, 0x1}, &(0x7f0000000200)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r8, r9, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r7, 0x2ded, 0x4000, 0x0, 0x0, 0x0) recvmsg$unix(r1, 0x0, 0x40) 15.569931021s ago: executing program 0 (id=90): ioctl$TCSETS(0xffffffffffffffff, 0x5402, &(0x7f0000000000)={0xd, 0x9, 0x40000000, 0x0, 0xb, "4e2e10e3e9dd34180b687c006f6edcb311ce81"}) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB="1500000065ffff001000000800395032303030"], 0x15) r2 = dup(r1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENT(r2, &(0x7f0000000000)=ANY=[@ANYBLOB='X'], 0x58) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000200), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1]) 15.38307836s ago: executing program 3 (id=91): openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x62181) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) read$alg(r3, &(0x7f0000000240)=""/4096, 0xfffffdef) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x10) r4 = syz_open_procfs(0x0, &(0x7f0000000180)='pagemap\x00') pread64(r4, &(0x7f000001a240)=""/102400, 0x19000, 0x100008) r5 = io_uring_setup(0x79af, &(0x7f0000000100)={0x0, 0xaa00, 0x2}) io_uring_register$IORING_REGISTER_IOWQ_AFF(r5, 0x11, &(0x7f0000000040)="d25b49eaa837aca70b55963d847cb9cdc64c6cb78f6fd498cd9bba2a17c0e17da219082fa57699f4f249087bddafb95f5df23a60cbb6a1633839a9d2ada455c0ba8f8d191df1879e6e9b66eb51a57735e48c743fa4", 0x55) close_range(r5, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x35, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x88}, [@initr0]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) socket$inet6(0xa, 0x80003, 0xff) r6 = syz_open_dev$hidraw(&(0x7f0000000080), 0x0, 0x418000) r7 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000090000082502000000000000000109025c00020100f92a0904000001020900000524060001053408fa6e0d240f0100000000000d000a0006471a010000190581"], 0x0) r8 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x8402, 0x0) pwritev2(r8, &(0x7f0000000000)=[{&(0x7f0000000080)='q', 0x1}], 0x1, 0x80, 0x0, 0x0) openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0xa2602, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r7) syz_usb_connect(0x3, 0x0, 0x0, 0x0) r9 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(0xffffffffffffffff, 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000001240)=ANY=[@ANYRES16=0x0, @ANYRESDEC=r6, @ANYRESDEC=r9, @ANYRES16=r0, @ANYRESHEX=0x0, @ANYRESOCT=r0, @ANYRESHEX, @ANYRESDEC=r6, @ANYRESHEX, @ANYRES32=0x0], 0x44}}, 0x0) 14.295029412s ago: executing program 0 (id=92): r0 = socket$netlink(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f0000000480)=ANY=[@ANYRES32=r0, @ANYRESOCT=0x0, @ANYRES16=r0, @ANYRESHEX=r0, @ANYRES32=r0], &(0x7f0000000000)='GPL\x00', 0x7, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f0000000340)=[{0x0, 0x3, 0x6, 0x5}, {0x5, 0x5, 0x3, 0x9}], 0x10, 0x36, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) ioctl$LOOP_SET_CAPACITY(0xffffffffffffffff, 0x4c07) syz_init_net_socket$rose(0xb, 0x5, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000340)={'bridge0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="440000001300290a000000000000000007000000", @ANYRES32=r6, @ANYBLOB="00000000000000001c001a800800028008000200080000003e120000080002001040e5"], 0x44}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2c00000010004b0400000000000000007a000000", @ANYRES32=r6, @ANYBLOB="00000000000000000a000100aaaaaaaaaa000000e2f24b9d8bad991709672c4779b93ee05ff81d65fca6ffd77fcf82fe7a00ab9d4c37ead9c1de"], 0x2c}}, 0x0) 13.809500754s ago: executing program 4 (id=93): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc058534f, &(0x7f00000003c0)={{0x0, 0x1}, 0x1, 0x9, 0x0, {0x0, 0x4}, 0x3, 0x80}) 11.622137782s ago: executing program 0 (id=94): ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r0 = syz_usb_connect(0x3, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109024b0001100000000904000003fe03010009cd8d1f01020000000905050200de7e001009058b1e20"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000300)={0x84, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) r2 = syz_usb_connect$cdc_ecm(0x0, 0x59, &(0x7f00000003c0)={{0x12, 0x1, 0x300, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x47, 0x1, 0x1, 0x1, 0x10, 0x6, [{{0x9, 0x4, 0x0, 0x2, 0x2, 0x2, 0x6, 0x0, 0x7, {{0x8, 0x24, 0x6, 0x0, 0x0, "d42911"}, {0x5, 0x24, 0x0, 0x5}, {0xd, 0x24, 0xf, 0x1, 0x5, 0x8000, 0x5, 0x2}}, {[{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0xf9, 0x3, 0x60}}], {{0x9, 0x5, 0x82, 0x2, 0x400, 0x7, 0x5, 0x6}}, {{0x9, 0x5, 0x3, 0x2, 0x8, 0x9, 0x5, 0x10}}}}}]}}]}}, &(0x7f00000001c0)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x250, 0xfe, 0x9, 0x1, 0x20, 0x9a}, 0x7c, &(0x7f0000000500)={0x5, 0xf, 0x7c, 0x1, [@generic={0x77, 0x10, 0x5, "3339609f75063ae9f572280ecdeb1e55568900f7279b0d7e4463f1489ddc5b833bef142cbf90552f6afc91e5b09071f8a217be34247260daf83b8d4e45cc95ce77863afdf6786539309783eee4ef3756c8fbb01fc48bd852cfffa8f66a04285e67ea3fa67f5bbeab037883233fa3467c32d3fe66"}]}, 0x1, [{0x4, &(0x7f0000000140)=@lang_id={0x4, 0x3, 0x44e}}]}) syz_usb_control_io(r2, &(0x7f0000000900)={0x2c, &(0x7f0000000740)={0x20, 0x31, 0xff, {0xff, 0x24, "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"}}, &(0x7f00000005c0)={0x0, 0x3, 0xe6, @string={0xe6, 0x3, "8f25106774c21aee1479998e5d93eb65fc02f83e8abe70669fa5aa3298b003d39c62709210924e391b938fa93687f3e1c659dc99872fd6f8d48b7ff25ba9d209d2c516ef5c96de22ebe1874e9b7a2abc9fc2f824e198dd04d855f1db8ee96fb054dec80fccf896ced1c4c06c4ac68f3ddc6c9710a68ce4b60ee327b36c5f03fecad882148cbf7e6aff5c5b68c46285f8ae98d9915a984e20559cf0fc497ef65b5c070512fa8f32c4b86950255523d3a20998a906f1f20616e2e50d42e0528906ff5bbdcc4754c00df4e0f3b052c6de45518809467fd08ba34f3b97c858ebea8840af1351"}}, &(0x7f0000000880)={0x0, 0xf, 0x21, {0x5, 0xf, 0x21, 0x3, [@ext_cap={0x7, 0x10, 0x2, 0x18, 0x3, 0x8, 0x6}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0xf, 0xe, 0x9, 0x7}, @wireless={0xb, 0x10, 0x1, 0x8, 0x5, 0xcf, 0x0, 0x4, 0x1}]}}, &(0x7f0000000240)={0x20, 0x29, 0xf, {0xf, 0x29, 0x3, 0x60, 0x0, 0x4, "99083095", "4ac47f50"}}, &(0x7f00000002c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x40, 0x80, 0x80, 0x4, 0xb, 0xf, 0x150b}}}, &(0x7f0000000d80)={0x84, &(0x7f0000000940)={0x20, 0x31, 0x40, "5ea001099a2d7e9a3dcf5078b2b13532cd9327ee2c6cd961a7c629a37253828b8277c95d12a4851883ab5dda340fddc6a9346b8b14b2fc32b5f31c2b2807b8fc"}, &(0x7f00000009c0)={0x0, 0xa, 0x1, 0x5}, &(0x7f0000000a00)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000000a40)={0x20, 0x0, 0x4, {0x0, 0x1}}, &(0x7f0000000a80)={0x20, 0x0, 0x4, {0x140, 0x20}}, &(0x7f0000000ac0)={0x40, 0x7, 0x2, 0x80}, &(0x7f0000000b00)={0x40, 0x9, 0x1, 0x9}, &(0x7f0000000b40)={0x40, 0xb, 0x2, "d6f9"}, &(0x7f0000000b80)={0x40, 0xf, 0x2, 0x4}, &(0x7f0000000bc0)={0x40, 0x13, 0x6, @local}, &(0x7f0000000c00)={0x40, 0x17, 0x6, @link_local}, &(0x7f0000000c40)={0x40, 0x19, 0x2, 'K~'}, &(0x7f0000000c80)={0x40, 0x1a, 0x2, 0x2}, 0x0, &(0x7f0000000d00)={0x40, 0x1e, 0x1, 0x81}, &(0x7f0000000d40)={0x40, 0x21, 0x1, 0x5}}) ioctl$int_in(r1, 0x5452, &(0x7f0000000280)=0x6) syz_open_dev$sndctrl(&(0x7f0000000000), 0x84, 0x0) syz_open_dev$dmmidi(&(0x7f0000000080), 0x200, 0x2) r3 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_GETMOUSEREPORTING(r3, 0x5412, &(0x7f00000000c0)=0x13) ioctl$TIOCL_GETMOUSEREPORTING(r3, 0x5412, &(0x7f00000006c0)=0x1a) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105042, 0x0) r4 = syz_io_uring_setup(0xd3, &(0x7f0000000480)={0x0, 0x0, 0x800, 0x0, 0x20}, &(0x7f0000000040)=0x0, &(0x7f0000000080)=0x0) io_uring_enter(0xffffffffffffffff, 0x629b, 0xee77, 0x0, &(0x7f0000000ec0)={[0x40]}, 0x8) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f0000000200)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r4, 0x47ba, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000700)=ANY=[]) 10.783225712s ago: executing program 2 (id=95): r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_GETMOUSEREPORTING(r0, 0x541c, &(0x7f0000000240)) 10.781020216s ago: executing program 4 (id=96): r0 = add_key$user(&(0x7f0000000040), &(0x7f0000000000), &(0x7f00000019c0)='s', 0x1, 0xfffffffffffffffe) keyctl$read(0xb, r0, 0x0, 0x0) 10.22573716s ago: executing program 4 (id=97): mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x11, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000108500000075000000a50000002300000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000140)='mmap_lock_acquire_returned\x00', r0}, 0x10) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) 9.963078604s ago: executing program 2 (id=98): openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x10, &(0x7f0000000ac0)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340), 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x3, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000100)=0x2) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) setsockopt$inet6_tcp_int(r2, 0x6, 0x2000000000000020, 0x0, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) bind$netlink(0xffffffffffffffff, 0x0, 0x0) socket$inet6_sctp(0xa, 0x801, 0x84) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000006112000000000000950000000000000051fa7824c74186dc02ec0696c37b64e3b24da3180100000005345c0f63cdc2e82818254950ee03568b8809a1f04c7c4750eabfafcb9531b31e6a86827d1010c5a909ab98e00e19644a88e95ba26d1c9eecddb2d11c541418ceeb29b9b6829c6e433822bdb3cc85244aab66c1aae9314d7381fcfeb970bea672010000000000000043144648a07a975bd89dc398712376610faa54f12495b4659be8673086f6f3543205d4bc4ce05b8b961103673dff7f158052e62bfbdcddde6985f3f1ac5d9a94cc53207899762a07282a1914452d11858e795a3ca30a101af5574f9035f2b5f703e5be7e4acf8b78c2834ae5805fffee38a9a0033d520bcf6b08ede50899d4b9bdf85c71c5ed44039aab46419496362e54cfad05b4004ac71a003d7b85d07191bed4e5a8908263722d4146f7ed569985439baa355cf3d8731f5e7a237bc06d035a8d601f21746d880819f38b34a495040000000071c2f0cce8c93cc17e9afa314fcb2ba15d646c5b9f87d988c9fbd2b9d9b4e2d71753b1549fa734f0b2e5fcf9549804cddad721971637f9c9730a9cc384eed30345979db9c93e1c52f42cad0a4d4f9436d3f39b0ed09c395dc6e970366087a8e4daeeb1b017006f25caf0cbcefd13d68839893e39c588eb032905f91cafa4996dbf0cc8228d02a3092c0830b8f587a5624515298b2d4eb2bde6f9a2eb83d53f710c490ecd085d2811a7555c53"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=ANY=[@ANYBLOB="240000003b0007010000000000000000037c0000040000000c000180"], 0x24}}, 0x0) 8.962627632s ago: executing program 3 (id=99): syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000d1d7a440041601801f44010203010902120001000000000904"], 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r0, 0xc0045520, &(0x7f0000000040)=0xfffffffc) 8.114627472s ago: executing program 0 (id=100): ioctl$BTRFS_IOC_RM_DEV_V2(0xffffffffffffffff, 0x5000943a, &(0x7f00000002c0)={{}, 0x0, 0x0, @inherit={0x48, &(0x7f0000001800)=ANY=[]}, @subvolid=0x2}) r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3800000056000100000000000000000007020000", @ANYRES32, @ANYBLOB="200001"], 0x38}}, 0x0) 7.681972194s ago: executing program 4 (id=101): socket$inet6(0xa, 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000440)='freezer.parent_freezing\x00', 0x275a, 0x0) r2 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r2, &(0x7f00000001c0)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @dev}, 0x10) sendfile(r2, r1, 0x0, 0xffefffff) 6.870777227s ago: executing program 0 (id=102): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0xd}, 0xd}, 0x1c) socket$inet_mptcp(0x2, 0x1, 0x106) unshare(0xc000080) r1 = socket(0xa, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f00000002c0)={0x100000011, @multicast2, 0x0, 0x0, 'rr\x00', 0x0, 0x182, 0x4e}, 0x2c) r2 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r2, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @local, @local}, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r1, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x80}, 0xf942d3a5c2b8544b) r3 = creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39dcdb) close(r3) r4 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x181) fcntl$setlease(r4, 0x400, 0x1) execve(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$F2FS_IOC_MOVE_RANGE(r5, 0x541b, &(0x7f0000000040)={0xffffffffffffffff}) r7 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$apparmor_exec(r7, &(0x7f0000000080)=ANY=[], 0xb1) close_range(r6, 0xffffffffffffffff, 0x0) sendmsg$IPSET_CMD_TEST(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)={0x24, 0xb, 0x6, 0x201, 0x0, 0x0, {0x3}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_ADT={0x4}, @IPSET_ATTR_ADT={0x4}]}, 0x24}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_io_uring_setup(0x10f, &(0x7f0000000300)={0x0, 0x4941, 0x400, 0x0, 0x1d6, 0x0, r6}, &(0x7f0000000240)=0x0, &(0x7f0000000280)=0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r9, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r9, r10, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x50, 0x4004, @fd, 0x0, 0x0}) io_uring_enter(r8, 0x5951, 0x7a89, 0x0, 0x0, 0x0) 6.196474228s ago: executing program 3 (id=103): r0 = socket$netlink(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f0000000480)=ANY=[@ANYRES32=r0, @ANYRESOCT=0x0, @ANYRES16=r0, @ANYRESHEX=r0, @ANYRES32=r0], &(0x7f0000000000)='GPL\x00', 0x7, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f0000000340)=[{0x0, 0x3, 0x6, 0x5}, {0x5, 0x5, 0x3, 0x9}], 0x10, 0x36, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) ioctl$LOOP_SET_CAPACITY(0xffffffffffffffff, 0x4c07) syz_init_net_socket$rose(0xb, 0x5, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000340)={'bridge0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="440000001300290a000000000000000007000000", @ANYRES32=r6, @ANYBLOB="00000000000000001c001a800800028008000200080000003e120000080002001040e5"], 0x44}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2c00000010004b0400000000000000007a000000", @ANYRES32=r6, @ANYBLOB="00000000000000000a000100aaaaaaaaaa000000e2f24b9d8bad991709672c4779b93ee05ff81d65fca6ffd77fcf82fe7a00ab9d4c37ead9c1de"], 0x2c}}, 0x0) 6.08615519s ago: executing program 4 (id=104): close(0xffffffffffffffff) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[], 0x48) bpf$MAP_CREATE(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x5d031, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(0xffffffffffffffff, 0xc01064bd, 0x0) io_setup(0x589, 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x2, @pix_mp={0x0, 0x0, 0x34324152, 0x0, 0xa, [{}, {0x10}]}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x10, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2000002, 0x4ca31, 0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000980)={0x5c, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}]}, 0x5c}}, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000100)=0xd) r3 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x103902, 0x0) r4 = dup(r3) write$UHID_INPUT(r4, &(0x7f0000001040)={0x18, {"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", 0x100d}}, 0xfffffdef) 3.49750471s ago: executing program 3 (id=105): openat$vim2m(0xffffff9c, &(0x7f0000000180), 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) socket$inet6(0xa, 0x80002, 0x88) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000001800), 0x0) r0 = syz_io_uring_setup(0x117, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1}, &(0x7f0000000280)=0x0, &(0x7f0000000200)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffc00, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x7, 0x0, 0x0, 0x0, 0xc}) io_uring_enter(r0, 0x47f6, 0x0, 0x0, 0x0, 0x0) 3.386761679s ago: executing program 0 (id=106): syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0x5}, @hci_rp_le_read_resolv_list_size={{0x9a}, {0x0, 0x7}}}}, 0x8) ioctl$VIDIOC_SUBSCRIBE_EVENT(0xffffffffffffffff, 0x4020565a, 0x0) unshare(0x68040200) getsockopt$bt_hci(0xffffffffffffffff, 0x84, 0x6d, 0x0, 0x0) socketpair(0x1, 0x3, 0x0, 0x0) syz_io_uring_setup(0x48be, 0x0, 0x0, 0x0) 166.216924ms ago: executing program 2 (id=107): syz_usb_connect(0x2, 0x9a2, &(0x7f0000000280)=ANY=[@ANYBLOB="12010000d0241710d8050a81b892000000010902900902000000000904"], 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r0, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000000008520108db9c00"/21], 0x14}}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() r2 = msgget(0x2, 0x600) msgrcv(r2, 0xfffffffffffffffe, 0x0, 0x0, 0x1000) msgrcv(r2, &(0x7f0000000000)={0x0, ""/237}, 0xf5, 0x0, 0x2000) msgsnd(r2, &(0x7f0000000100)={0x2}, 0x8, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x3) io_submit(0x0, 0x1, &(0x7f0000000740)=[0x0]) madvise(&(0x7f0000000000/0x2000)=nil, 0x8000000, 0x19) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_io_uring_setup(0x7c45, &(0x7f0000000080)={0x0, 0x20, 0x80, 0x80002, 0x27c}, 0x0, 0x0) 0s ago: executing program 3 (id=108): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) openat$ppp(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) socketpair(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) openat$sw_sync(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$SYNC_IOC_MERGE(0xffffffffffffffff, 0xc0303e03, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) ioctl$IOMMU_VFIO_IOAS$GET(r3, 0x3b88, &(0x7f0000000100)={0xc}) sendmmsg$unix(r4, &(0x7f00000bd000), 0xffffffffffffff2b, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x109042, 0x0) dup(0xffffffffffffffff) mount$9p_fd(0x0, &(0x7f00000001c0)='.\x00', &(0x7f0000000180), 0x0, &(0x7f0000000040)=ANY=[]) close_range(r1, 0xffffffffffffffff, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.35' (ED25519) to the list of known hosts. [ 172.788167][ T5766] cgroup: Unknown subsys name 'net' [ 172.935501][ T5766] cgroup: Unknown subsys name 'cpuset' [ 172.949672][ T5766] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 217.379125][ T5766] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 219.087992][ T1281] ieee802154 phy0 wpan0: encryption failed: -22 [ 219.094562][ T1281] ieee802154 phy1 wpan1: encryption failed: -22 [ 221.109273][ T5785] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 221.136394][ T5796] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 221.149367][ T5796] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 221.157563][ T5796] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 221.166013][ T5797] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 221.173896][ T5797] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 221.181974][ T5796] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 221.193293][ T5797] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 221.202337][ T5796] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 221.211531][ T5797] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 221.224162][ T5799] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 221.230659][ T5797] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 221.241912][ T5796] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 221.242605][ T5799] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 221.252550][ T5796] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 221.260824][ T5799] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 221.265987][ T5796] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 221.274115][ T5799] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 221.287660][ T5799] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 221.291615][ T5796] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 221.306013][ T52] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 221.306393][ T5799] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 221.316649][ T5796] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 221.326003][ T5799] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 221.334503][ T5796] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 221.346506][ T5796] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 221.365492][ T5785] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 221.383950][ T5785] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 221.406133][ T5792] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 221.446072][ T5785] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 222.177599][ T5788] chnl_net:caif_netlink_parms(): no params data found [ 222.985911][ T5788] bridge0: port 1(bridge_slave_0) entered blocking state [ 222.993711][ T5788] bridge0: port 1(bridge_slave_0) entered disabled state [ 223.003824][ T5788] bridge_slave_0: entered allmulticast mode [ 223.015351][ T5788] bridge_slave_0: entered promiscuous mode [ 223.039266][ T5790] chnl_net:caif_netlink_parms(): no params data found [ 223.084270][ T5782] chnl_net:caif_netlink_parms(): no params data found [ 223.162521][ T5788] bridge0: port 2(bridge_slave_1) entered blocking state [ 223.170328][ T5788] bridge0: port 2(bridge_slave_1) entered disabled state [ 223.178195][ T5788] bridge_slave_1: entered allmulticast mode [ 223.186750][ T5788] bridge_slave_1: entered promiscuous mode [ 223.397672][ T5785] Bluetooth: hci1: command tx timeout [ 223.403342][ T5785] Bluetooth: hci2: command tx timeout [ 223.409561][ T5787] Bluetooth: hci0: command tx timeout [ 223.431824][ T5789] chnl_net:caif_netlink_parms(): no params data found [ 223.465624][ T5788] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 223.475580][ T5785] Bluetooth: hci4: command tx timeout [ 223.542730][ T5788] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 223.679611][ T5783] chnl_net:caif_netlink_parms(): no params data found [ 223.720560][ T5785] Bluetooth: hci3: command tx timeout [ 223.964454][ T5788] team0: Port device team_slave_0 added [ 224.022710][ T5790] bridge0: port 1(bridge_slave_0) entered blocking state [ 224.030715][ T5790] bridge0: port 1(bridge_slave_0) entered disabled state [ 224.039817][ T5790] bridge_slave_0: entered allmulticast mode [ 224.048795][ T5790] bridge_slave_0: entered promiscuous mode [ 224.067026][ T5788] team0: Port device team_slave_1 added [ 224.185369][ T5790] bridge0: port 2(bridge_slave_1) entered blocking state [ 224.193081][ T5790] bridge0: port 2(bridge_slave_1) entered disabled state [ 224.201067][ T5790] bridge_slave_1: entered allmulticast mode [ 224.210068][ T5790] bridge_slave_1: entered promiscuous mode [ 224.338501][ T5788] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 224.345767][ T5788] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 224.372151][ T5788] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 224.455452][ T5788] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 224.462613][ T5788] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 224.489136][ T5788] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 224.501651][ T5789] bridge0: port 1(bridge_slave_0) entered blocking state [ 224.511085][ T5789] bridge0: port 1(bridge_slave_0) entered disabled state [ 224.518998][ T5789] bridge_slave_0: entered allmulticast mode [ 224.527837][ T5789] bridge_slave_0: entered promiscuous mode [ 224.580394][ T5790] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 224.608339][ T5789] bridge0: port 2(bridge_slave_1) entered blocking state [ 224.616182][ T5789] bridge0: port 2(bridge_slave_1) entered disabled state [ 224.623830][ T5789] bridge_slave_1: entered allmulticast mode [ 224.632787][ T5789] bridge_slave_1: entered promiscuous mode [ 224.674260][ T5790] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 224.797593][ T5782] bridge0: port 1(bridge_slave_0) entered blocking state [ 224.805484][ T5782] bridge0: port 1(bridge_slave_0) entered disabled state [ 224.812974][ T5782] bridge_slave_0: entered allmulticast mode [ 224.821857][ T5782] bridge_slave_0: entered promiscuous mode [ 224.841307][ T5790] team0: Port device team_slave_0 added [ 224.850780][ T5782] bridge0: port 2(bridge_slave_1) entered blocking state [ 224.858689][ T5782] bridge0: port 2(bridge_slave_1) entered disabled state [ 224.866534][ T5782] bridge_slave_1: entered allmulticast mode [ 224.875396][ T5782] bridge_slave_1: entered promiscuous mode [ 225.005724][ T5783] bridge0: port 1(bridge_slave_0) entered blocking state [ 225.013423][ T5783] bridge0: port 1(bridge_slave_0) entered disabled state [ 225.021359][ T5783] bridge_slave_0: entered allmulticast mode [ 225.030537][ T5783] bridge_slave_0: entered promiscuous mode [ 225.072262][ T5790] team0: Port device team_slave_1 added [ 225.123447][ T5789] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 225.163231][ T5783] bridge0: port 2(bridge_slave_1) entered blocking state [ 225.170887][ T5783] bridge0: port 2(bridge_slave_1) entered disabled state [ 225.178811][ T5783] bridge_slave_1: entered allmulticast mode [ 225.187528][ T5783] bridge_slave_1: entered promiscuous mode [ 225.289375][ T5789] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 225.339660][ T5782] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 225.359256][ T5782] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 225.410199][ T5788] hsr_slave_0: entered promiscuous mode [ 225.420691][ T5788] hsr_slave_1: entered promiscuous mode [ 225.456541][ T5790] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 225.463701][ T5790] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 225.490275][ T5790] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 225.492401][ T5785] Bluetooth: hci2: command tx timeout [ 225.502666][ T5792] Bluetooth: hci0: command tx timeout [ 225.508127][ T5785] Bluetooth: hci1: command tx timeout [ 225.552584][ T5783] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 225.561989][ T5785] Bluetooth: hci4: command tx timeout [ 225.602427][ T5790] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 225.609785][ T5790] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 225.636218][ T5790] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 225.682112][ T5783] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 225.752603][ T5789] team0: Port device team_slave_0 added [ 225.797939][ T5785] Bluetooth: hci3: command tx timeout [ 225.798304][ T5782] team0: Port device team_slave_0 added [ 225.842058][ T5789] team0: Port device team_slave_1 added [ 225.914411][ T5782] team0: Port device team_slave_1 added [ 225.941803][ T5783] team0: Port device team_slave_0 added [ 226.083906][ T5783] team0: Port device team_slave_1 added [ 226.150254][ T5782] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 226.157600][ T5782] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 226.185055][ T5782] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 226.240453][ T5789] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 226.248060][ T5789] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 226.274413][ T5789] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 226.314495][ T5790] hsr_slave_0: entered promiscuous mode [ 226.324341][ T5790] hsr_slave_1: entered promiscuous mode [ 226.332766][ T5790] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 226.340698][ T5790] Cannot create hsr debugfs directory [ 226.350220][ T5782] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 226.357501][ T5782] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 226.383955][ T5782] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 226.488025][ T5789] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 226.495560][ T5789] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 226.521915][ T5789] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 226.577744][ T5783] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 226.585112][ T5783] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 226.611753][ T5783] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 226.629929][ T5783] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 226.637224][ T5783] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 226.663558][ T5783] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 226.897661][ T5789] hsr_slave_0: entered promiscuous mode [ 226.908322][ T5789] hsr_slave_1: entered promiscuous mode [ 226.916847][ T5789] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 226.924585][ T5789] Cannot create hsr debugfs directory [ 226.959737][ T5782] hsr_slave_0: entered promiscuous mode [ 226.975823][ T5782] hsr_slave_1: entered promiscuous mode [ 226.986263][ T5782] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 226.994015][ T5782] Cannot create hsr debugfs directory [ 227.098858][ T5783] hsr_slave_0: entered promiscuous mode [ 227.112175][ T5783] hsr_slave_1: entered promiscuous mode [ 227.120406][ T5783] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 227.129521][ T5783] Cannot create hsr debugfs directory [ 227.556793][ T5785] Bluetooth: hci1: command tx timeout [ 227.562558][ T5787] Bluetooth: hci0: command tx timeout [ 227.569229][ T5792] Bluetooth: hci2: command tx timeout [ 227.590274][ T5788] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 227.640881][ T5785] Bluetooth: hci4: command tx timeout [ 227.714299][ T5788] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 227.824628][ T5788] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 227.882038][ T5785] Bluetooth: hci3: command tx timeout [ 227.910424][ T5788] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 228.330316][ T5790] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 228.408410][ T5790] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 228.438279][ T5783] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 228.499465][ T5790] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 228.518502][ T5790] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 228.538897][ T5783] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 228.676255][ T5783] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 228.703278][ T5789] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 228.732285][ T5783] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 228.833905][ T5789] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 228.875433][ T5789] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 228.895768][ T5782] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 228.921830][ T5782] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 228.943695][ T5789] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 229.013270][ T5782] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 229.092483][ T5782] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 229.611724][ T5788] 8021q: adding VLAN 0 to HW filter on device bond0 [ 229.638684][ T5785] Bluetooth: hci1: command tx timeout [ 229.640069][ T5787] Bluetooth: hci0: command tx timeout [ 229.644230][ T5785] Bluetooth: hci2: command tx timeout [ 229.727856][ T5785] Bluetooth: hci4: command tx timeout [ 229.839178][ T5790] 8021q: adding VLAN 0 to HW filter on device bond0 [ 229.926730][ T5788] 8021q: adding VLAN 0 to HW filter on device team0 [ 229.965739][ T5785] Bluetooth: hci3: command tx timeout [ 230.024656][ T5790] 8021q: adding VLAN 0 to HW filter on device team0 [ 230.074443][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 230.082237][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 230.117684][ T5783] 8021q: adding VLAN 0 to HW filter on device bond0 [ 230.192026][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 230.199772][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 230.214447][ T59] bridge0: port 2(bridge_slave_1) entered blocking state [ 230.222298][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state [ 230.237240][ T59] bridge0: port 2(bridge_slave_1) entered blocking state [ 230.244854][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state [ 230.290757][ T5789] 8021q: adding VLAN 0 to HW filter on device bond0 [ 230.417259][ T5783] 8021q: adding VLAN 0 to HW filter on device team0 [ 230.484466][ T5782] 8021q: adding VLAN 0 to HW filter on device bond0 [ 230.632954][ T4502] bridge0: port 1(bridge_slave_0) entered blocking state [ 230.640692][ T4502] bridge0: port 1(bridge_slave_0) entered forwarding state [ 230.661321][ T4502] bridge0: port 2(bridge_slave_1) entered blocking state [ 230.669039][ T4502] bridge0: port 2(bridge_slave_1) entered forwarding state [ 230.697091][ T5789] 8021q: adding VLAN 0 to HW filter on device team0 [ 230.759945][ T5782] 8021q: adding VLAN 0 to HW filter on device team0 [ 230.780227][ T5788] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 230.847332][ T4502] bridge0: port 1(bridge_slave_0) entered blocking state [ 230.855181][ T4502] bridge0: port 1(bridge_slave_0) entered forwarding state [ 230.979396][ T4502] bridge0: port 1(bridge_slave_0) entered blocking state [ 230.987249][ T4502] bridge0: port 1(bridge_slave_0) entered forwarding state [ 231.039157][ T4502] bridge0: port 2(bridge_slave_1) entered blocking state [ 231.046872][ T4502] bridge0: port 2(bridge_slave_1) entered forwarding state [ 231.142688][ T4502] bridge0: port 2(bridge_slave_1) entered blocking state [ 231.150424][ T4502] bridge0: port 2(bridge_slave_1) entered forwarding state [ 231.666097][ T5789] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 232.650052][ T5788] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 233.020996][ T5790] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 233.311709][ T5783] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 233.367606][ T5782] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 233.409434][ T5789] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 233.629765][ T5790] veth0_vlan: entered promiscuous mode [ 233.768995][ T5790] veth1_vlan: entered promiscuous mode [ 234.014288][ T5782] veth0_vlan: entered promiscuous mode [ 234.036872][ T5783] veth0_vlan: entered promiscuous mode [ 234.111434][ T5789] veth0_vlan: entered promiscuous mode [ 234.133831][ T5782] veth1_vlan: entered promiscuous mode [ 234.170499][ T5783] veth1_vlan: entered promiscuous mode [ 234.259018][ T5790] veth0_macvtap: entered promiscuous mode [ 234.290013][ T5789] veth1_vlan: entered promiscuous mode [ 234.340623][ T5790] veth1_macvtap: entered promiscuous mode [ 234.549657][ T5783] veth0_macvtap: entered promiscuous mode [ 234.591256][ T5782] veth0_macvtap: entered promiscuous mode [ 234.609346][ T5790] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 234.648594][ T5783] veth1_macvtap: entered promiscuous mode [ 234.701747][ T5782] veth1_macvtap: entered promiscuous mode [ 234.762899][ T5790] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 234.819466][ T5789] veth0_macvtap: entered promiscuous mode [ 234.868615][ T5790] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 234.878705][ T5790] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 234.887983][ T5790] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 234.897115][ T5790] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 234.928192][ T5782] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 234.939172][ T5782] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 234.956525][ T5782] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 234.980444][ T5783] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 234.991572][ T5783] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 235.002717][ T5783] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 235.013510][ T5783] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 235.027966][ T5783] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 235.072775][ T5789] veth1_macvtap: entered promiscuous mode [ 235.096148][ T5782] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 235.107543][ T5782] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 235.121620][ T5782] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 235.185301][ T5783] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 235.197102][ T5783] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 235.207344][ T5783] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 235.218175][ T5783] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 235.232408][ T5783] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 235.256993][ T5782] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 235.266185][ T5782] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 235.275385][ T5782] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 235.284418][ T5782] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 235.361038][ T5789] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 235.371886][ T5789] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 235.382127][ T5789] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 235.392918][ T5789] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 235.405025][ T5789] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 235.416707][ T5789] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 235.430929][ T5789] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 235.492825][ T5783] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 235.502145][ T5783] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 235.512345][ T5783] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 235.521523][ T5783] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 235.551840][ T5789] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 235.564069][ T5789] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 235.575472][ T5789] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 235.587501][ T5789] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 235.598123][ T5789] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 235.608925][ T5789] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 235.622864][ T5789] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 235.757268][ T5788] veth0_vlan: entered promiscuous mode [ 235.859131][ T5789] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 235.868957][ T5789] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 235.880888][ T5789] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 235.890520][ T5789] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 235.911841][ T5788] veth1_vlan: entered promiscuous mode [ 236.323708][ T5788] veth0_macvtap: entered promiscuous mode [ 236.404790][ T5788] veth1_macvtap: entered promiscuous mode [ 236.597878][ T5788] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 236.608670][ T5788] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 236.618890][ T5788] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 236.629698][ T5788] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 236.639858][ T5788] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 236.650692][ T5788] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 236.660849][ T5788] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 236.671596][ T5788] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 236.686062][ T5788] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 236.925682][ T5788] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 236.936470][ T5788] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 236.946693][ T5788] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 236.957410][ T5788] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 236.967538][ T5788] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 236.978279][ T5788] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 236.988478][ T5788] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 237.001358][ T5788] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 237.016654][ T5788] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 237.293433][ T5788] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 237.303086][ T5788] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 237.312435][ T5788] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 237.323554][ T5788] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 241.375807][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 241.383795][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 241.569900][ T3602] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 241.578106][ T3602] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 241.752507][ T1092] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 241.761773][ T1092] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 241.995631][ T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 242.004978][ T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 242.040670][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 242.048845][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 242.086572][ T5790] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 242.271202][ T3602] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 242.280303][ T3602] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 242.396471][ T4789] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 242.404558][ T4789] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 242.505818][ T4789] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 242.515956][ T4789] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 244.107931][ C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 244.160933][ T4789] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 244.169798][ T4789] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 244.240202][ T5980] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6'. [ 245.065575][ T4502] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 245.076820][ T4502] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 247.026664][ T6005] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 247.637609][ T0] NOHZ tick-stop error: local softirq work is pending, handler #c2!!! [ 250.456911][ T6025] netlink: 16 bytes leftover after parsing attributes in process `syz.1.18'. [ 251.532283][ T29] audit: type=1326 audit(1734094103.558:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6030 comm="syz.0.20" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe35e985d19 code=0x7ffc0000 [ 251.555222][ T29] audit: type=1326 audit(1734094103.558:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6030 comm="syz.0.20" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe35e985d19 code=0x7ffc0000 [ 251.577810][ T29] audit: type=1326 audit(1734094103.608:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6030 comm="syz.0.20" exe="/root/syz-executor" sig=0 arch=c000003e syscall=240 compat=0 ip=0x7fe35e985d19 code=0x7ffc0000 [ 251.600385][ T29] audit: type=1326 audit(1734094103.608:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6030 comm="syz.0.20" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe35e985d19 code=0x7ffc0000 [ 251.623179][ T29] audit: type=1326 audit(1734094103.748:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6030 comm="syz.0.20" exe="/root/syz-executor" sig=0 arch=c000003e syscall=245 compat=0 ip=0x7fe35e985d19 code=0x7ffc0000 [ 251.649201][ T29] audit: type=1326 audit(1734094103.748:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6030 comm="syz.0.20" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe35e985d19 code=0x7ffc0000 [ 252.205045][ T6038] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(7) [ 252.211894][ T6038] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 252.220010][ T6038] vhci_hcd vhci_hcd.0: Device attached [ 252.245356][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 252.450397][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 252.500902][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 252.654894][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 252.666502][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 252.675970][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 252.757432][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 252.767626][ T5841] vhci_hcd: vhci_device speed not set [ 252.773443][ T0] NOHZ tick-stop error: local softirq work is pending, handler #41!!! [ 253.473563][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 256.661186][ T5841] usb 41-1: new full-speed USB device number 2 using vhci_hcd [ 257.499575][ T6039] vhci_hcd: connection reset by peer [ 257.509354][ T1092] vhci_hcd: stop threads [ 257.514047][ T1092] vhci_hcd: release socket [ 257.520340][ T1092] vhci_hcd: disconnect device [ 258.037810][ T6056] kernel read not supported for file /!selynuxselinux (pid: 6056 comm: syz.3.28) [ 258.092146][ T29] audit: type=1800 audit(1734094110.278:8): pid=6056 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.28" name="!selynuxselinux" dev="mqueue" ino=8314 res=0 errno=0 [ 258.422225][ T6068] Zero length message leads to an empty skb [ 258.635231][ T5414] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 258.877368][ T5414] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 258.889060][ T5414] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 258.902573][ T5414] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 259.065976][ T5414] usb 4-1: config 0 descriptor?? [ 259.348174][ T5414] usbhid 4-1:0.0: can't add hid device: -71 [ 259.355099][ T5414] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 260.031068][ T5414] usb 4-1: USB disconnect, device number 2 [ 260.514141][ T6076] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 262.162544][ T5841] vhci_hcd: vhci_device speed not set [ 262.465060][ T5414] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 265.015668][ T6092] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 265.136987][ T6099] syzkaller0: entered promiscuous mode [ 265.142621][ T6099] syzkaller0: entered allmulticast mode [ 265.639231][ T6095] netlink: 1068 bytes leftover after parsing attributes in process `syz.1.40'. [ 265.666703][ T6109] 9pnet_virtio: no channels available for device syz [ 266.326309][ T5837] hid-generic 0005:7FFF:0008.0001: hidraw0: BLUETOOTH HID v0.02 Device [syz1] on aa:aa:aa:aa:aa:aa [ 269.341072][ T6132] 9pnet_virtio: no channels available for device syz [ 270.285712][ T29] audit: type=1326 audit(1734094122.428:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6130 comm="syz.1.50" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a96d85d19 code=0x7fc00000 [ 271.565959][ T5785] Bluetooth: hci2: command tx timeout [ 274.152518][ T5414] hid-generic 0001:0000:0002.0002: unknown main item tag 0x0 [ 274.167919][ T5414] hid-generic 0001:0000:0002.0002: unknown main item tag 0x0 [ 274.176131][ T5414] hid-generic 0001:0000:0002.0002: unknown main item tag 0x0 [ 274.184154][ T5414] hid-generic 0001:0000:0002.0002: unknown main item tag 0x0 [ 274.192465][ T5414] hid-generic 0001:0000:0002.0002: unknown main item tag 0x0 [ 274.200860][ T5414] hid-generic 0001:0000:0002.0002: unknown main item tag 0x0 [ 274.208826][ T5414] hid-generic 0001:0000:0002.0002: unknown main item tag 0x0 [ 274.216969][ T5414] hid-generic 0001:0000:0002.0002: unknown main item tag 0x0 [ 274.224995][ T5414] hid-generic 0001:0000:0002.0002: unknown main item tag 0x0 [ 274.232904][ T5414] hid-generic 0001:0000:0002.0002: unknown main item tag 0x0 [ 274.241347][ T5414] hid-generic 0001:0000:0002.0002: unknown main item tag 0x0 [ 274.249347][ T5414] hid-generic 0001:0000:0002.0002: unknown main item tag 0x0 [ 274.262796][ T5414] hid-generic 0001:0000:0002.0002: unknown main item tag 0x0 [ 274.273105][ T5414] hid-generic 0001:0000:0002.0002: unknown main item tag 0x0 [ 274.281188][ T5414] hid-generic 0001:0000:0002.0002: unknown main item tag 0x0 [ 274.289465][ T5414] hid-generic 0001:0000:0002.0002: unknown main item tag 0x0 [ 274.297749][ T5414] hid-generic 0001:0000:0002.0002: unknown main item tag 0x0 [ 274.306045][ T5414] hid-generic 0001:0000:0002.0002: unknown main item tag 0x0 [ 274.314133][ T5414] hid-generic 0001:0000:0002.0002: unknown main item tag 0x0 [ 274.322264][ T5414] hid-generic 0001:0000:0002.0002: unknown main item tag 0x0 [ 274.330518][ T5414] hid-generic 0001:0000:0002.0002: unknown main item tag 0x0 [ 274.393581][ T5414] hid-generic 0001:0000:0002.0002: hidraw0: HID v2.00 Device [syz0] on syz0 [ 276.988196][ T6189] tmpfs: Bad value for 'mpol' [ 277.831080][ T6194] capability: warning: `syz.2.70' uses deprecated v2 capabilities in a way that may be insecure [ 278.846892][ T5414] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 279.031450][ T5414] usb 2-1: config index 0 descriptor too short (expected 23569, got 27) [ 279.040507][ T5414] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 279.118298][ T5414] usb 2-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 279.128395][ T5414] usb 2-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 279.136921][ T5414] usb 2-1: Manufacturer: syz [ 279.197891][ T5414] usb 2-1: config 0 descriptor?? [ 280.380762][ T5414] rc_core: IR keymap rc-hauppauge not found [ 280.387430][ T5414] Registered IR keymap rc-empty [ 280.395178][ T5414] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 280.416734][ T5414] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input5 [ 280.465679][ T6216] 9pnet_fd: Insufficient options for proto=fd [ 280.544349][ T1281] ieee802154 phy0 wpan0: encryption failed: -22 [ 280.551172][ T1281] ieee802154 phy1 wpan1: encryption failed: -22 [ 281.542500][ T6222] warning: `syz.3.76' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 281.796255][ T6223] random: crng reseeded on system resumption [ 282.307511][ T6223] Restarting kernel threads ... done. [ 290.419557][ T6241] sctp: [Deprecated]: syz.2.82 (pid 6241) Use of struct sctp_assoc_value in delayed_ack socket option. [ 290.419557][ T6241] Use struct sctp_sack_info instead [ 291.134896][ T6247] loop3: detected capacity change from 0 to 256 [ 292.035058][ T5837] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 292.194370][ T5414] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 292.411851][ T5414] usb 5-1: Using ep0 maxpacket: 32 [ 292.516395][ T5414] usb 5-1: config index 0 descriptor too short (expected 29220, got 36) [ 292.525357][ T5414] usb 5-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 292.534520][ T5414] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 292.544036][ T5414] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 292.554220][ T5414] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 292.565388][ T5414] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 292.575704][ T5414] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 292.585981][ T5414] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 292.603528][ T5414] usb 5-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 292.614297][ T5414] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 292.722668][ T6258] RDS: rds_bind could not find a transport for fe80::, load rds_tcp or rds_rdma? [ 292.789175][ T5414] usb 5-1: config 0 descriptor?? [ 292.952399][ T5841] usb 2-1: USB disconnect, device number 2 [ 293.111253][ T5414] usblp 5-1:0.0: usblp0: USB Bidirectional printer dev 2 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 293.172796][ T5837] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 293.181906][ T5837] usb 4-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 293.192925][ T5837] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 293.206834][ T5837] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 293.218311][ T5837] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 293.435408][ T5414] usb 5-1: USB disconnect, device number 2 [ 293.435603][ T5837] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 293.450832][ T5837] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 293.459124][ T5837] usb 4-1: Product: syz [ 293.463423][ T5837] usb 4-1: Manufacturer: syz [ 293.546964][ T5414] usblp0: removed [ 293.547557][ T5837] cdc_wdm 4-1:1.0: skipping garbage [ 293.556413][ T5837] cdc_wdm 4-1:1.0: skipping garbage [ 293.575777][ T5837] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 293.581977][ T5837] cdc_wdm 4-1:1.0: Unknown control protocol [ 293.918152][ T5414] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 293.984365][ T5837] usb 4-1: USB disconnect, device number 4 [ 294.130739][ T5414] usb 5-1: Using ep0 maxpacket: 32 [ 294.160383][ T5414] usb 5-1: config index 0 descriptor too short (expected 29220, got 36) [ 294.169257][ T5414] usb 5-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 294.178279][ T5414] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 294.188496][ T5414] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 294.199136][ T5414] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 294.209260][ T5414] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 294.219950][ T5414] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 294.233905][ T5414] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 294.249464][ T5414] usb 5-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 294.259017][ T5414] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 294.365406][ T6266] 9pnet_virtio: no channels available for device syz [ 294.471833][ T5787] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 294.483696][ T5787] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 294.493343][ T5787] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 294.520146][ T5787] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 294.541543][ T5787] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 294.551762][ T5787] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 294.655633][ T5414] usb 5-1: config 0 descriptor?? [ 295.426353][ T6275] mmap: syz.3.91 (6275) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 295.546385][ T5414] usblp 5-1:0.0: usblp0: USB Bidirectional printer dev 3 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 295.656934][ T5414] usb 5-1: USB disconnect, device number 3 [ 296.095535][ T5414] usblp0: removed [ 297.255647][ T5787] Bluetooth: hci5: command tx timeout [ 298.043743][ T6267] chnl_net:caif_netlink_parms(): no params data found [ 298.976007][ T5853] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 299.002594][ T4113] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 299.025567][ T5841] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 299.116917][ T4113] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 299.146767][ T5853] usb 1-1: Using ep0 maxpacket: 8 [ 299.169728][ T5853] usb 1-1: config index 0 descriptor too short (expected 75, got 45) [ 299.182037][ T5853] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 299.193694][ T5853] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 299.204317][ T5853] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 299.214771][ T5853] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 299.228291][ T5853] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 299.237790][ T5853] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 299.251887][ T5841] usb 4-1: Using ep0 maxpacket: 8 [ 299.304217][ T5841] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 299.315117][ T5841] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 299.315539][ T5787] Bluetooth: hci5: command tx timeout [ 299.324171][ T5841] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 299.341408][ T5841] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 299.356985][ T5841] usb 4-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 299.369189][ T5841] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 299.560868][ T4113] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 299.599967][ T5841] hub 4-1:1.0: bad descriptor, ignoring hub [ 299.606527][ T5841] hub 4-1:1.0: probe with driver hub failed with error -5 [ 299.616735][ T5841] cdc_wdm 4-1:1.0: skipping garbage [ 299.622383][ T5841] cdc_wdm 4-1:1.0: skipping garbage [ 299.721142][ T5841] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 299.729029][ T5841] cdc_wdm 4-1:1.0: Unknown control protocol [ 299.776066][ T5853] usb 1-1: GET_CAPABILITIES returned 70 [ 299.781908][ T5853] usbtmc 1-1:16.0: can't read capabilities [ 299.799207][ T4113] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 299.986111][ T6285] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 299.995947][ T6285] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 300.217183][ T5886] usb 1-1: USB disconnect, device number 2 [ 300.238164][ T6267] bridge0: port 1(bridge_slave_0) entered blocking state [ 300.245703][ T6267] bridge0: port 1(bridge_slave_0) entered disabled state [ 300.253250][ T6267] bridge_slave_0: entered allmulticast mode [ 300.261263][ T6267] bridge_slave_0: entered promiscuous mode [ 300.403753][ T6267] bridge0: port 2(bridge_slave_1) entered blocking state [ 300.411866][ T6267] bridge0: port 2(bridge_slave_1) entered disabled state [ 300.419912][ T6267] bridge_slave_1: entered allmulticast mode [ 300.429173][ T6267] bridge_slave_1: entered promiscuous mode [ 300.902388][ T6046] udevd[6046]: failed to send result of seq 11136 to main daemon: Connection refused [ 300.904517][ T6050] udevd[6050]: failed to send result of seq 11130 to main daemon: Transport endpoint is not connected [ 300.939324][ T5853] usb 4-1: reset high-speed USB device number 5 using dummy_hcd [ 300.966353][ T5853] usb 4-1: device reset changed ep0 maxpacket size! [ 300.977791][ T6051] udevd[6051]: failed to send result of seq 11127 to main daemon: Transport endpoint is not connected [ 300.982906][ T5853] usb 4-1: USB disconnect, device number 5 [ 301.047372][ T6049] udevd[6049]: failed to send result of seq 11124 to main daemon: Transport endpoint is not connected [ 301.193681][ T6260] udevd[6260]: failed to send result of seq 11133 to main daemon: Transport endpoint is not connected [ 301.412798][ T4113] bridge_slave_1: left allmulticast mode [ 301.419007][ T4113] bridge_slave_1: left promiscuous mode [ 301.425284][ T5787] Bluetooth: hci5: command tx timeout [ 301.426039][ T4113] bridge0: port 2(bridge_slave_1) entered disabled state [ 301.456732][ T4113] bridge_slave_0: left allmulticast mode [ 301.462633][ T4113] bridge_slave_0: left promiscuous mode [ 301.469362][ T4113] bridge0: port 1(bridge_slave_0) entered disabled state [ 301.665068][ T5853] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 302.070210][ T4113] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 302.099079][ T4113] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 302.150051][ T4113] bond0 (unregistering): Released all slaves [ 302.171620][ T5853] usb 4-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 302.181294][ T5853] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 302.189713][ T5853] usb 4-1: Product: syz [ 302.194119][ T5853] usb 4-1: Manufacturer: syz [ 302.199410][ T5853] usb 4-1: SerialNumber: syz [ 302.210847][ T5853] usb 4-1: config 0 descriptor?? [ 302.270446][ T6267] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 302.360047][ T6267] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 302.440029][ T6300] netlink: 'syz.2.98': attribute type 1 has an invalid length. [ 302.482164][ T5853] usb 4-1: USB disconnect, device number 6 [ 302.612912][ T6267] team0: Port device team_slave_0 added [ 302.744938][ T6267] team0: Port device team_slave_1 added [ 302.863874][ T4113] hsr_slave_0: left promiscuous mode [ 302.881474][ T4113] hsr_slave_1: left promiscuous mode [ 302.905309][ T4113] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 302.913285][ T4113] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 302.958514][ T4113] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 302.966869][ T4113] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 302.997642][ T5886] IPVS: starting estimator thread 0... [ 303.026179][ T4113] veth1_macvtap: left promiscuous mode [ 303.036067][ T4113] veth0_macvtap: left promiscuous mode [ 303.041978][ T4113] veth1_vlan: left promiscuous mode [ 303.049398][ T4113] veth0_vlan: left promiscuous mode [ 303.097115][ T6319] IPVS: using max 240 ests per chain, 12000 per kthread [ 303.297387][ T6321] process 'syz.0.102' launched './file0' with NULL argv: empty string added [ 303.493019][ T5787] Bluetooth: hci5: command tx timeout [ 304.771951][ T4113] team0 (unregistering): Port device team_slave_1 removed [ 304.834339][ T4113] team0 (unregistering): Port device team_slave_0 removed [ 305.436710][ T6267] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 305.443895][ T6267] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 305.470474][ T6267] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 305.627418][ T6267] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 305.635009][ T6267] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 305.661726][ T6267] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 309.667136][ T6267] hsr_slave_0: entered promiscuous mode [ 309.728917][ T6267] hsr_slave_1: entered promiscuous mode [ 309.781333][ T6267] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 309.789970][ T6267] Cannot create hsr debugfs directory [ 310.245046][ T5841] usb 3-1: new full-speed USB device number 2 using dummy_hcd [ 310.428053][ T5841] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 310.439684][ T5841] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 310.449113][ T5841] usb 3-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 310.458541][ T5841] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 310.579104][ T5841] usb 3-1: config 0 descriptor?? [ 310.608096][ T5841] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 310.620269][ T5841] dvb-usb: bulk message failed: -22 (3/0) [ 310.791333][ T5841] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 310.872310][ T5841] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 310.879842][ T5841] usb 3-1: media controller created [ 311.018578][ T5841] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 311.200947][ T5841] dvb-usb: bulk message failed: -22 (6/0) [ 311.207478][ T5841] ===================================================== [ 311.214997][ T5841] BUG: KMSAN: uninit-value in dib3000mb_attach+0x2d8/0x3c0 [ 311.222408][ T5841] dib3000mb_attach+0x2d8/0x3c0 [ 311.232495][ T5841] dibusb_dib3000mb_frontend_attach+0x155/0x2f0 [ 311.240317][ T5841] dvb_usb_adapter_frontend_init+0xed/0x9a0 [ 311.246507][ T5841] dvb_usb_device_init+0x25a8/0x3760 [ 311.251987][ T5841] dibusb_probe+0x18c/0x250 [ 311.256757][ T5841] usb_probe_interface+0xd33/0x12e0 [ 311.262173][ T5841] really_probe+0x4db/0xd90 [ 311.266950][ T5841] __driver_probe_device+0x2ab/0x5d0 [ 311.272433][ T5841] driver_probe_device+0x72/0x890 [ 311.277726][ T5841] __device_attach_driver+0x568/0x9e0 [ 311.283305][ T5841] bus_for_each_drv+0x403/0x620 [ 311.288584][ T5841] __device_attach+0x3c1/0x650 [ 311.293545][ T5841] device_initial_probe+0x32/0x40 [ 311.298961][ T5841] bus_probe_device+0x3dc/0x5c0 [ 311.304035][ T5841] device_add+0x13aa/0x1ba0 [ 311.309072][ T5841] usb_set_configuration+0x31c9/0x38d0 [ 311.314803][ T5841] usb_generic_driver_probe+0x109/0x2a0 [ 311.320530][ T5841] usb_probe_device+0x3a7/0x690 [ 311.325665][ T5841] really_probe+0x4db/0xd90 [ 311.335353][ T5841] __driver_probe_device+0x2ab/0x5d0 [ 311.340849][ T5841] driver_probe_device+0x72/0x890 [ 311.347553][ T5841] __device_attach_driver+0x568/0x9e0 [ 311.353142][ T5841] bus_for_each_drv+0x403/0x620 [ 311.360687][ T5841] __device_attach+0x3c1/0x650 [ 311.365731][ T5841] device_initial_probe+0x32/0x40 [ 311.370947][ T5841] bus_probe_device+0x3dc/0x5c0 [ 311.376086][ T5841] device_add+0x13aa/0x1ba0 [ 311.380768][ T5841] usb_new_device+0x15f4/0x2470 [ 311.385872][ T5841] hub_event+0x4ffb/0x72d0 [ 311.390469][ T5841] process_scheduled_works+0xae0/0x1c40 [ 311.396356][ T5841] worker_thread+0xea7/0x14f0 [ 311.401248][ T5841] kthread+0x3e2/0x540 [ 311.405701][ T5841] ret_from_fork+0x6d/0x90 [ 311.410313][ T5841] ret_from_fork_asm+0x1a/0x30 [ 311.415358][ T5841] [ 311.417784][ T5841] Local variable rb created at: [ 311.422741][ T5841] dib3000_read_reg+0x86/0x4e0 [ 311.427807][ T5841] dib3000mb_attach+0x123/0x3c0 [ 311.437869][ T5841] [ 311.440328][ T5841] CPU: 0 UID: 0 PID: 5841 Comm: kworker/0:4 Not tainted 6.13.0-rc2-syzkaller-00130-g150b567e0d57 #0 [ 311.452655][ T5841] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 311.463056][ T5841] Workqueue: usb_hub_wq hub_event [ 311.468362][ T5841] ===================================================== [ 311.475489][ T5841] Disabling lock debugging due to kernel taint [ 311.481770][ T5841] Kernel panic - not syncing: kmsan.panic set ... [ 311.488332][ T5841] CPU: 0 UID: 0 PID: 5841 Comm: kworker/0:4 Tainted: G B 6.13.0-rc2-syzkaller-00130-g150b567e0d57 #0 [ 311.500796][ T5841] Tainted: [B]=BAD_PAGE [ 311.505062][ T5841] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 311.515281][ T5841] Workqueue: usb_hub_wq hub_event [ 311.520516][ T5841] Call Trace: [ 311.523924][ T5841] [ 311.526974][ T5841] dump_stack_lvl+0x216/0x2d0 [ 311.531858][ T5841] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 311.537861][ T5841] dump_stack+0x1e/0x24 [ 311.542207][ T5841] panic+0x4e2/0xcf0 [ 311.546291][ T5841] ? kmsan_get_metadata+0x71/0x1c0 [ 311.551588][ T5841] kmsan_report+0x2c7/0x2d0 [ 311.556357][ T5841] ? __msan_warning+0x95/0x120 [ 311.561326][ T5841] ? dib3000mb_attach+0x2d8/0x3c0 [ 311.566543][ T5841] ? dibusb_dib3000mb_frontend_attach+0x155/0x2f0 [ 311.573163][ T5841] ? dvb_usb_adapter_frontend_init+0xed/0x9a0 [ 311.579440][ T5841] ? dvb_usb_device_init+0x25a8/0x3760 [ 311.585093][ T5841] ? dibusb_probe+0x18c/0x250 [ 311.589968][ T5841] ? usb_probe_interface+0xd33/0x12e0 [ 311.595538][ T5841] ? really_probe+0x4db/0xd90 [ 311.600493][ T5841] ? __driver_probe_device+0x2ab/0x5d0 [ 311.606142][ T5841] ? driver_probe_device+0x72/0x890 [ 311.611526][ T5841] ? __device_attach_driver+0x568/0x9e0 [ 311.617271][ T5841] ? bus_for_each_drv+0x403/0x620 [ 311.622502][ T5841] ? __device_attach+0x3c1/0x650 [ 311.627615][ T5841] ? device_initial_probe+0x32/0x40 [ 311.633000][ T5841] ? bus_probe_device+0x3dc/0x5c0 [ 311.638235][ T5841] ? device_add+0x13aa/0x1ba0 [ 311.643078][ T5841] ? usb_set_configuration+0x31c9/0x38d0 [ 311.648948][ T5841] ? usb_generic_driver_probe+0x109/0x2a0 [ 311.654848][ T5841] ? usb_probe_device+0x3a7/0x690 [ 311.660059][ T5841] ? really_probe+0x4db/0xd90 [ 311.664919][ T5841] ? __driver_probe_device+0x2ab/0x5d0 [ 311.670566][ T5841] ? driver_probe_device+0x72/0x890 [ 311.675961][ T5841] ? __device_attach_driver+0x568/0x9e0 [ 311.681702][ T5841] ? bus_for_each_drv+0x403/0x620 [ 311.686953][ T5841] ? __device_attach+0x3c1/0x650 [ 311.692070][ T5841] ? device_initial_probe+0x32/0x40 [ 311.697449][ T5841] ? bus_probe_device+0x3dc/0x5c0 [ 311.702692][ T5841] ? device_add+0x13aa/0x1ba0 [ 311.707535][ T5841] ? usb_new_device+0x15f4/0x2470 [ 311.712729][ T5841] ? hub_event+0x4ffb/0x72d0 [ 311.717486][ T5841] ? process_scheduled_works+0xae0/0x1c40 [ 311.723427][ T5841] ? worker_thread+0xea7/0x14f0 [ 311.728661][ T5841] ? kthread+0x3e2/0x540 [ 311.733070][ T5841] ? ret_from_fork+0x6d/0x90 [ 311.737839][ T5841] ? ret_from_fork_asm+0x1a/0x30 [ 311.743001][ T5841] ? rt_mutex_unlock+0x2a/0x50 [ 311.747946][ T5841] ? kmsan_get_metadata+0x13e/0x1c0 [ 311.753325][ T5841] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 311.759312][ T5841] ? dib3000_read_reg+0x32b/0x4e0 [ 311.764538][ T5841] __msan_warning+0x95/0x120 [ 311.769341][ T5841] dib3000mb_attach+0x2d8/0x3c0 [ 311.774386][ T5841] ? __pfx_dib3000mb_attach+0x10/0x10 [ 311.779959][ T5841] dibusb_dib3000mb_frontend_attach+0x155/0x2f0 [ 311.786407][ T5841] ? __pfx_dibusb_dib3000mb_frontend_attach+0x10/0x10 [ 311.793376][ T5841] dvb_usb_adapter_frontend_init+0xed/0x9a0 [ 311.799578][ T5841] dvb_usb_device_init+0x25a8/0x3760 [ 311.805103][ T5841] dibusb_probe+0x18c/0x250 [ 311.809777][ T5841] ? __pfx_dibusb_probe+0x10/0x10 [ 311.814983][ T5841] usb_probe_interface+0xd33/0x12e0 [ 311.820396][ T5841] ? __pfx_usb_probe_interface+0x10/0x10 [ 311.826226][ T5841] really_probe+0x4db/0xd90 [ 311.830925][ T5841] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 311.836923][ T5841] __driver_probe_device+0x2ab/0x5d0 [ 311.842413][ T5841] driver_probe_device+0x72/0x890 [ 311.847637][ T5841] ? kmsan_get_metadata+0x13e/0x1c0 [ 311.853015][ T5841] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 311.859011][ T5841] __device_attach_driver+0x568/0x9e0 [ 311.864656][ T5841] bus_for_each_drv+0x403/0x620 [ 311.869741][ T5841] ? __pfx___device_attach_driver+0x10/0x10 [ 311.875846][ T5841] __device_attach+0x3c1/0x650 [ 311.880806][ T5841] device_initial_probe+0x32/0x40 [ 311.886016][ T5841] bus_probe_device+0x3dc/0x5c0 [ 311.891264][ T5841] device_add+0x13aa/0x1ba0 [ 311.895956][ T5841] usb_set_configuration+0x31c9/0x38d0 [ 311.901624][ T5841] ? usb_set_configuration+0x911/0x38d0 [ 311.907403][ T5841] usb_generic_driver_probe+0x109/0x2a0 [ 311.913125][ T5841] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 311.919110][ T5841] ? __pfx_usb_generic_driver_probe+0x10/0x10 [ 311.925353][ T5841] usb_probe_device+0x3a7/0x690 [ 311.930448][ T5841] ? __pfx_usb_probe_device+0x10/0x10 [ 311.936025][ T5841] really_probe+0x4db/0xd90 [ 311.940731][ T5841] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 311.946744][ T5841] __driver_probe_device+0x2ab/0x5d0 [ 311.952242][ T5841] driver_probe_device+0x72/0x890 [ 311.957475][ T5841] ? kmsan_get_metadata+0x13e/0x1c0 [ 311.962851][ T5841] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 311.968841][ T5841] __device_attach_driver+0x568/0x9e0 [ 311.974433][ T5841] bus_for_each_drv+0x403/0x620 [ 311.979505][ T5841] ? __pfx___device_attach_driver+0x10/0x10 [ 311.985708][ T5841] __device_attach+0x3c1/0x650 [ 311.990668][ T5841] device_initial_probe+0x32/0x40 [ 311.995877][ T5841] bus_probe_device+0x3dc/0x5c0 [ 312.000950][ T5841] device_add+0x13aa/0x1ba0 [ 312.005641][ T5841] usb_new_device+0x15f4/0x2470 [ 312.010676][ T5841] hub_event+0x4ffb/0x72d0 [ 312.015330][ T5841] ? __pfx_hub_event+0x10/0x10 [ 312.020271][ T5841] process_scheduled_works+0xae0/0x1c40 [ 312.026076][ T5841] worker_thread+0xea7/0x14f0 [ 312.030992][ T5841] kthread+0x3e2/0x540 [ 312.035220][ T5841] ? __pfx_worker_thread+0x10/0x10 [ 312.040554][ T5841] ? __pfx_kthread+0x10/0x10 [ 312.045328][ T5841] ret_from_fork+0x6d/0x90 [ 312.049954][ T5841] ? __pfx_kthread+0x10/0x10 [ 312.054710][ T5841] ret_from_fork_asm+0x1a/0x30 [ 312.059704][ T5841] [ 312.063124][ T5841] Kernel Offset: disabled [ 312.067518][ T5841] Rebooting in 86400 seconds..