last executing test programs: 16.456322644s ago: executing program 3 (id=759): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x60b03, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_NMI(r2, 0xae9a) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000380)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) timer_create(0x5, 0x0, &(0x7f0000000200)) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000000240)=@x86={0x3, 0x6, 0x9, 0x0, 0x5, 0x23, 0xff, 0x0, 0x1, 0xa, 0x4, 0xad, 0x0, 0x0, 0x7, 0x8, 0x8, 0x1, 0x83, '\x00', 0x3, 0x7}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 13.95425323s ago: executing program 4 (id=763): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_io_uring_setup(0x497, &(0x7f0000000200)={0x0, 0x7279, 0x0, 0x2, 0x316}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_ASYNC_CANCEL={0xe, 0x40, 0x0, 0x0, 0x0, 0x91a2, 0x0, 0x0, 0x1}) io_uring_enter(r2, 0x3512, 0x0, 0x0, 0x0, 0x0) r5 = socket(0x200000000000011, 0x4000000000080002, 0x0) bind$packet(r5, &(0x7f0000001100)={0x11, 0x3, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/ptype\x00') preadv(r6, &(0x7f0000000140)=[{&(0x7f00000057c0)=""/186, 0xba}], 0x1, 0x2, 0xce) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) 12.090688017s ago: executing program 3 (id=766): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x1, 0x3, &(0x7f0000006680)) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f7671176e252d6e0d952163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba1282", 0x12}, {&(0x7f0000000600)="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", 0xfc}], 0x3, &(0x7f0000000480)=[@assoc={0x18, 0x117, 0x4, 0x8}], 0x18}], 0x1, 0x40812) recvmsg(r1, &(0x7f0000000340)={0x0, 0xfffffffffffffee5, &(0x7f00000000c0)=[{&(0x7f0000000540)=""/93, 0x51}, {&(0x7f0000000200)=""/76, 0x53}], 0x2}, 0xa0) msync(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x2) write$P9_RCREATE(0xffffffffffffffff, &(0x7f0000000300)={0x18, 0x73, 0x2, {{0x40, 0x100001, 0x7}, 0x80000000}}, 0x18) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r2, 0x89fa, &(0x7f0000000280)={'sit0\x00', &(0x7f0000000240)={@dev={0xfe, 0x80, '\x00', 0x25}, @broadcast, 0x7, 0xb}}) r3 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f00000002c0)={0x10200, 0x4, 0x8080000, 0x1000, &(0x7f00009d4000/0x1000)=nil}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) syz_open_dev$I2C(0x0, 0x55cf, 0x301400) openat$kvm(0xffffffffffffff9c, 0x0, 0x22102, 0x0) mkdir(&(0x7f00000003c0)='./file0\x00', 0x12c) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='configfs\x00', 0x0, 0x0) r4 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000840)='./file0\x00', &(0x7f0000000080), 0x18) newfstatat(0xffffffffffffff9c, &(0x7f00000004c0)='.\x00', &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) setresuid(0x0, r5, 0x0) fchown(r4, r5, 0x0) r6 = epoll_create1(0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) shutdown(r7, 0x0) ppoll(&(0x7f00000001c0)=[{r6, 0x10}], 0x1, 0x0, 0x0, 0x0) epoll_wait(r6, &(0x7f0000000000)=[{}], 0x1, 0x101) epoll_create(0xc) 9.688397836s ago: executing program 3 (id=771): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) ioctl$PPPIOCGL2TPSTATS(0xffffffffffffffff, 0x40047452, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) socket$inet6_sctp(0xa, 0x801, 0x84) syz_usb_connect(0x0, 0x34, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x8001, 0x0) ftruncate(0xffffffffffffffff, 0xc17a) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'sit0\x00'}) sendmsg$nl_generic(r2, &(0x7f0000001040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="1400000038000103"], 0x14}}, 0x0) 8.42477298s ago: executing program 2 (id=775): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) read$midi(0xffffffffffffffff, 0x0, 0x43) socket(0x28, 0x2, 0x80000000) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_SET(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x1410, 0x1, 0x70bd2c, 0x25dfdbfe}, 0x10}, 0x1, 0x0, 0x0, 0x24044836}, 0xc094) r2 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, 0x0, 0x0) write$RDMA_USER_CM_CMD_QUERY(r2, 0x0, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) 8.289399675s ago: executing program 4 (id=776): creat(&(0x7f00000000c0)='./file0\x00', 0x0) r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="1201050037057b082d0800014b702c02030109021200070100a0000904"], 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000300)={0x44, &(0x7f0000000100)=ANY=[@ANYBLOB="400006"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) r2 = syz_open_dev$MSR(0x0, 0x0, 0x0) read$msr(r2, 0x0, 0x0) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x42031, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x4}) r3 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r3, &(0x7f0000000040)={0xa, 0xe22, 0x0, @rand_addr, 0x1}, 0x1c) connect$inet6(r3, 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f0000001200), 0x0) sendmsg$nl_route(r1, 0x0, 0x2400c080) 8.184360939s ago: executing program 0 (id=777): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000300)={'filter\x00', 0x6002, 0x4, 0x3d0, 0x200, 0x0, 0x200, 0x2e8, 0x2e8, 0x2e8, 0x4, 0x0, {[{{@uncond, 0xc0, 0xf0}, @unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x7}}}, {{@arp={@dev, @remote, 0x0, 0x0, 0x0, 0xfe, {@empty, {[0x0, 0x0, 0x0, 0x0, 0xff]}}, {@mac=@broadcast}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth1_vlan\x00', 'nicvf0\x00', {}, {}, 0x0, 0x80}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @multicast2, @private, 0x0, 0x1}}}, {{@uncond, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xf0}}], {{'\x00', 0xc0, 0xe8}, {0x28, '\x00', 0x0, 0xfffffffb}}}}, 0x420) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f0000001600)=""/78, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001680)) r1 = eventfd2(0x1, 0x1) ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f00000001c0)={0x0, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000001d00)=""/176, 0x0, 0xffff1000}) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000000)={0x0, r1}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000000c0)=0x1) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000000140)={@my=0x1}) r2 = socket$vsock_stream(0x28, 0x1, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=""/4096}) ioctl$TIOCGDEV(0xffffffffffffffff, 0x80045432, &(0x7f0000000040)) connect$vsock_stream(r2, &(0x7f0000000200)={0x28, 0x0, 0x0, @my=0x1}, 0x10) 8.165402237s ago: executing program 1 (id=778): socket$nl_generic(0x10, 0x3, 0x10) socket$alg(0x26, 0x5, 0x0) socket$packet(0x11, 0x3, 0x300) memfd_secret(0x0) syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd6016000000102b00fc0100000000000000e2ff0000000000fe8000000000000000000400000000aa"], 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) socket(0x1e, 0x805, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x300}, 0x24048050) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000180)="66b80e010f00d0b0060f21a20f01c40f009b2700000066b80c008ee00f3235008000000f30b80e0000000f23d80f21f835800000a00f23f8c9b9490300000f60b932c00a00b9730200000f32328fe858b660002fb90d090000b800680000ba000000000f30", 0x65}], 0x1, 0x0, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 8.164464969s ago: executing program 2 (id=779): syz_usb_connect(0x0, 0x1cb, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000000c0)={'vxcan1\x00', 0x0}) r3 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) bind$can_j1939(r3, &(0x7f0000000100)={0x1d, r4, 0x2, {0x0, 0xf0, 0x3}}, 0x18) syz_genetlink_get_family_id$tipc2(&(0x7f0000000180), r3) socket$nl_route(0x10, 0x3, 0x0) syz_open_procfs(0x0, &(0x7f0000000140)='net/ip6_flowlabel\x00') socket$xdp(0x2c, 0x3, 0x0) socket$xdp(0x2c, 0x3, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) sendmsg$TIPC_NL_KEY_SET(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)=ANY=[], 0x14}}, 0x10) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000004c00)=@newtfilter={0x24, 0x11, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x74, r2, {}, {0x6}, {0x0, 0xa}}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0) 7.571537756s ago: executing program 1 (id=780): dup2(0xffffffffffffffff, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x5) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) syz_open_dev$sndctrl(0x0, 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f0000000080), 0x0) socket$alg(0x26, 0x5, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000900)=[@in={0x2, 0x4e23, @loopback}, @in6={0xa, 0x0, 0x0, @loopback}], 0x2c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x4e22, @empty}}, 0x0, 0x0, 0x3fc, 0x0, 0x31}, 0x9c) sendto$inet6(r1, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 6.757419973s ago: executing program 1 (id=781): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x2d) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000940)={0x0, 0xfffffff0, &(0x7f0000000900)={&(0x7f0000000400)=ANY=[@ANYBLOB="54020000170001000000000000000000200100000000000000000000000000010000000000000000ac141400000000000000000000000000fc020000000000000003000000000000e000000200001000000000000000000000000000000000080a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="1242ffff040000000000000000000037660b6aff00000000000000000000000000000000000000000200002000000000", @ANYRES32, @ANYRES32, @ANYBLOB="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"], 0x254}}, 0x0) ioctl$USBDEVFS_CONTROL(0xffffffffffffffff, 0xc0185500, &(0x7f0000000040)={0x80, 0x1, 0x4, 0x7, 0x0, 0x5, 0x0}) 6.705329779s ago: executing program 0 (id=782): r0 = openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x80882, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000001a40)={{0x1, 0x1, 0x18, r0, {0x2}}, './file0\x00'}) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000011008108090f9becdb4cb92e264831371900000069bd6efb2502eaf60d002700020400bf050005001201", 0x2e}], 0x1}, 0x0) r2 = fsopen(&(0x7f0000000380)='hugetlbfs\x00', 0x1) renameat(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200), 0x60281, 0x0) readv(r3, &(0x7f0000001d00)=[{&(0x7f0000001a80)=""/252, 0xfc}, {&(0x7f0000001b80)=""/180, 0xb4}], 0x2) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r5 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r5, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r6 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)={0x14, 0x2b, 0x1, 0x0, 0x25dfdbff, "", [@nested={0x4}]}, 0x14}], 0x1}, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000000)=0x15) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) close_range(r4, 0xffffffffffffffff, 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000240)='uid', &(0x7f00000008c0)='0\x00#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xea\\Eb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xb8\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80=\x8a\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\x1f\x03\x00\x00\x00\x00\x00\x00\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9ak\x00\x00\x00\x00\x00\x00\x00\n\xa72\xa3\xef^\xe7\x8f', 0x0) syz_open_dev$radio(&(0x7f00000003c0), 0x1, 0x2) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000540)={&(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ff5000/0xa000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fed000/0x13000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f00000000c0)="7381350d4e3756710cbde81f5117df0e81be0095738eb1278148d779a01fcd8b33fe09a9fdaef94f651358050042c8a4337eca94cfe1f5c4709f002b8d2b36b5a78db3ddc93889d94df27f7977a8da6698e8732a4f6f52dcf64e50208be157135cacbeba9aa6f708ca70f9db94758f456dac741090a2d58d6797f0e0844f7517e3f80788ea507a216101392b17128b9250ea02d65f1dd44a0eb955c307e7ecaca4b5b98bcbf5f238d9494f45f37ba21463a411d634d997bed284b46d4c5e8bd151b5c7f2f4c73ac4000b851caae87ac474426211b74e316da3e9345e8587bf3fe2ff0ace2e617496d64eb156060aebeff456cf9f3e65cb1e", 0xf8}, 0x68) r7 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r7, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x10) sendmsg$nl_route(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x4008}, 0x0) socket$isdn_base(0x22, 0x3, 0x0) 3.636706319s ago: executing program 1 (id=783): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x1, 0x3, &(0x7f0000006680)) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f7671176e252d6e0d952163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba1282", 0x12}, {&(0x7f0000000600)="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", 0xfc}], 0x3, &(0x7f0000000480)=[@assoc={0x18, 0x117, 0x4, 0x8}], 0x18}], 0x1, 0x40812) recvmsg(r1, &(0x7f0000000340)={0x0, 0xfffffffffffffee5, &(0x7f00000000c0)=[{&(0x7f0000000540)=""/93, 0x51}, {&(0x7f0000000200)=""/76, 0x53}], 0x2}, 0xa0) msync(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x2) write$P9_RCREATE(0xffffffffffffffff, &(0x7f0000000300)={0x18, 0x73, 0x2, {{0x40, 0x100001, 0x7}, 0x80000000}}, 0x18) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r2, 0x89fa, &(0x7f0000000280)={'sit0\x00', &(0x7f0000000240)={@dev={0xfe, 0x80, '\x00', 0x25}, @broadcast, 0x7, 0xb}}) r3 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f00000002c0)={0x10200, 0x4, 0x8080000, 0x1000, &(0x7f00009d4000/0x1000)=nil}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) syz_open_dev$I2C(0x0, 0x55cf, 0x301400) openat$kvm(0xffffffffffffff9c, 0x0, 0x22102, 0x0) mkdir(&(0x7f00000003c0)='./file0\x00', 0x12c) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='configfs\x00', 0x0, 0x0) r4 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000840)='./file0\x00', &(0x7f0000000080), 0x18) newfstatat(0xffffffffffffff9c, &(0x7f00000004c0)='.\x00', &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) setresuid(0x0, r5, 0x0) fchown(r4, r5, 0x0) r6 = epoll_create1(0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) shutdown(r7, 0x0) ppoll(&(0x7f00000001c0)=[{r6, 0x10}], 0x1, 0x0, 0x0, 0x0) epoll_wait(r6, &(0x7f0000000000)=[{}], 0x1, 0x101) epoll_create(0xc) 3.583537726s ago: executing program 4 (id=784): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000100)={0x6, 0x1f, 0x6}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f00000000c0)={0x7fff, 0x7, 0xffff}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x7fff, 0x6, 0x100}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000080)={0x2, 0x5, 0x3}) r3 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) r4 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000340)={0xda2, 0x8166, 0x6}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f00000000c0)={0xdb, 0x1ff, 0xb}) r5 = syz_open_dev$dri(&(0x7f0000000100), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r5, 0xc02064b2, &(0x7f0000000000)={0x8, 0x2, 0x7}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x49, 0x7fff, 0x4}) dup(r2) close_range(r0, 0xffffffffffffffff, 0x0) 3.508117341s ago: executing program 0 (id=785): socket(0xb, 0x80000, 0xfffffffc) sendmsg$NFNL_MSG_CTHELPER_NEW(0xffffffffffffffff, 0x0, 0x4004804) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) clock_settime(0xcd1f6467c1540c16, &(0x7f00000000c0)) r3 = syz_open_dev$vbi(&(0x7f0000000080), 0x1, 0x2) ioctl$VIDIOC_S_OUTPUT(r3, 0xc004562f, &(0x7f00000000c0)=0x1) ioctl$VIDIOC_SUBDEV_ENUM_DV_TIMINGS(r3, 0xc0945662, &(0x7f0000000240)={0x40, 0x0, '\x00', {0x0, @bt={0x6, 0x5, 0x1, 0x0, 0x2, 0x10000, 0xa, 0x8, 0x100007, 0x4, 0x2, 0x1, 0x6ac, 0x43cb, 0x4, 0x6, {0x85a6, 0x7fffffff}, 0xb2, 0x81}}}) 3.488540019s ago: executing program 2 (id=786): fsopen(&(0x7f0000000300)='befs\x00', 0x1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_io_uring_setup(0x8d2, &(0x7f00000000c0)={0x0, 0x1, 0x800, 0x3}, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), r5) r7 = socket$rds(0x15, 0x5, 0x0) setsockopt$RDS_FREE_MR(r7, 0x114, 0x3, 0x0, 0x0) sendmsg$WG_CMD_GET_DEVICE(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)={0x14, r6, 0x301}, 0x14}}, 0x0) ioctl$EXT4_IOC_CHECKPOINT(r5, 0x4004662b, &(0x7f0000000340)=0x7) rseq(&(0x7f0000000300), 0x20, 0x0, 0x0) futex(&(0x7f0000000180), 0x5, 0x0, 0x0, &(0x7f0000000000), 0xaffffffa) io_uring_enter(r2, 0x47ba, 0x3e80, 0x0, 0x0, 0x0) ioctl$int_in(r0, 0x5452, &(0x7f0000000040)=0x5) connect$unix(r1, &(0x7f0000000100)=@file={0x0, './file0\x00'}, 0x6e) 3.200162671s ago: executing program 3 (id=787): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x15, 0x4, 0x0, &(0x7f0000000100)='syzkaller\x00', 0x400, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000002c0)=ANY=[@ANYRES32=0x0, @ANYRES32=r0, @ANYBLOB='6\x00\x00', @ANYRES32, @ANYBLOB="addaced30a01a7fe46005a6cdee853229216446b411c8d9e63e3d3cdab8325cdc8"], 0x20) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0xfff3}}, [@TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x80, 0x4b6, 0x401, 0x0, 0x12, 0xfffffff8}}, {0x4}}]}]}, 0x48}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="0900000003000000040001000500000000", @ANYRES32, @ANYRES32=0x0, @ANYRES32], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x6, 0x14, &(0x7f0000000580)=ANY=[@ANYBLOB="1802000008000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffff", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000540)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r5, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r6, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 2.50768339s ago: executing program 0 (id=788): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x15, 0x4, 0x0, &(0x7f0000000100)='syzkaller\x00', 0x400, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000002c0)=ANY=[@ANYRES32=0x0, @ANYRES32=r0, @ANYRES32, @ANYBLOB="addaced30a01a7fe46005a6cdee853229216446b411c8d9e63e3d3cdab8325cdc8faa5cb28989108c94e95a12489c73629f24aaef11a6cafca29547a05f362658b49"], 0x20) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="0900000003000000040001000500000000", @ANYRES32, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000000000000000c4764beb"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x6, 0x14, &(0x7f0000000580)=ANY=[@ANYBLOB="1802000008000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b7030000000000fd8500", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000540)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$alg(0x26, 0x5, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a30000000000800024000000003"], 0x7c}}, 0x10) bind$alg(r3, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r5, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r6, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 2.491221341s ago: executing program 1 (id=789): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0xc, 0x0, &(0x7f0000000180)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) syz_emit_ethernet(0x52, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb08004c000078ac1414000a0101004414050300000000000000000a010101000000008903ce070200", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB='\\'], 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r0 = add_key$user(&(0x7f00000002c0), &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000280)="d25a9850a9d77f1068", 0x9, 0xfffffffffffffffe) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000018c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="4800000010000504"], 0x48}, 0x1, 0x0, 0x0, 0x4000011}, 0x0) r1 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r0, r1, r0}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0) add_key$user(&(0x7f0000000080), 0x0, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = dup(r3) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r3, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 2.41167281s ago: executing program 4 (id=790): openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) inotify_init() socket$unix(0x1, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) socket$inet6_sctp(0xa, 0x1, 0x84) socket$kcm(0x23, 0x2, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) socket$key(0xf, 0x3, 0x2) syz_open_dev$tty20(0xc, 0x4, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x40000012}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000180)={0x0, 0x1, &(0x7f0000000340)=[r1], &(0x7f0000000280), &(0x7f0000000200), &(0x7f00000002c0)=[0x7, 0xf], 0x0, 0x7f}) 2.340038813s ago: executing program 0 (id=791): r0 = mq_open(&(0x7f0000000600)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdF\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1b\xf4\xce\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|9\x90\x8d\xf4r\xd9*\xd1\x83\n\x1a\xa8fa2\xd4:^\xd7a\x0f\x12}\a\x9d\xc9h\x02\xbe\xeb\x01\xd39LS\xefJ\xcc<\xc4\xc0\xb4A\xab{\x1b\x15<\x95\x02\xae\xfdT\x98\xf4\x85\a\x01@\x12\xe0<3\xb4\x97\xb6W\x84K\xd7\xc5\xf47\xed\xda4\xe2W\xb6r\xca\x1e\x90\xef\x13\xf1&~\x97n\x9f\x8eS\xa8R\xf6\x9d{9\x1bN\x81\x18~\xd7{', 0x42, 0x0, 0x0) io_setup(0x8, &(0x7f0000004200)) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mq_timedsend(r0, 0x0, 0x0, 0x6, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000380)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_ctr_aes192\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) r2 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_GET_FEATURE(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x10, 0x3fb, 0x800, 0x70bd2c, 0x25dfdbfe}, 0x10}, 0x1, 0x0, 0x0, 0xc1}, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, 0x0, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xad, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r3}, 0x10) r4 = syz_init_net_socket$ax25(0x3, 0x3, 0xcd) sendmmsg(r4, &(0x7f0000006480)=[{{&(0x7f0000000080)=@l2tp={0x2, 0x0, @empty, 0x2}, 0x80, &(0x7f0000000000)=[{0x0}, {&(0x7f0000000200)="711d482a5ab5ec0251a1f4f3d01b1d955ebd04702f0da33562e8efebbe2a87d83408ea9222b80388dc8c6f269bbe67ba7d42df44cac709e9d13e7dfc07790ae94d7b7141bf960e0eb61a0eb9041987d856a9fc480d8fd0914fc38a12469c780109433a4101dbd97b22dfe287bc964996d197238bf81f7c6add2970de", 0x7c}], 0x2}}, {{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000380)="227d69516c0c1ed6e4ef78fe3473e45d948b7eb5db70d70943f94ad617281fbdcbbee1111df6b46e615f", 0x2a}, {&(0x7f00000003c0)="897dd19299cb7dcb5dbeaf5f032734f1fc984b6cea82d372d3ff34cad6556afc8bea20e5f21ae426a20341fd860c55059496b071d0b332579a388a507d0dfa01cb52922de5f3caa9d49c1ef7f231166448a8d862c1", 0x55}], 0x2, &(0x7f0000000480)=[{0xb8, 0x88, 0x9, "9643797f69ef1c77b6faa1774e729969dfe7429b84946d1b70a97c19272266568a00799594fb252110012dab99f912d70bbdfaf9bb9163a50fd9a90c816591beed4f8644eb845132a6ab236a2c57370eec1543a3912c384dca9e0bec1f4ff14d4fc291326157fd7e20f0920babc40bbb3ee228f1b807d219bd33daf2a513a5006b03fbf6927f1039ef980c340a3f4f7759ea64b0ceba6bb90869b85da54100a0b306a3177002"}, {0xb0, 0x10d, 0x5, "88f53abd7f56455bfed87ff7ce57fe782b42083214fb6c9c32b8f9fced58b3d915f85952f759c6f8aabcbc71000f57904a754a522a53a9cc5d1c96eb35c28649d0d407505bc54edca5bcf641aefce201938b45db2eb6b567080eea0c9e4cb87f0dff2e20ee6959ef57776cf12e7a027e9130dc836f71c1edb97d5e222e9a215658a9dab9a8abfb67049f3694b5d57b93ebd1ad0535625bd554717c"}, {0xd8, 0x10d, 0x7, "93c55357dce0727b95bb3ee46ca4bbaef9c62906eb0008aa31db89464f15c4ade5dbf38f16412b990a0448991ef2f4b1930d60e94bbf677934411d7df6cc4e06305faf853be2b4e17d9292e2d53ef977649ee51d9c3c8115b7285d80b53a436eabb7e0ea289aa9ac5a9f211942802231f830603c106ea1770e2e6831d03ba4069288282f145c08575c6f2108172ebd70d940be3f57dc6aa0851bb984fd3ca9e32b33aa942e6d7e0e184e02b5ea31de6354082936d865ff1a1347916c9becde83c2f6c210b2f062e4"}, {0x100, 0x117, 0x80000001, "b3833d9da4627c47195ef7d14cf8fd7e53f6adaa1b4665eb5d245d772a495899191d62c76e6264b4dc40c7ee16b299f4f323c1b7a77c450f85d1b4a1f0b52ba9e2dc59080f90e160f46dd26748f3d80011a8fb0165c23e2f5629bfd12e4a6db27c65c76f848f567b40ca155fdeea456fd661030a0a617a6b4794d73b258051fcd4fd74e743d48f1102c5d0042328a9a15b7f6572cebffa763ee9153513bf5de0552b969f3ed9af5a09db8c563b387fd796fad25145c89a213939f402acd389c9e21b001fc75f61d844f848c4845fba6fc84d16271fdc611482d6bba0b2823122c07176b12313bb9ee8a22ada"}, {0x28, 0x10d, 0x670, "57a84f83d14d535a283bb40f6384d70869d421c01baa44"}], 0x368}}, {{0x0, 0x0, &(0x7f0000000940)=[{&(0x7f0000000880)="eae2fe76a2a4d05d6a0078d72ddd47780aa282b8fbb5be73caca4c2f94a16429974d57054a8c0396fa11064f732280c5a0a48773ce4dfd8d20649c21cb97fd740793634690ed884024615b58c4ab96fc7db25a4237163d6fad62697d56ac4963ce507d5c164fc5446758926c5abd6a1dd050452cfd1f0ad3230bb2e9cc71ee48cc8079", 0x83}], 0x1, &(0x7f0000000980)=[{0x38, 0x10a, 0x80, "22b909374f889b84e2ad698725bbbea34c403d9c668f598c875b734bd4c5457eb8ccd9eaf0492f"}], 0x38}}, {{0x0, 0x0, &(0x7f00000010c0)=[{&(0x7f0000000a80)="2c9b087f680dce8e25c4c366a5b3572dc2207d4051416b45fce64292d50c0ad8d611bc318d4af39aff64fb5726b573c185530a5ba9009f35d8ab610f5b8b8a80c7443f8e951a9ad718b9be0a0d6175e37daf8247f78508b0934e8a5d0e1cef234f364f47ed0bc6718451366b029e4c9e7be140106793796f8929ac22102e43faacfbf844cdd8d05aafe8395a41fc32fc8f439c1872a40acbf346214fa4a50e341191ce21c52587ee7afc96e5393a19aca19e216643426aa7e8474a56465a8a61feb28242b0586f80e48a20c23abd12e217a3f3d144a45bd8ffa33042d9f6ae2445c04a004226cd47410ced42d92d0f3824949d9d5777a00a", 0xf8}, {&(0x7f0000000b80)="2de612c754914424a80ae498a36a2bb8bcd3082af8eab086ea7edfaf725e832fc4df7de035743a2a20c2093d210370b10cde04a0ac3dffa80a8993957f9d965e0c5d752996424af4afe21ccfed3366ccc5ab7c56217d3b4cd2f1", 0x5a}, {&(0x7f0000000c00)="5f58de1f65662621797a2c34a239bc1fee03fbedc78b739b6cb2059fc44a221536c8b88efe6ff80a0999b29155949098795c4cb7d4fafab5e8f5c879bd6bb796160d221106425fe25f0fdbbf49dd400f91cdf483ceffa72e5c39a278d3b4d41d83337c030e1744843c8ef2f942ca286979b8abbc96f335c80831134c89f4b0af6abbf9cea2db251b", 0x88}, {&(0x7f0000000cc0)="1404072fcdd78e2c2b0d5180b4646d1bbf2d44cb74a4a7fd4c5c75ef71d1b205e33a0af3d8eb64e9b3e0a2f82d521d1dc1c37f76750a10d4c1b530fbcea695dbed138cdb23cbd0d24ff10137ea6cc4c3c5a4a5b7a7a9292c6faf2b45de49a38e029710ef09ca715ba48b16410380339424aae5d0684f90d1d66eb67583bd86bab4e0c06ad14d23be83d2bd93e841f7ba7e760e7eb9063095d1f9d26449ad29e392eab8e52279321f", 0xa8}, {&(0x7f0000000d80)="db6ca7435e7bc1fa27835e945842cf50d41830737b25dc91e156d245528ed45e1b2a03a0bd22f765ac818f849925586eb99f7fa25bb6bf667d9f5a8cbb3ab29325dabcea", 0x44}, {&(0x7f0000000e00)="c30075e0255a4f5f97a3163acbd5d8b55e653925b80ed32213f9ddd1d01c869246328fe0e5b43246713b8c36867522900ff3194826a5b2db2036ba2f0e6b04f7dfd45fce1933ff5aff2ad30f7ec81212729a661f926e65dbc7fc13ab46a0267caab6c405ec72ecf9b4966b059cbf646972e640e67a371b1322259f42b6526ad248a5db9e0842883a94084ca5df99ae5f34437038939033c8557ce89d00b3f208236c177d88b42f8129b73d74d69a7ea14955346c25803782b8d83f7d556d0873c952c2d77961e2fecf10a017249a80f9fc46fa753a3fe0a2272ff47e96999c9f57", 0xe1}, {&(0x7f0000000f00)="0c02717cd85a08f28e14588fa96a4c46daa6af5c2027489dee9b65bf58190ff4ef1d54b40fe0ddaeb7e490d5d68c7a334bdcf1656db9b51c7d2ab737c43a258203f91e64ef087dabd1774be2cce8aa6294b9d1b57aee3e9b4dcafa5e1f02ed5b134f0e2b94ccf2512344330c28f321e9c3cae26a16f9f975eaa4e3dc3225ae6b27c13c3c69f42721fcc7558aeac575f14ab8e691a0b1e3c77a8c30351b78ca7af16e1007770bd980e4af80bdf066669e1e7fb7934b68c902d5da6855f40f3083c56fb4ff9927ccda9f379d5fcce631bc223f5bd8aa5526eda01b79c844d858cb7d148902f4137dcb93967189a65e766dbc49c9328ea1e70f", 0xf8}, {&(0x7f0000001000)="3d7fb6fbdb36a4112ec5e6b2c73c2a81de96113c8c068abb78ad6e2c02c4", 0x1e}, {&(0x7f0000001040)="b98dfd37fe", 0x5}, {&(0x7f0000001080)="8e40078c0f1f19c3d34d75a1eaba87998f7b88210d32a68afd5aea0e8b8dab413a86ea2998a20648", 0x28}], 0xa}}, {{0x0, 0x0, &(0x7f0000001380)=[{&(0x7f0000001180)}, {0x0}], 0x2, &(0x7f00000013c0)=[{0xf0, 0x113, 0xfffffff7, "1ca010d1ee62b173b4fe1f68078d778822eb188e008b7c6bb1039c0fb73a56d8821e150bd97fb4b97738413836947f9951f36ba13a418b03e137ccff46f8903e5f47d9cbaa5accd305c95f9af6b923f540ab4413d97043bd1ba42abebb14038bd18e8fc73da6191293129ed3a4726f44c67b95209630ef8d9e061f04918b0a4f2b716847e4566d965daccf76b21d1cede254f64a15398ad4c3df2f15dfee64d05b8add3af475fd97d7f425b8a292b3ecbf39be99d8fb9f8fa72241d0204d850baf705216026e26fb7d0a742d961de67cde2646f0088a4b064051687e9d"}, {0xc8, 0x108, 0x9, "e629b3d56e6c06a8bc1b726c1d62d6256a20528a45dcd0f4ea01228afe4daa5416f339d81f95ed3e4ca8058debc14a927466de499b64b4608b03e8a060a391789b9ac03cac7ecd95198487a401ba5e3d87bc0f60ee61cbeab3b74f5c24cfbc3e0ab226bb293a213f57e7db412b4c9a495b3f6f36c545a43dd7706fdfea5e87ff07fe51b10feea6f70627142337232aa03dcac9541fd57230cb3edf0f78352c55de906bbe77aec01db70bb89c0b18dc2692e4c9"}, {0x1010, 0x107, 0x3, "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"}, {0x50, 0x6, 0x1c3d, "848bc00f31e997c9e5745700b48c5c4cf6be2c8b45c6d7e3bc5c3e0113f43344f5fdd7b6a8e78d7ab6b60e0328469d812c6a7f6dd69f066001f68d2e56a5"}, {0x30, 0x104, 0x1, "91bfee9f4b74d7f20e733e6abef3ae2d3dc7e26bd8846b07f0997c61d6ab27"}, {0x10, 0x110, 0x1}], 0x1258}}, {{&(0x7f0000006180)=@sco={0x1f, @none}, 0x80, 0x0}}], 0x6, 0x20000000) stat(0x0, 0x0) 2.339535841s ago: executing program 3 (id=792): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, 0x0, 0x0) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@newsa={0x138, 0x10, 0x633, 0x0, 0x0, {{@in6=@private0, @in=@broadcast, 0x0, 0x4000, 0x0, 0x8004, 0x2}, {@in=@rand_addr=0x64010100, 0x4d2, 0x32}, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', {0x326, 0x0, 0x0, 0x0, 0xfff, 0xfffffffffffffffc, 0x6ef}, {0x0, 0x0, 0x0, 0x800}, {0x8f}, 0x70bd29, 0x0, 0xa, 0x4}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 2.03828545s ago: executing program 2 (id=793): bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b70500000000000061107f0000000000070000000000000095"], 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000040000,use', @ANYRESDEC=0x0, @ANYRESDEC=0x0]) syz_fuse_handle_req(r2, &(0x7f0000008400)="44ea07862a07eefa4de37092cf4356f54454db90301c4d373d57166f794f169d63344840a37048638ffd5e30beade3fd768b18191001eb890277fad8bdfe3742686deeb34395963bcf7a870addd76c80aba9f771ebdf410c7d7542fc2b6ae9a458d79457755d94ba8a3248b01a2293d8a70e60815b90297002652966a6b836065bcae0b44f4b26be93dec3cd4cdcbbc84c5b916a1b0d8313340675d67fb0c785d0307f95e426546c9a4d0161a8f52b02b95f4da53ced705a658722091864d74ac0a3a5f3853a0ad71ddb29835680ca9ff30531f8df0f0ac66f7f1433c33d75fa8f0f022b175df093648a81af5ed701b2e7a14199c83b539e763dbe7228f2e184a02becd41bae305d3f34c72e8db93dd214ec203eee6e6dab26b41848c95fe1ece8ca157a90bb7a990dac5f3c64cf49c5c5aa8414b9153f82eca9df88d90a8d6c0e72eacd52f82939d46d41e0f5ccf708c03fccecea467f33f5a49888514787e42c0a12255bca89e82344ab01ac3b6c6158e3c1b34ad953eaf55f3a2c487efd9423a542e41dbd0058aa021cb6fdc5df88f807033edd31abaf5ff7e6a9578d2be6a2d925d98108fda2a7e56a0bbcdce0689fa9e2111b0be8f3e2807f7f3728489917a031f2187ad98a744f19851687adf59a4b4c328ad5c4f2eaa0d112041369319f6d3f928c22d05f9fd68b5c268da5e2f433d651bc602a65ee83752c0c92f7e29002faf9475fbb57788d725f6f8fd495a58d88d55ab8467a85d1f41db5964a19bdd45377c7c8c792de5e76e87da9296ff90e7fa9e57f09358d998c8779bb2348d651808e969e960763c5231c65a06ee16979f4d990dbe7e10b3a2392dfd6483bf2c7c5f6f3d941cc17663668cca83dcc38089b4342a801c74039b32550c2d9cf95a0236523933ce3e7538ff9da2b7b741f3cbf53e6084702d0a5dadab4350848f6e7ba46d4736c7a2ae702c480c30dd78f994a10b9c3157a17e9e29576a68139403300586eb0c673252a319aa1cb01efa777228d8242ebdbef9db5c03e4c8e09bf7a009b7eb19357d1ad6d1defc0dbb58c31d85b9f1035056615ad0b0ded12751273c8bb7810ccc5b2efe51d223894b141dda837e6b7ba21de9a978ac447d995394b800e1065906455af544b9d7f353d1eefcd3387d18e3611f3913926f3a4b87efb3a9707d6136dc00e49ea5e7a6d0bea17eb49cae93c0c4422374b0f46380e0d554e1087c1392716d368b04b1da85d271206b465608468802fae00c7ad9425974d822cffbc420e739f7617f59a879f791ab5dd7a6215298cc7dc6904679889e60a09114b0f421b6f1286d0a6ab3dc887c2d3a48d53a7611ec270530b07a83ae1a2bfa6da42ab38bec3eb8ed1e207d91c02e74a31c29abbd25f5779189f5f2494ea5c3f4b829b96de0c54b3851dd58610c2b9ddcc2960f34fb857c5ab1aa67e8eb10a59639db2ddebd0206ae7ee56b21ef484e3c66003af46326f1c456ad2ab5273d0c0b2bf412f71f820ae12723c74e1857e0ae3d5587a0427c1595e06b1d5ab5e815a5558302e0d9c50b8c6cbd599eb554df6f7323b01f1353b557c565dfe0de51032a88541b49ab682a7dbe4dccb9b952ba9c9ce3bbff80af01e47953666327b8acd7d2cf363c6f7172caaf01d8e3417f768ab08f2cfa7ff26efd219e25ef0f9a84c7b116978eeafe3410972490203dbe49aec33f14d5592a466a6efe630904db9c77ece20bec7552b3dfb48d4e0427ce5024fdc0aec7271e93c51aab19d7a40670add6ea5820f625831a593137f60543e424892856b3bb9e608e88e65cc6dca098d5139a38ada517cd788b9f13618d9c2c31d7918cac6cd669710692797e61f4df3938dd429d977cc11e7465a7a23740052039d9b31cd26b95efba17bfcefe121fcbb762d29287145b11a3abb3e0683b9216a8b5d9744baa75da5d840e70cb310c507c4f7eef1d6535d8e11079edcb51df7ea63a7204e314147eeb57916171ca33c0f5932916e4d568d9e7dd3555500ae119f0c63045658303e1f4ea99c896eaeff3ebf76b2def0ea856a3f24cd76dc437236b71dad9a26fbf3882e81565851eb6c5b265a0721be43f0844f4d0e4296011e280236a0ed7656f2eb906e6b2ec4a8e5bf91eb7e8be889ded6d8492bb72f1de26cf3973249ebcb5c993d1dfa896a658a528aadf57dc28a8db32656ed8e416f96e1f89ac24d4ba587df31f3d2d8d7809d06c8b2d68eb15b377918424499cd6a7fb62e49a78831f0e4b1476bef657fb34bd59e34793d21da3f7bd0278bbea8beed261c697ce17f36f1cbc1b94aef11dd1dbf1c68496765258f4cfc8b5fdc9197d7260b733d2061f399c861bc5912ac76cfb62b9218196fe054b92a295a9b9526871167d436b830a7b4944f527fb4d75a036acf3a71a1a710f609f4e794f1d764a5317ac067e8194666dbc73e32b2870eecf8776bb7641dcdd6d764f91dec83fbb53a97e6531211dd8b86bbb57f8acd637f4b1b66fd9705a200e3081ea382262d54edb161927eb1d85cf7b9373a24607c99f3d66b85e22d2cd5cfe24020d56e0552bd43d803882128317d9a56e63a4808ed6401b662187888a0d0b311364fbddad07911b5244877eeace22ab5bd8501d748ed5cb05809e1639678c4c6cc43a3c2fcdd5b0970332429c3cde09d9556c8360f26caa744ce5e57bfaabcf7d124b2d4fa97d7e72f16cdfc35f87493717e2a852b64fa344db5ec72dbdf22dbdfcd12ff796d515d5f3fd3cddbf53426183bbd92e2fd3e91fca8fee1c1ef4f8d59036df9c48fc7677f2c4905b6cf4adcf448029c6c6a2968b13e3b77d578e2661ae7d07ef84fa098bae9a564bc8c507a103990c00a0e6d2854a1689f7b095a100b7f38df028baf20bd56c843c24f8ca4a81130256b13636440836837429c1c86ae1668d3b250108406acdd21b40450399872c1da6178184bf9c2cc11ad80caa9997d3c6631f09ba2a4d96e6b74313f1e40fbf8a29962648f400dd256c4852c556deca2e3443b858efa43d53efcd496bf5037a82e14868b508632bdb2dde924ce2cd6c65f1708c18cf49073e536f09e8fcfa9a44fdbc349ae75e17205754d3bb82d3ee8a93c59aea1bd7ea6d124224b11405f815ed518a1cb9a80191249ac1cc0e5c1f9aab8fe67bb737cdfefac82a89a7d6ae08bb9e1f710cee451d851b35ba9b886dfd9c277dd67891331d43f36353c78c65e9f3524e1b9b229c9f91de7b5ab16a66017d171e2a4e185481d33cb5bd9c5e3d93c49d2c620c16467bf4db73621957f76d656e6d4cb4d59cacf1209da4e39352554cc2abcc8e82379b4f819fd6d261c6d7615f85f6c5d0b9f57976836493367e1bbb14c57983aa97c6e4e7c4fe2a166284c904ac4f70ef2e52e4e7dbd677ace683cd61aa60b702770aa0ddf14b694bf3cfaeb585f8fd8a85bee2f78400a0874dfb4c319be24a46d1914b6e902d5de8d8375c9ec786ef6eccf1ee7a003f83d2e163097980a06ab9fe23c4ae8e91755e4217d3c302111febfa9dce02a49b217aef709d183a5ab8ad1d39e9a697a79be303fdb2290c827279ce187d1c647cc28e20c0b3ebcab2b1c75850db46211150a8bc5d80d868141f885f7a5ef520ecee6d33842141003df4ce066090c8359b5dc32dd9ecb1039454d0b691d8f97932b69981be240804e860a88d1a047f46ff43609b41ea36dc276b28e87364049940ea7b6dc78848221b30dc6aa1b60f17942c96c46e347606d14ef02ed3ebddb20f7f4d28b9460f4af047b772927ca6a046b7de2a21b8ce79eadb74e4825af5e19ac2955999d7304a35851a4b9086ff922da8845da10a55fbb62fd13d98d45f60842d0d6301cd72e7cb97bc84393a414f671e5e0115a6c1c26054a80ddde10e0a83a4ffd123504c881a844bb7187c604f87588dd0d0f11930f9a3cfeb7098f38f84923637f1a9f6b3e3d0899a156d50d7e740b118c4865ec5e69aac247a930007452748bea9af0af511cc1129740510b13f48fe07ef1417ccc765b2cd0138cb51dd71fbdbe967fc321082a9ee4bbd1ea404cb24971de5a1ee7d7993b5d11d67d30e8ba94a9e943852675a07b88a51df6f4abb507cdaee96726023855e4dee6bccb3e26a2a88fb60d812e7856c13af5f4fcb6776ba8e27a35bffc5e46473b31a4b83ea1a3376f4549af87d03102413faccc3fc897ccae95d2700163f1fc5170a643554169018c5cfcf8f50c7981270995d8aaa9f923c0679b258aab60f79111627b71404e1ce8751228972cbb2bebbe25973cf98bf8fe8e63575950a0aaa1ff060f01e96791d128d0b7b40855126ef3910ed7d7a6d9490618da352ad7b889f7d905bca2214224e170f30a088cff91921917c937950926cb11c04fdc6bee776b9abd2aa286ea5074e72756482fcb6a7d072edc075f99e02747ea49a40b26b58118b6692fbe55b09b054a044d1f481173e8923a74806cb770c4c61ffa982077f82bc4db7fee4ae2beed4673e39f5ff0614072a771034174a0f052ce39e27450d18920664e924ee963c9bbc9852fe68f30a199ee4856c1dadc08c061165867438bd3bb73f5a50f5131b7867dc80e0c5d43eae80cc2874d48edc910e7f8f9b73e032a8ccd7c348e84b4179fa101d488c2fc16cdf953e269a9cf13c0dfe575e0da49d7d2c09293296c0232bca9fe0aa8199b21e19746c4783630e432b5c7e1e25864fcd4deae07c2b07782d155fe6e6b5d9eed4beb9db47bae4007753d8be56b10723b5467c64acb0eee4cb9050b4ef2b57b630f4608af96fbe484816454ff385aa3765051408779384c6585f2e24662fcc3008dc17abb07ba9cf96ff4c795c97811e73b06c65e1b5c66c2e1873191d972830b1f53bbfedf8b5e8a64a29fb3b3eca67f1791652f9ac037c2f87c6d1d9d453b12d5d2b0c070a8084aa15505e240bd0c61895383f23f0460027d60dd9efd8539807f717bc353f9b858b9bfd2acecf2190e280faf6a1603566ff8893dba33ad3300e10438241709ba7413fde84810b966b4556f9c8a51aef27f9b9010e7b6208715169a585e42bf3f7333209afb5b19c0de7722004850d53329d93e2e4909eced3da67dd7d2c82a4c9d0d7cb6f5ff7dbf195e8b39ba9cf0c1699ea1f8b6d1293509774ef3bf48597146a60aa5b6eff2bc8a64f9ae9a81becb9c398ab9676d2cecb14d28f819d08050269bb0ca9bcf59d5c9bd2fe2bcdfe82a8f037781c6275c9229b0729cd085e66e2712bdf22009440c4136c2daa54e547386e1acd16a1d30f3d55c1ef0fe10c108210b9d8894d31e5ef17b049106700bae524eef744ef4b3a69e9cfed4efa9b0c9262177f9fe16f5b1fe5bfe5fc6a611e6ffcb9c5f329d4e328cb69912f0dfb7f4a83d326cb20b053653663096870e7ad2753e992dced7405a00a39dc55e652eb6b2e1b1e9782b42f443890c4067b07376c6f0fb2ea6589e04a8eb39a94d913d9f4410d238e6880c167a0a23b266577c41ec3e0f513eb7fc948c12b26ea2646c0481488417d9911a0107ca0ae11c2c4b8c2eefa5144ecf8b149d22abbd26d1b2a3fe51016b9bbfd229c090fc2fbbca4803217c991e36f86d4720b45ae45e6b20f09fcd8e5decd79997e79177bd67de7433282c1d0be5d585a71c873e7171a133d9f5ea35ac0ac5c1a643279ca66a365d278d14eee3ea90961eebb3f6c098c00d051d4716853ec7069be2a4625cef4c0f72abae5309d2709901d05217fc3e52049c4aa16b50121e43ce491d1bc9adb01679ec25ab5009f746170c2517f0072f16c574cb447c6d8ce4a2e45426900463c5303413bf4fe7fd64c273b404cf936068cb3085c3a81b9872ad2cb79aa4c051e7ad97cd4e8c6b94bb0df87e4347ca6f11f155ea265762f81eb0e9fbaf3dc05157eb9f12596ccdf9193018a2226824db6bbebf4e89a070688f698bbf23f30dfb04db7c3d804a7587ad0fd03e68cff7e516e5109e328e1eb3b887a6aced15804f2c898f41c5452e160ca30e35843705c150bad932d2d3fbd791100b1535d9f3306dcf127fa49c1a36b172f46b1fb676ea8783c23edf89b2446560dc1b95b39f80eb9d0994c8dcac9a5a304c554133e1d6ba368468a17312167cda37932cbd4b93c58b7ef772d56d4311182a680e19da6fb938848aad40242856379310b61d6113de6814644092712133823ee2281639b52cec52ab0dbd65ddae631e7113ca75a5476797cde5f5456acbfe63c6ca8b83774690eaca3a019771ca0e742815ca5645418730ee17f52fa2531e5487c10da3ee080acd50fbd19710ed5cb924e28a18985132afbb7d2ff90f6c3855c56970854b9a48ec4f7566d2829e271af3f0ce26742602241fef70461a484499591a9079ed53aed113589fd74918146e1917a063514d7eaa7f4720a386eb2f32b6d35baaa5d36c2013eb405cec607202f19bda80bfeda8005c5d1582208b861437fff41ec0708a6a98f2b4b4463141c1c312a8115509e363a274864898be996176049d5f7e6cba76b3a37c9b2ee9553fc70f79503797464d736d97d0bb4741ea8ad14fde6f18fbb02ae97e5a77bc1527a13f18624927d79aa5b4df2dffde7fb5356e521c7a419209031df8138838151c7e90783c9af133b6961b44f8de89d6348b191cfa6c0ab652746b8582134537727b18c670691f3c1e8ca0e3cefcd26111bef476eb816482b7726399c86cbc98f0f06929c26cf831163bdbe1fa8d8f96a65d3bbb3d37657cec4b77516864cb32404996dae1d0d9f3c12b7f2698f07930b791813b7ccf0f0dcd3320b78833f077ee55aae156af804fa9a15e60c709fb30b06ac092bf97a4fe4732ea7bc93aa73232024c80434b4900cc30de20cbc1ea407746fb186a610fe31635766f5edaa8c9ae974ff8cecc4e7e391a50bdb34ca1dec1567e866497bb59852cfc1fdb361b235c803d70cfc90c229078079619b4a8086a68d420ee1d7fac403b18c7f6aad91612e2f2b9e5e206bf897bd98a3b24a0637e2b986ae7f5d376bd63d63f6c4f151ce7eaa97a30d9d51f1a9207dca6b596831a9b92517b9d5571e72b4a06c07d5ff0d325896a1b32e9fb4f9d67a903946b205fba7beda108fde3fc503c7352c59c03bebc2891007fbe966a0441a7f4bc8320b901563ac8eadba643bdfc1636864d33549a1b9ad3ce01bec94b631ac6f46c453c57c62f2cf0f76d9f1e0731e266311624a138e607e699c91e37a33096117f418b4c92c66d96fa1b1324cfb569e3d558598ee65e69b8e0b9625d551af54a09db8082f2fa9da1386f92245aadaa13bfa3cf5c39fe455180bbb5e2427e4067bd2f5a5c755c31405477ba832dbbdd4af66acc7c11e576f700e24fb4c26160b4443b8c17805238519c7c732df774b92579e02a8da5e9a17e3c20e92afba7fab49000a7b83987ea48d5854a0411615462cabd245ab3f49ba375ef179c0a78059ffc14264177a6e45dc5f2fe6c957a313ba9889fef33b788933bb37a17943551db9cd08fd8d823fd0b35110ad589c3bb3af4f69bd1c7c7a3e726f933e4a0cb1209e75ff14910061c3750b9312de42c86838d5c35a681899c25220ea87aff02bf72fdd8745f5d751e6d62861496890c956143c08a222774974789bb46924b68a6e3138ce9dbca622e78c5aeed8215de4ee5c1f8312b6349a91ef1e210f18522b7a644700e90eff995e950c8eda05d0bb8e799ef32a7ddb8a87b4120a798a3f87cc78b6db0c7947b4786db1618c523203c097ef3d3dc0f4e1e87d0d597c4eaaac05a033a3fa91309c05cd8c14de649d7dd16d8ed81e5290950f66b66fd519a2a16fc6b3526f97aa1121b4fb52b30640122dfb50ff619fb5c88eb1c4e6ed7f6d09fd29e27b3375a1aad5b09f8175157018467f883ba385208fcd32a50a311b22f7951bd0e912d234364f8590e247dea604872f9bb847bb32b3906339f5698d6e7c0f2a3ed17b194239299091f5ee4ed51c75b76bc949cf05df5dd03cd8a553e7ec81881fdc1e15cef5e72eecd7843a981eff417682604769e302f378ff9519cdbd3ba2bfe50f85a903aa08b900118226889e9bc68124777f6e02fb26fff91d1f31d3828243cc46d4b4fa2965445774e0ddc521fe5fc9626fe3428403e746de0196a45d6acef57f662faf27294be80fed39778a7585b41178ea38f64893f9a46334af6425a4aa46e25e92b0d77750c6737b237dff19913fd9e69ed92c4b6671b4226776b34ae2468907c654bb0f619b2c9b55920fb99e97bf32212f852b615689f3cf4c03d51d1587455b5720692430fe2684522bfe6dae871aa2ff5f00045861ffcfc219888fef8320bec1307236a7a42dd4a691cb6cd4d8436f31a3f2d642b05946dbfee692aee0da31419f9b8bc0e1dcf89a8ffd7856b21b1180ebc8ad75308b1370b93d680e968bcde7d235f601760a5d181f7b55daf330a001ae1da86c130c76fbd956442b6c705889d665560f8b34663390592d85ddde790e0f4f1f0df09c1c6f95477f9d72dc0894b2efe2c3d162ad80f80cae03a06548014293a02f00d6386723d42ab09052f019a1d71d88a78db27afead58bc516be8d23893f007a17ff47b32777752a15648d0ececd345aee1f36c58abb7efaff5567100c0bfa54f172c862e15872abc9d96cead6688f02ea8466fe1134bd3756c6f0df8903fe7935dbe3e635da368f13a10e3018cfb5557d38f859a983a54d660a02bdb3dac2922e7a37651677bfc664d58df59ea625e8e63ee776bcc2937b921f5544924b75cba04bf3cd0df831938f9e9c79572e8492d884646244990920400192c63e15024e2e1239f41390bf7c0e18f852e23d514256ccb8ccb2726710401c4306657fd75eba94a353987780a6d6219012cfe80858060e37652a84ae89d07f5d651fe82a2a8d0e8568492156713b1f76e89e12f76a0254da7d526df51a089600f5b7559afdc63d4872fe8d6ce00a8d0c9b00db5ee676ae2545e74fb7b39f8345a67913b234cfb4f6e3b4e2b1e1f4f1c7fcce8c09cdeb6a1a21bd2370004e583ef62971aec24ce0c6c049b6a2e22081d36854956a362b6cbad48049d7d5f90134d3e77febf87bf4a32c07cdeb36c9cc56b2b3cc8c8b47879a32ff00f3b2e977cee0acb30fc424dbfe24c88d1a08d047925cd7d65a5834e56db2b3e7e0a23dbf948c799db5a48fd4a5fdea43913b2b2c149ae9a98f452b797b55abe1dd44b30232387f466856d6c38ca735dd6175b455363dbf228ef52e443da22a1ee3a158ee304d9ca63c110a3d19ca3bab6d1745affd81c480ff8bcf5f8f7c1ea6d08a7b3c3958c324d42732711170e19523bd209134674b184d4d442a774e04d6eb4ac89a6d018cf0bb68a73da87abce127e57428cf73a5a551c85ea8c376ae951cb8357506f037d17d163172dc5764682c753050f35c6802fb269d7490b196d57bb8a1ada55da7550f82357320e14cf573ed39860f02a11bdad917b2ba2de885c7ea8b30dd62bdad207dfe10e97c8b71abbc8c5661a4483bb6f9488ada0f5885c471cfc1271b60d54f903317cca28ce977f4444cefac5c2ff233dc872d4e809091f8452de9c774ab3bbebf62de92cd6aa7421a41f7d1dea42e4f94bd3a4869c958f3940a99c88835ed2f4021114b9a5bb17240f468887b213814956f9f5e6344cbae19d8753b97c7ce2e9d0954a30dde23dea2748e1c9514672bf4ea3ec3e348a563d9649899e7227708e2e77d0fc5847dc16b59ac3dea9449c176dea2d2ff6b6af764d28dee5ccfd0dfd6e3100d97040657d7ac5da4032e3b7f6b0cef2ec55a83350c3045abb10200c264e6e68e3e03b68546ae48a538063b86315bb8073103a812717f2d8816534fa98d0e956e0f9a67bcdc522cacefc77b0be71832a69ffb72fa15ca4d8b15f7fe03da0f4b24c5fb68e5f3a2297bb0cb0b7bfdeeec4deb64bf71f57820d62c47276e2780b4341b6bc65ac49be09c94013783455a95de92c11d91b9e921a484ed69532b92e202d684d2293a2666709ee38d2114add4c5337bfeef31d481e12530c5c7e83a6c8aa2f580f6da2d735ee5260cf9a7185eff84eb22d6e0d5ac0e63fe6a3def819274a144be5ab90fa157bb7517a54c208aa82da926d5b09ba649e326a654fe8fa9dd7e6d83b0a66253526e5b5aa03e665f2eb4678e8293110420c9d7556df07c7dd1c3e817a4c7409890c4ff5044ecdb34eb652a4d7e20b4b0d596f46ee3c3dad675e958e91c3b40f2d22e671bae51518443042c529c31e343647d6ddeac7ec370970fcc71a24a0826b58d111e9b776ac0e2fa40b3099298ffd0d1c04d41ee1dd039425f52f9f8057ac1f206203f20e1ae9cbae356518ba2fe9e49b47e36942ed7204f3d7da9e71b8d69df3ae7b2de05a13a879af6a1ea6241c645ed73c139e15060aeab6f423c2180dd101863a24f1688ec1a33edc624c3f5e80a20e4cc5c86ab2c692c2d3d17d8a68bb3924efffb29c9fc3df937526452d82a8ca9a558c75d6b2504df1b66c91823216a1c3b3bc39dee0d22491b9c891b9eea193c8af8a992096d0cd74630f7222e9a3530034a582f40601a694cf1085fda7fb33b07332c6aebfa70e2ebb8d7ccf19a69dfb5e4c166add5e153504eeec92f4ea2fe47f291625e1c470b832a488f884692b8ec49b96df235f193027ed38fb4d8b88ed382825df8ffe5b0c6fab8db3e38d60d467f9da725023deb72c378258e911442afae4db650be3621a033a3b84eee65c4c0664ec6d5771cc138937434a6a361de3dc1c12a2a6735f080e94314ddf291516971af252e3cc56e1c65ba5cf8ac2538878b22034ba458e08db26205608ae941a42a27f2643ded87bde626387c2b791ce57991dd2ba08010237279cac2760e19cab9059b229ea002ce4d3b4afa495230e424752f289003a240f5cafc7a83112636321107918d582fad2606a4319199a06ef2cbeaa3e1a4d8c30501aab796f5cbe15453b61218a396b79c547d15d5c11033b3746b432b426404f7b0421b9daafd9e8558f1901283d58e173c4db0511ee826ddc6363eb51e0837c9be6b2078d808d2c05db7495d29322ee6af68b0d52c45f00a59731c0e5b2608ae046af8bcf830f001ffd2f955ea89bed216e71ccb5b44713e2abf5ee5438d63829c9aea34b57f7ab52b820c24a7e9fa138243e4afb2df93588e805e719c1767146a351debb34678a86dd19f0587af31195460a3aa3e68773859fe13b47b6b31a501b4a25c6660cfc47f3318b33b77b10ed4ba91086482db039a56fbd1490f440a6fbb280b62b6d2333afe1c42c3f16865b9c0e484a4f6f393b8bc34fbba856cc5ffad2fe423e79f691b95e7e0dbdb2b2757d9d4443f9a23a8b1bfdb16f8bffd81b4789f80f1fc4bf751627965755d008d134e2c35da34f54718615e9deaca0685396ae7e58121327e0c0696591f6af93f2999ebd3b4e03cfe2a48b2b94015eb06b2a9031ab5e129b2700648fd62ab75f77734b89abb402282635eee41606eb306619e2dae84488e2aac1df54f78460b36115072a2c28801fc122482f1d46de4b2eec07bbbbcf85f30ffb3829c5d0fdbdf3af8c6322d62f4c55ebe8fd52728e2d5d1a24f096fffcec6ff2e752f7500", 0x2000, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000000)) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="680001002a00939b02"], 0x1c}}, 0x4000) openat(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x0, 0x0) ioctl$KVM_SET_PIT(0xffffffffffffffff, 0x8048ae66, &(0x7f00000000c0)={[{0x0, 0x7fc, 0x0, 0x0, 0x0, 0xa5, 0xad, 0x9, 0xa9, 0x4, 0x0, 0x0, 0x4000000040000003}, {0x8, 0x4005, 0x0, 0x0, 0x41, 0x20, 0x0, 0x0, 0x86, 0xff, 0x0, 0x2, 0x6}, {0x401, 0x9, 0x0, 0xfd, 0x0, 0xfb, 0xb3, 0x0, 0x3, 0xfe, 0x80, 0xf6, 0x7}], 0x9}) ioctl$KVM_RUN(r3, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000180)="66ba4300b006ee0f01c40f009b27000000b9800000c00f3235008000000f30b80e0000000f23d80f21f835800000a00f23f8c9b9490300000f60b932c00a000000328fe858b660002fb90d090000b800680000ba000000000f30", 0x5a}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 1.230299296s ago: executing program 4 (id=794): bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xe, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r3, 0xc004500a, &(0x7f0000000000)) ioctl$SNDCTL_DSP_SPEED(r3, 0xc0045002, &(0x7f00000001c0)) ioctl$SNDCTL_DSP_CHANNELS(r3, 0xc0045006, &(0x7f0000000040)=0xc) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x1002, 0x5, 0xfffa}, 0x3a, [0x8000, 0xc957, 0xf, 0x8, 0x80, 0x2, 0x3, 0x7f, 0x20000006, 0x4d, 0x6, 0x5f, 0x9, 0x5, 0xffff2d36, 0x4000004, 0x7, 0x3, 0x0, 0x5, 0x24, 0x1, 0x7, 0x3c5b, 0x1, 0x24, 0x6, 0x1, 0x5, 0xffffffff, 0xe661, 0x1, 0x7, 0x5, 0x8, 0x4c74, 0x80000000, 0x40000, 0x0, 0xfffffffd, 0x0, 0x80008071, 0x3, 0x17, 0x1, 0x407, 0x7ff, 0x3e, 0x8f, 0x4006, 0x6, 0x0, 0xff, 0x4, 0x8, 0x400, 0x80, 0x0, 0x5, 0x7, 0x8, 0x4, 0xfffffffe, 0x40], [0xb0f, 0xf0000000, 0x8200012f, 0x8004, 0x7, 0x6, 0x129432e6, 0xc8, 0xf9, 0xe, 0x9, 0x6c7, 0x9, 0xfffffffc, 0x3, 0x2, 0x7, 0x5, 0x2f, 0xe, 0x312, 0xd, 0xea4, 0xffffffff, 0x4, 0x7, 0x7fff, 0x5a7c, 0x80420, 0x401, 0x6, 0x0, 0xff, 0x1, 0x1000005, 0x5f31, 0xd, 0x4e0, 0x2, 0x4, 0xb, 0x4, 0x9, 0x8, 0x9, 0x9, 0x47, 0x8000, 0x1, 0x2, 0xffff, 0xfffffffe, 0x7, 0x9, 0x5, 0x3, 0x0, 0x1, 0x3, 0x6c0, 0xbc45, 0x48c93690, 0x42, 0x3], [0x40007, 0x408, 0x8004, 0x5, 0xfffffffe, 0x100, 0x8d2, 0xb, 0x0, 0x7fff, 0x0, 0x5, 0xf, 0x7, 0x9, 0x6, 0x0, 0x1ef, 0x5, 0x8, 0x10000, 0xffffffff, 0x5, 0x3e7, 0xb, 0x5, 0x8002, 0x2, 0x3, 0x20000008, 0x4, 0x6d01, 0x6, 0x1, 0xff, 0x203, 0x80, 0x3, 0x4, 0x3, 0xffe, 0xa2, 0x7, 0xa9, 0x5, 0x9, 0xac8, 0xbf, 0x2, 0x3, 0xc, 0x12b, 0x4, 0x1, 0x0, 0x0, 0x5, 0x1c, 0x120000, 0x3, 0x1ff, 0x80a2ed, 0x4, 0x25], [0x9, 0xbb33, 0x7, 0x7, 0x200005, 0x938, 0x6, 0x6, 0x0, 0xb9, 0xce7, 0x9, 0x2, 0x57, 0x5, 0x3, 0x101, 0x10000, 0x4, 0x7fff, 0x26, 0x2000a620, 0x2, 0x5, 0x1, 0x2, 0x5, 0xe7, 0x6, 0x16, 0xffffffff, 0x80000003, 0x5, 0x4, 0xc8, 0x9, 0xfffff000, 0x10000, 0x3, 0x7a, 0x3abd, 0x9602, 0x7, 0xaf, 0x8, 0x6, 0x223, 0x5, 0x5, 0x8, 0x30b1d693, 0xa1f, 0xf40, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1e, 0xd7, 0x200, 0xffff3441, 0xfff]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) 1.187760547s ago: executing program 3 (id=795): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="120100001517ee40f00a057a0200010203010902120001000000400904000000ff"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000440)={0x44, &(0x7f0000000200)=ANY=[@ANYBLOB="00001100000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(0xffffffffffffffff, 0xc06864ce, 0x0) r1 = epoll_create1(0x0) r2 = epoll_create1(0x0) r3 = fcntl$dupfd(r2, 0x0, r1) r4 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r2, &(0x7f0000000080)) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r1, 0x0) r5 = socket(0x1e, 0x1, 0x0) connect$tipc(r5, &(0x7f0000000040)=@id, 0x10) recvmmsg(r5, &(0x7f0000001240)=[{{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000200)=""/2, 0x2}], 0x1, &(0x7f0000000e40)=""/120, 0x78}}, {{0x0, 0x0, &(0x7f0000000080)=[{0x0}], 0x1}}], 0x2, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f0000000100)={0x1}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="120100001517ee40f00a057a0000010203010902688711870000000904000000ff054900"], 0x0) 1.028204635s ago: executing program 2 (id=796): r0 = openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x80882, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000001a40)={{0x1, 0x1, 0x18, r0, {0x2}}, './file0\x00'}) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000011008108090f9becdb4cb92e264831371900000069bd6efb2502eaf60d002700020400bf050005001201", 0x2e}], 0x1}, 0x0) r2 = fsopen(&(0x7f0000000380)='hugetlbfs\x00', 0x1) renameat(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200), 0x60281, 0x0) readv(r3, &(0x7f0000001d00)=[{&(0x7f0000001a80)=""/252, 0xfc}, {&(0x7f0000001b80)=""/180, 0xb4}], 0x2) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r5 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r5, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r6 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)={0x14, 0x2b, 0x1, 0x0, 0x25dfdbff, "", [@nested={0x4}]}, 0x14}], 0x1}, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000000)=0x15) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) close_range(r4, 0xffffffffffffffff, 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000240)='uid', &(0x7f00000008c0)='0\x00#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xea\\Eb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xb8\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80=\x8a\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\x1f\x03\x00\x00\x00\x00\x00\x00\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9ak\x00\x00\x00\x00\x00\x00\x00\n\xa72\xa3\xef^\xe7\x8f', 0x0) syz_open_dev$radio(&(0x7f00000003c0), 0x1, 0x2) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000540)={&(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ff5000/0xa000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fed000/0x13000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f00000000c0)="7381350d4e3756710cbde81f5117df0e81be0095738eb1278148d779a01fcd8b33fe09a9fdaef94f651358050042c8a4337eca94cfe1f5c4709f002b8d2b36b5a78db3ddc93889d94df27f7977a8da6698e8732a4f6f52dcf64e50208be157135cacbeba9aa6f708ca70f9db94758f456dac741090a2d58d6797f0e0844f7517e3f80788ea507a216101392b17128b9250ea02d65f1dd44a0eb955c307e7ecaca4b5b98bcbf5f238d9494f45f37ba21463a411d634d997bed284b46d4c5e8bd151b5c7f2f4c73ac4000b851caae87ac474426211b74e316da3e9345e8587bf3fe2ff0ace2e617496d64eb156060aebeff456cf9f3e65cb1e", 0xf8}, 0x68) r7 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r7, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x10) sendmsg$nl_route(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x4008}, 0x0) socket$isdn_base(0x22, 0x3, 0x0) 946.680946ms ago: executing program 0 (id=797): r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000240)=@bpf_lsm={0x18, 0x7, &(0x7f0000000180)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0x4}, @exit, @initr0, @exit, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffc}, @exit], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x78) close(r0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) mount(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000000)='debugfs\x00', 0x200000, 0x0) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r1, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r1, 0x84, 0x17, &(0x7f0000000080)=ANY=[@ANYRES32=0x0, @ANYBLOB="05000110fd"], 0x9) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r1, 0x84, 0x23, &(0x7f0000000340)={0x0, 0x5}, 0x8) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r1, 0x84, 0x17, &(0x7f0000000600)=ANY=[], 0x61) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r1, 0x84, 0x18, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) memfd_secret(0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r3, 0x84, 0x80, &(0x7f0000000280)="1a00000002000000", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback}], 0x1c) sendto$inet6(r3, 0x0, 0x0, 0x2000c851, &(0x7f0000000140)={0xa, 0x4e23, 0x8000000, @loopback, 0xffffffff}, 0x1c) r4 = socket$inet6(0xa, 0xa, 0x0) bind$inet6(r4, &(0x7f0000f67fe4)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', 0x0, 0x0, 0x0) chdir(&(0x7f00000003c0)='./bus\x00') bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) 789.494925ms ago: executing program 1 (id=798): pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) unlink(0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, 0x0, 0x0) r2 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r2, 0x3000) fallocate(r2, 0x0, 0x0, 0x1000f4) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000440)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cipher_null\x00'}, 0x58) r4 = accept$alg(r3, 0x0, 0x0) r5 = dup(r4) write$FUSE_INIT(r5, &(0x7f0000000080)={0x4f}, 0xfffffdef) setsockopt(r5, 0x1, 0x20, &(0x7f0000000040)="c04bfa0a", 0x4) read$FUSE(r5, &(0x7f0000002000)={0x2020}, 0xfffffc7c) close_range(r0, 0xffffffffffffffff, 0x0) 789.253371ms ago: executing program 2 (id=799): socket$inet_smc(0x2b, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$phonet_pipe(0x23, 0x5, 0x2) socket(0x10, 0x3, 0x0) connect$phonet_pipe(r3, &(0x7f0000000000)={0x23, 0x0, 0x7}, 0x10) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r4, 0xffffffffffffffff, 0x0) 0s ago: executing program 4 (id=800): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0}, 0x18) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, 0x0) r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r0, 0x0, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000002000)=""/102400, 0x19000) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000240)='numa_maps\x00') read$FUSE(r2, 0x0, 0x0) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000080)={0x0, 0x0}) socket$netlink(0x10, 0x3, 0x0) setsockopt$sock_attach_bpf(r3, 0x10f, 0x87, &(0x7f0000000180), 0x4bd) socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) r4 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_WAIT_VBLANK(r4, 0xc018643a, &(0x7f00000000c0)={0x4000001, 0x71, 0x200000009}) pread64(r4, 0x0, 0x20, 0xce2) syz_usb_connect(0x0, 0x24, 0x0, 0x0) syz_open_procfs$namespace(0x0, 0x0) timerfd_create(0x0, 0x80000) stat(&(0x7f0000000140)='./file0\x00', 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.165' (ED25519) to the list of known hosts. [ 96.262086][ T5803] cgroup: Unknown subsys name 'net' [ 96.422269][ T5803] cgroup: Unknown subsys name 'cpuset' [ 96.434675][ T5803] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 98.443129][ T5803] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 101.252338][ T5817] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 101.252338][ T5825] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 101.270704][ T5824] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 101.273399][ T5825] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 101.286568][ T5824] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 101.286656][ T5817] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 101.288239][ T5825] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 101.303428][ T5825] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 101.317258][ T5824] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 101.318415][ T5825] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 101.334451][ T5824] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 101.347877][ T5825] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 101.360450][ T5820] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 101.376419][ T5820] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 101.396842][ T5820] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 101.407972][ T5820] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 101.417457][ T5127] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 101.427799][ T5820] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 101.437929][ T5127] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 101.457069][ T5820] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 101.478323][ T5820] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 101.495845][ T5820] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 101.505700][ T5820] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 101.522536][ T5820] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 101.531378][ T5820] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 102.055544][ T5813] chnl_net:caif_netlink_parms(): no params data found [ 102.236441][ T5815] chnl_net:caif_netlink_parms(): no params data found [ 102.429504][ T5827] chnl_net:caif_netlink_parms(): no params data found [ 102.531081][ T5821] chnl_net:caif_netlink_parms(): no params data found [ 102.595305][ T5813] bridge0: port 1(bridge_slave_0) entered blocking state [ 102.604231][ T5813] bridge0: port 1(bridge_slave_0) entered disabled state [ 102.616410][ T5813] bridge_slave_0: entered allmulticast mode [ 102.625942][ T5813] bridge_slave_0: entered promiscuous mode [ 102.675964][ T5828] chnl_net:caif_netlink_parms(): no params data found [ 102.695321][ T5813] bridge0: port 2(bridge_slave_1) entered blocking state [ 102.710663][ T5813] bridge0: port 2(bridge_slave_1) entered disabled state [ 102.720205][ T5813] bridge_slave_1: entered allmulticast mode [ 102.729388][ T5813] bridge_slave_1: entered promiscuous mode [ 102.764005][ T5815] bridge0: port 1(bridge_slave_0) entered blocking state [ 102.774185][ T5815] bridge0: port 1(bridge_slave_0) entered disabled state [ 102.783771][ T5815] bridge_slave_0: entered allmulticast mode [ 102.789915][ T976] cfg80211: failed to load regulatory.db [ 102.801462][ T5815] bridge_slave_0: entered promiscuous mode [ 102.886941][ T5815] bridge0: port 2(bridge_slave_1) entered blocking state [ 102.896257][ T5815] bridge0: port 2(bridge_slave_1) entered disabled state [ 102.905399][ T5815] bridge_slave_1: entered allmulticast mode [ 102.913985][ T5815] bridge_slave_1: entered promiscuous mode [ 102.941623][ T5813] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 103.005360][ T5813] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 103.125736][ T5815] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 103.178347][ T5813] team0: Port device team_slave_0 added [ 103.186045][ T5827] bridge0: port 1(bridge_slave_0) entered blocking state [ 103.200673][ T5827] bridge0: port 1(bridge_slave_0) entered disabled state [ 103.211086][ T5827] bridge_slave_0: entered allmulticast mode [ 103.221512][ T5827] bridge_slave_0: entered promiscuous mode [ 103.232214][ T5827] bridge0: port 2(bridge_slave_1) entered blocking state [ 103.245741][ T5827] bridge0: port 2(bridge_slave_1) entered disabled state [ 103.254409][ T5827] bridge_slave_1: entered allmulticast mode [ 103.265337][ T5827] bridge_slave_1: entered promiscuous mode [ 103.274356][ T5821] bridge0: port 1(bridge_slave_0) entered blocking state [ 103.284415][ T5821] bridge0: port 1(bridge_slave_0) entered disabled state [ 103.294579][ T5821] bridge_slave_0: entered allmulticast mode [ 103.303260][ T5821] bridge_slave_0: entered promiscuous mode [ 103.315687][ T5815] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 103.363266][ T5813] team0: Port device team_slave_1 added [ 103.386109][ T5821] bridge0: port 2(bridge_slave_1) entered blocking state [ 103.395665][ T5821] bridge0: port 2(bridge_slave_1) entered disabled state [ 103.407808][ T5821] bridge_slave_1: entered allmulticast mode [ 103.415395][ T5821] bridge_slave_1: entered promiscuous mode [ 103.427983][ T5127] Bluetooth: hci0: command tx timeout [ 103.427988][ T5820] Bluetooth: hci2: command tx timeout [ 103.463271][ T5828] bridge0: port 1(bridge_slave_0) entered blocking state [ 103.471372][ T5828] bridge0: port 1(bridge_slave_0) entered disabled state [ 103.480893][ T5828] bridge_slave_0: entered allmulticast mode [ 103.489454][ T5828] bridge_slave_0: entered promiscuous mode [ 103.499922][ T5828] bridge0: port 2(bridge_slave_1) entered blocking state [ 103.511825][ T5127] Bluetooth: hci1: command tx timeout [ 103.511923][ T5828] bridge0: port 2(bridge_slave_1) entered disabled state [ 103.519794][ T5820] Bluetooth: hci4: command tx timeout [ 103.528631][ T5828] bridge_slave_1: entered allmulticast mode [ 103.542629][ T5828] bridge_slave_1: entered promiscuous mode [ 103.587409][ T5820] Bluetooth: hci3: command tx timeout [ 103.599501][ T5815] team0: Port device team_slave_0 added [ 103.611773][ T5815] team0: Port device team_slave_1 added [ 103.649959][ T5827] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 103.664696][ T5821] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 103.708541][ T5828] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 103.727876][ T5813] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 103.737148][ T5813] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 103.775336][ T5813] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 103.797390][ T5827] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 103.812956][ T5821] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 103.842954][ T5828] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 103.858357][ T5813] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 103.866356][ T5813] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 103.898970][ T5813] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 103.944718][ T5815] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 103.954287][ T5815] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 103.987794][ T5815] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 104.001561][ T5815] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 104.011353][ T5815] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 104.041628][ T5815] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 104.143598][ T5828] team0: Port device team_slave_0 added [ 104.169071][ T5827] team0: Port device team_slave_0 added [ 104.180556][ T5821] team0: Port device team_slave_0 added [ 104.221611][ T5828] team0: Port device team_slave_1 added [ 104.247375][ T5827] team0: Port device team_slave_1 added [ 104.256631][ T5821] team0: Port device team_slave_1 added [ 104.271390][ T5815] hsr_slave_0: entered promiscuous mode [ 104.279432][ T5815] hsr_slave_1: entered promiscuous mode [ 104.306124][ T5813] hsr_slave_0: entered promiscuous mode [ 104.313273][ T5813] hsr_slave_1: entered promiscuous mode [ 104.320773][ T5813] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 104.329888][ T5813] Cannot create hsr debugfs directory [ 104.399469][ T5828] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 104.408692][ T5828] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 104.439773][ T5828] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 104.481154][ T5821] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 104.488896][ T5821] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 104.520101][ T5821] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 104.535814][ T5821] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 104.544204][ T5821] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 104.574940][ T5821] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 104.589698][ T5828] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 104.600726][ T5828] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 104.630300][ T5828] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 104.642926][ T5827] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 104.651251][ T5827] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 104.681129][ T5827] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 104.740883][ T5827] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 104.748659][ T5827] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 104.778861][ T5827] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 104.948310][ T5821] hsr_slave_0: entered promiscuous mode [ 104.955048][ T5821] hsr_slave_1: entered promiscuous mode [ 104.963250][ T5821] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 104.972068][ T5821] Cannot create hsr debugfs directory [ 104.999906][ T5827] hsr_slave_0: entered promiscuous mode [ 105.006608][ T5827] hsr_slave_1: entered promiscuous mode [ 105.013892][ T5827] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 105.023646][ T5827] Cannot create hsr debugfs directory [ 105.094066][ T5828] hsr_slave_0: entered promiscuous mode [ 105.101729][ T5828] hsr_slave_1: entered promiscuous mode [ 105.109597][ T5828] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 105.118132][ T5828] Cannot create hsr debugfs directory [ 105.508011][ T5127] Bluetooth: hci0: command tx timeout [ 105.513943][ T5820] Bluetooth: hci2: command tx timeout [ 105.587527][ T5127] Bluetooth: hci1: command tx timeout [ 105.593871][ T5820] Bluetooth: hci4: command tx timeout [ 105.640980][ T5815] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 105.659040][ T5815] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 105.674303][ T5815] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 105.676948][ T5820] Bluetooth: hci3: command tx timeout [ 105.693962][ T5815] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 105.769346][ T5813] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 105.786017][ T5813] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 105.801283][ T5813] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 105.815763][ T5813] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 105.934904][ T5827] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 105.951454][ T5827] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 105.965737][ T5827] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 105.981450][ T5827] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 106.130395][ T5821] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 106.143381][ T5821] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 106.202597][ T5821] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 106.215577][ T5821] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 106.258215][ T5815] 8021q: adding VLAN 0 to HW filter on device bond0 [ 106.298463][ T5813] 8021q: adding VLAN 0 to HW filter on device bond0 [ 106.320539][ T5828] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 106.337989][ T5828] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 106.353420][ T5828] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 106.395889][ T5815] 8021q: adding VLAN 0 to HW filter on device team0 [ 106.405731][ T5828] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 106.455471][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 106.463539][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 106.493258][ T5813] 8021q: adding VLAN 0 to HW filter on device team0 [ 106.518809][ T66] bridge0: port 2(bridge_slave_1) entered blocking state [ 106.527249][ T66] bridge0: port 2(bridge_slave_1) entered forwarding state [ 106.566211][ T66] bridge0: port 1(bridge_slave_0) entered blocking state [ 106.573454][ T66] bridge0: port 1(bridge_slave_0) entered forwarding state [ 106.619868][ T5827] 8021q: adding VLAN 0 to HW filter on device bond0 [ 106.640172][ T66] bridge0: port 2(bridge_slave_1) entered blocking state [ 106.648059][ T66] bridge0: port 2(bridge_slave_1) entered forwarding state [ 106.711095][ T5827] 8021q: adding VLAN 0 to HW filter on device team0 [ 106.752011][ T1327] bridge0: port 1(bridge_slave_0) entered blocking state [ 106.760306][ T1327] bridge0: port 1(bridge_slave_0) entered forwarding state [ 106.792768][ T1327] bridge0: port 2(bridge_slave_1) entered blocking state [ 106.800724][ T1327] bridge0: port 2(bridge_slave_1) entered forwarding state [ 107.043246][ T5821] 8021q: adding VLAN 0 to HW filter on device bond0 [ 107.144875][ T5828] 8021q: adding VLAN 0 to HW filter on device bond0 [ 107.230424][ T5821] 8021q: adding VLAN 0 to HW filter on device team0 [ 107.251779][ T5828] 8021q: adding VLAN 0 to HW filter on device team0 [ 107.311512][ T5815] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 107.344127][ T53] bridge0: port 1(bridge_slave_0) entered blocking state [ 107.351588][ T53] bridge0: port 1(bridge_slave_0) entered forwarding state [ 107.371778][ T53] bridge0: port 1(bridge_slave_0) entered blocking state [ 107.379851][ T53] bridge0: port 1(bridge_slave_0) entered forwarding state [ 107.406573][ T66] bridge0: port 2(bridge_slave_1) entered blocking state [ 107.416408][ T66] bridge0: port 2(bridge_slave_1) entered forwarding state [ 107.434489][ T66] bridge0: port 2(bridge_slave_1) entered blocking state [ 107.443200][ T66] bridge0: port 2(bridge_slave_1) entered forwarding state [ 107.588538][ T5820] Bluetooth: hci2: command tx timeout [ 107.602594][ T5127] Bluetooth: hci0: command tx timeout [ 107.611860][ T5827] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 107.634450][ T5813] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 107.667100][ T5127] Bluetooth: hci1: command tx timeout [ 107.672890][ T5820] Bluetooth: hci4: command tx timeout [ 107.760492][ T5820] Bluetooth: hci3: command tx timeout [ 107.783309][ T5815] veth0_vlan: entered promiscuous mode [ 107.915472][ T5815] veth1_vlan: entered promiscuous mode [ 107.972212][ T5813] veth0_vlan: entered promiscuous mode [ 108.042597][ T5813] veth1_vlan: entered promiscuous mode [ 108.112361][ T5815] veth0_macvtap: entered promiscuous mode [ 108.169524][ T5815] veth1_macvtap: entered promiscuous mode [ 108.202256][ T5813] veth0_macvtap: entered promiscuous mode [ 108.270034][ T5813] veth1_macvtap: entered promiscuous mode [ 108.315904][ T5828] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 108.336237][ T5815] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 108.358500][ T5815] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 108.385213][ T5821] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 108.411760][ T5815] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.426221][ T5815] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.442784][ T5815] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.454936][ T5815] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.490681][ T5813] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 108.502218][ T5813] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 108.520864][ T5813] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 108.542581][ T5813] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 108.555916][ T5813] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 108.569549][ T5813] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 108.585518][ T5827] veth0_vlan: entered promiscuous mode [ 108.642965][ T5813] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.652903][ T5813] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.668664][ T5813] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.679707][ T5813] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.719723][ T5827] veth1_vlan: entered promiscuous mode [ 108.756185][ T5828] veth0_vlan: entered promiscuous mode [ 108.785399][ T5828] veth1_vlan: entered promiscuous mode [ 108.860215][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 108.872823][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 108.918670][ T5821] veth0_vlan: entered promiscuous mode [ 108.995874][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 108.996739][ T5827] veth0_macvtap: entered promiscuous mode [ 109.023916][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 109.046152][ T5821] veth1_vlan: entered promiscuous mode [ 109.068824][ T5827] veth1_macvtap: entered promiscuous mode [ 109.083940][ T2998] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 109.094060][ T2998] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 109.105296][ T5828] veth0_macvtap: entered promiscuous mode [ 109.199842][ T5828] veth1_macvtap: entered promiscuous mode [ 109.208610][ T5815] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 109.225397][ T5828] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 109.242423][ T5828] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 109.252871][ T5828] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 109.264584][ T5828] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 109.278971][ T5828] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 109.307757][ T5827] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 109.338025][ T5827] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 109.350251][ T5827] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 109.361562][ T5827] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 109.371909][ T5827] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 109.383442][ T5827] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 109.398652][ T5827] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 109.415839][ T5828] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 109.430788][ T5828] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 109.442431][ T5828] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 109.456599][ T5828] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 109.475984][ T5828] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 109.494213][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 109.521111][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 109.553086][ T5827] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 109.593628][ T5827] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 109.606100][ T5827] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 109.617810][ T5827] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 109.631780][ T5827] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 109.644205][ T5827] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 109.665187][ T5827] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 109.674384][ T5820] Bluetooth: hci2: command tx timeout [ 109.680914][ T5127] Bluetooth: hci0: command tx timeout [ 109.689026][ T5828] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.699197][ T5828] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.709285][ T5828] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.719706][ T5828] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.747149][ T5820] Bluetooth: hci1: command tx timeout [ 109.748489][ T5827] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.753934][ T5127] Bluetooth: hci4: command tx timeout [ 109.772336][ T5827] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.783325][ T5827] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.795873][ T5827] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.831786][ T5821] veth0_macvtap: entered promiscuous mode [ 109.838178][ T5127] Bluetooth: hci3: command tx timeout [ 109.930292][ T5821] veth1_macvtap: entered promiscuous mode [ 110.066509][ T5821] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 110.088933][ T5821] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 110.104380][ T5821] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 110.118766][ T5821] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 110.129240][ T5821] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 110.140263][ T5821] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 110.154780][ T5821] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 110.167910][ T5821] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 110.181624][ T5821] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 110.227227][ T5902] netlink: 244 bytes leftover after parsing attributes in process `syz.0.1'. [ 110.241245][ T5821] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 110.263868][ T66] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 110.280357][ T5821] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 110.291270][ T66] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 110.301555][ T5821] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 110.312666][ T5821] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 110.323672][ T5821] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 110.344295][ T5821] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 110.361402][ T5821] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 110.374250][ T5821] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 110.403012][ T5821] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 110.519846][ T5821] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.540403][ T5821] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.550713][ T5821] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.561976][ T5821] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.694250][ T2998] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 110.718846][ T2998] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 110.749688][ T150] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 110.796205][ T150] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 110.887668][ T150] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 110.906359][ T150] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 110.957787][ T2998] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 110.965938][ T2998] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 111.090685][ T5925] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 111.126391][ T66] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 111.140670][ T66] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 111.467842][ T5933] syz.1.2 uses obsolete (PF_INET,SOCK_PACKET) [ 111.508401][ T5866] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 111.696092][ T5866] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 111.725428][ T5866] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 111.759395][ T5866] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 111.816768][ T5866] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 111.840624][ T5866] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 111.859358][ T5866] usb 3-1: Product: syz [ 111.864001][ T5866] usb 3-1: Manufacturer: syz [ 111.872761][ T5866] usb 3-1: SerialNumber: syz [ 112.125282][ T5866] usblp 3-1:1.0: usblp0: USB Unidirectional printer dev 2 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 112.336952][ T5897] usb 3-1: USB disconnect, device number 2 [ 112.446556][ T5897] usblp0: removed [ 113.763584][ T5969] netem: incorrect gi model size [ 113.814722][ T5969] netem: change failed [ 113.979565][ T5973] Zero length message leads to an empty skb [ 115.706437][ T6012] netlink: 8 bytes leftover after parsing attributes in process `syz.1.39'. [ 115.716217][ T6004] kvm: pic: non byte read [ 115.722838][ T6004] kvm: pic: level sensitive irq not supported [ 115.722981][ T6004] kvm: pic: non byte read [ 115.740838][ T6004] kvm: pic: level sensitive irq not supported [ 115.740912][ T6004] kvm: pic: non byte read [ 115.779419][ T6004] kvm: pic: level sensitive irq not supported [ 115.779493][ T6004] kvm: pic: non byte read [ 117.897299][ T6048] nbd: device at index 1 is going down [ 118.060981][ T10] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 118.286776][ T10] usb 5-1: Using ep0 maxpacket: 8 [ 118.307967][ T6061] netlink: 4 bytes leftover after parsing attributes in process `syz.3.54'. [ 118.338071][ T10] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 118.382329][ T6061] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 118.400911][ T10] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 118.421924][ T6061] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 118.448138][ T10] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 118.502271][ T10] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 118.588666][ T6061] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 118.609110][ T10] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 118.838212][ T6061] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 118.915204][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 119.400738][ T10] usb 5-1: usb_control_msg returned -32 [ 119.445024][ T10] usbtmc 5-1:16.0: can't read capabilities [ 119.451623][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 119.570750][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 119.673090][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 119.775667][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 119.849166][ T10] usb 5-1: USB disconnect, device number 2 [ 119.878080][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 119.980423][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 120.082806][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 120.485458][ T6082] netlink: 'syz.2.59': attribute type 39 has an invalid length. [ 120.562083][ T6088] netlink: 'syz.3.60': attribute type 39 has an invalid length. [ 120.717895][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 120.799922][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 121.004964][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 121.768098][ T6099] nbd: device at index 0 is going down [ 125.956798][ T5897] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 126.356891][ T5866] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 126.516748][ T5866] usb 1-1: Using ep0 maxpacket: 16 [ 126.526000][ T5866] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 126.565026][ T5866] usb 1-1: New USB device found, idVendor=05ac, idProduct=024b, bcdDevice= 0.00 [ 126.585496][ T5866] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 126.642764][ T6140] netlink: 96 bytes leftover after parsing attributes in process `syz.3.79'. [ 126.695091][ T5866] usb 1-1: config 0 descriptor?? [ 126.962936][ T6150] block nbd4: not configured, cannot reconfigure [ 127.573072][ T6123] netlink: 'syz.0.72': attribute type 32 has an invalid length. [ 127.639898][ T6154] netlink: 'syz.4.83': attribute type 1 has an invalid length. [ 127.880649][ T5866] apple 0003:05AC:024B.0001: item fetching failed at offset 2/69 [ 127.942125][ T5866] apple 0003:05AC:024B.0001: parse failed [ 127.942245][ T5866] apple 0003:05AC:024B.0001: probe with driver apple failed with error -22 [ 128.053656][ T5885] usb 1-1: USB disconnect, device number 2 [ 128.210617][ T6170] binder_alloc: 6169: binder_alloc_buf, no vma [ 129.901511][ T5127] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci0/hci0:201' [ 129.912006][ T5127] CPU: 1 UID: 0 PID: 5127 Comm: kworker/u9:1 Not tainted 6.15.0-rc5-syzkaller #0 PREEMPT(full) [ 129.912036][ T5127] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025 [ 129.912051][ T5127] Workqueue: hci0 hci_rx_work [ 129.912104][ T5127] Call Trace: [ 129.912115][ T5127] [ 129.912128][ T5127] dump_stack_lvl+0x189/0x250 [ 129.912164][ T5127] ? __pfx_dump_stack_lvl+0x10/0x10 [ 129.912191][ T5127] ? __pfx__printk+0x10/0x10 [ 129.912225][ T5127] ? kernfs_path_from_node+0x2b/0x260 [ 129.912245][ T5127] ? kernfs_path_from_node+0x2b/0x260 [ 129.912262][ T5127] ? kernfs_path_from_node+0x2b/0x260 [ 129.912284][ T5127] ? kernfs_path_from_node+0x216/0x260 [ 129.912307][ T5127] sysfs_create_dir_ns+0x259/0x280 [ 129.912341][ T5127] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 129.912375][ T5127] ? do_raw_spin_unlock+0x122/0x240 [ 129.912401][ T5127] kobject_add_internal+0x59f/0xb40 [ 129.912438][ T5127] kobject_add+0x155/0x220 [ 129.912469][ T5127] ? __pfx_kobject_add+0x10/0x10 [ 129.912495][ T5127] ? _raw_spin_unlock+0x28/0x50 [ 129.912518][ T5127] ? get_device_parent+0x366/0x3a0 [ 129.912546][ T5127] device_add+0x408/0xb50 [ 129.912607][ T5127] hci_conn_add_sysfs+0xd5/0x1e0 [ 129.912634][ T5127] le_conn_complete_evt+0xc3a/0x1220 [ 129.912678][ T5127] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 129.912710][ T5127] ? __mutex_unlock_slowpath+0x1cd/0x700 [ 129.912731][ T5127] ? __asan_memcpy+0x40/0x70 [ 129.912757][ T5127] ? __pfx___mutex_lock+0x10/0x10 [ 129.912780][ T5127] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 129.912801][ T5127] ? skb_pull_data+0xfb/0x200 [ 129.912836][ T5127] hci_le_conn_complete_evt+0x187/0x450 [ 129.912876][ T5127] hci_event_packet+0x7a2/0x1270 [ 129.912908][ T5127] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 129.912938][ T5127] ? __pfx_hci_event_packet+0x10/0x10 [ 129.912965][ T5127] ? kcov_remote_start+0x4d3/0x7f0 [ 129.912988][ T5127] ? lockdep_hardirqs_on+0x20/0x150 [ 129.913013][ T5127] ? hci_send_to_monitor+0xd7/0x4f0 [ 129.913049][ T5127] hci_rx_work+0x46a/0xe80 [ 129.913083][ T5127] ? process_scheduled_works+0x9ec/0x17a0 [ 129.913114][ T5127] process_scheduled_works+0xadb/0x17a0 [ 129.913173][ T5127] ? __pfx_process_scheduled_works+0x10/0x10 [ 129.913219][ T5127] worker_thread+0x8a0/0xda0 [ 129.913250][ T5127] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 129.913279][ T5127] ? __kthread_parkme+0x7b/0x200 [ 129.913309][ T5127] kthread+0x70e/0x8a0 [ 129.913335][ T5127] ? __pfx_worker_thread+0x10/0x10 [ 129.913365][ T5127] ? __pfx_kthread+0x10/0x10 [ 129.913388][ T5127] ? __pfx_kthread+0x10/0x10 [ 129.913408][ T5127] ? _raw_spin_unlock_irq+0x23/0x50 [ 129.913427][ T5127] ? lockdep_hardirqs_on+0x9c/0x150 [ 129.913449][ T5127] ? __pfx_kthread+0x10/0x10 [ 129.913470][ T5127] ret_from_fork+0x4b/0x80 [ 129.913488][ T5127] ? __pfx_kthread+0x10/0x10 [ 129.913509][ T5127] ret_from_fork_asm+0x1a/0x30 [ 129.913557][ T5127] [ 129.915362][ T5127] kobject: kobject_add_internal failed for hci0:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 130.074394][ T6193] netlink: 156 bytes leftover after parsing attributes in process `syz.3.96'. [ 130.076811][ T5127] Bluetooth: hci0: failed to register connection device [ 130.185343][ T30] audit: type=1326 audit(1746453377.074:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6198 comm="syz.0.97" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd8638e969 code=0x7ffc0000 [ 130.287584][ T6196] netlink: 20 bytes leftover after parsing attributes in process `syz.3.96'. [ 130.334907][ T30] audit: type=1326 audit(1746453377.074:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6198 comm="syz.0.97" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd8638e969 code=0x7ffc0000 [ 130.360321][ T30] audit: type=1326 audit(1746453377.094:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6198 comm="syz.0.97" exe="/root/syz-executor" sig=0 arch=c000003e syscall=293 compat=0 ip=0x7fbd8638e969 code=0x7ffc0000 [ 130.383654][ T30] audit: type=1326 audit(1746453377.104:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6198 comm="syz.0.97" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd8638e969 code=0x7ffc0000 [ 130.434086][ T30] audit: type=1326 audit(1746453377.104:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6198 comm="syz.0.97" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd8638e969 code=0x7ffc0000 [ 130.492395][ T30] audit: type=1326 audit(1746453377.114:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6198 comm="syz.0.97" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7fbd8638e969 code=0x7ffc0000 [ 130.524796][ T30] audit: type=1326 audit(1746453377.114:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6198 comm="syz.0.97" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd8638e969 code=0x7ffc0000 [ 130.548888][ T30] audit: type=1326 audit(1746453377.114:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6198 comm="syz.0.97" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd8638e969 code=0x7ffc0000 [ 130.571291][ T30] audit: type=1326 audit(1746453377.114:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6198 comm="syz.0.97" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7fbd8638e969 code=0x7ffc0000 [ 130.596595][ T30] audit: type=1326 audit(1746453377.114:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6198 comm="syz.0.97" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd8638e969 code=0x7ffc0000 [ 130.652759][ T6209] ref_ctr going negative. vaddr: 0x200000ffc018, curr val: -17644, delta: 1 [ 130.667768][ T6209] ref_ctr increment failed for inode: 0x9e offset: 0x2 ref_ctr_offset: 0x18 of mm: 0xffff888029814600 [ 130.703814][ T6209] ref_ctr going negative. vaddr: 0x200000ffc002, curr val: 0, delta: -1 [ 130.714537][ T6209] ref_ctr decrement failed for inode: 0x9e offset: 0x7 ref_ctr_offset: 0x2 of mm: 0xffff888029814600 [ 130.728591][ T6209] uprobe: syz.2.100:6209 failed to unregister, leaking uprobe [ 131.918997][ T6228] netlink: 12 bytes leftover after parsing attributes in process `syz.3.106'. [ 133.150725][ T6238] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 133.166331][ T6243] loop6: detected capacity change from 0 to 524287999 [ 133.183296][ T5897] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 133.369000][ T5897] usb 4-1: config 0 has no interfaces? [ 133.385395][ T5897] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 133.402649][ T5897] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 133.435628][ T6245] syz.4.107: vmalloc error: size 16777216, failed to allocated page array size 32768, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 133.438152][ T5897] usb 4-1: config 0 descriptor?? [ 133.462425][ T6245] CPU: 0 UID: 0 PID: 6245 Comm: syz.4.107 Not tainted 6.15.0-rc5-syzkaller #0 PREEMPT(full) [ 133.462454][ T6245] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025 [ 133.462466][ T6245] Call Trace: [ 133.462474][ T6245] [ 133.462482][ T6245] dump_stack_lvl+0x189/0x250 [ 133.462515][ T6245] ? __pfx_rcu_read_unlock_special+0x10/0x10 [ 133.462541][ T6245] ? __pfx_dump_stack_lvl+0x10/0x10 [ 133.462570][ T6245] ? __pfx__printk+0x10/0x10 [ 133.462602][ T6245] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 133.462634][ T6245] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 133.462674][ T6245] warn_alloc+0x214/0x310 [ 133.462702][ T6245] ? __pfx_warn_alloc+0x10/0x10 [ 133.462733][ T6245] ? __get_vm_area_node+0x1c5/0x2d0 [ 133.462763][ T6245] ? __get_vm_area_node+0x25a/0x2d0 [ 133.462802][ T6245] __vmalloc_node_range_noprof+0x5f2/0x12c0 [ 133.462825][ T6245] ? __asan_memset+0x22/0x50 [ 133.462876][ T6245] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 133.462896][ T6245] ? __kasan_kmalloc_large+0x1a/0xa0 [ 133.462929][ T6245] ? rcu_is_watching+0x15/0xb0 [ 133.462958][ T6245] ? xp_create_and_assign_umem+0x184/0xce0 [ 133.462984][ T6245] ? xp_create_and_assign_umem+0x184/0xce0 [ 133.463007][ T6245] __kvmalloc_node_noprof+0x3a0/0x5e0 [ 133.463039][ T6245] ? xp_create_and_assign_umem+0x184/0xce0 [ 133.463072][ T6245] ? xp_create_and_assign_umem+0xa4/0xce0 [ 133.463102][ T6245] xp_create_and_assign_umem+0x184/0xce0 [ 133.463150][ T6245] ? dev_get_by_index+0x22/0x2e0 [ 133.463178][ T6245] ? dev_get_by_index+0x22/0x2e0 [ 133.463215][ T6245] xsk_bind+0x428/0xfe0 [ 133.463243][ T6245] __sys_bind+0x2c3/0x3e0 [ 133.463267][ T6245] ? __pfx___sys_bind+0x10/0x10 [ 133.463312][ T6245] __x64_sys_bind+0x7a/0x90 [ 133.463334][ T6245] do_syscall_64+0xf6/0x210 [ 133.463358][ T6245] ? clear_bhb_loop+0x45/0xa0 [ 133.463381][ T6245] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 133.463397][ T6245] RIP: 0033:0x7f98acf8e969 [ 133.463430][ T6245] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 133.463444][ T6245] RSP: 002b:00007f98aadd5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000031 [ 133.463463][ T6245] RAX: ffffffffffffffda RBX: 00007f98ad1b6080 RCX: 00007f98acf8e969 [ 133.463476][ T6245] RDX: 0000000000000010 RSI: 0000200000000100 RDI: 0000000000000003 [ 133.463487][ T6245] RBP: 00007f98ad010ab1 R08: 0000000000000000 R09: 0000000000000000 [ 133.463498][ T6245] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 133.463509][ T6245] R13: 0000000000000000 R14: 00007f98ad1b6080 R15: 00007ffe56835f18 [ 133.463539][ T6245] [ 133.463563][ T6245] Mem-Info: [ 133.771256][ T6245] active_anon:341 inactive_anon:5818 isolated_anon:0 [ 133.771256][ T6245] active_file:4240 inactive_file:35447 isolated_file:0 [ 133.771256][ T6245] unevictable:768 dirty:292 writeback:2 [ 133.771256][ T6245] slab_reclaimable:10058 slab_unreclaimable:97852 [ 133.771256][ T6245] mapped:28943 shmem:1430 pagetables:886 [ 133.771256][ T6245] sec_pagetables:0 bounce:0 [ 133.771256][ T6245] kernel_misc_reclaimable:0 [ 133.771256][ T6245] free:1343576 free_pcp:368 free_cma:0 [ 133.844226][ T6245] Node 0 active_anon:1364kB inactive_anon:23272kB active_file:16884kB inactive_file:141788kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:115772kB dirty:1168kB writeback:8kB shmem:4184kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:11008kB pagetables:3544kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 133.939057][ T6245] Node 1 active_anon:0kB inactive_anon:0kB active_file:76kB inactive_file:0kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 133.975501][ T978] usb 4-1: USB disconnect, device number 3 [ 133.977856][ T6245] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 134.044520][ T6245] lowmem_reserve[]: 0 2504 2504 2504 2504 [ 134.071906][ T6245] Node 0 DMA32 free:1448896kB boost:0kB min:34304kB low:42880kB high:51456kB reserved_highatomic:0KB active_anon:1360kB inactive_anon:23268kB active_file:16792kB inactive_file:141776kB unevictable:1536kB writepending:1176kB present:3129332kB managed:2564600kB mlocked:0kB bounce:0kB free_pcp:1444kB local_pcp:1444kB free_cma:0kB [ 134.120228][ T6245] lowmem_reserve[]: 0 0 0 0 0 [ 134.127477][ T6245] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB active_anon:4kB inactive_anon:4kB active_file:92kB inactive_file:12kB unevictable:0kB writepending:0kB present:1048580kB managed:112kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 134.178022][ T6245] lowmem_reserve[]: 0 0 0 0 0 [ 134.183184][ T6245] Node 1 Normal free:3911048kB boost:0kB min:55592kB low:69488kB high:83384kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:76kB inactive_file:0kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:4kB local_pcp:4kB free_cma:0kB [ 134.213140][ T6245] lowmem_reserve[]: 0 0 0 0 0 [ 134.221145][ T6245] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 134.235534][ T6245] Node 0 DMA32: 6*4kB (UME) 1*8kB (E) 36*16kB (UME) 57*32kB (UME) 54*64kB (UME) 33*128kB (UME) 24*256kB (UM) 13*512kB (UME) 5*1024kB (M) 5*2048kB (UME) 344*4096kB (UM) = 1447296kB [ 134.261762][ T6245] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 134.295119][ T6245] Node 1 Normal: 210*4kB (UE) 46*8kB (UME) 41*16kB (UME) 188*32kB (UME) 92*64kB (UME) 26*128kB (UME) 19*256kB (UME) 12*512kB (UME) 4*1024kB (UME) 4*2048kB (UE) 945*4096kB (M) = 3911112kB [ 134.334742][ T6245] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 134.345345][ T6245] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 134.356247][ T6245] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 134.366788][ T6245] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 134.377639][ T6245] 41110 total pagecache pages [ 134.382563][ T6245] 0 pages in swap cache [ 134.387070][ T6245] Free swap = 124996kB [ 134.405497][ T6245] Total swap = 124996kB [ 134.426200][ T6245] 2097051 pages RAM [ 134.430655][ T6245] 0 pages HighMem/MovableOnly [ 134.435817][ T6245] 424242 pages reserved [ 134.440484][ T6245] 0 pages cma reserved [ 134.924964][ T6279] binder: 6277:6279 ioctl c0306201 2000000003c0 returned -14 [ 135.078483][ T6283] netlink: 24 bytes leftover after parsing attributes in process `syz.0.124'. [ 135.126783][ T978] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 136.220305][ T978] usb 4-1: Using ep0 maxpacket: 16 [ 136.238060][ T5127] Bluetooth: hci0: command 0x0406 tx timeout [ 136.251709][ T978] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 136.600316][ T978] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 136.766814][ T978] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 136.788856][ T978] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 136.816773][ T978] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 136.865988][ T978] usb 4-1: Product: syz [ 136.871102][ T978] usb 4-1: Manufacturer: syz [ 136.880727][ T978] usb 4-1: SerialNumber: syz [ 137.345503][ T978] usb 4-1: 2:1 : format type 0 is detected, processed as PCM [ 137.575073][ T6320] nbd: must specify a device to reconfigure [ 138.449510][ T6330] netlink: 12 bytes leftover after parsing attributes in process `syz.0.135'. [ 138.471180][ T978] usb 4-1: 2:1: cannot get freq at ep 0x82 [ 138.757795][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 138.767855][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 139.195121][ T6326] sctp: failed to load transform for md5: -2 [ 139.564296][ T6339] netlink: 8 bytes leftover after parsing attributes in process `syz.1.139'. [ 139.918926][ T978] usb 4-1: USB disconnect, device number 4 [ 140.041981][ T5814] udevd[5814]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 140.077061][ T5820] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 140.088058][ T5820] Bluetooth: hci1: Injecting HCI hardware error event [ 140.098995][ T5820] Bluetooth: hci1: hardware error 0x00 [ 140.132117][ T6344] syzkaller0: entered promiscuous mode [ 140.195830][ T6344] syzkaller0: entered allmulticast mode [ 141.460695][ T6381] nbd: must specify a device to reconfigure [ 142.237181][ T5820] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 142.345755][ T6401] netlink: 24 bytes leftover after parsing attributes in process `syz.1.153'. [ 143.821377][ T6416] netlink: 'syz.0.159': attribute type 39 has an invalid length. [ 144.592519][ T6422] nbd: must specify a device to reconfigure [ 144.657548][ T5885] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 145.136827][ T5885] usb 5-1: Using ep0 maxpacket: 16 [ 145.146303][ T5885] usb 5-1: config 26 has an invalid descriptor of length 0, skipping remainder of the config [ 145.158827][ T5885] usb 5-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00 [ 145.168593][ T5885] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 145.194036][ T5885] input: bcm5974 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:26.0/input/input5 [ 145.339048][ T6426] capability: warning: `syz.2.160' uses deprecated v2 capabilities in a way that may be insecure [ 145.425123][ T6414] input: syz0 as /devices/virtual/input/input6 [ 145.752026][ T30] kauditd_printk_skb: 192 callbacks suppressed [ 145.752041][ T30] audit: type=1800 audit(1746453392.644:204): pid=6446 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.0.165" name="file1" dev="overlay" ino=212 res=0 errno=0 [ 146.849083][ T6473] netlink: 12 bytes leftover after parsing attributes in process `syz.3.175'. [ 146.874840][ T5172] bcm5974 5-1:26.0: could not read from device [ 146.910495][ T5172] bcm5974 5-1:26.0: could not read from device [ 146.937124][ T5885] usb 5-1: USB disconnect, device number 3 [ 146.954817][ T5172] bcm5974 5-1:26.0: could not read from device [ 150.439324][ T6530] netlink: 12 bytes leftover after parsing attributes in process `syz.1.192'. [ 150.648059][ T6540] netlink: 12 bytes leftover after parsing attributes in process `syz.2.195'. [ 152.936955][ T10] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 154.036812][ T10] usb 2-1: Using ep0 maxpacket: 8 [ 154.201360][ T10] usb 2-1: config 0 has an invalid interface number: 31 but max is 0 [ 154.246169][ T10] usb 2-1: config 0 has no interface number 0 [ 154.275041][ T10] usb 2-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 154.296498][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 154.314580][ T10] usb 2-1: Product: syz [ 154.320878][ T10] usb 2-1: Manufacturer: syz [ 154.325566][ T10] usb 2-1: SerialNumber: syz [ 154.353003][ T10] usb 2-1: config 0 descriptor?? [ 154.387244][ T6572] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 154.597189][ T10] usb 2-1: Found UVC 0.04 device syz (046d:08c3) [ 154.605783][ T10] usb 2-1: No valid video chain found. [ 154.984222][ T10] usb 2-1: USB disconnect, device number 2 [ 155.042307][ T6584] netlink: 12 bytes leftover after parsing attributes in process `syz.4.210'. [ 156.116861][ T5885] usb 5-1: new low-speed USB device number 4 using dummy_hcd [ 156.309029][ T5885] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 156.322269][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880300e2c00: rx timeout, send abort [ 156.338760][ T5885] usb 5-1: config 0 has no interface number 0 [ 156.376987][ T5885] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 156.433201][ T5885] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 156.490789][ T5885] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 156.502329][ T5885] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 156.522361][ T5885] usb 5-1: config 0 descriptor?? [ 156.648085][ T6614] nbd: must specify at least one socket [ 156.654360][ T6614] nbd: couldn't find a device at index 1 [ 156.823224][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880300e0800: rx timeout, send abort [ 156.831753][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880300e2c00: abort rx timeout. Force session deactivation [ 156.959456][ T6591] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 157.073172][ T5885] iowarrior 5-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 157.331629][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880300e0800: abort rx timeout. Force session deactivation [ 157.461857][ T6591] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 157.511172][ T6591] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 157.568145][ T6626] XFS (nullb0): Invalid superblock magic number [ 157.599875][ T5885] usb 5-1: USB disconnect, device number 4 [ 157.599926][ C1] iowarrior 5-1:0.1: iowarrior_callback - usb_submit_urb failed with result -19 [ 160.368999][ T6659] netlink: 'syz.0.232': attribute type 39 has an invalid length. [ 160.381839][ T6657] 9pnet_fd: Insufficient options for proto=fd [ 161.483617][ T6669] nbd: must specify at least one socket [ 161.490248][ T6669] nbd: couldn't find a device at index 4 [ 161.933814][ T6678] netlink: 4 bytes leftover after parsing attributes in process `syz.2.238'. [ 161.967040][ T6678] netlink: 12 bytes leftover after parsing attributes in process `syz.2.238'. [ 162.006891][ T10] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 162.176738][ T10] usb 4-1: Using ep0 maxpacket: 8 [ 162.201214][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 162.243440][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 162.284390][ T10] usb 4-1: New USB device found, idVendor=046d, idProduct=c20e, bcdDevice= 0.00 [ 162.345720][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 162.410719][ T10] usb 4-1: config 0 descriptor?? [ 163.268047][ T10] usbhid 4-1:0.0: can't add hid device: -71 [ 163.286992][ T10] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 163.339711][ T10] usb 4-1: USB disconnect, device number 5 [ 164.891776][ T6713] netlink: 'syz.2.249': attribute type 39 has an invalid length. [ 165.332712][ T6725] nbd: device at index 0 is going down [ 166.880844][ T6740] netlink: 12 bytes leftover after parsing attributes in process `syz.2.254'. [ 167.036090][ T6743] nbd: must specify at least one socket [ 167.042344][ T6743] nbd: couldn't find a device at index 1 [ 167.465377][ T5897] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 167.995118][ T5897] usb 1-1: config 6 has an invalid interface number: 29 but max is 0 [ 168.035761][ T5897] usb 1-1: config 6 has no interface number 0 [ 168.093998][ T5897] usb 1-1: config 6 interface 29 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 168.180189][ T5897] usb 1-1: New USB device found, idVendor=07fa, idProduct=0847, bcdDevice=60.e8 [ 168.223337][ T5897] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 168.260201][ T5897] usb 1-1: Product: syz [ 168.273741][ T5897] usb 1-1: Manufacturer: syz [ 168.294987][ T5897] usb 1-1: SerialNumber: syz [ 168.369891][ T5897] HFC-S_USB 1-1:6.29: probe with driver HFC-S_USB failed with error -5 [ 168.780002][ T10] usb 1-1: USB disconnect, device number 3 [ 169.818895][ T6775] workqueue: Failed to create a rescuer kthread for wq "nbd3-recv": -EINTR [ 169.820115][ T6775] block (null): Could not allocate knbd recv work queue. [ 169.837373][ T6775] nbd: failed to add new device [ 169.843471][ T6776] nbd: couldn't find a device at index 3 [ 170.847838][ T6783] netlink: 4 bytes leftover after parsing attributes in process `syz.1.263'. [ 171.767163][ T6803] netlink: 12 bytes leftover after parsing attributes in process `syz.2.268'. [ 173.690667][ T6828] nbd: device at index 3 is going down [ 174.867523][ T5885] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 175.406960][ T5885] usb 1-1: Using ep0 maxpacket: 8 [ 175.418198][ T5885] usb 1-1: config 0 has no interfaces? [ 175.423765][ T5885] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 175.473590][ T5885] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 175.520964][ T5885] usb 1-1: config 0 descriptor?? [ 176.006295][ T6836] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 176.536082][ T6836] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 176.664238][ T6854] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 176.706946][ T6854] syzkaller0: entered promiscuous mode [ 176.743994][ T6854] syzkaller0: entered allmulticast mode [ 176.759435][ T978] usb 1-1: USB disconnect, device number 4 [ 176.818122][ T6862] process 'syz.4.284' launched './file0' with NULL argv: empty string added [ 178.170740][ T6885] nbd: device at index 3 is going down [ 182.447970][ T6918] warning: `syz.1.299' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 186.396974][ T978] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 186.578894][ T978] usb 4-1: config 0 has no interfaces? [ 186.586836][ T30] audit: type=1800 audit(1746453433.474:205): pid=6965 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.0.312" name="/" dev="9p" ino=2 res=0 errno=0 [ 186.625748][ T978] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 186.654756][ T978] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 186.688619][ T978] usb 4-1: Product: syz [ 186.757110][ T978] usb 4-1: Manufacturer: syz [ 186.765042][ T978] usb 4-1: SerialNumber: syz [ 186.791665][ T978] usb 4-1: config 0 descriptor?? [ 186.920081][ T30] audit: type=1400 audit(1746453433.814:206): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="]-{" requested=w pid=6969 comm="syz.0.313" [ 187.716550][ T6980] netlink: 'syz.2.317': attribute type 39 has an invalid length. [ 188.616512][ T6990] block nbd4: not configured, cannot reconfigure [ 188.737283][ T10] usb 4-1: USB disconnect, device number 6 [ 189.208649][ T978] usb 5-1: new full-speed USB device number 5 using dummy_hcd [ 189.880859][ T978] usb 5-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 189.890609][ T978] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 189.932534][ T978] usb 5-1: config 0 descriptor?? [ 190.174156][ T978] [drm] vendor descriptor length:e0 data:00 00 00 00 00 00 00 00 00 00 00 [ 190.213027][ T978] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor [ 190.261477][ T978] [drm] Initialized udl 0.0.1 for 5-1:0.0 on minor 2 [ 190.299211][ T978] [drm] Initialized udl on minor 2 [ 190.310870][ T7018] netlink: 4 bytes leftover after parsing attributes in process `syz.2.326'. [ 190.350906][ T7018] netlink: 12 bytes leftover after parsing attributes in process `syz.2.326'. [ 190.531059][ T978] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 0 failed [ 190.564787][ T978] udl 5-1:0.0: [drm] Cannot find any crtc or sizes [ 190.586824][ T5897] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 190.746994][ T5897] usb 2-1: Using ep0 maxpacket: 8 [ 190.756045][ T10] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 190.762155][ T5866] usb 5-1: USB disconnect, device number 5 [ 190.786287][ T5897] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 190.796259][ T5897] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 190.805957][ T5897] usb 2-1: Product: syz [ 190.806546][ T10] udl 5-1:0.0: [drm] Cannot find any crtc or sizes [ 190.930457][ T5897] usb 2-1: Manufacturer: syz [ 191.176794][ T5897] usb 2-1: SerialNumber: syz [ 191.200766][ T5897] usb 2-1: config 0 descriptor?? [ 191.321919][ T5820] Bluetooth: hci0: unexpected event for opcode 0x202d [ 191.425621][ T5897] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 191.678722][ T7033] netlink: 'syz.4.331': attribute type 39 has an invalid length. [ 192.545921][ T30] audit: type=1800 audit(1746453439.414:207): pid=7039 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.0.332" name="/" dev="9p" ino=2 res=0 errno=0 [ 192.947865][ T5897] dvb_usb_rtl28xxu 2-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 193.130978][ T5897] usb 2-1: USB disconnect, device number 3 [ 195.984026][ T7072] overlayfs: failed to clone upperpath [ 196.373431][ T7079] nbd: must specify at least one socket [ 196.380164][ T7079] nbd: couldn't find a device at index 4 [ 197.429831][ T7089] workqueue: Failed to create a rescuer kthread for wq "nbd1-recv": -EINTR [ 197.429943][ T7089] block (null): Could not allocate knbd recv work queue. [ 197.447339][ T7089] nbd: failed to add new device [ 197.453532][ T7091] nbd: couldn't find a device at index 1 [ 197.806749][ T5897] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 197.819787][ T7096] syzkaller0: entered promiscuous mode [ 197.826439][ T7096] syzkaller0: entered allmulticast mode [ 197.989550][ T5897] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 198.050869][ T5897] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 198.060588][ T5897] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 198.107207][ T5897] usb 5-1: Product: syz [ 198.130210][ T5897] usb 5-1: Manufacturer: syz [ 198.155609][ T5897] usb 5-1: SerialNumber: syz [ 198.398339][ T5897] usblp 5-1:1.0: usblp0: USB Unidirectional printer dev 6 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 198.765368][ T10] usb 5-1: USB disconnect, device number 6 [ 198.798710][ T10] usblp0: removed [ 199.062152][ T7120] netlink: 20 bytes leftover after parsing attributes in process `syz.2.354'. [ 200.072469][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 200.079104][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 202.689076][ T7120] vlan2: entered promiscuous mode [ 202.695837][ T7120] syz_tun: entered promiscuous mode [ 205.436912][ T5897] usb 2-1: new low-speed USB device number 4 using dummy_hcd [ 206.152055][ T5897] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 206.185197][ T5897] usb 2-1: config 0 has no interface number 0 [ 206.200429][ T5897] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 206.250144][ T5897] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 206.272088][ T5897] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 206.312099][ T5897] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 206.357950][ T5897] usb 2-1: config 0 descriptor?? [ 206.391447][ T7178] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 206.420511][ T5897] iowarrior 2-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 206.676255][ T7178] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 206.726142][ T7178] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 206.781771][ T5897] usb 2-1: USB disconnect, device number 4 [ 206.789481][ C1] iowarrior 2-1:0.1: iowarrior_callback - usb_submit_urb failed with result -19 [ 207.046903][ T5885] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 207.206847][ T5885] usb 4-1: Using ep0 maxpacket: 8 [ 207.216222][ T5885] usb 4-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 207.228659][ T5885] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 207.247255][ T5885] usb 4-1: config 0 descriptor?? [ 207.509020][ T5885] asix 4-1:0.0 (unnamed net_device) (uninitialized): invalid hw address, using random [ 209.371442][ T7226] workqueue: Failed to create a rescuer kthread for wq "nbd4-recv": -EINTR [ 209.371553][ T7226] block (null): Could not allocate knbd recv work queue. [ 209.390498][ T7226] nbd: failed to add new device [ 209.396564][ T7228] nbd: couldn't find a device at index 4 [ 210.710634][ T5885] asix 4-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0012: -71 [ 211.016590][ T5885] asix 4-1:0.0: probe with driver asix failed with error -71 [ 211.577179][ T5885] usb 4-1: USB disconnect, device number 7 [ 211.829142][ T30] audit: type=1400 audit(1746453458.724:208): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="]-{" requested=w pid=7259 comm="syz.3.396" daddr=::ffff:172.20.20.0 [ 212.504281][ T7272] block nbd4: not configured, cannot reconfigure [ 213.293678][ T7279] overlayfs: failed to get inode (-116) [ 213.383329][ T7279] overlayfs: failed to get inode (-116) [ 213.395303][ T7289] binder: 7287:7289 ioctl c0306201 200000001d40 returned -14 [ 213.410227][ T7279] overlayfs: failed to get inode (-116) [ 213.416271][ T7279] overlayfs: failed to get inode (-116) [ 213.736906][ T5897] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 214.125243][ T5897] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 214.286869][ T5897] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 64 [ 214.320152][ T5897] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 214.358559][ T5897] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 214.383057][ T5897] usb 1-1: Product: syz [ 214.399834][ T5897] usb 1-1: Manufacturer: syz [ 214.405936][ T5897] usb 1-1: SerialNumber: syz [ 214.674712][ T7293] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 216.229243][ T7293] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 216.799076][ T7331] workqueue: Failed to create a rescuer kthread for wq "nbd1-recv": -EINTR [ 216.799190][ T7331] block (null): Could not allocate knbd recv work queue. [ 216.817845][ T7331] nbd: failed to add new device [ 216.824140][ T7332] nbd: couldn't find a device at index 1 [ 217.428771][ T5897] cdc_ncm 1-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 217.435293][ T5897] cdc_ncm 1-1:1.0: dwNtbInMaxSize=14 is too small. Using 2048 [ 217.633396][ T5897] cdc_ncm 1-1:1.0: setting rx_max = 2048 [ 218.341111][ T5897] cdc_ncm 1-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.0-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 218.486158][ T5897] usb 1-1: USB disconnect, device number 5 [ 219.357765][ T5897] cdc_ncm 1-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.0-1, CDC NCM (NO ZLP) [ 219.871761][ T7355] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 220.179383][ T7362] evm: overlay not supported [ 220.785765][ T30] audit: type=1400 audit(1746453467.604:209): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="]-{" requested=w pid=7363 comm="syz.1.427" dest=2 [ 222.474282][ T7384] nbd: device at index 4 is going down [ 223.049489][ T7387] netlink: 12 bytes leftover after parsing attributes in process `syz.0.432'. [ 223.926745][ T5867] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 224.130680][ T5867] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 224.184732][ T5867] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 224.355609][ T5867] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 224.366462][ T5867] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 224.375246][ T5867] usb 5-1: SerialNumber: syz [ 224.623637][ T5867] usb 5-1: 0:2 : does not exist [ 224.921587][ T5867] usb 5-1: USB disconnect, device number 7 [ 225.010304][ T5832] udevd[5832]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 225.328266][ T30] audit: type=1400 audit(1746453472.214:210): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="]-{" requested=w pid=7410 comm="syz.0.439" dest=2 [ 226.196934][ T5866] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 226.517093][ T5866] usb 5-1: Using ep0 maxpacket: 16 [ 226.659734][ T5866] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 226.698486][ T5866] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 226.719305][ T5866] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 226.736721][ T5866] usb 5-1: Product: syz [ 226.746102][ T5866] usb 5-1: Manufacturer: syz [ 226.776723][ T5866] usb 5-1: SerialNumber: syz [ 226.817332][ T5866] usb 5-1: config 0 descriptor?? [ 226.826349][ T5866] em28xx 5-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 226.871081][ T5866] em28xx 5-1:0.0: DVB interface 0 found: bulk [ 227.691761][ T5866] em28xx 5-1:0.0: unknown em28xx chip ID (0) [ 227.756314][ T55] Bluetooth: hci2: command 0x0406 tx timeout [ 227.762583][ T5824] Bluetooth: hci0: command 0x0406 tx timeout [ 227.768960][ T7437] nbd: device at index 3 is going down [ 227.769622][ T5817] Bluetooth: hci4: command 0x0406 tx timeout [ 228.257879][ T5866] em28xx 5-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 228.267592][ T7446] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 228.281015][ T5866] em28xx 5-1:0.0: board has no eeprom [ 228.799055][ T30] audit: type=1400 audit(1746453475.684:211): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="]-{" requested=w pid=7452 comm="syz.3.448" dest=2 [ 229.349178][ T7419] em28xx 5-1:0.0: failed to get i2c transfer status from bridge register (error=-5) [ 229.446755][ T5866] em28xx 5-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 229.479379][ T5866] em28xx 5-1:0.0: dvb set to bulk mode. [ 229.511064][ T47] em28xx 5-1:0.0: Binding DVB extension [ 229.754134][ T976] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 229.763349][ T5866] usb 5-1: USB disconnect, device number 8 [ 229.772173][ T5866] em28xx 5-1:0.0: Disconnecting em28xx [ 230.294273][ T30] audit: type=1400 audit(1746453476.774:212): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="]-{" requested=w pid=7460 comm="syz.2.451" dest=2 [ 231.317289][ T976] usb 2-1: Using ep0 maxpacket: 16 [ 231.341629][ T47] em28xx 5-1:0.0: Registering input extension [ 231.350807][ T5866] em28xx 5-1:0.0: Closing input extension [ 231.358251][ T976] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 231.376992][ T976] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 231.420091][ T976] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 231.431581][ T5866] em28xx 5-1:0.0: Freeing device [ 231.441315][ T976] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 231.454587][ T976] usb 2-1: Product: syz [ 231.464051][ T7475] netlink: 'syz.3.456': attribute type 39 has an invalid length. [ 231.483761][ T976] usb 2-1: Manufacturer: syz [ 231.496694][ T976] usb 2-1: SerialNumber: syz [ 232.392859][ T7478] nbd: device at index 4 is going down [ 232.507077][ T976] usb 2-1: 0:2 : does not exist [ 232.687351][ T976] usb 2-1: 5:0: failed to get current value for ch 0 (-22) [ 233.188579][ T5127] Bluetooth: hci3: command 0x0406 tx timeout [ 233.752039][ T976] usb 2-1: USB disconnect, device number 5 [ 233.885769][ T7501] nbd: device at index 0 is going down [ 233.975642][ T5832] udevd[5832]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 234.009989][ T7506] netlink: 24 bytes leftover after parsing attributes in process `syz.3.460'. [ 234.502670][ T30] audit: type=1804 audit(1746453481.394:213): pid=7514 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz.3.462" name="/newroot/80/file1" dev="fuse" ino=1 res=1 errno=0 [ 234.557035][ T30] audit: type=1800 audit(1746453481.424:214): pid=7514 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.3.462" name="/" dev="fuse" ino=1 res=0 errno=0 [ 235.278087][ T30] audit: type=1400 audit(1746453482.024:215): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="]-{" requested=w pid=7525 comm="syz.0.467" daddr=::ffff:172.20.20.170 dest=20002 [ 237.977583][ T976] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 238.020685][ T978] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 238.157545][ T976] usb 1-1: Using ep0 maxpacket: 16 [ 238.165264][ T976] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 238.194615][ T976] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 238.225241][ T976] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 238.276712][ T976] usb 1-1: Manufacturer: syz [ 238.305150][ T976] usb 1-1: config 0 descriptor?? [ 238.366751][ T978] usb 4-1: Using ep0 maxpacket: 8 [ 238.388336][ T978] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 238.410635][ T978] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 238.430305][ T978] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 238.440450][ T978] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 238.457683][ T978] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 238.470545][ T978] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 238.696832][ T978] usb 4-1: GET_CAPABILITIES returned 0 [ 238.702435][ T978] usbtmc 4-1:16.0: can't read capabilities [ 238.799518][ T976] usb 1-1: USB disconnect, device number 6 [ 238.966672][ C0] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 239.018136][ C1] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 239.027760][ C1] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 239.037444][ C1] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 239.046581][ C1] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 239.055800][ C1] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 239.065443][ C1] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 239.077007][ C1] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 239.086271][ C1] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 239.095420][ C1] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 239.104808][ C1] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 239.114029][ C1] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 239.123965][ C1] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 239.133401][ C1] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 239.142982][ C1] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 239.152110][ C1] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -2 [ 239.189898][ T978] usb 4-1: USB disconnect, device number 8 [ 241.686572][ T5867] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 241.755010][ T30] audit: type=1400 audit(1746453488.644:216): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="]-{" requested=w pid=7590 comm="syz.3.489" [ 242.019860][ T5867] usb 1-1: config 0 has an invalid interface number: 255 but max is 0 [ 242.031421][ T5867] usb 1-1: config 0 has no interface number 0 [ 242.038219][ T5867] usb 1-1: too many endpoints for config 0 interface 255 altsetting 255: 255, using maximum allowed: 30 [ 242.059354][ T5867] usb 1-1: config 0 interface 255 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 242.086853][ T5867] usb 1-1: config 0 interface 255 has no altsetting 0 [ 242.093831][ T5867] usb 1-1: New USB device found, idVendor=0bda, idProduct=0177, bcdDevice=7d.0b [ 242.506475][ T5867] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 242.979821][ T5867] usb 1-1: config 0 descriptor?? [ 242.999073][ T5867] ums-realtek 1-1:0.255: USB Mass Storage device detected [ 243.206183][ T5867] usb 1-1: USB disconnect, device number 7 [ 243.396492][ T7516] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 243.404588][ T7516] IPv6: NLM_F_CREATE should be set when creating new route [ 243.413786][ T7517] lo: entered allmulticast mode [ 243.424168][ T7517] tunl0: entered allmulticast mode [ 243.432519][ T7517] gre0: entered allmulticast mode [ 243.452840][ T7517] gretap0: entered allmulticast mode [ 243.462859][ T7517] erspan0: entered allmulticast mode [ 243.473688][ T7517] ip_vti0: entered allmulticast mode [ 243.484576][ T7517] ip6_vti0: entered allmulticast mode [ 243.494709][ T7517] sit0: entered allmulticast mode [ 243.508419][ T7517] ip6tnl0: entered allmulticast mode [ 243.517818][ T7517] ip6gre0: entered allmulticast mode [ 243.554803][ T7517] ip6gretap0: entered allmulticast mode [ 243.570754][ T7517] bridge0: port 2(bridge_slave_1) entered disabled state [ 243.580611][ T7517] bridge0: port 1(bridge_slave_0) entered disabled state [ 243.650395][ T7517] bridge0: entered allmulticast mode [ 243.665697][ T7517] vcan0: entered allmulticast mode [ 243.688553][ T7517] bond0: entered allmulticast mode [ 243.698458][ T7517] bond_slave_0: entered allmulticast mode [ 243.706972][ T7517] bond_slave_1: entered allmulticast mode [ 243.730995][ T7517] team0: entered allmulticast mode [ 243.736847][ T7517] team_slave_0: entered allmulticast mode [ 243.742925][ T7517] team_slave_1: entered allmulticast mode [ 243.773782][ T7517] dummy0: entered allmulticast mode [ 243.816702][ T7517] nlmon0: entered allmulticast mode [ 243.831466][ T7517] caif0: entered allmulticast mode [ 243.859471][ T7517] batadv0: entered allmulticast mode [ 243.882797][ T7517] vxcan0: entered allmulticast mode [ 243.898596][ T7517] vxcan1: entered allmulticast mode [ 243.905613][ T7517] veth0: entered allmulticast mode [ 243.933023][ T7517] veth1: entered allmulticast mode [ 243.953854][ T7517] wg0: entered allmulticast mode [ 243.979190][ T7517] wg1: entered allmulticast mode [ 243.996270][ T7517] wg2: entered allmulticast mode [ 244.018184][ T7517] veth0_to_bridge: entered allmulticast mode [ 244.041500][ T7517] veth1_to_bridge: entered allmulticast mode [ 244.063752][ T7517] veth0_to_bond: entered allmulticast mode [ 244.089899][ T7517] veth1_to_bond: entered allmulticast mode [ 244.110789][ T7517] veth0_to_team: entered allmulticast mode [ 244.125359][ T7517] veth1_to_team: entered allmulticast mode [ 244.141484][ T7517] veth0_to_batadv: entered allmulticast mode [ 244.152158][ T7517] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 244.169011][ T7517] batadv_slave_0: entered allmulticast mode [ 244.181604][ T7517] veth1_to_batadv: entered allmulticast mode [ 244.192690][ T7517] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 244.203855][ T7517] batadv_slave_1: entered allmulticast mode [ 244.224699][ T7517] xfrm0: entered allmulticast mode [ 244.240645][ T7517] veth0_to_hsr: entered allmulticast mode [ 244.257729][ T7517] hsr_slave_0: entered allmulticast mode [ 244.272241][ T7517] veth1_to_hsr: entered allmulticast mode [ 244.295183][ T7517] hsr_slave_1: entered allmulticast mode [ 244.316441][ T7517] hsr0: entered allmulticast mode [ 244.326363][ T7517] veth1_virt_wifi: entered allmulticast mode [ 244.338539][ T7517] veth0_virt_wifi: entered allmulticast mode [ 244.348685][ T7517] net veth1_virt_wifi virt_wifi0: entered allmulticast mode [ 244.357939][ T7517] veth1_vlan: entered allmulticast mode [ 244.434054][ T7517] veth0_vlan: entered allmulticast mode [ 244.638972][ T7517] vlan0: entered allmulticast mode [ 244.683728][ T7517] vlan1: entered allmulticast mode [ 244.751986][ T7517] macvlan0: entered allmulticast mode [ 244.882420][ T7517] macvlan1: entered allmulticast mode [ 245.000051][ T7517] ipvlan0: entered allmulticast mode [ 245.068915][ T7517] ipvlan1: entered allmulticast mode [ 245.131905][ T7517] veth1_macvtap: entered allmulticast mode [ 245.244055][ T7517] veth0_macvtap: entered allmulticast mode [ 245.404675][ T7517] macvtap0: entered allmulticast mode [ 245.414949][ T7517] macsec0: entered allmulticast mode [ 245.436294][ T7517] geneve0: entered allmulticast mode [ 245.462521][ T7517] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 245.483864][ T7517] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 245.497769][ T7517] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 245.507096][ T7517] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 245.527186][ T7517] geneve1: entered allmulticast mode [ 245.553891][ T7517] netdevsim netdevsim1 netdevsim0: entered allmulticast mode [ 245.585058][ T7517] netdevsim netdevsim1 netdevsim1: entered allmulticast mode [ 245.718898][ T7517] netdevsim netdevsim1 netdevsim2: entered allmulticast mode [ 245.801764][ T7517] netdevsim netdevsim1 netdevsim3: entered allmulticast mode [ 246.223481][ T7517] mac80211_hwsim hwsim10 wlan0: entered allmulticast mode [ 246.263009][ T7517] mac80211_hwsim hwsim11 wlan1: entered allmulticast mode [ 246.280661][ T7517] mac80211_hwsim hwsim12 wlan2: entered allmulticast mode [ 246.295987][ T7517] gre1: entered allmulticast mode [ 246.311577][ T7517] veth2: entered allmulticast mode [ 246.318496][ T7517] veth3: entered allmulticast mode [ 246.371294][ T7612] tipc: Enabling of bearer rejected, failed to enable media [ 246.655579][ T7639] wlan0 speed is unknown, defaulting to 1000 [ 246.664802][ T7639] wlan0 speed is unknown, defaulting to 1000 [ 246.675242][ T7639] wlan0 speed is unknown, defaulting to 1000 [ 247.613715][ T7639] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 247.623046][ T5825] Bluetooth: hci3: Unable to find connection for big 0x14 [ 247.637506][ T7639] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 247.702826][ T7639] wlan0 speed is unknown, defaulting to 1000 [ 247.722097][ T7645] netlink: 8 bytes leftover after parsing attributes in process `syz.2.502'. [ 247.761133][ T7645] bridge0: port 2(bridge_slave_1) entered disabled state [ 247.770485][ T7645] bridge0: port 1(bridge_slave_0) entered disabled state [ 247.793876][ T7639] wlan0 speed is unknown, defaulting to 1000 [ 247.803082][ T7639] wlan0 speed is unknown, defaulting to 1000 [ 247.812384][ T7639] wlan0 speed is unknown, defaulting to 1000 [ 247.824483][ T7639] wlan0 speed is unknown, defaulting to 1000 [ 247.904350][ T7646] nbd: device at index 3 is going down [ 248.889385][ T7660] netlink: 28 bytes leftover after parsing attributes in process `syz.2.506'. [ 248.906853][ T7660] netlink: 8 bytes leftover after parsing attributes in process `syz.2.506'. [ 248.938948][ T7660] bridge0: port 2(bridge_slave_1) entered blocking state [ 248.946219][ T7660] bridge0: port 2(bridge_slave_1) entered listening state [ 248.953763][ T7660] bridge0: port 1(bridge_slave_0) entered blocking state [ 248.961123][ T7660] bridge0: port 1(bridge_slave_0) entered listening state [ 254.068311][ T7729] kvm: pic: single mode not supported [ 254.068409][ T7729] kvm: pic: non byte read [ 254.088533][ T7729] kvm: pic: non byte read [ 254.103538][ T7729] kvm: pic: level sensitive irq not supported [ 254.103611][ T7729] kvm: pic: non byte read [ 254.169505][ T7729] kvm: pic: non byte read [ 254.174205][ T7729] kvm: pic: non byte read [ 254.220127][ T7729] kvm: pic: level sensitive irq not supported [ 254.220203][ T7729] kvm: pic: non byte read [ 254.266488][ T7729] kvm: pic: level sensitive irq not supported [ 254.266562][ T7729] kvm: pic: non byte read [ 254.302998][ T7729] kvm: pic: level sensitive irq not supported [ 254.303071][ T7729] kvm: pic: non byte read [ 254.325286][ T7729] kvm: pic: level sensitive irq not supported [ 254.325359][ T7729] kvm: pic: non byte read [ 254.555822][ T7743] nbd: device at index 1 is going down [ 255.344925][ T30] audit: type=1400 audit(1746453502.204:217): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="]-{" requested=w pid=7753 comm="syz.2.531" daddr=::ffff:172.20.20.0 [ 256.984844][ T7780] mmap: syz.0.539 (7780) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 259.676958][ T10] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 259.909722][ T7831] block nbd1: not configured, cannot reconfigure [ 260.591031][ T10] usb 5-1: config 0 has an invalid interface number: 41 but max is 0 [ 260.607687][ T10] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 260.626211][ T10] usb 5-1: config 0 has no interface number 0 [ 260.660415][ T10] usb 5-1: New USB device found, idVendor=04d8, idProduct=0083, bcdDevice=83.9c [ 260.684325][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 260.743578][ T10] usb 5-1: Product: syz [ 260.770243][ T10] usb 5-1: Manufacturer: syz [ 260.792609][ T10] usb 5-1: SerialNumber: syz [ 260.838899][ T10] usb 5-1: config 0 descriptor?? [ 261.003239][ T10] ims_pcu 5-1:0.41: Missing CDC union descriptor [ 261.011777][ T10] ims_pcu 5-1:0.41: probe with driver ims_pcu failed with error -22 [ 261.954808][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 261.962310][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 262.281365][ T10] usb 5-1: USB disconnect, device number 9 [ 262.580508][ T30] audit: type=1326 audit(1746453509.474:218): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7862 comm="syz.1.565" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f890078e969 code=0x0 [ 263.022418][ T7869] random: crng reseeded on system resumption [ 263.983151][ T7877] nbd: device at index 0 is going down [ 267.550650][ T7917] netlink: 12 bytes leftover after parsing attributes in process `syz.2.574'. [ 268.284843][ T7924] tipc: Started in network mode [ 268.307092][ T7924] tipc: Node identity da7a4d05a6e4, cluster identity 4711 [ 268.315616][ T7924] tipc: Enabled bearer , priority 0 [ 268.386369][ T7928] syzkaller0: entered promiscuous mode [ 268.400565][ T7928] syzkaller0: entered allmulticast mode [ 268.428460][ T7924] tipc: Resetting bearer [ 268.458120][ T7930] overlayfs: failed to clone upperpath [ 268.482890][ T7923] tipc: Resetting bearer [ 268.526842][ T30] audit: type=1326 audit(1746453515.404:219): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7932 comm="syz.0.580" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd8638e969 code=0x7ffc0000 [ 268.549402][ T7923] tipc: Disabling bearer [ 268.576845][ T30] audit: type=1326 audit(1746453515.404:220): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7932 comm="syz.0.580" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7fbd8638e969 code=0x7ffc0000 [ 268.609013][ T30] audit: type=1326 audit(1746453515.404:221): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7932 comm="syz.0.580" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd8638e969 code=0x7ffc0000 [ 268.672149][ T30] audit: type=1326 audit(1746453515.404:222): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7932 comm="syz.0.580" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd8638e969 code=0x7ffc0000 [ 268.724969][ T30] audit: type=1326 audit(1746453515.404:223): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7932 comm="syz.0.580" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7fbd8638e969 code=0x7ffc0000 [ 268.818851][ T30] audit: type=1326 audit(1746453515.404:224): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7932 comm="syz.0.580" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd8638e969 code=0x7ffc0000 [ 268.885826][ T30] audit: type=1326 audit(1746453515.404:225): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7932 comm="syz.0.580" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fbd8638e969 code=0x7ffc0000 [ 269.806976][ T30] audit: type=1326 audit(1746453515.404:226): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7932 comm="syz.0.580" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd8638e969 code=0x7ffc0000 [ 269.831837][ T30] audit: type=1326 audit(1746453515.404:227): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7932 comm="syz.0.580" exe="/root/syz-executor" sig=0 arch=c000003e syscall=72 compat=0 ip=0x7fbd8638e969 code=0x7ffc0000 [ 269.854011][ T30] audit: type=1326 audit(1746453515.404:228): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7932 comm="syz.0.580" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd8638e969 code=0x7ffc0000 [ 270.994524][ T7962] netlink: 12 bytes leftover after parsing attributes in process `syz.2.587'. [ 275.229121][ T7989] wlan0 speed is unknown, defaulting to 1000 [ 275.494600][ T30] kauditd_printk_skb: 7 callbacks suppressed [ 275.494669][ T30] audit: type=1400 audit(1746453522.384:236): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="]-{" requested=w pid=7995 comm="syz.2.598" dest=2 [ 277.735130][ T8017] netlink: 12 bytes leftover after parsing attributes in process `syz.2.600'. [ 279.184084][ T8030] 8021q: adding VLAN 0 to HW filter on device bond0 [ 279.215674][ T8030] bond0: (slave gre0): The slave device specified does not support setting the MAC address [ 279.255993][ T8030] bond0: (slave gre0): Error -95 calling set_mac_address [ 279.427588][ C0] bridge0: port 1(bridge_slave_0) entered learning state [ 279.436936][ C0] bridge0: port 2(bridge_slave_1) entered learning state [ 279.616975][ T5818] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 280.111408][ T5818] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 280.123339][ T5818] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 281.064388][ T30] audit: type=1400 audit(1746453527.074:237): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="]-{" requested=w pid=8045 comm="syz.2.610" dest=2 [ 282.011730][ T5818] usb 1-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00 [ 282.127981][ T5818] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 282.226158][ T5818] usb 1-1: config 0 descriptor?? [ 282.246885][ T5818] usb 1-1: can't set config #0, error -71 [ 282.282360][ T5818] usb 1-1: USB disconnect, device number 8 [ 282.671686][ T30] audit: type=1326 audit(1746453529.564:238): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8062 comm="syz.4.615" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f98acf8e969 code=0x0 [ 283.522866][ T8093] x_tables: unsorted underflow at hook 3 [ 283.726900][ T5818] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 283.908381][ T976] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 284.044675][ T5818] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 284.146357][ T976] usb 1-1: Using ep0 maxpacket: 16 [ 284.617908][ T5818] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 284.638140][ T976] usb 1-1: config 0 has an invalid interface number: 126 but max is 0 [ 284.655796][ T976] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 284.666183][ T5818] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 284.678437][ T5818] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 284.686493][ T5818] usb 2-1: SerialNumber: syz [ 284.691371][ T976] usb 1-1: config 0 has no interface number 0 [ 284.728276][ T976] usb 1-1: config 0 interface 126 altsetting 0 has an endpoint descriptor with address 0xB7, changing to 0x87 [ 284.805851][ T976] usb 1-1: config 0 interface 126 altsetting 0 endpoint 0x87 has invalid maxpacket 34328, setting to 1024 [ 284.973748][ T976] usb 1-1: config 0 interface 126 altsetting 0 endpoint 0xA has invalid maxpacket 512, setting to 64 [ 285.007188][ T976] usb 1-1: config 0 interface 126 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 147 [ 285.028376][ T976] usb 1-1: config 0 interface 126 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 4 [ 285.070168][ T976] usb 1-1: New USB device found, idVendor=0763, idProduct=1015, bcdDevice=56.88 [ 285.191318][ T5818] usb 2-1: 0:2 : does not exist [ 285.274516][ T976] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 285.488173][ T976] usb 1-1: config 0 descriptor?? [ 285.494874][ T8094] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 285.511668][ T8094] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 285.547424][ T5818] usb 2-1: USB disconnect, device number 6 [ 285.555147][ T976] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 285.913834][ T976] usb 1-1: USB disconnect, device number 9 [ 286.016181][ T8120] udevd[8120]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 286.728292][ T8146] netlink: 4 bytes leftover after parsing attributes in process `syz.2.632'. [ 287.388271][ T8146] hsr_slave_1 (unregistering): left promiscuous mode [ 289.596204][ T8172] nbd: device at index 3 is going down [ 290.959959][ C1] vcan0: j1939_tp_rxtimer: 0xffff88807c88a000: rx timeout, send abort [ 290.969921][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88807c88a000: 0x2f000: (3) A timeout occurred and this is the connection abort to close the session. [ 291.217640][ T8197] overlayfs: failed to resolve './file1': -2 [ 292.678443][ T8215] nbd: device at index 3 is going down [ 294.846772][ T47] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 295.147574][ T47] usb 2-1: Using ep0 maxpacket: 16 [ 295.457232][ T47] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 295.498151][ T47] usb 2-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00 [ 295.522385][ T47] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 295.575342][ T47] usb 2-1: config 0 descriptor?? [ 295.739499][ T47] input: bcm5974 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input12 [ 296.712385][ T5172] bcm5974 2-1:0.0: could not read from device [ 296.785892][ T47] bcm5974 2-1:0.0: could not read from device [ 296.828679][ T5172] bcm5974 2-1:0.0: could not read from device [ 296.902798][ T47] input: failed to attach handler mousedev to device input12, error: -5 [ 296.944427][ T5172] bcm5974 2-1:0.0: could not read from device [ 296.978986][ T47] usb 2-1: USB disconnect, device number 7 [ 297.856953][ T30] audit: type=1400 audit(1746453544.714:239): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="]-{" requested=w pid=8261 comm="syz.2.657" dest=2 [ 301.088078][ T8284] netlink: 4 bytes leftover after parsing attributes in process `syz.0.663'. [ 302.856404][ T8290] netlink: 'syz.1.665': attribute type 4 has an invalid length. [ 302.905144][ T8290] netlink: 'syz.1.665': attribute type 4 has an invalid length. [ 303.690083][ T30] audit: type=1400 audit(1746453550.584:240): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="]-{" requested=w pid=8293 comm="syz.2.667" dest=20001 [ 304.174518][ T8309] nbd: device at index 1 is going down [ 305.332952][ T30] audit: type=1400 audit(1746453551.684:241): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="]-{" requested=w pid=8305 comm="syz.3.671" dest=2 [ 305.968140][ T8320] tipc: Started in network mode [ 305.985608][ T8320] tipc: Node identity aaaaaaaaaa32, cluster identity 4711 [ 305.997328][ T8320] tipc: Enabled bearer , priority 10 [ 306.019838][ T8320] tipc: Resetting bearer [ 307.022305][ T978] tipc: Node number set to 10005162 [ 307.913027][ T8320] tipc: Disabling bearer [ 308.668477][ T8344] overlayfs: failed to clone upperpath [ 308.890082][ T8354] netlink: 4 bytes leftover after parsing attributes in process `syz.1.683'. [ 309.236724][ T47] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 309.449083][ T30] audit: type=1400 audit(1746453556.314:242): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="]-{" requested=w pid=8362 comm="syz.4.686" dest=2 [ 309.506698][ C0] bridge0: port 2(bridge_slave_1) entered forwarding state [ 309.514765][ C0] bridge0: topology change detected, propagating [ 309.521563][ C0] bridge0: port 1(bridge_slave_0) entered forwarding state [ 309.529193][ C0] bridge0: topology change detected, propagating [ 309.665957][ T47] usb 1-1: Using ep0 maxpacket: 8 [ 310.111900][ T47] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 310.121483][ T47] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 310.129941][ T47] usb 1-1: Product: syz [ 310.134150][ T47] usb 1-1: Manufacturer: syz [ 310.140036][ T47] usb 1-1: SerialNumber: syz [ 310.148255][ T47] usb 1-1: config 0 descriptor?? [ 310.364556][ T47] usb 1-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 310.826746][ T976] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 311.000149][ T976] usb 2-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 311.012655][ T976] usb 2-1: New USB device found, idVendor=0582, idProduct=0000, bcdDevice= 0.00 [ 311.023917][ T976] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 311.047169][ T978] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 311.104093][ T976] snd-usb-audio 2-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 311.105584][ T8377] udevd[8377]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 311.158478][ T5867] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 311.209208][ T978] usb 5-1: Using ep0 maxpacket: 32 [ 311.216508][ T978] usb 5-1: config 0 has no interfaces? [ 311.233406][ T978] usb 5-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 311.243978][ T978] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 311.252312][ T978] usb 5-1: Product: syz [ 311.257327][ T978] usb 5-1: Manufacturer: syz [ 311.262183][ T978] usb 5-1: SerialNumber: syz [ 311.277087][ T978] usb 5-1: config 0 descriptor?? [ 311.326136][ T5867] usb 4-1: Using ep0 maxpacket: 16 [ 311.334469][ T5867] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 311.346311][ T5867] usb 4-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 311.357921][ T5867] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 311.377450][ T5867] usb 4-1: config 0 descriptor?? [ 311.454741][ T976] usb 2-1: USB disconnect, device number 8 [ 311.514999][ T978] usb 5-1: USB disconnect, device number 10 [ 311.833423][ T5867] mcp2221 0003:04D8:00DD.0002: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.3-1/input0 [ 312.182115][ T47] dvb_usb_rtl28xxu 1-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 312.260189][ T47] usb 1-1: USB disconnect, device number 10 [ 312.321173][ T30] audit: type=1326 audit(1746453559.164:243): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8392 comm="syz.2.694" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f04bf38e969 code=0x0 [ 312.896051][ T976] usb 4-1: USB disconnect, device number 9 [ 313.014051][ T8399] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 315.599641][ T30] audit: type=1400 audit(1746453562.044:244): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="]-{" requested=w pid=8411 comm="syz.3.700" dest=2 [ 315.669487][ T8420] nbd: device at index 0 is going down [ 318.866913][ T30] audit: type=1400 audit(1746453565.514:245): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="]-{" requested=w pid=8440 comm="syz.4.706" dest=2 [ 319.647986][ T8451] hub 6-0:1.0: USB hub found [ 321.056763][ T8451] hub 6-0:1.0: 1 port detected [ 322.296745][ T30] audit: type=1400 audit(1746453568.534:246): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="]-{" requested=w pid=8458 comm="syz.4.712" dest=2 [ 322.949771][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 322.958796][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 324.742039][ T8491] syzkaller0: tun_chr_ioctl cmd 35111 [ 331.755259][ T8527] nbd: device at index 1 is going down [ 333.598412][ T8550] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 333.801578][ T976] wlan0 speed is unknown, defaulting to 1000 [ 333.812048][ T5818] wlan0 speed is unknown, defaulting to 1000 [ 334.369819][ T8555] netlink: 28 bytes leftover after parsing attributes in process `syz.2.737'. [ 334.402554][ T8555] netlink: 'syz.2.737': attribute type 7 has an invalid length. [ 334.461461][ T8555] netlink: 'syz.2.737': attribute type 8 has an invalid length. [ 334.490552][ T8555] netlink: 4 bytes leftover after parsing attributes in process `syz.2.737'. [ 334.543267][ T8555] team0: entered promiscuous mode [ 335.587349][ T8555] team_slave_0: entered promiscuous mode [ 335.593570][ T8555] team_slave_1: entered promiscuous mode [ 335.625731][ T8555] bond0: entered promiscuous mode [ 335.670624][ T8555] bond_slave_0: entered promiscuous mode [ 335.703057][ T8555] bond_slave_1: entered promiscuous mode [ 335.980996][ T8555] gretap0: entered promiscuous mode [ 336.240445][ T8555] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 336.971287][ T8590] netlink: 'syz.2.746': attribute type 39 has an invalid length. [ 338.545713][ T8604] wlan0 speed is unknown, defaulting to 1000 [ 344.130312][ T8654] nbd: device at index 0 is going down [ 348.164473][ T8691] netlink: 20 bytes leftover after parsing attributes in process `syz.0.769'. [ 349.114409][ T8702] xt_hashlimit: size too large, truncated to 1048576 [ 350.445035][ T8721] netlink: 4 bytes leftover after parsing attributes in process `syz.2.779'. [ 350.461162][ T8718] kvm: kvm [8717]: vcpu0, guest rIP: 0x1a3 Unhandled WRMSR(0xc2) = 0x8000 [ 350.506696][ T5867] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 350.717233][ T5867] usb 5-1: Using ep0 maxpacket: 8 [ 350.764437][ T5867] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 7 [ 350.791623][ T5867] usb 5-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b [ 350.825236][ T5867] usb 5-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3 [ 350.843237][ T5867] usb 5-1: Product: syz [ 350.854531][ T5867] usb 5-1: Manufacturer: syz [ 350.866052][ T5867] usb 5-1: SerialNumber: syz [ 351.509366][ T5867] usb 5-1: Handspring Visor / Palm OS: No valid connect info available [ 351.526825][ T5867] usb 5-1: Handspring Visor / Palm OS: port 0, is for Generic use [ 351.526883][ T5867] usb 5-1: Handspring Visor / Palm OS: port 0, is for Generic use [ 351.526901][ T5867] usb 5-1: Handspring Visor / Palm OS: Number of ports: 2 [ 351.721123][ T5867] usb 5-1: palm_os_3_probe - error -71 getting bytes available request [ 351.753714][ T5867] visor 5-1:1.0: Handspring Visor / Palm OS converter detected [ 351.770197][ T5867] usb 5-1: Handspring Visor / Palm OS converter now attached to ttyUSB0 [ 351.805414][ T5867] usb 5-1: Handspring Visor / Palm OS converter now attached to ttyUSB1 [ 351.823776][ T8729] netlink: 'syz.0.782': attribute type 39 has an invalid length. [ 351.957428][ T5867] usb 5-1: USB disconnect, device number 11 [ 352.115287][ T8731] netlink: 12 bytes leftover after parsing attributes in process `syz.1.781'. [ 354.650315][ T5867] visor ttyUSB0: Handspring Visor / Palm OS converter now disconnected from ttyUSB0 [ 354.860921][ T5867] visor ttyUSB1: Handspring Visor / Palm OS converter now disconnected from ttyUSB1 [ 354.941523][ T5867] visor 5-1:1.0: device disconnected [ 355.138383][ T8743] futex_wake_op: syz.2.786 tries to shift op by -1; fix this program [ 356.058182][ T8753] kernel read not supported for file /eth0 (pid: 8753 comm: syz.0.791) [ 356.107577][ T30] audit: type=1800 audit(1746453603.990:247): pid=8753 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.0.791" name="eth0" dev="mqueue" ino=22977 res=0 errno=0 [ 357.077494][ T8753] DRBG: could not allocate CTR cipher TFM handle: ctr(aes) [ 357.414177][ T8776] netlink: 'syz.2.796': attribute type 39 has an invalid length. [ 357.689498][ T5867] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 358.788919][ C1] ================================================================== [ 358.797055][ C1] BUG: KASAN: slab-use-after-free in rose_timer_expiry+0x471/0x4b0 [ 358.805011][ C1] Read of size 2 at addr ffff88805f4ea82a by task syz.0.797/8780 [ 358.812731][ C1] [ 358.815070][ C1] CPU: 1 UID: 0 PID: 8780 Comm: syz.0.797 Not tainted 6.15.0-rc5-syzkaller #0 PREEMPT(full) [ 358.815088][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025 [ 358.815103][ C1] Call Trace: [ 358.815110][ C1] [ 358.815119][ C1] dump_stack_lvl+0x189/0x250 [ 358.815142][ C1] ? __virt_addr_valid+0x18c/0x540 [ 358.815161][ C1] ? rcu_is_watching+0x15/0xb0 [ 358.815182][ C1] ? __pfx_dump_stack_lvl+0x10/0x10 [ 358.815201][ C1] ? rcu_is_watching+0x15/0xb0 [ 358.815221][ C1] ? lock_release+0x4b/0x3e0 [ 358.815241][ C1] ? __virt_addr_valid+0x18c/0x540 [ 358.815265][ C1] ? __virt_addr_valid+0x469/0x540 [ 358.815283][ C1] print_report+0xb4/0x290 [ 358.815299][ C1] ? rose_timer_expiry+0x471/0x4b0 [ 358.815320][ C1] kasan_report+0x118/0x150 [ 358.815343][ C1] ? rose_timer_expiry+0x471/0x4b0 [ 358.815366][ C1] rose_timer_expiry+0x471/0x4b0 [ 358.815388][ C1] call_timer_fn+0x17b/0x5f0 [ 358.815407][ C1] ? __pfx_rose_timer_expiry+0x10/0x10 [ 358.815427][ C1] ? call_timer_fn+0xbe/0x5f0 [ 358.815444][ C1] ? __pfx_call_timer_fn+0x10/0x10 [ 358.815465][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 358.815479][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 358.815493][ C1] ? __pfx_rose_timer_expiry+0x10/0x10 [ 358.815514][ C1] __run_timer_base+0x61a/0x860 [ 358.815530][ C1] ? ktime_get+0x3e/0x1f0 [ 358.815547][ C1] ? __pfx___run_timer_base+0x10/0x10 [ 358.815562][ C1] ? seqcount_lockdep_reader_access+0x15f/0x1c0 [ 358.815583][ C1] run_timer_softirq+0xb7/0x180 [ 358.815599][ C1] handle_softirqs+0x283/0x870 [ 358.815622][ C1] ? __irq_exit_rcu+0xca/0x1f0 [ 358.815645][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 358.815668][ C1] ? irqtime_account_irq+0xb6/0x1c0 [ 358.815685][ C1] __irq_exit_rcu+0xca/0x1f0 [ 358.815706][ C1] ? __pfx___irq_exit_rcu+0x10/0x10 [ 358.815730][ C1] irq_exit_rcu+0x9/0x30 [ 358.815750][ C1] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 358.815765][ C1] [ 358.815770][ C1] [ 358.815775][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 358.815792][ C1] RIP: 0010:finish_task_switch+0x26b/0x950 [ 358.815811][ C1] Code: 0f 84 3c 01 00 00 48 85 db 0f 85 63 01 00 00 e9 27 05 00 00 4c 8b 75 d0 4c 89 e7 e8 ff b2 bf 09 e8 1a 66 35 00 fb 4c 8b 65 c0 <49> 8d bc 24 18 16 00 00 48 89 f8 48 c1 e8 03 42 0f b6 04 28 84 c0 [ 358.815824][ C1] RSP: 0018:ffffc90004477558 EFLAGS: 00000282 [ 358.815838][ C1] RAX: 9bf5461276860f00 RBX: 0000000000000000 RCX: 9bf5461276860f00 [ 358.815849][ C1] RDX: 0000000000000000 RSI: ffffffff8d737223 RDI: ffffffff8bc0fe60 [ 358.815859][ C1] RBP: ffffc900044775b0 R08: ffffffff8f7daf77 R09: 1ffffffff1efb5ee [ 358.815870][ C1] R10: dffffc0000000000 R11: fffffbfff1efb5ef R12: ffff88802e398000 [ 358.815881][ C1] R13: dffffc0000000000 R14: ffff88802fc85a00 R15: ffff8880b893a558 [ 358.815899][ C1] ? finish_task_switch+0x266/0x950 [ 358.815919][ C1] __schedule+0x1697/0x4c70 [ 358.815940][ C1] ? schedule+0x165/0x360 [ 358.815955][ C1] ? __pfx___schedule+0x10/0x10 [ 358.815975][ C1] ? schedule+0x91/0x360 [ 358.815989][ C1] schedule+0x165/0x360 [ 358.816004][ C1] schedule_timeout+0x9a/0x270 [ 358.816025][ C1] ? __pfx_schedule_timeout+0x10/0x10 [ 358.816051][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 358.816064][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 358.816078][ C1] ? wait_for_completion+0x267/0x5d0 [ 358.816094][ C1] wait_for_completion+0x2bf/0x5d0 [ 358.816114][ C1] ? __pfx_wait_for_completion+0x10/0x10 [ 358.816130][ C1] ? __raw_spin_lock_init+0x45/0x100 [ 358.816146][ C1] ? smp_call_function_single_async+0xaa/0x110 [ 358.816169][ C1] rdmsr_safe_on_cpu+0x150/0x230 [ 358.816190][ C1] ? __pfx_rdmsr_safe_on_cpu+0x10/0x10 [ 358.816209][ C1] ? __pfx___rdmsr_safe_on_cpu+0x10/0x10 [ 358.816229][ C1] ? __might_fault+0xb0/0x130 [ 358.816264][ C1] msr_read+0x14d/0x250 [ 358.816284][ C1] ? __pfx_msr_read+0x10/0x10 [ 358.816301][ C1] ? security_file_permission+0x75/0x290 [ 358.816317][ C1] ? rw_verify_area+0x258/0x650 [ 358.816335][ C1] ? __pfx_msr_read+0x10/0x10 [ 358.816353][ C1] vfs_read+0x1fd/0x980 [ 358.816374][ C1] ? __pfx_vfs_read+0x10/0x10 [ 358.816393][ C1] ? __fget_files+0x2a/0x420 [ 358.816416][ C1] ? __fget_files+0x2a/0x420 [ 358.816436][ C1] ? __fget_files+0x3a0/0x420 [ 358.816457][ C1] ? __fget_files+0x2a/0x420 [ 358.816482][ C1] ksys_read+0x145/0x250 [ 358.816499][ C1] ? rcu_is_watching+0x15/0xb0 [ 358.816520][ C1] ? __pfx_ksys_read+0x10/0x10 [ 358.816539][ C1] ? do_syscall_64+0xba/0x210 [ 358.816558][ C1] do_syscall_64+0xf6/0x210 [ 358.816581][ C1] ? clear_bhb_loop+0x45/0xa0 [ 358.816602][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 358.816622][ C1] RIP: 0033:0x7fbd8638e969 [ 358.816640][ C1] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 358.816652][ C1] RSP: 002b:00007fbd87252038 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 358.816667][ C1] RAX: ffffffffffffffda RBX: 00007fbd865b5fa0 RCX: 00007fbd8638e969 [ 358.816677][ C1] RDX: 0000000000018ff8 RSI: 0000200000019680 RDI: 0000000000000004 [ 358.816687][ C1] RBP: 00007fbd86410ab1 R08: 0000000000000000 R09: 0000000000000000 [ 358.816696][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 358.816704][ C1] R13: 0000000000000000 R14: 00007fbd865b5fa0 R15: 00007ffdb1596578 [ 358.816720][ C1] [ 358.816725][ C1] [ 359.348334][ C1] Allocated by task 6861: [ 359.352654][ C1] kasan_save_track+0x3e/0x80 [ 359.357336][ C1] __kasan_kmalloc+0x93/0xb0 [ 359.362062][ C1] __kmalloc_cache_noprof+0x230/0x3d0 [ 359.367454][ C1] rose_add_node+0x23a/0xde0 [ 359.372053][ C1] rose_rt_ioctl+0xa48/0xfb0 [ 359.376648][ C1] rose_ioctl+0x3ce/0x8b0 [ 359.380969][ C1] sock_do_ioctl+0xd9/0x300 [ 359.385471][ C1] sock_ioctl+0x576/0x790 [ 359.389800][ C1] __se_sys_ioctl+0xf9/0x170 [ 359.394397][ C1] do_syscall_64+0xf6/0x210 [ 359.398991][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 359.404880][ C1] [ 359.407197][ C1] Freed by task 8030: [ 359.411166][ C1] kasan_save_track+0x3e/0x80 [ 359.415841][ C1] kasan_save_free_info+0x46/0x50 [ 359.420862][ C1] __kasan_slab_free+0x62/0x70 [ 359.425624][ C1] kfree+0x193/0x440 [ 359.429518][ C1] rose_rt_device_down+0x66d/0x6c0 [ 359.434626][ C1] rose_device_event+0x603/0x6a0 [ 359.439560][ C1] notifier_call_chain+0x1b3/0x3e0 [ 359.444759][ C1] dev_close_many+0x29c/0x410 [ 359.449432][ C1] netif_close+0x158/0x210 [ 359.453841][ C1] dev_close+0x10a/0x220 [ 359.458092][ C1] bpq_device_event+0x2f4/0x600 [ 359.462953][ C1] notifier_call_chain+0x1b3/0x3e0 [ 359.468078][ C1] dev_close_many+0x29c/0x410 [ 359.472750][ C1] netif_close+0x158/0x210 [ 359.477176][ C1] dev_close+0x10a/0x220 [ 359.481498][ C1] bond_setup_by_slave+0x5f/0x3f0 [ 359.486523][ C1] bond_enslave+0x7b4/0x3a40 [ 359.491108][ C1] bond_do_ioctl+0x635/0x9b0 [ 359.495706][ C1] bond_siocdevprivate+0x17e/0x350 [ 359.500829][ C1] dev_ifsioc+0xb54/0xf00 [ 359.505156][ C1] dev_ioctl+0x84c/0x1150 [ 359.509480][ C1] sock_ioctl+0x719/0x790 [ 359.513815][ C1] __se_sys_ioctl+0xf9/0x170 [ 359.518404][ C1] do_syscall_64+0xf6/0x210 [ 359.522906][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 359.528796][ C1] [ 359.531115][ C1] The buggy address belongs to the object at ffff88805f4ea800 [ 359.531115][ C1] which belongs to the cache kmalloc-512 of size 512 [ 359.545163][ C1] The buggy address is located 42 bytes inside of [ 359.545163][ C1] freed 512-byte region [ffff88805f4ea800, ffff88805f4eaa00) [ 359.558868][ C1] [ 359.561187][ C1] The buggy address belongs to the physical page: [ 359.567602][ C1] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff88805f4eac00 pfn:0x5f4e8 [ 359.577658][ C1] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 359.586166][ C1] flags: 0xfff00000000240(workingset|head|node=0|zone=1|lastcpupid=0x7ff) [ 359.594658][ C1] page_type: f5(slab) [ 359.598657][ C1] raw: 00fff00000000240 ffff88801a041c80 ffffea00009e8b10 ffffea00009cba10 [ 359.607273][ C1] raw: ffff88805f4eac00 0000000000100006 00000000f5000000 0000000000000000 [ 359.615856][ C1] head: 00fff00000000240 ffff88801a041c80 ffffea00009e8b10 ffffea00009cba10 [ 359.624536][ C1] head: ffff88805f4eac00 0000000000100006 00000000f5000000 0000000000000000 [ 359.633211][ C1] head: 00fff00000000002 ffffea00017d3a01 00000000ffffffff 00000000ffffffff [ 359.641879][ C1] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000004 [ 359.650636][ C1] page dumped because: kasan: bad access detected [ 359.657054][ C1] page_owner tracks the page as allocated [ 359.662769][ C1] page last allocated via order 2, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5828, tgid 5828 (syz-executor), ts 106351970753, free_ts 38255677948 [ 359.684212][ C1] post_alloc_hook+0x1d8/0x230 [ 359.688987][ C1] get_page_from_freelist+0x21c7/0x22a0 [ 359.694528][ C1] __alloc_frozen_pages_noprof+0x181/0x370 [ 359.700336][ C1] alloc_pages_mpol+0x232/0x4a0 [ 359.705193][ C1] allocate_slab+0x8a/0x3b0 [ 359.709697][ C1] ___slab_alloc+0xbfc/0x1480 [ 359.714366][ C1] __kmalloc_noprof+0x305/0x4f0 [ 359.719216][ C1] fib6_info_alloc+0x30/0xf0 [ 359.723813][ C1] ip6_route_info_create+0x4b3/0x1360 [ 359.729179][ C1] addrconf_f6i_alloc+0x1c6/0x3f0 [ 359.734195][ C1] ipv6_add_addr+0x56e/0x1090 [ 359.738872][ C1] addrconf_add_linklocal+0x28c/0x6c0 [ 359.744257][ C1] addrconf_addr_gen+0x490/0x580 [ 359.749189][ C1] addrconf_init_auto_addrs+0x7b6/0xb80 [ 359.754730][ C1] addrconf_notify+0xacc/0x1010 [ 359.759578][ C1] notifier_call_chain+0x1b3/0x3e0 [ 359.764691][ C1] page last free pid 1 tgid 1 stack trace: [ 359.770489][ C1] __free_frozen_pages+0xb05/0xcd0 [ 359.775592][ C1] free_contig_range+0x159/0x440 [ 359.780526][ C1] destroy_args+0x86/0x460 [ 359.784939][ C1] debug_vm_pgtable+0x3cf/0x410 [ 359.789792][ C1] do_one_initcall+0x233/0x820 [ 359.794552][ C1] do_initcall_level+0x137/0x1f0 [ 359.799492][ C1] do_initcalls+0x69/0xd0 [ 359.803829][ C1] kernel_init_freeable+0x3d9/0x570 [ 359.809034][ C1] kernel_init+0x1d/0x1d0 [ 359.813367][ C1] ret_from_fork+0x4b/0x80 [ 359.817777][ C1] ret_from_fork_asm+0x1a/0x30 [ 359.822543][ C1] [ 359.824876][ C1] Memory state around the buggy address: [ 359.830584][ C1] ffff88805f4ea700: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 359.838659][ C1] ffff88805f4ea780: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 359.846713][ C1] >ffff88805f4ea800: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 359.854764][ C1] ^ [ 359.860134][ C1] ffff88805f4ea880: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 359.868251][ C1] ffff88805f4ea900: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 359.876301][ C1] ================================================================== [ 359.884491][ C1] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 359.891698][ C1] CPU: 1 UID: 0 PID: 8780 Comm: syz.0.797 Not tainted 6.15.0-rc5-syzkaller #0 PREEMPT(full) [ 359.901842][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025 [ 359.911975][ C1] Call Trace: [ 359.915256][ C1] [ 359.918111][ C1] dump_stack_lvl+0x99/0x250 [ 359.922714][ C1] ? __asan_memcpy+0x40/0x70 [ 359.927323][ C1] ? __pfx_dump_stack_lvl+0x10/0x10 [ 359.932533][ C1] ? __pfx__printk+0x10/0x10 [ 359.937134][ C1] panic+0x2db/0x790 [ 359.941031][ C1] ? __pfx_panic+0x10/0x10 [ 359.945447][ C1] ? _raw_spin_unlock_irqrestore+0xa8/0x110 [ 359.951337][ C1] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 359.957227][ C1] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 359.963554][ C1] ? print_memory_metadata+0x314/0x400 [ 359.969015][ C1] ? rose_timer_expiry+0x471/0x4b0 [ 359.974132][ C1] check_panic_on_warn+0x89/0xb0 [ 359.979089][ C1] ? rose_timer_expiry+0x471/0x4b0 [ 359.984205][ C1] end_report+0x78/0x160 [ 359.988456][ C1] kasan_report+0x129/0x150 [ 359.992988][ C1] ? rose_timer_expiry+0x471/0x4b0 [ 359.998150][ C1] rose_timer_expiry+0x471/0x4b0 [ 360.003101][ C1] call_timer_fn+0x17b/0x5f0 [ 360.007724][ C1] ? __pfx_rose_timer_expiry+0x10/0x10 [ 360.013242][ C1] ? call_timer_fn+0xbe/0x5f0 [ 360.017938][ C1] ? __pfx_call_timer_fn+0x10/0x10 [ 360.023061][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 360.028283][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 360.033475][ C1] ? __pfx_rose_timer_expiry+0x10/0x10 [ 360.038941][ C1] __run_timer_base+0x61a/0x860 [ 360.043809][ C1] ? ktime_get+0x3e/0x1f0 [ 360.048160][ C1] ? __pfx___run_timer_base+0x10/0x10 [ 360.053531][ C1] ? seqcount_lockdep_reader_access+0x15f/0x1c0 [ 360.059782][ C1] run_timer_softirq+0xb7/0x180 [ 360.064632][ C1] handle_softirqs+0x283/0x870 [ 360.069401][ C1] ? __irq_exit_rcu+0xca/0x1f0 [ 360.074256][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 360.079545][ C1] ? irqtime_account_irq+0xb6/0x1c0 [ 360.084752][ C1] __irq_exit_rcu+0xca/0x1f0 [ 360.089348][ C1] ? __pfx___irq_exit_rcu+0x10/0x10 [ 360.094561][ C1] irq_exit_rcu+0x9/0x30 [ 360.098809][ C1] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 360.104454][ C1] [ 360.107381][ C1] [ 360.110315][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 360.116297][ C1] RIP: 0010:finish_task_switch+0x26b/0x950 [ 360.122129][ C1] Code: 0f 84 3c 01 00 00 48 85 db 0f 85 63 01 00 00 e9 27 05 00 00 4c 8b 75 d0 4c 89 e7 e8 ff b2 bf 09 e8 1a 66 35 00 fb 4c 8b 65 c0 <49> 8d bc 24 18 16 00 00 48 89 f8 48 c1 e8 03 42 0f b6 04 28 84 c0 [ 360.141907][ C1] RSP: 0018:ffffc90004477558 EFLAGS: 00000282 [ 360.147973][ C1] RAX: 9bf5461276860f00 RBX: 0000000000000000 RCX: 9bf5461276860f00 [ 360.155942][ C1] RDX: 0000000000000000 RSI: ffffffff8d737223 RDI: ffffffff8bc0fe60 [ 360.163910][ C1] RBP: ffffc900044775b0 R08: ffffffff8f7daf77 R09: 1ffffffff1efb5ee [ 360.172060][ C1] R10: dffffc0000000000 R11: fffffbfff1efb5ef R12: ffff88802e398000 [ 360.180128][ C1] R13: dffffc0000000000 R14: ffff88802fc85a00 R15: ffff8880b893a558 [ 360.188107][ C1] ? finish_task_switch+0x266/0x950 [ 360.193312][ C1] __schedule+0x1697/0x4c70 [ 360.197820][ C1] ? schedule+0x165/0x360 [ 360.202155][ C1] ? __pfx___schedule+0x10/0x10 [ 360.207007][ C1] ? schedule+0x91/0x360 [ 360.211264][ C1] schedule+0x165/0x360 [ 360.215437][ C1] schedule_timeout+0x9a/0x270 [ 360.220213][ C1] ? __pfx_schedule_timeout+0x10/0x10 [ 360.225615][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 360.230809][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 360.236089][ C1] ? wait_for_completion+0x267/0x5d0 [ 360.241459][ C1] wait_for_completion+0x2bf/0x5d0 [ 360.246579][ C1] ? __pfx_wait_for_completion+0x10/0x10 [ 360.252222][ C1] ? __raw_spin_lock_init+0x45/0x100 [ 360.257508][ C1] ? smp_call_function_single_async+0xaa/0x110 [ 360.263661][ C1] rdmsr_safe_on_cpu+0x150/0x230 [ 360.268618][ C1] ? __pfx_rdmsr_safe_on_cpu+0x10/0x10 [ 360.274078][ C1] ? __pfx___rdmsr_safe_on_cpu+0x10/0x10 [ 360.279711][ C1] ? __might_fault+0xb0/0x130 [ 360.284400][ C1] msr_read+0x14d/0x250 [ 360.288593][ C1] ? __pfx_msr_read+0x10/0x10 [ 360.293273][ C1] ? security_file_permission+0x75/0x290 [ 360.298903][ C1] ? rw_verify_area+0x258/0x650 [ 360.303754][ C1] ? __pfx_msr_read+0x10/0x10 [ 360.308433][ C1] vfs_read+0x1fd/0x980 [ 360.312599][ C1] ? __pfx_vfs_read+0x10/0x10 [ 360.317311][ C1] ? __fget_files+0x2a/0x420 [ 360.321921][ C1] ? __fget_files+0x2a/0x420 [ 360.326521][ C1] ? __fget_files+0x3a0/0x420 [ 360.331223][ C1] ? __fget_files+0x2a/0x420 [ 360.335842][ C1] ksys_read+0x145/0x250 [ 360.340118][ C1] ? rcu_is_watching+0x15/0xb0 [ 360.344901][ C1] ? __pfx_ksys_read+0x10/0x10 [ 360.349668][ C1] ? do_syscall_64+0xba/0x210 [ 360.354349][ C1] do_syscall_64+0xf6/0x210 [ 360.358854][ C1] ? clear_bhb_loop+0x45/0xa0 [ 360.363545][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 360.369480][ C1] RIP: 0033:0x7fbd8638e969 [ 360.373937][ C1] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 360.393669][ C1] RSP: 002b:00007fbd87252038 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 360.402100][ C1] RAX: ffffffffffffffda RBX: 00007fbd865b5fa0 RCX: 00007fbd8638e969 [ 360.410080][ C1] RDX: 0000000000018ff8 RSI: 0000200000019680 RDI: 0000000000000004 [ 360.418092][ C1] RBP: 00007fbd86410ab1 R08: 0000000000000000 R09: 0000000000000000 [ 360.426171][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 360.434167][ C1] R13: 0000000000000000 R14: 00007fbd865b5fa0 R15: 00007ffdb1596578 [ 360.442180][ C1] [ 360.445503][ C1] Kernel Offset: disabled [ 360.449850][ C1] Rebooting in 86400 seconds..