last executing test programs: 3m55.092574125s ago: executing program 0 (id=1): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup(r0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0xe501, 0x3, 0x280, 0x0, 0x6affffff, 0x3403000b, 0x110, 0x7, 0x1e8, 0x230, 0x230, 0x1e8, 0x223, 0x3, 0x0, {[{{@ip={@remote, @local, 0x0, 0x0, 'veth1_macvtap\x00', 'veth1_to_team\x00'}, 0x0, 0xf0, 0x110, 0x0, {}, [@common=@unspec=@limit={{0x48}, {0x0, 0x100004}}, @common=@unspec=@devgroup={{0x38}, {0x4}}]}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'syz0\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x2e0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000300)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007300000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af897f2ed01a4d391ec223fff00000000bfa200000000000007020000f8ffffff238f7834f0e97d909b79bac9ce99b033566badc8658b1f70d556d3b05ec6fdac1050e76553d30af3dad30274"], 0x0, 0x1, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000000)={0x1a, {"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", 0x1000}}, 0x1006) syz_usb_connect(0x5, 0x8c6, &(0x7f0000000200)=ANY=[@ANYBLOB="1201500236e47e2082055c2955d4010203010902b408048006a00309047f0e01ff2dde700a240101008002010208240505"], &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0}) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r3, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15) r4 = dup(r3) write$FUSE_BMAP(r4, &(0x7f0000000100)={0x18}, 0x18) getsockopt$inet_sctp6_SCTP_GET_ASSOC_NUMBER(r4, 0x84, 0x1c, &(0x7f0000000000), &(0x7f0000000180)=0x4) write$FUSE_DIRENTPLUS(r4, &(0x7f0000000280)=ANY=[@ANYBLOB="38010000fe0000", @ANYRES64], 0x138) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000004500), 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}}) 3m39.753848849s ago: executing program 32 (id=1): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup(r0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0xe501, 0x3, 0x280, 0x0, 0x6affffff, 0x3403000b, 0x110, 0x7, 0x1e8, 0x230, 0x230, 0x1e8, 0x223, 0x3, 0x0, {[{{@ip={@remote, @local, 0x0, 0x0, 'veth1_macvtap\x00', 'veth1_to_team\x00'}, 0x0, 0xf0, 0x110, 0x0, {}, [@common=@unspec=@limit={{0x48}, {0x0, 0x100004}}, @common=@unspec=@devgroup={{0x38}, {0x4}}]}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'syz0\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x2e0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000300)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007300000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af897f2ed01a4d391ec223fff00000000bfa200000000000007020000f8ffffff238f7834f0e97d909b79bac9ce99b033566badc8658b1f70d556d3b05ec6fdac1050e76553d30af3dad30274"], 0x0, 0x1, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000000)={0x1a, {"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", 0x1000}}, 0x1006) syz_usb_connect(0x5, 0x8c6, &(0x7f0000000200)=ANY=[@ANYBLOB="1201500236e47e2082055c2955d4010203010902b408048006a00309047f0e01ff2dde700a240101008002010208240505"], &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0}) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r3, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15) r4 = dup(r3) write$FUSE_BMAP(r4, &(0x7f0000000100)={0x18}, 0x18) getsockopt$inet_sctp6_SCTP_GET_ASSOC_NUMBER(r4, 0x84, 0x1c, &(0x7f0000000000), &(0x7f0000000180)=0x4) write$FUSE_DIRENTPLUS(r4, &(0x7f0000000280)=ANY=[@ANYBLOB="38010000fe0000", @ANYRES64], 0x138) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000004500), 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}}) 2m34.284425003s ago: executing program 2 (id=194): sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)={0x20, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0x4}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x20}}, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB="90000000", @ANYRES16=r1, @ANYBLOB="01000300000000000000010000000c0005006c000000000000000c0002000000000000000000040007800c000800000000000000000008000100000000004400078008000100", @ANYRES32, @ANYBLOB="380001"], 0x90}}, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000caefb8)={0x1d, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="850000006100000054000000000000009500000000000000b4a8b1541206000000e9c79077fa15ba36eca61299de54cf77c9062c30bc068829afff36b31fa7e358e95cfa"], &(0x7f0000281ffc)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000001440)={r2, 0x2000000, 0x22, 0x0, &(0x7f0000000800)="134306", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 2m33.637855175s ago: executing program 2 (id=198): r0 = syz_open_dev$dri(0x0, 0x1ff, 0x0) ioctl$BTRFS_IOC_SCRUB_CANCEL(r0, 0x941c, 0x0) openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x12, 0x10100000, 0x2, 0xfffffffb, 0x40000, 0xffffffffffffffff, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x5, 0x2, 0x0, @void, @value, @void, @value}, 0x50) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$KVM_GET_SUPPORTED_CPUID(r1, 0xc008ae05, &(0x7f00000004c0)=""/4096) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) r3 = syz_open_procfs(0x0, 0x0) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)='\x00', 0xf000}, {0x0, 0x2}], 0x2) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x7, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="850000009e000000620a00ff0000000071003e0400000000950000000000000018100000", @ANYRES32, @ANYBLOB="000000000000000005000000000000009500000000000000"], &(0x7f0000000140)='GPL\x00', 0x2, 0x95, &(0x7f0000000180)=""/149, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x4, @void, @value}, 0x4a) r4 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r4, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r4, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) r5 = openat$binfmt_register(0xffffff9c, &(0x7f0000000240), 0x1, 0x0) write$binfmt_register(r5, &(0x7f0000000100)={0x3a, 'syz1', 0x3a, 'M', 0x3a, 0x4, 0x3a, 'T.', 0x3a, '\x00\"\x85\x168\xd1\x94\xb7\xcd\x1f\b~e\x03j\xd5\x87\bbj\xf4\xd5MY\xb5\xa1\xcfH\xe7o\xd9Vl\x1d\xaa}\xf2\x95\x86\xd1\x83\xe0\x99\x96?\x8f5\'Z\xb5\x1dA\xe6\xc8\xad\xb2Y\f\xe6\xb8\xed\xe4\xc6\x0f\xa8\xb6!\xb6\xb7I2j\x1c\xb3q\xfe\xfd\xf8', 0x3a, './file0', 0x3a, [0x43, 0x50]}, 0x83) socket$kcm(0x10, 0x2, 0x0) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000080), r3) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000200)={0x0, @local, @local}, 0x0) r8 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_inet6_SIOCSIFADDR(r8, 0x8916, &(0x7f0000000000)={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x3b, r7}) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r3, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0x5c, r6, 0x2, 0x70bd28, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x4}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0xbd5}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x14, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0xa}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r7}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x9}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x7b}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}]}, 0x5c}, 0x1, 0x0, 0x0, 0x8000}, 0x20000000) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r9, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01020000000000000000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000a14000000110001"], 0x64}}, 0x0) sendmmsg(r4, &(0x7f0000007fc0), 0x800001d, 0x0) 2m32.692257301s ago: executing program 2 (id=201): r0 = socket$netlink(0x10, 0x3, 0x9) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ipv6_route\x00') preadv2(r1, &(0x7f00000001c0)=[{&(0x7f0000002240)=""/148, 0x94}], 0x1, 0xd0d, 0x0, 0x0) bind$netlink(r0, &(0x7f0000000040)={0x10, 0x0, 0x25dfdbff, 0x1}, 0xc) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000100)=0x1f, 0x4) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0b00000008000000010001000900000001"], 0x50) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x0, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r2}, &(0x7f0000000080), &(0x7f0000000180)=r3}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000208500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r4 = syz_open_procfs(0x0, &(0x7f0000000100)='stat\x00') lseek(r4, 0x9, 0x0) ioctl$RFKILL_IOC_MAX_SIZE(r4, 0x2, &(0x7f0000000200)=0xfc) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000040)='sys_exit\x00', r5}, 0x10) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) mq_unlink(0x0) 2m32.336871468s ago: executing program 2 (id=202): r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f0000000300)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r2 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0) landlock_restrict_self(r2, 0x0) landlock_restrict_self(r2, 0x0) landlock_restrict_self(r2, 0x0) landlock_restrict_self(r2, 0x0) landlock_restrict_self(r2, 0x0) landlock_restrict_self(r2, 0x0) landlock_restrict_self(r2, 0x0) landlock_restrict_self(r2, 0x0) landlock_restrict_self(r2, 0x0) r3 = landlock_create_ruleset(&(0x7f0000000040)={0x4a4, 0x3, 0x1}, 0x18, 0x0) landlock_restrict_self(r3, 0x0) listen(r1, 0x0) connect$unix(r0, &(0x7f0000000280)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) setresuid(0xee01, 0x0, 0x0) timer_create(0x3, 0x0, &(0x7f00000003c0)) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) timer_delete(0x0) name_to_handle_at(0xffffffffffffffff, 0x0, 0x0, 0x0, 0xc00) r4 = socket$igmp(0x2, 0x3, 0x2) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r5 = socket$pppl2tp(0x18, 0x1, 0x1) add_key(&(0x7f00000001c0)='ceph\x00', 0x0, &(0x7f0000000840)='\x00\x00\x00\x00\x00\x00\x00\x00\x00*\x00\x00', 0xc, 0xffffffffffffffff) connect$pppl2tp(r5, &(0x7f0000000200)=@pppol2tpv3in6={0x18, 0x1, {0x0, r4, 0x1, 0x5, 0x4, 0x2, {0xa, 0x4e21, 0x5, @mcast2, 0x8}}}, 0x3a) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="9feb010018000000000000007d0000007d00000005000000020000000000001105000000ffffffff0d0000000000000f01000000ec0100000007000084050000000600000004000000090000000f00000000000000750000000300000000000000070000000e00000003000000a0ffffff0900000001000000010000000f00000002000000480000000b0000000300000000000080000000005f003000"], 0x0, 0x9d, 0x0, 0x1, 0x0, 0x10000, @value}, 0x28) 2m31.450637466s ago: executing program 2 (id=203): r0 = syz_open_dev$video(&(0x7f00000000c0), 0x1, 0x8000) ioctl$VIDIOC_S_FMT(r0, 0xc0d05640, &(0x7f00000006c0)={0x1, @pix={0x0, 0x0, 0x33565348, 0x0, 0xfffffffc, 0x0, 0x9, 0xfeedcafe, 0x0, 0xffffff80, 0x1, 0x3}}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.swap.current\x00', 0x26e1, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) bind$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xe, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) futex(&(0x7f0000000040), 0x88, 0x0, 0x0, 0x0, 0x0) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, 0x0, 0x0, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r7 = socket$inet6(0xa, 0x2, 0x0) sendmmsg$inet6(r7, &(0x7f0000002840)=[{{&(0x7f00000001c0)={0xa, 0x4e20, 0x5, @mcast2, 0x7}, 0x1c, 0x0, 0x0, &(0x7f0000000bc0)=[@hoplimit={{0x14, 0x29, 0x34, 0x9}}], 0x18}}], 0x1, 0x24040000) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)=ANY=[@ANYBLOB="500000001f0001002c"], 0x50}, 0x1, 0x0, 0x0, 0x48080}, 0x0) r9 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000240), 0x802, 0x0) ioctl$UI_SET_SWBIT(r9, 0x4004556d, 0xc) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x1b, &(0x7f0000000000)=0x1, 0x4) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_GET(r10, &(0x7f0000001500)={0x0, 0x0, &(0x7f00000014c0)={&(0x7f0000001400)={0x18, 0x1, 0x9, 0x401, 0x0, 0x0, {0x3, 0x0, 0x5}, [@NFCTH_TUPLE={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x400c805}, 0x4008084) syz_emit_ethernet(0xaa, &(0x7f0000002e00)={@local, @random="ab5e31c41b86", @void, {@ipv6={0x86dd, @udp={0x2, 0x6, "c447ba", 0x74, 0x11, 0x1, @private1, @dev={0xfe, 0x80, '\x00', 0x38}, {[@fragment={0x3a, 0x0, 0x7, 0x0, 0x0, 0xe, 0x66}, @hopopts={0x33}], {0x4e23, 0x4e23, 0x64, 0x0, @wg=@response={0x2, 0x0, 0x4, "27b5facea57df882bb21fe7f9f186a7a9c5e88f77adb7794f32375c6e459610f", "83997b42ccde107ae50a35bd6da0d66f", {"63e29e98369cf7f418ebce0bc56d4d54", "ee7a68e3caee38987fcdf6050c5ca8e6"}}}}}}}}, 0x0) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r1) sendmsg$NL80211_CMD_JOIN_IBSS(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)={0x20, r11, 0x800, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_BSS_BASIC_RATES={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x4010}, 0x24000040) 2m30.278279588s ago: executing program 2 (id=207): r0 = socket$packet(0x11, 0x2, 0x300) pipe(0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r2, 0x0, 0xffffffffffffffff, 0x0, 0xfffffff9, 0x0) quotactl$Q_SYNC(0xffffffff80000101, 0x0, 0x0, 0x0) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x3, [@int={0x6, 0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0xd, 0x5}]}, {0x0, [0x0]}}, &(0x7f0000000280)=""/92, 0x2b, 0x5c, 0x5, 0xc9, 0x0, @void, @value}, 0x28) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1b00000000000000000000000600000000000000", @ANYRES32, @ANYBLOB='w\x00'/20, @ANYRES32=0x0, @ANYRES32=r3, @ANYBLOB="0200000002000000000000003fdd0000000000000000"], 0x50) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), r4) r6 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x1) ioctl$TIOCL_SETSEL(r6, 0x541c, &(0x7f00000003c0)={0x2, {0x2, 0x2, 0x8cd5, 0xe, 0x3}}) syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000d1d7a440041601801f44010203010902120001000000000904"], 0x0) r7 = syz_open_dev$sndctrl(&(0x7f0000000000), 0xdc3, 0x0) ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(r7, 0x80dc5521, &(0x7f00000000c0)=""/221) sendmsg$DEVLINK_CMD_RATE_GET(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x14, r5, 0x301, 0x0, 0x25dfdbfc, {0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x40010}, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$tipc(&(0x7f0000000500), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r8, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)={0x34, r9, 0x1, 0x3, 0x0, {{}, {}, {0x18, 0x17, {0xc, 0x0, @l2={'eth', 0x3a, 'ipvlan0\x00'}}}}}, 0x34}}, 0x40) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x2000) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000040)='\"', 0x1}], 0x1, 0x4) write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[], 0x18c6) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000240)={0x3, &(0x7f0000000400)=[{0x20, 0x0, 0x8, 0xfffff00c}, {0x40, 0x0, 0x6}, {0x6}]}, 0x10) r10 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) write$dsp(r10, &(0x7f00000001c0)="5cba91a4", 0xffffffd9) r11 = creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39ddd8) close(r11) execve(&(0x7f0000000180)='./file0\x00', &(0x7f0000000600)={[0xfffffffffffffffd, &(0x7f00000004c0)='GPL\x00']}, 0x0) ioctl$SNDCTL_DSP_SUBDIVIDE(r10, 0xc0045009, &(0x7f0000000140)=0x8) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r11, 0x84, 0x1d, &(0x7f0000000040)={0x8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f0000000080)=0x24) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r11, 0x84, 0x6f, &(0x7f0000000280)={r12, 0x80, &(0x7f0000000440)=[@in6={0xa, 0x4e22, 0x2, @local, 0x3}, @in6={0xa, 0x4e24, 0x9, @local, 0xfffffeff}, @in={0x2, 0x4e23, @local}, @in6={0xa, 0x4e22, 0x6, @ipv4={'\x00', '\xff\xff', @loopback}, 0x5}, @in6={0xa, 0x4e22, 0x8d6, @mcast1, 0x6}]}, &(0x7f00000002c0)=0x10) 2m14.31903702s ago: executing program 33 (id=207): r0 = socket$packet(0x11, 0x2, 0x300) pipe(0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r2, 0x0, 0xffffffffffffffff, 0x0, 0xfffffff9, 0x0) quotactl$Q_SYNC(0xffffffff80000101, 0x0, 0x0, 0x0) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x3, [@int={0x6, 0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0xd, 0x5}]}, {0x0, [0x0]}}, &(0x7f0000000280)=""/92, 0x2b, 0x5c, 0x5, 0xc9, 0x0, @void, @value}, 0x28) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1b00000000000000000000000600000000000000", @ANYRES32, @ANYBLOB='w\x00'/20, @ANYRES32=0x0, @ANYRES32=r3, @ANYBLOB="0200000002000000000000003fdd0000000000000000"], 0x50) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), r4) r6 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x1) ioctl$TIOCL_SETSEL(r6, 0x541c, &(0x7f00000003c0)={0x2, {0x2, 0x2, 0x8cd5, 0xe, 0x3}}) syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000d1d7a440041601801f44010203010902120001000000000904"], 0x0) r7 = syz_open_dev$sndctrl(&(0x7f0000000000), 0xdc3, 0x0) ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(r7, 0x80dc5521, &(0x7f00000000c0)=""/221) sendmsg$DEVLINK_CMD_RATE_GET(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x14, r5, 0x301, 0x0, 0x25dfdbfc, {0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x40010}, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$tipc(&(0x7f0000000500), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r8, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)={0x34, r9, 0x1, 0x3, 0x0, {{}, {}, {0x18, 0x17, {0xc, 0x0, @l2={'eth', 0x3a, 'ipvlan0\x00'}}}}}, 0x34}}, 0x40) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x2000) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000040)='\"', 0x1}], 0x1, 0x4) write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[], 0x18c6) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000240)={0x3, &(0x7f0000000400)=[{0x20, 0x0, 0x8, 0xfffff00c}, {0x40, 0x0, 0x6}, {0x6}]}, 0x10) r10 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) write$dsp(r10, &(0x7f00000001c0)="5cba91a4", 0xffffffd9) r11 = creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39ddd8) close(r11) execve(&(0x7f0000000180)='./file0\x00', &(0x7f0000000600)={[0xfffffffffffffffd, &(0x7f00000004c0)='GPL\x00']}, 0x0) ioctl$SNDCTL_DSP_SUBDIVIDE(r10, 0xc0045009, &(0x7f0000000140)=0x8) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r11, 0x84, 0x1d, &(0x7f0000000040)={0x8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f0000000080)=0x24) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r11, 0x84, 0x6f, &(0x7f0000000280)={r12, 0x80, &(0x7f0000000440)=[@in6={0xa, 0x4e22, 0x2, @local, 0x3}, @in6={0xa, 0x4e24, 0x9, @local, 0xfffffeff}, @in={0x2, 0x4e23, @local}, @in6={0xa, 0x4e22, 0x6, @ipv4={'\x00', '\xff\xff', @loopback}, 0x5}, @in6={0xa, 0x4e22, 0x8d6, @mcast1, 0x6}]}, &(0x7f00000002c0)=0x10) 1m53.567316859s ago: executing program 3 (id=315): openat$smackfs_ipv6host(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000000000040ac054382408b0b00000109022400010000002009040000fd0301000009210000000122010009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000003c0)={0x5e, 0x0, 0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="002281"], 0x0}, 0x0) r2 = syz_open_dev$hiddev(&(0x7f00000000c0), 0x0, 0x0) ioctl$HIDIOCGUSAGE(r2, 0xc018480b, 0x0) pwritev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000140)="de", 0x1}], 0x1, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000280)={0x2c, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="003ba402540afeb3578ffd3e6345db0f1eebdda078c84038654f85bbc5ea47991e8bfd140dd47cbed28474fc05b7000062a76c6c91c0614f3f064d7cfe96c93d0b77caa8360482280ed13d7015000000"], 0x0, 0x0, 0x0}, 0x0) ioctl$FITHAW(r1, 0xc0045878) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) set_mempolicy_home_node(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x0) ioctl$HIDIOCSREPORT(r2, 0x81044804, &(0x7f0000000400)={0x1}) ioctl$HIDIOCGCOLLECTIONINFO(r2, 0xc0104811, &(0x7f0000000240)={0x5, 0x5, 0x1, 0x6}) 1m48.771800597s ago: executing program 3 (id=327): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x4048aec9, &(0x7f0000000140)={0x6, 0x0, @ioapic={0x1000, 0x3, 0x24, 0xb7, 0x0, [{0x47, 0x7, 0x71, '\x00', 0x2}, {0x1, 0xf, 0x6c, '\x00', 0x2}, {0x0, 0x7, 0x1, '\x00', 0x6}, {0x59, 0xf, 0x2, '\x00', 0x5}, {0x7, 0x9, 0xee, '\x00', 0x6}, {0x8, 0x8, 0x5, '\x00', 0x9}, {0x1, 0x5, 0x43}, {0x23, 0x90, 0x2c, '\x00', 0x1}, {0xee, 0x3, 0x2, '\x00', 0x90}, {0x40, 0x9, 0x7, '\x00', 0x80}, {0x9, 0x2, 0xfe}, {0xc, 0x5, 0x5, '\x00', 0xbd}, {0x7f, 0x6, 0x8, '\x00', 0x82}, {0x8, 0x7, 0x7, '\x00', 0x7f}, {0x9, 0xf7, 0x6, '\x00', 0x9}, {0x1, 0xb1, 0x8, '\x00', 0xa}, {0xf, 0xa, 0x50, '\x00', 0x8}, {0x7, 0x9, 0x10, '\x00', 0x4}, {0x8, 0x2, 0x4, '\x00', 0x2}, {0x80, 0x8, 0x8, '\x00', 0x2}, {0xe, 0x86, 0x4, '\x00', 0x2}, {0xe0, 0x35, 0x9, '\x00', 0x10}, {0x6d, 0x2, 0x1, '\x00', 0xaa}, {0xdd, 0xb, 0x81, '\x00', 0x10}]}}) r2 = socket$inet6(0xa, 0x1, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) poll(&(0x7f00000002c0)=[{r4}], 0x1, 0x83a4) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r5, 0x0) read$char_usb(r3, &(0x7f0000000100)=""/124, 0x7c) write$char_usb(r4, &(0x7f0000000440)="93", 0x1) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, 0x0, &(0x7f0000000040)=0x1f00) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) unshare(0x24020400) r6 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r6, &(0x7f0000000140)='^', 0x34000, 0x0, &(0x7f0000004ff0)={0x2, 0x0, @rand_addr=0xfffffffffffffffe}, 0x10) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000800)=ANY=[@ANYBLOB="600000000206050000000000000000000000000005000400000000000900020073797a3200000000140007800800064000006a000800084000005fdc0500050002000000050001000600000011000300686173683a6970", @ANYRES8=r4, @ANYRES64], 0x60}}, 0x0) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r6, 0x84, 0x6d, &(0x7f0000000300), &(0x7f0000000780)=0x8) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.io_service_time\x00', 0x275a, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r9 = socket$inet6_sctp(0xa, 0x1, 0x84) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00'}, 0x10) r10 = syz_init_net_socket$rose(0xb, 0x5, 0x0) accept4$rose(r10, 0x0, 0x0, 0x800) getsockopt$inet_pktinfo(r6, 0x0, 0x8, &(0x7f0000000540)={0x0, @dev, @multicast2}, &(0x7f0000000580)=0xc) r12 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000005c0)=0xffffffffffffffff, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0x12, &(0x7f0000000380)=ANY=[@ANYBLOB="180000001700000000000000490c000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000047760000feffffff30b60100fcffffff7b36400010000000bf91000000000000b7020000010000008500000085000000b7000000000000009500000000000000"], &(0x7f0000000440)='GPL\x00', 0xffff7887, 0x9c, &(0x7f0000000480)=""/156, 0x41100, 0x0, '\x00', r11, 0x0, r12, 0x8, &(0x7f00000007c0)={0x3, 0x2}, 0x8, 0x10, &(0x7f0000000640)={0x2, 0x4, 0x5a}, 0x10, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000680)=[{0x0, 0x3, 0x4, 0xc}], 0x10, 0xffff0000, @void, @value}, 0x94) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r9, 0x84, 0x7b, &(0x7f0000000040)={0x0, 0xfffffe01}, &(0x7f0000000080)=0x8) 1m46.362608453s ago: executing program 3 (id=336): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x800}, 0xa840) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) waitid(0x2, r0, 0x0, 0x8, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000400)=0x6) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) r1 = semget$private(0x0, 0x20000000102, 0x0) semctl$GETALL(r1, 0x0, 0xd, 0x0) semctl$IPC_RMID(r1, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000001540)=[{{&(0x7f0000000640)=@file={0x0, './file0\x00'}, 0x6e, 0x0}}], 0x1, 0x45) socket$inet6_sctp(0xa, 0x1, 0x84) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@ipv4_newrule={0x1c, 0x20, 0x301, 0x500, 0x25dfdbfb, {0x2, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x8}}, 0x1c}}, 0x40) 1m45.102593768s ago: executing program 3 (id=342): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$evdev(0x0, 0x0, 0x400802) ioctl$EVIOCGRAB(r0, 0x541b, 0x0) ioctl$EVIOCGNAME(r0, 0x80404506, &(0x7f0000000080)=""/13) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f000001b700)={0x2020}, 0x2020) fcntl$getownex(r0, 0x10, &(0x7f0000000140)={0x0, 0x0}) sched_setaffinity(r1, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000002700)=""/102392, 0x18ff8) userfaultfd(0x80001) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000100)='.\x00', &(0x7f0000000040), 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r3, @ANYBLOB=',wfdno=', @ANYRESHEX=r4, @ANYBLOB="14812ff92313b375dc2a0bebc0dcab71eba72543a26a59000000217cdc"]) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x100) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000a00)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000001c0)='./bus\x00') removexattr(&(0x7f0000000180)='./file0\x00', &(0x7f0000000040)=@random={'btrfs.', 'user.incfs.size\x00'}) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r5, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000400)={0xa4, 0x0, 0x2, 0x401, 0x0, 0x0, {0xa}, [@CTA_EXPECT_MASTER={0x18, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @remote}, {0x8, 0x2, @multicast1}}}]}, @CTA_EXPECT_MASK={0x3c, 0x3, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x10, 0x3, @dev={0xfe, 0x80, '\x00', 0x3a}}, {0x14, 0x4, @remote}}}]}, @CTA_EXPECT_TUPLE={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private2}, {0x14, 0x4, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x43}}}}}]}]}, 0xa4}}, 0x4004) syz_open_procfs(0xffffffffffffffff, &(0x7f0000001100)='net/ip6_tables_names\x00') bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) 1m44.663895995s ago: executing program 3 (id=347): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x1, @dev={0xfe, 0x80, '\x00', 0x3a}, 0x80000001}, 0x1c) bind$inet6(r1, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) close(r0) r2 = creat(&(0x7f0000000080)='./bus\x00', 0x0) fsetxattr$system_posix_acl(r2, &(0x7f0000000000)='system.posix_acl_default\x00', &(0x7f00000002c0)=ANY=[@ANYBLOB="0200000002"], 0xfe44, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x12, 0x4, &(0x7f0000000140)=ANY=[@ANYBLOB="1802000040000000000000000000000085000000ba00000095"], &(0x7f0000000040)='syzkaller\x00', 0x7, 0x0, 0x0, 0x41100, 0x2d, '\x00', 0x0, @cgroup_sock_addr=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x10, 0x80000801, @void, @value}, 0x94) 1m43.931614983s ago: executing program 3 (id=350): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) shutdown(r0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f0000000000)=ANY=[@ANYBLOB="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"/4108]) ioperm(0x9, 0x400000000007, 0x6c) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f0000001580)=[{{0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000001040)=""/106, 0x6a}, {&(0x7f00000010c0)=""/178, 0xb2}, {&(0x7f0000001180)=""/74, 0x4a}, {&(0x7f0000001200)=""/54, 0x36}, {&(0x7f0000001240)=""/119, 0x77}, {&(0x7f00000012c0)=""/65, 0x41}, {&(0x7f0000001600)=""/141, 0x8d}], 0x7, &(0x7f0000001480)=""/229, 0xe5}, 0x400}], 0x1, 0x2020, 0x0) quotactl$Q_SYNC(0xffffffff80000102, 0x0, 0x0, 0x0) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(r5, 0x6, 0x1, &(0x7f0000000000)={0x0, 0x747, 0x0, 0x3}, 0xc) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x4, 0x5, &(0x7f0000000340)=ANY=[@ANYBLOB="180200000000000000000000000000008500000061000000850000007d00000095"], &(0x7f00000000c0)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1b, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r6, 0x702, 0x37, 0x0, &(0x7f0000000380)="e460334470d8d4006b00c15286dd4b3547f2cbfad47001bd9e27f289c147631f7be047c25d7639d79d8b586f40e30d0cb1837e9aaaaaa9", 0x0, 0xc001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) connect$bt_l2cap(r5, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0xfffd, 0x1}, 0x3) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r5) sendmsg$inet(r5, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x4040004) shutdown(r5, 0x1) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x76) r7 = fanotify_init(0x4, 0x8000) fanotify_mark(r7, 0x1, 0x40001019, 0xffffffffffffffff, 0x0) 1m28.75793242s ago: executing program 34 (id=350): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) shutdown(r0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f0000000000)=ANY=[@ANYBLOB="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"/4108]) ioperm(0x9, 0x400000000007, 0x6c) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f0000001580)=[{{0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000001040)=""/106, 0x6a}, {&(0x7f00000010c0)=""/178, 0xb2}, {&(0x7f0000001180)=""/74, 0x4a}, {&(0x7f0000001200)=""/54, 0x36}, {&(0x7f0000001240)=""/119, 0x77}, {&(0x7f00000012c0)=""/65, 0x41}, {&(0x7f0000001600)=""/141, 0x8d}], 0x7, &(0x7f0000001480)=""/229, 0xe5}, 0x400}], 0x1, 0x2020, 0x0) quotactl$Q_SYNC(0xffffffff80000102, 0x0, 0x0, 0x0) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(r5, 0x6, 0x1, &(0x7f0000000000)={0x0, 0x747, 0x0, 0x3}, 0xc) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x4, 0x5, &(0x7f0000000340)=ANY=[@ANYBLOB="180200000000000000000000000000008500000061000000850000007d00000095"], &(0x7f00000000c0)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1b, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r6, 0x702, 0x37, 0x0, &(0x7f0000000380)="e460334470d8d4006b00c15286dd4b3547f2cbfad47001bd9e27f289c147631f7be047c25d7639d79d8b586f40e30d0cb1837e9aaaaaa9", 0x0, 0xc001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) connect$bt_l2cap(r5, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0xfffd, 0x1}, 0x3) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r5) sendmsg$inet(r5, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x4040004) shutdown(r5, 0x1) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x76) r7 = fanotify_init(0x4, 0x8000) fanotify_mark(r7, 0x1, 0x40001019, 0xffffffffffffffff, 0x0) 15.991201619s ago: executing program 5 (id=598): socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$MON_IOCX_MFETCH(0xffffffffffffffff, 0xc0109207, 0x0) r0 = socket$inet6(0xa, 0x6, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x4, 0x4, &(0x7f0000000780)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f00000005c0)={0x0, 0x6}, &(0x7f0000000600)=0xc) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000640)={r1, 0x5950f00f}, 0x8) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) fanotify_init(0x200, 0x0) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r3, &(0x7f0000000140)={0x1f, @fixed}, 0x8) listen(r3, 0x3) socket$unix(0x1, 0x1, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000008500000061000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000400)={r4, 0x18000000000002a0, 0x29, 0x0, &(0x7f0000000580)="98de78665f149a005f902a6286dd4b29b13e9c774e94f17d6476e4b743fe6f1048ea9e24c5d3cec19a", 0x0, 0x200, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x3a8, 0x0, 0x0, 0xffffff6a, 0x180, 0x0, 0x2d8, 0x258, 0x258, 0x2d8, 0x258, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @local, [], [], 'wg2\x00', 'macvlan1\x00', {}, {}, 0x11}, 0x0, 0x118, 0x180, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x0, 0x0, 0x9}}, @common=@unspec=@connlimit={{0x40}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz1\x00'}}}, {{@ipv6={@local, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, [], [], 'vxcan1\x00', 'team0\x00'}, 0x0, 0x118, 0x158, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@dst={{0x48}}]}, @common=@inet=@TCPOPTSTRIP={0x40}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x408) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000000c0)={'syztnl0\x00', &(0x7f0000000480)={'syztnl1\x00', 0x0, 0x1, 0x20, 0xd8ec, 0x3910, {{0x2d, 0x4, 0x1, 0x3d, 0xb4, 0x67, 0x0, 0x10, 0x29, 0x0, @broadcast, @empty, {[@ssrr={0x89, 0x1f, 0xe2, [@remote, @multicast1, @multicast2, @initdev={0xac, 0x1e, 0x1, 0x0}, @empty, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast]}, @rr={0x7, 0xf, 0xca, [@multicast1, @broadcast, @multicast1]}, @timestamp={0x44, 0x18, 0xfe, 0x0, 0x6, [0x3d, 0x2, 0x5, 0x4, 0xd7]}, @lsrr={0x83, 0x1b, 0x67, [@rand_addr=0x64010101, @dev={0xac, 0x14, 0x14, 0x13}, @multicast2, @private=0xa010100, @dev={0xac, 0x14, 0x14, 0x32}, @dev={0xac, 0x14, 0x14, 0x39}]}, @end, @cipso={0x86, 0x3a, 0x3, [{0x1, 0x9, "c97f13f49763b1"}, {0x5, 0xc, "ee059ba2742197008a45"}, {0x1, 0x2}, {0x2, 0x10, "3585362aebe52db712eae744e172"}, {0x7, 0xd, "e1084f7f8f56317ce7eaa1"}]}, @end]}}}}}) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000080)={0x0, @broadcast, @local}, &(0x7f0000000280)=0xc) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000300)={'erspan0\x00', &(0x7f0000000680)={'tunl0\x00', r6, 0x20, 0x8000, 0xee, 0x3, {{0x15, 0x4, 0x0, 0x1b, 0x54, 0x64, 0x0, 0x3, 0x29, 0x0, @multicast2, @multicast2, {[@ssrr={0x89, 0x1b, 0x53, [@remote, @dev={0xac, 0x14, 0x14, 0x2a}, @rand_addr=0x64010101, @rand_addr=0x64010101, @private=0xa010101, @private=0xa010100]}, @timestamp={0x44, 0x14, 0xd2, 0x0, 0xf, [0x101, 0x0, 0x1, 0x7]}, @lsrr={0x83, 0xf, 0xe6, [@broadcast, @local, @remote]}, @noop]}}}}}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001300)=@delchain={0xfb8, 0x65, 0x100, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r7, {0xa, 0x3}, {0xfff3, 0xc}, {0x8, 0xc}}, [@filter_kind_options=@f_matchall={{0xd}, {0x14, 0x2, [@TCA_MATCHALL_CLASSID={0x8, 0x1, {0xc, 0xe}}, @TCA_MATCHALL_CLASSID={0x8, 0x1, {0xfff3, 0x2}}]}}, @TCA_CHAIN={0x8, 0xb, 0x6}, @TCA_CHAIN={0x8, 0xb, 0x8}, @TCA_CHAIN={0x8, 0xb, 0x584}, @filter_kind_options=@f_basic={{0xa}, {0xf44, 0x2, [@TCA_BASIC_POLICE={0xc6c, 0x4, [@TCA_POLICE_RATE64={0xc, 0x8, 0x9}, @TCA_POLICE_RATE={0x404, 0x2, [0x3, 0x0, 0x80, 0x1f84, 0xd, 0x5, 0x2, 0x97a2, 0x8, 0x2, 0x28d, 0x1, 0xd28, 0x2, 0x80000001, 0x6, 0x5, 0xa, 0x0, 0x7, 0x80000001, 0x6, 0x400, 0x101, 0x7, 0xf0, 0x6749c719, 0x10001, 0x4, 0xb, 0x1ff, 0x4, 0x100, 0xe, 0x5, 0x1, 0x0, 0x8, 0x8, 0x3, 0x3, 0x6, 0xcff, 0x9, 0x9, 0xffff, 0x3, 0x400, 0xfff, 0xc848, 0x9, 0x2, 0x2, 0x401, 0x8, 0x0, 0x8, 0xb, 0x8, 0x1, 0x8000, 0x7, 0x3, 0x0, 0x7, 0x3, 0x3, 0x400, 0x6, 0x5, 0x9, 0x0, 0x8, 0x3, 0x5, 0x4a4, 0x1b1, 0x9, 0x8, 0x401, 0x5, 0x80000001, 0xf, 0x0, 0x6, 0x80, 0x40, 0xb, 0x7, 0x3, 0x9, 0xffffffff, 0x2, 0x8, 0x1, 0x377, 0x3, 0x2, 0xff, 0x816, 0x7d6, 0x1, 0x7fffffff, 0x2, 0x8, 0x100, 0x5, 0x3, 0x2, 0x3, 0x0, 0x3, 0xffff7fff, 0x8000, 0x5, 0x4, 0x7fffffff, 0x10, 0x4, 0xe0, 0xc8, 0xffff, 0x8, 0x2, 0x1, 0x1, 0xffffff45, 0xf, 0x8, 0x2, 0x4, 0x9, 0x8, 0x1, 0x9000, 0xffffff5b, 0x1, 0x5, 0x2, 0x9, 0x7, 0x0, 0x4, 0x101, 0x4, 0x5, 0x235, 0x101, 0x9, 0x3, 0x42fb, 0x6, 0x7, 0x528e, 0xd, 0x7fffffff, 0x2, 0x3, 0xde, 0xfffffff9, 0x9, 0xea, 0x40, 0xa, 0x7, 0x64, 0x4, 0x6, 0x8, 0x2, 0x0, 0x0, 0x4, 0x9a, 0x761d, 0x3, 0xff, 0x1, 0x8, 0xfffffff7, 0x3, 0x7, 0x8001, 0x5, 0x4a1, 0x7, 0x9, 0x9, 0x5, 0x7, 0x7f, 0x2, 0x8, 0x401, 0x8, 0x8, 0x10001, 0x5, 0x3, 0x1, 0xffff, 0xd, 0x3, 0x6, 0x7, 0x2e65, 0x1, 0x8, 0x9, 0xb, 0x3, 0x3, 0x0, 0x5, 0x800, 0x401, 0xfffffffa, 0xfffff001, 0x3, 0x3, 0xfffffffd, 0x5, 0xfffffffc, 0x0, 0x6, 0x7, 0x8, 0xc0a8, 0xe8, 0x4000000, 0x6152, 0x98, 0xc8e, 0x1, 0xf, 0xfff, 0x3f, 0x1, 0x2, 0x3, 0x40, 0x80008, 0x7, 0xa228, 0x90de, 0x5, 0x7f, 0x10000, 0x3, 0x7, 0x200, 0xfffffff4, 0x200, 0x9, 0x9, 0x8]}, @TCA_POLICE_TBF={0x3c, 0x1, {0xc04, 0x5, 0x101, 0x80000000, 0x7, {0x1, 0x1, 0x4, 0x7, 0x1000, 0xa7d}, {0x7, 0x0, 0x1, 0x3, 0x3, 0x5}, 0x5, 0xc17, 0x1}}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x5, 0xd9, 0x1, 0x5, 0xfffffff9, 0xea7, 0x1, 0x4, 0x4bea, 0x1, 0x1, 0x7, 0x1, 0x3ff, 0x53, 0x9, 0x4, 0x8a, 0x3ff, 0x2, 0x672, 0x800, 0x6, 0x1, 0xffff, 0x10000, 0x8, 0x9, 0x4e, 0x4, 0x1, 0x4, 0x96, 0x83c6, 0x3, 0xfff, 0x5, 0x1000, 0x0, 0x7, 0x67e4, 0x2, 0xa0b, 0x5, 0xfff, 0x4, 0xd, 0x6, 0xed, 0x9bb, 0x8, 0x8, 0x2, 0x9, 0xffffff81, 0x1, 0x9, 0x5, 0x1, 0x1, 0x2, 0x81, 0x4, 0x45, 0x8, 0x401, 0x4, 0x6, 0x8, 0xffffffff, 0x0, 0x4, 0x9, 0x5, 0x4, 0x5, 0x4, 0x9, 0x20000, 0x2f, 0x2, 0x6f9, 0x3, 0xebc, 0x6, 0x4, 0x1e, 0xfffffffb, 0x6, 0x8e, 0xffffff15, 0x44, 0x9, 0x42, 0x0, 0x40, 0x1, 0x3, 0x7d, 0x4d000000, 0x4, 0x8, 0x8, 0x1, 0x400, 0x3, 0xff, 0xadd, 0x1000, 0x0, 0x61, 0x8, 0xa, 0x7fffffff, 0xd0c, 0x6, 0x3, 0x2364, 0x4, 0xfffffffd, 0x0, 0xffff, 0x3ff, 0x5, 0x1, 0x0, 0x0, 0x3, 0x8, 0x6, 0x8, 0x3, 0x2, 0xd2, 0x10001, 0x0, 0x2, 0x3, 0x4, 0xfffffff2, 0x6, 0xfffffffd, 0x9, 0x1, 0x0, 0x4, 0x8, 0xef, 0x8, 0x44a, 0x0, 0x5, 0x7, 0x3, 0x0, 0x10000, 0x80, 0x7, 0x0, 0x5, 0x1, 0x0, 0x6, 0xd2, 0x4, 0x9, 0x10000, 0x9, 0xffffffff, 0x3ff, 0x8, 0x8, 0xf, 0x5, 0x6, 0x3, 0x0, 0x1, 0x0, 0x6, 0x271, 0x800, 0xbc2, 0xdcbc, 0x10000, 0x72, 0x7, 0x2, 0x4, 0x4, 0x10001, 0x6, 0x9c, 0x10001, 0x8001, 0xf6f, 0x9, 0x8, 0x9, 0x7, 0x8000, 0xde21, 0x10, 0x34, 0x8, 0x9, 0x2, 0x80000000, 0x1, 0x7, 0x5, 0xff, 0x7, 0x1, 0x80000001, 0x6af, 0x1, 0x5, 0x44, 0x80000001, 0x3, 0x4, 0x0, 0x8, 0x100, 0x4, 0x800, 0x6, 0x0, 0x8, 0x8, 0x9, 0x1c, 0x401, 0x2, 0x5, 0x3, 0x1, 0x3, 0x8000, 0x2, 0x1, 0xffffffff, 0x600, 0xb, 0x101, 0x9, 0x7, 0xae7f7fd, 0x6efc, 0x4, 0x800, 0x9, 0x0, 0xfffffff5]}, @TCA_POLICE_RATE={0x404, 0x2, [0x40, 0x1, 0x8001, 0x5, 0xd, 0x1, 0x3, 0xe2, 0x1ff, 0x81ee, 0x5, 0x2, 0x3, 0x1, 0x7, 0x9, 0x5, 0xe, 0x6c000000, 0x2, 0x5, 0x4, 0x4, 0x7, 0x1, 0x200, 0x0, 0x10001, 0xb1a, 0x4, 0x0, 0xf95, 0x0, 0x37a0, 0xa93, 0x0, 0x7, 0xd7, 0x7, 0x1, 0x3, 0x8, 0x101, 0x10000, 0x7, 0xe, 0x7, 0x905e, 0x4, 0x3, 0x7, 0x16, 0xfffffffb, 0x2, 0x3, 0x9, 0x7, 0x2, 0xfffffffa, 0xb, 0xffff, 0x4, 0x1, 0x7, 0x6, 0x8, 0x401, 0x6eab, 0x2, 0x5, 0x80, 0x8, 0x6, 0x1, 0x80000001, 0x9, 0x9, 0x5, 0x0, 0x7, 0x1, 0x2, 0x400, 0xfffffffa, 0x9, 0x7, 0x8, 0x9, 0x8, 0x5, 0x2d86, 0x7, 0xff, 0x8, 0x5, 0x7, 0x10001, 0x40, 0x0, 0xd53, 0x3, 0x7f, 0xfffffff0, 0x95f, 0x4, 0xffff, 0x10000, 0x4, 0x9, 0x4, 0x7, 0x9b, 0xfffffffb, 0x7, 0x3, 0x57, 0x9, 0x31b2, 0x4000, 0xff, 0xe, 0x4dbfc7cb, 0x3, 0x80, 0x6, 0xac, 0x10, 0xcd, 0xf, 0x2, 0xc, 0x401, 0x1, 0x3, 0x9, 0x6, 0x2, 0x4, 0x2, 0x3f0, 0x8, 0x20003ff, 0xfffff801, 0x0, 0x5, 0x80000000, 0x8f7, 0x8001, 0x9, 0x9, 0x5, 0x0, 0x2, 0x4, 0x60000000, 0x8, 0x4, 0x5, 0x7, 0x5, 0x8, 0x1, 0x5, 0x0, 0x0, 0x49, 0x7, 0xb, 0x7, 0x1, 0x3, 0xa9d, 0x2, 0x0, 0x2, 0x401, 0xffffffc0, 0x80, 0x8, 0x1, 0x1, 0xffffffff, 0x0, 0x9, 0x1, 0xa4b7, 0x10, 0x5, 0x3, 0x7, 0x0, 0x1, 0x5, 0x5, 0x1, 0x80, 0x5, 0xe3, 0x87a4, 0xa0f, 0x6, 0xe, 0x5f61713d, 0x8, 0x7f, 0xaf07, 0x0, 0x1ff, 0x7, 0x9, 0x10001, 0x5, 0x4, 0x10, 0x800, 0x7f, 0x7, 0x2, 0x7, 0x0, 0x4, 0x6, 0x3, 0xfffffe94, 0x10001, 0x2d8, 0x6, 0xe5, 0x9, 0x3d38, 0xffff, 0x6, 0x401, 0x26bb, 0x1c0000, 0x1, 0xf15, 0x0, 0x6, 0x5, 0x200, 0x6, 0x7f, 0x8, 0xd2a0, 0xfffffc00, 0x2, 0x7, 0x8000, 0x4, 0x9, 0xffffffff, 0x8, 0x2, 0x7, 0x9]}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x5}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x7fff}]}, @TCA_BASIC_EMATCHES={0x14, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x10}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xa}}]}, @TCA_BASIC_CLASSID={0x8, 0x1, {0x0, 0xfff3}}, @TCA_BASIC_CLASSID={0x8, 0x1, {0xffff, 0xfff3}}, @TCA_BASIC_EMATCHES={0x2b0, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xfffc}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x8}}, @TCA_EMATCH_TREE_LIST={0x128, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0xe4, 0x2, 0x0, 0x0, {{0x0, 0x9, 0x3}, [@TCA_EM_IPT_HOOK={0x8, 0x1, 0x2}, @TCA_EM_IPT_HOOK={0x8, 0x1, 0x2}, @TCA_EM_IPT_NFPROTO={0x5, 0x4, 0x3}, @TCA_EM_IPT_HOOK={0x8, 0x1, 0x1}, @TCA_EM_IPT_NFPROTO={0x5, 0x4, 0x2}, @TCA_EM_IPT_HOOK={0x8}, @TCA_EM_IPT_MATCH_DATA={0xa0, 0x5, "60ed5f6a34a53fdf737fb26f1e326b163bb15b08fd32508e038b2310402ed44c4364b942df891e73f1204bcb0e635ee03bdbbb8f360f856935462e1d7adeb0303fd9d8993c6f600fdab2cc01a54b4bedd577ee34ce695b5e17d1c72df774ec9f9240555901e619f77d0086fd825ec4d8da66dcd99300cf54645716f5e80fa76c2997c8eab84cd6ad3a11ec6b73b379fcde8f9c86620685433ca85365"}, @TCA_EM_IPT_HOOK={0x8, 0x1, 0x1}]}}, @TCF_EM_NBYTE={0x14, 0x3, 0x0, 0x0, {{0x3, 0x2, 0x3}, {0x8, 0x1, 0x2, 'j'}}}, @TCF_EM_CANID={0x14, 0x2, 0x0, 0x0, {{0xc7, 0x7, 0xbd}, {{0x4, 0x0, 0x0, 0x1}, {0x4, 0x1, 0x1}}}}, @TCF_EM_NBYTE={0x18, 0x2, 0x0, 0x0, {{0x1, 0x2, 0x5}, {0x5, 0x7, 0x0, "19cd8153da7acf"}}}]}, @TCA_EMATCH_TREE_LIST={0x174, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x14, 0x3, 0x0, 0x0, {{0xe, 0x7, 0x1}, {{0x2, 0x0, 0x1, 0x1}, {0x0, 0x0, 0x1}}}}, @TCF_EM_CANID={0x14, 0x2, 0x0, 0x0, {{0xec30, 0x7, 0x9}, {{0x4, 0x0, 0x1}, {0x2}}}}, @TCF_EM_META={0x38, 0x2, 0x0, 0x0, {{0x2}, [@TCA_EM_META_HDR={0xc, 0x1, {{0x3, 0x40, 0x2}, {0x0, 0x9}}}, @TCA_EM_META_HDR={0xc, 0x1, {{0x4, 0x0, 0x2}, {0x0, 0x2, 0x2}}}, @TCA_EM_META_LVALUE={0x8, 0x2, [@TCF_META_TYPE_INT=0x5]}, @TCA_EM_META_HDR={0xc, 0x1, {{0x2, 0x7, 0x2}, {0xc23, 0x4, 0x1}}}]}}, @TCF_EM_IPT={0xfc, 0x2, 0x0, 0x0, {{0x9, 0x9, 0x2d7}, [@TCA_EM_IPT_HOOK={0x8, 0x1, 0x3}, @TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_HOOK={0x8}, @TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_MATCH_REVISION={0x5, 0x3, 0x9}, @TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_NFPROTO={0x5, 0x4, 0xa}, @TCA_EM_IPT_MATCH_DATA={0xa0, 0x5, "859a72322f18655e6bfb29548bb853f05f52bd1ef25e9e6dd68a4e0e5c06f88afb678e08bc3e48d97e7eacb652143be24b56a8f86c4f88266e95040717fa8d9bc1b910520d26f3eaa35b253c2ed78f4dd21790c2a5eb8079ac57b6aeefce1a77cef996218ab872edf87bea5ebfe40515346cfad184483d58d296760627e95cdaba23950ee42e6961985e79566301c1ba1c54a51c0e5a8fa4c50869f2"}, @TCA_EM_IPT_MATCH_NAME={0xb}]}}, @TCF_EM_CANID={0x14, 0x2, 0x0, 0x0, {{0x2, 0x7, 0x3}, {{0x3, 0x0, 0x1, 0x1}, {0x4, 0x1}}}}]}]}]}}, @TCA_CHAIN={0x8, 0xb, 0x9}]}, 0xfb8}}, 0x24008000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000440)={0x0}, 0x1, 0x0, 0x0, 0x80}, 0x800) setsockopt$sock_int(r0, 0x1, 0xf, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000040)='ns\x00') 14.531451551s ago: executing program 5 (id=604): r0 = openat$sndtimer(0xffffff9c, &(0x7f0000000080), 0x8040) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100000000000000000000000000008500"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, 0x0) ioctl$SNDRV_TIMER_IOCTL_GINFO(r0, 0xc0f85403, &(0x7f0000000440)={{0x3, 0x0, 0x8, 0x2, 0xfffffffd}, 0x101, 0xdf, 'id0\x00', 'timer1\x00', 0x0, 0xdf46, 0xfffffffffffffffd, 0x20080000000, 0x1}) 12.277042752s ago: executing program 5 (id=605): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000000c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r0, &(0x7f0000006380)={0x2020, 0x0, 0x0}, 0x2020) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000280), r3) sendmsg$NL802154_CMD_DEL_SEC_LEVEL(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)=ANY=[@ANYBLOB='d\x00\x00\x00', @ANYRES16=r4, @ANYRES32, @ANYBLOB="24002d801a0001"], 0x64}}, 0x0) write$FUSE_INIT(r0, &(0x7f0000004200)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0x2066012}}, 0x50) readv(r0, &(0x7f0000000340)=[{&(0x7f0000000240)=""/153, 0x99}, {&(0x7f00000008c0)=""/4096, 0x1000}, {&(0x7f0000002140)=""/4096, 0x1000}, {&(0x7f0000000300)=""/28, 0x1c}], 0x4) syz_fuse_handle_req(r0, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000090c400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000542d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ea8286a2fba523440000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000633956a1000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007d6ab715107fa1820000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f6ffffffffffffff0000000000000e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e1ffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f4000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000286071480000000000b13bc1e6d970884f00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f3ffffffffffffff00", 0x2000, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x601002, 0x0) fadvise64(r5, 0x100000001, 0x2, 0x4) openat(0xffffffffffffff9c, 0x0, 0x0, 0x40) chmod(&(0x7f0000000080)='./file0\x00', 0x50) mprotect(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x4) syz_fuse_handle_req(r0, 0x0, 0x0, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 12.164575879s ago: executing program 1 (id=608): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_RTOINFO(r0, 0x84, 0x0, 0x0, &(0x7f0000000200)) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000002000)=""/102400, 0x19000) syz_open_dev$vim2m(0x0, 0x2000000f5, 0x2) r2 = socket$inet_smc(0x2b, 0x1, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) timer_create(0x0, &(0x7f0000000180)={0x0, 0x21, 0x4}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$afs(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0), 0x200001, &(0x7f0000000080)=ANY=[@ANYBLOB='dyn']) chdir(&(0x7f00000000c0)='./file0\x00') r3 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r3, 0x90009427, &(0x7f0000000180)) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={0x0, 0xfc}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) sendmsg$TIPC_CMD_GET_NODES(0xffffffffffffffff, 0x0, 0x84) r5 = syz_open_dev$dri(0x0, 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r5, 0xc05064a7, &(0x7f0000000200)={0x0, 0x0, 0x0, &(0x7f0000000540)}) ioctl$sock_SIOCGIFVLAN_GET_VLAN_VID_CMD(r2, 0x8982, &(0x7f0000000280)) ioctl$DRM_IOCTL_MODE_SETPROPERTY(r5, 0xc01064ab, &(0x7f0000000e00)={0x1f}) mq_open(0x0, 0x42, 0x9883fcfa06e0fef5, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) r6 = syz_open_dev$sndctrl(&(0x7f0000000380), 0x1, 0x1a3684) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r6, 0xc4c85512, &(0x7f0000000780)={{0x2, 0x3, 0x1a5, 0x9, 'syz0\x00', 0x1}, 0x1, [0x5, 0x8, 0x11, 0xfffffffffffffff8, 0x5, 0x9, 0x8000000000000001, 0x6, 0x80000001, 0x23, 0x80, 0x4, 0x2, 0x0, 0x10, 0x4, 0x6, 0x2000006, 0x51d0d156, 0xffffffffffffffff, 0x8, 0x100000001, 0x9, 0x4, 0x4, 0x544f688c, 0xffffffffffffffff, 0x0, 0x0, 0x9, 0x7, 0x6, 0xffffffff, 0x0, 0x200000000000004, 0x80000001, 0x7fffffff, 0x5a5b, 0x8, 0x6, 0x2, 0x5, 0x4, 0x1000000002, 0x0, 0x7, 0xa, 0x100000000, 0x724, 0x4, 0x7fffffffffffffff, 0xc9, 0x7, 0x4, 0x2, 0x0, 0x7fff, 0x2, 0xffff, 0x9a, 0x8, 0x76, 0x8, 0x1, 0x3, 0x4, 0x51c, 0x5, 0x48000000000000, 0x20f, 0x9, 0x9, 0xfa4, 0x40, 0x6, 0x9, 0x401, 0x9, 0x5, 0xfff, 0x1, 0x7, 0x1e, 0xfff, 0x0, 0x737, 0xfffffffffffffff9, 0x9, 0x4, 0x7c, 0x2, 0x1, 0xfffffffffffffff7, 0x5, 0x5, 0x2, 0x5, 0x3, 0x2, 0x9, 0x0, 0x7, 0x2, 0x3, 0x2945, 0xffffffffffffffe5, 0x801, 0xe, 0x9, 0x6, 0xbe, 0x9, 0x40000000ffffffff, 0x4, 0x10001, 0x401, 0x7fffffff, 0x2, 0x6, 0x8, 0xd, 0x8, 0x5, 0x3, 0x2, 0x6, 0x8000000000000000, 0x8]}) 10.646141984s ago: executing program 1 (id=611): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x101401, 0x0) ioctl$PTP_PEROUT_REQUEST(r1, 0x40043d14, &(0x7f0000000600)={{0x11000}, {0x9}, 0x7}) r2 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_int(r2, 0x29, 0x19, &(0x7f0000000000)=0x84, 0xfde1) sendto$inet6(r2, 0x0, 0x0, 0x200c8084, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @mcast2, 0x6}, 0x1c) sendto$inet6(r2, &(0x7f0000001cc0)="2501d77b330b7e73d6b1d1b8a473ff7420b4b43ce0861f000000714fa228ee1f5b48", 0xfffffffffffffe57, 0x8000, 0x0, 0x0) recvmmsg(r2, &(0x7f0000002480)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40002003, 0x0) sendmsg(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000280)="4c0000001200ff09ff3a150099a283ff07b8008000f0ffff000000060040150024001d00120511a09798bc593ab6821148a730cc33a49868c62b2ca654a6613b6aab9d25bf46050d3c3a2b04", 0x4c}], 0x1}, 0x4008000) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000580), 0x0, 0x0) r4 = dup(r3) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, 0x0, &(0x7f0000000140)=0xd) getsockopt$inet_sctp6_SCTP_MAX_BURST(r5, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000300)=0x8) r7 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_RTOINFO(r7, 0x84, 0x0, &(0x7f0000000340)={r6, 0x3ff, 0xffff, 0xfffffffa}, 0x10) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r5, 0x84, 0x75, &(0x7f00000000c0)={r6, 0x9}, 0x8) r8 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r9 = dup(r8) sendfile(r9, r4, 0x0, 0x89ffc) unshare(0x2040400) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(0xffffffffffffffff, 0x114, 0xa, 0x0, 0x4) syz_usb_connect$uac1(0x0, 0x93, &(0x7f0000000000)=ANY=[], &(0x7f0000002900)={0x0, 0x0, 0x0, 0x0}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'veth1_to_batadv\x00'}) 10.594458322s ago: executing program 5 (id=612): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback, 0x101}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x20000845, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=ANY=[@ANYBLOB="38000000180001000101000000000000020000000000000900000000060015000400000014001680100008"], 0x38}}, 0x0) ioctl$int_in(r1, 0x5452, &(0x7f0000000040)=0x9) recvfrom(r1, 0x0, 0x0, 0x20, 0x0, 0x0) shutdown(r1, 0x1) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000400), 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r5, &(0x7f0000000100)={0x1f, 0xffffffffffffffff, 0x4}, 0x6) setsockopt$bt_BT_RCVMTU(r5, 0x112, 0xd, 0x0, 0x0) r6 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r6, &(0x7f00000000c0)=@name={0x1e, 0x2, 0x9d3354bba4295a8d, {{0x42}}}, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r8, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r9 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r9, 0x84, 0xb, &(0x7f00000000c0)={0x0, 0x0, 0xfe, 0x2, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0xe) shutdown(r9, 0x1) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r9, 0x84, 0x21, &(0x7f0000000180)=0x6, 0x4) sendmsg$DEVLINK_CMD_TRAP_GET(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000680)={0x14, r3, 0x2b8ee6cf79dab3f, 0x0, 0x0, {0x2e}}, 0x14}}, 0x0) 9.468728819s ago: executing program 7 (id=616): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000200)=ANY=[@ANYBLOB="9feb0100180000000000000000008b00000000000e0500000007000000002e00000000000800000000"], 0x0, 0x2b, 0x0, 0x1, 0x4, 0x0, @void, @value}, 0x28) syz_usb_connect$hid(0x3, 0x36, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x6) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) syz_emit_ethernet(0x0, 0x0, 0x0) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x10) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000000c0)=0x0) ptrace(0x8, r5) lseek(0xffffffffffffffff, 0x300000002, 0x0) ioctl$VIDIOC_QUERYMENU(0xffffffffffffffff, 0xc040564a, 0x0) openat$rfkill(0xffffffffffffff9c, 0x0, 0x402100, 0x0) r6 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/mm/ksm/run\x00', 0x1, 0x0) write$sysctl(r6, &(0x7f0000000000)='2\x00', 0x2) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f00000011c0)='/proc/cpuinfo\x00', 0x0, 0x0) read$ptp(r7, &(0x7f00000010c0)=""/179, 0xb3) r8 = memfd_create(&(0x7f0000000280)='\x00\x00\x00\x00\x00\x00z\x9b\xb6\xe8t;\xfc\x02\x00\x00\x009\xa0\x8b\x14d\xa2\xa1\xa8!\xe8\xd1\xa0\x8a\xce0\x1c\xb7\xf1\xccm\xce\xd4\xdb\x89\xe5\x8f\xe2\xb6\xd6\x9cF\xbd\xff\x14\x05\x00\x00\x00\x00\x00\x00\x00\xf3\xdc\x91\'\x06\\8\r\xfc\xeeG\xbe\x90C\x1c)5\x98\xa3\xfa\a\xf9\x98\xbb}\xeb\x86P=\xe51\x9d,\xb7\xe6_M\xbe\x19\xea#\xff[\xd1\xc3\x9a\xa3\x1b\xf9\xe9\x1d \xce1\xc9\x9f\xb0\x14\xc2\xeb\xf9\xceE\xad\xa4\x92\f\xef\x87g\xb6\xabW\xac\rP\xf42\xb7\xc8\xaajn\xd7\n\r\x802\xd7\x1b$\x95tO*\xf4\xae\xb8\xb8m\xbf\r\xd5\xbf*\xfd\xc7\x85\x1b\x8b\xe5\x97j`c\xe0\x88?\xda\x8a#t>r\xae\xe8\xc9)', 0x0) execveat(r8, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) r9 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) fallocate(r9, 0x3, 0x0, 0x100000800000000) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000100)={@fallback=r0, 0x37, 0x0, 0x7fffffff, &(0x7f0000000000)=[0x0, 0x0, 0x0], 0x3, 0x0, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0]}, 0x40) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000240)={'syztnl0\x00', &(0x7f0000000180)={'ip6gre0\x00', 0x0, 0x4, 0x3, 0xf6, 0x5, 0x5, @empty, @remote, 0x700, 0x8, 0x9, 0x5}}) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000002c0)={0x0, 0xffffffffffffffff, 0x0, 0x2, &(0x7f0000000280)='!\x00'}, 0x30) 8.066903713s ago: executing program 4 (id=619): sendmmsg$inet(0xffffffffffffffff, &(0x7f00000001c0), 0x0, 0x84) socket$nl_route(0x10, 0x3, 0x0) prctl$PR_GET_THP_DISABLE(0x2a) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x81, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x9) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0xb635773f07ebbee7, 0x10010, 0xffffffffffffffff, 0x922ce000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xf, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffffffff}) r3 = openat$smackfs_netlabel(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) writev(r3, &(0x7f00000007c0)=[{&(0x7f00000006c0)='-', 0x1}], 0x1) r4 = syz_open_dev$vbi(&(0x7f0000002100), 0x1, 0x2) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = socket(0x2, 0x80805, 0x0) sendmmsg$inet_sctp(r6, &(0x7f00000032c0), 0x0, 0x4008801) ioctl$VIDIOC_S_HW_FREQ_SEEK(r4, 0x40305652, &(0x7f0000000140)={0x2, 0x4, 0x8000, 0x6, 0x1a, 0x3, 0xe3c}) ioctl$FS_IOC_FSGETXATTR(r4, 0x801c581f, &(0x7f0000000100)={0x5, 0x5, 0x5, 0x1, 0x9638}) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000600)=@filter={'filter\x00', 0x4, 0x4, 0x4b8, 0xffffffff, 0x0, 0x260, 0x260, 0xfeffffff, 0xffffffff, 0x3e8, 0x3e8, 0x3e8, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@empty, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, [0xffffffff, 0xff, 0xff, 0xff000000], [0x0, 0xff, 0xff000000, 0xffffff00], 'team_slave_0\x00', 'veth1_to_hsr\x00', {}, {}, 0x87, 0x6, 0x4, 0xa}, 0x2f2, 0xa8, 0xe8}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x0, 0x5, {0x7}}}}, {{@ipv6={@private2, @empty, [], [0x0, 0x0, 0xff000000], 'sit0\x00', 'batadv_slave_1\x00'}, 0x0, 0x138, 0x178, 0x0, {}, [@common=@srh1={{0x90}, {0x21, 0x12, 0xbc, 0x7, 0x5aa9, @remote, @private1, @local, [0xff000000, 0xff000000, 0x0, 0xff], [0xffffff00, 0xff000000, 0xff], [0x0, 0xffffff, 0xffffff00, 0x7fffff7f], 0x3980}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x0, 0xff, {0x2000000}}}}, {{@uncond, 0x0, 0x160, 0x188, 0x0, {}, [@common=@unspec=@addrtype1={{0x28}, {0x21, 0x180, 0x5}}, @common=@srh1={{0x90}, {0x0, 0x3, 0x0, 0x3, 0x0, @loopback, @mcast1, @private1, [0x0, 0x0, 0xff], [], [], 0x843, 0x1400}}]}, @REJECT={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x518) write(r4, &(0x7f0000000280), 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000919000/0x1000)=nil, 0x1000, 0x2, 0x2010, r4, 0x0) ioctl$VIDIOC_S_FMT(r4, 0xc0d05605, &(0x7f0000000000)={0x7, @pix_mp={0xffffff02, 0x411, 0x47504a4d, 0x8, 0x8, [{0x9, 0x49}, {0x4, 0x5}, {0x10004, 0xf533}, {0x4e7f, 0x80000001}, {0x7, 0x8}, {0x0, 0x401}, {0x8, 0x8b9}, {0x6, 0x3}], 0x5, 0x8, 0x0, 0x1}}) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000b80)={0x0, @dev, @multicast2}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) 7.302748424s ago: executing program 4 (id=620): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='io_uring_register\x00', r0}, 0x10) sendmsg$NL802154_CMD_DEL_SEC_LEVEL(0xffffffffffffffff, &(0x7f0000001b40)={0x0, 0x0, &(0x7f0000001b00)={&(0x7f0000000000)=ANY=[@ANYBLOB, @ANYRES16, @ANYBLOB="010003001000000000002100000008000300", @ANYRES32], 0x40}}, 0x0) r1 = io_uring_setup(0x504f, &(0x7f0000000400)={0x0, 0xfffffffd, 0x10000, 0x0, 0x2d1}) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r1, 0x18, &(0x7f0000000000), 0x1) 7.250877037s ago: executing program 6 (id=621): mknod$loop(&(0x7f00000190c0)='./file0\x00', 0xfff, 0x0) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000004c0)={0x2c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_TX_RATES={0x10, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0xc, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x5, 0x2, [{0x6, 0xa}]}]}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000801}, 0x0) execve(&(0x7f0000019100)='./file0\x00', 0x0, 0x0) (async) socket$alg(0x26, 0x5, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='fd\x00') (async) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) write$FUSE_NOTIFY_INVAL_INODE(r3, &(0x7f0000000040)={0x28, 0x2, 0x0, {0x1, 0x9, 0x5}}, 0x28) 7.24580876s ago: executing program 4 (id=622): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) syz_open_dev$sndctrl(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x562, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$nl_rdma(0x10, 0x3, 0x14) r2 = socket$key(0xf, 0x3, 0x2) recvmmsg(r2, &(0x7f0000000440), 0x6f5, 0x2000000022, &(0x7f0000000480)={0x77359400}) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000000)={{0x1, 0x1, 0x18, r1, {0xffffb9af}}, './file0\x00'}) sendmsg$key(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000680)=ANY=[@ANYBLOB="0208000002"], 0x10}}, 0x0) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x18}}, 0x4010010) syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_NEW_KEY(r3, 0x0, 0x0) 6.780259852s ago: executing program 1 (id=623): connect$pppoe(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x100000000004, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000000300)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xb4, 0xb4, 0x3, [@int={0x4, 0x0, 0x0, 0x1, 0x0, 0x4, 0x0, 0x60}, @ptr={0xb, 0x0, 0x0, 0x2, 0x5}, @decl_tag={0xc, 0x0, 0x0, 0x11, 0x1, 0x6}, @union={0xa, 0x9, 0x0, 0x5, 0x1, 0x0, [{0x10, 0x2, 0xfffffffd}, {0x5, 0x4}, {0x4, 0x1, 0x4c13}, {0xf, 0x3, 0x1}, {0x2, 0x3, 0x6}, {0xf, 0x1, 0x3a}, {0xb, 0x0, 0x5}, {0x0, 0x2, 0x7}, {0xe, 0x2, 0x401}]}, @decl_tag={0x5, 0x0, 0x0, 0x11, 0x4, 0x9}]}, {0x0, [0x0]}}, &(0x7f0000000d80)=""/4096, 0xcf, 0x1000, 0x0, 0x8, 0x0, @void, @value}, 0x28) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000000d40)={0x0, 0x7000003, &(0x7f00000023c0)=[{&(0x7f0000000b40)='?', 0x1}, {0x0, 0x1}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x20001) r3 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r3, 0x0, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2c000011) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x12, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB], &(0x7f0000000640)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @cgroup_sock_addr=0x14, 0xffffffffffffffff, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sendto(0xffffffffffffffff, 0x0, 0x0, 0x8000, 0x0, 0x0) open_by_handle_at(0xffffffffffffffff, 0x0, 0x20001) socket$inet6_mptcp(0xa, 0x1, 0x106) getresuid(&(0x7f0000000440)=0x0, &(0x7f0000000480), &(0x7f00000004c0)) newfstatat(0xffffffffffffff9c, &(0x7f0000000500)='./file0\x00', &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x100) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f00000005c0)={0x0, 0x0}, &(0x7f0000000600)=0xc) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000200), 0x1000000, &(0x7f0000000680)={{}, 0x2c, {'rootmode', 0x3d, 0x6000}, 0x2c, {'user_id', 0x3d, r4}, 0x2c, {'group_id', 0x3d, r5}, 0x2c, {[{@allow_other}, {@allow_other}, {@max_read={'max_read', 0x3d, 0x2}}, {@default_permissions}, {@blksize={'blksize', 0x3d, 0xc00}}, {@default_permissions}], [{@euid_eq={'euid', 0x3d, r6}}, {@smackfsfloor={'smackfsfloor', 0x3d, '/dev/cpu/#/msr\x00'}}, {@permit_directio}]}}) r7 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r7, 0x0, 0x0) mount$nfs4(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x2, 0x0) sendfile(r7, 0xffffffffffffffff, 0x0, 0x20000023893) r8 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r8, &(0x7f0000000080)={0x18, 0x0, {0xc, @remote, 'ip6tnl0\x00'}}, 0x1e) r9 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/pm_print_times', 0x242, 0x0) sendfile(r9, r9, 0x0, 0xa) socket$nl_route(0x10, 0x3, 0x0) 6.270556946s ago: executing program 7 (id=624): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="050000005f000000050000000100000000000000", @ANYRES32, @ANYBLOB="00000000000000000000000000789ef6e2000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_CREATE(0x0, 0x0, 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0xfffffffffffffe01, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={0x0, r2}, 0x18) fgetxattr(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x64, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @target={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_TARGET_NAME={0x10, 0x1, 'CONNSECMARK\x00'}, @NFTA_TARGET_INFO={0x5, 0x3, "ef"}, @NFTA_TARGET_REV={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x8c}}, 0x14b6deac033214c2) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCMBIS(r3, 0x5416, &(0x7f0000000200)=0x47) r4 = syz_open_procfs(0x0, &(0x7f0000000080)='net/fib_trie\x00') epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x2, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000006c0)=@newsa={0x164, 0x10, 0x713, 0x0, 0x0, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @in6=@empty}, {@in=@empty, 0x0, 0x32}, @in=@broadcast, {}, {}, {0x0, 0x0, 0x40000000}, 0x0, 0x0, 0x2}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @etimer_thresh={0x8}, @lifetime_val={0x24}]}, 0x164}}, 0x4000000) syz_io_uring_setup(0x39, 0x0, 0x0, &(0x7f0000001880)) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0) ioctl$PIO_CMAP(r4, 0x4b71, &(0x7f0000000000)={0x3, 0x7f, 0xa, 0x3, 0x0, 0x2}) r6 = add_key$user(&(0x7f0000000400), &(0x7f0000000000)={'syz', 0x1}, &(0x7f0000000480)="ba", 0x1, 0xfffffffffffffffd) r7 = add_key$user(&(0x7f00000004c0), &(0x7f0000000500)={'syz', 0x2}, &(0x7f0000000540)="ba305a4550bba8977d59d29e8ae45898ed4b3cba97cea2007d716178d189b78f2078e58bcb1cfe09487fd16787fcbc77b5529ce5c68e9ad5a4d599fc40a069498778f6f0c9ad8c3913bed7cad6caae708f3c0326180b069dee6ef7a4c2ef9bb640fae9c28a07948e891ebe98f9a7a51f8307fee83af8a8f2f71752471a192ff4d3aa9cb96cd90f4c42b8ecf326e4c9d204361b42b3906eb8519bcd25915dc9378522f102eeeec1f2281088b99f216b8ab0aa271bea1a3bc7f32c57b4404db397", 0xc0, 0xffffffffffffffff) keyctl$dh_compute(0x17, &(0x7f0000000080)={r6, r7, r7}, &(0x7f000001f600)=""/105, 0x69, &(0x7f0000000240)={&(0x7f000001f680)={'sha3-224-generic\x00'}}) r8 = add_key$user(&(0x7f0000000000), &(0x7f0000000180)={'syz', 0x0}, &(0x7f00000001c0)="83d2782be928427b537100656c510bc7820247ec2f679ab4f46f852407eaa0be151c4481aa9cbcfb582e03f87109b5c898b4ac47575cadc5a3fd3b7452e00e8b6d8cccf0f0823e7761514029c84479c718d33ad1d09fe390c012d238b0fd21f9008593d1591459cb3f3cc733dd6a45a4c452dc6cef549a71edc7ac104b936bec887dc5c21d9ef68ce2d1e6f498b5120e733a9ef3f880987b334f4408", 0x9c, 0xfffffffffffffff8) keyctl$dh_compute(0x17, &(0x7f0000000280)={r6, r8}, &(0x7f0000000340)=""/89, 0x59, &(0x7f0000000400)={&(0x7f00000003c0)={'blake2s-160-generic\x00'}}) 6.214261497s ago: executing program 6 (id=625): socket$nl_generic(0x10, 0x3, 0x10) shutdown(0xffffffffffffffff, 0x1) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0xb, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000020001801000020646c2100000000002020007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(r2, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f00000006c0)={0x18, r3, 0xa95f7f23e6ffcb3f, 0x0, 0x0, {}, [@HEADER={0x4}]}, 0x18}}, 0x0) 5.583463677s ago: executing program 4 (id=626): bpf$TOKEN_CREATE(0x24, &(0x7f0000000140), 0x8) r0 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000180), 0x4) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x10, 0x5, &(0x7f0000000000)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0xa, '\x00', 0x0, 0x0, r0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) syz_usb_connect$cdc_ncm(0x2, 0x76, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x64, 0x2, 0x1, 0x0, 0xa0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x3}, {0x5}, {0xfffffffffffffeec}, {0x6, 0x24, 0x1a, 0x1, 0x21}}, {{0x9, 0x5, 0x81, 0x3, 0x200}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x8, 0x0, 0x0, 0x8e}}, {{0x9, 0x5, 0x3, 0x2, 0x200, 0x0, 0xff}}}}}}}]}}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000000)={'lo\x00', {0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000002b80)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r1, 0x0, 0x5}, 0x18) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000400)='/sys/power/resume', 0x149a82, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0xf) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000a00)=@delchain={0x11c, 0x65, 0x2, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x2, 0x2}, {0x0, 0x1}, {0x0, 0xb}}, [@filter_kind_options=@f_bpf={{0x8}, {0x30, 0x2, [@TCA_BPF_NAME={0xc, 0x7, './file0\x00'}, @TCA_BPF_FLAGS={0x8, 0x8, 0x1}, @TCA_BPF_FLAGS={0x8, 0x8, 0x1}, @TCA_BPF_FD={0x8}, @TCA_BPF_CLASSID={0x8, 0x3, {0xb, 0xfff2}}]}}, @TCA_CHAIN={0x8, 0xb, 0x8}, @filter_kind_options=@f_matchall={{0xd}, {0x90, 0x2, [@TCA_MATCHALL_CLASSID={0x8, 0x1, {0xe, 0x3}}, @TCA_MATCHALL_FLAGS={0x8, 0x3, 0x1}, @TCA_MATCHALL_CLASSID={0x8, 0x1, {0xffe0, 0xffe0}}, @TCA_MATCHALL_CLASSID={0x8, 0x1, {0xfff3, 0xd}}, @TCA_MATCHALL_FLAGS={0x8, 0x3, 0x1}, @TCA_MATCHALL_CLASSID={0x8, 0x1, {0x10, 0x10}}, @TCA_MATCHALL_CLASSID={0x8, 0x1, {0x4, 0xf}}, @TCA_MATCHALL_ACT={0x54, 0x2, [@m_ctinfo={0x50, 0xe, 0x0, 0x0, {{0xb}, {0xc, 0x2, 0x0, 0x1, [@TCA_CTINFO_PARMS_DSCP_STATEMASK={0x8, 0x6, 0x5}]}, {0x19, 0x6, "c29bbea977e4535250f2c8f19efcf1cae3055d9c6a"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x3, 0x1}}}}]}]}}, @TCA_RATE={0x6, 0x5, {0x6, 0x2}}, @filter_kind_options=@f_route={{0xa}, {0x4}}]}, 0x11c}, 0x1, 0x0, 0x0, 0x81}, 0x0) r5 = socket(0x10, 0x803, 0x0) sendto(r5, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r5, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0) mknod$loop(&(0x7f0000000000)='./file0\x00', 0x2000, 0x1) ioctl$SCSI_IOCTL_SEND_COMMAND(r4, 0x1, &(0x7f0000000540)={0x8d, 0x8, 0x9854, "7fac2923e20a94ef3ac1a19bb1c9dc2c35604d935924f789e57cd00086aca649fd3955b63609e98f817d4e3c34b9508075f92ad09af7b10b12a82695ebb166a3e9779d17f6b305d37970d4442600d0923d00699a45994e1f0196b9cc281549a777998b2e56b2d6d4c53519078dca1e6127dd10d36fa3d68e9cb9b68a90d3023d5898c8c8f872ae38bc30abdd7a"}) mknod$loop(&(0x7f00000002c0)='./file1\x00', 0x2000, 0x0) write$cgroup_int(r4, &(0x7f0000000040)=0x1f00, 0x12) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000380)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26, 0x0, 0x1, 0x0, 0x0, @void, @value}, 0x28) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000080)={r6, 0xfffffffffffffdee, &(0x7f0000000100)={0x0, 0xfffffc80, 0x0, 0x0}}, 0x10) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x5, 0x10012, r3, 0x0) epoll_pwait2(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x3938700}, 0x0, 0x0) 5.454883612s ago: executing program 1 (id=627): syz_open_dev$loop(&(0x7f00000005c0), 0x9, 0x12d600) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setscheduler(0x0, 0x1, &(0x7f0000000400)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@abs, 0x6e) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00"/12], 0x48) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r2, 0x40505331, &(0x7f0000000100)={{}, {0xe}, 0xbf00, 0xbf}) 5.454312043s ago: executing program 5 (id=628): r0 = openat$sndtimer(0xffffff9c, &(0x7f0000000080), 0x8040) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100000000000000000000000000008500"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$SNDRV_TIMER_IOCTL_GINFO(r0, 0xc0f85403, 0x0) 5.3016057s ago: executing program 6 (id=629): r0 = socket$nl_rdma(0x10, 0x3, 0x14) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000002000)=""/102400, 0x19000) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000012c0)=ANY=[@ANYBLOB="30000000111401000000000000000000080003000000000008004b001300000008"], 0x30}, 0x1, 0x0, 0x0, 0x4000800}, 0x410) 4.335475596s ago: executing program 5 (id=630): socket$alg(0x26, 0x5, 0x0) add_key$keyring(&(0x7f0000000000), 0x0, 0x0, 0x0, 0xfffffffffffffffe) keyctl$join(0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f0000000300), 0x0, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$VIDIOC_ENUM_FMT(r1, 0xc0405602, &(0x7f0000000100)={0x26, 0xa, 0x1, "3258c54601cccfcf1e009200090000000000001300deffffff00000000b28d00", 0x32314d59}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) mkdir(0x0, 0x0) rmdir(0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$sndseq(0xffffffffffffff9c, 0x0, 0x10000) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) execve(&(0x7f0000000740)='./file0\x00', 0x0, 0x0) link(&(0x7f00000001c0)='./file0\x00', 0x0) openat$cachefiles(0xffffffffffffff9c, 0x0, 0x201, 0x0) rename(0x0, &(0x7f0000000200)='./file0\x00') r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(r2, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x14, 0x3, 0x2, 0x204, 0x0, 0x0, {0x7, 0x0, 0x3}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x4002040}, 0x40000) fcntl$setsig(r2, 0xa, 0x11) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000800)={'erspan0\x00', &(0x7f00000006c0)={'gretap0\x00', 0x0, 0x80, 0x7, 0xe80, 0xa, {{0x42, 0x4, 0x0, 0x8, 0x108, 0x67, 0x0, 0x2, 0x29, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0x42}, {[@ssrr={0x89, 0xf, 0xa1, [@initdev={0xac, 0x1e, 0x1, 0x0}, @multicast2, @multicast1]}, @rr={0x7, 0xf, 0xc3, [@remote, @empty, @empty]}, @ssrr={0x89, 0x27, 0x14, [@broadcast, @empty, @rand_addr=0x64010101, @multicast2, @private=0xa010100, @broadcast, @broadcast, @empty, @empty]}, @timestamp_addr={0x44, 0x54, 0xee, 0x1, 0xd, [{@broadcast, 0xfffffffe}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x3}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x8}, {@multicast1, 0x7fff}, {@broadcast, 0x7}, {@loopback, 0x116962c2}, {@local, 0x4}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x6}, {@remote, 0x8}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x3}]}, @end, @noop, @cipso={0x86, 0x39, 0x3, [{0x0, 0x10, "cfcf906bf44289c1562db7ca574e"}, {0x1, 0x12, "f780ad991a9caf39fa71078d3c95655e"}, {0x2, 0x2}, {0x5, 0x5, "3a917f"}, {0x6, 0xa, "b520ebe14ab0370e"}]}, @generic={0x83, 0x12, "5b4b719291150975326cfcc66d1cd938"}, @timestamp={0x44, 0xc, 0x18, 0x0, 0x3, [0x65, 0x5]}]}}}}}) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x3, &(0x7f0000000840)=ANY=[@ANYRES16=r2], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', r3, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000200)='contention_begin\x00', r4}, 0x10) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x530, 0x348, 0x18c, 0x203, 0x348, 0x19030000, 0x460, 0x2e0, 0x2e0, 0x460, 0x2e0, 0x3, 0x0, {[{{@uncond, 0x300, 0x300, 0x348, 0x0, {}, [@common=@unspec=@bpf0={{0x230}, {0x13, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x16}]}}, @common=@hl={{0x28}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x590) 4.134552048s ago: executing program 7 (id=631): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x1b9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x23}}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f00000003c0)='ext4_allocate_inode\x00', r0}, 0x10) r2 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) getsockopt$ax25_int(r2, 0x101, 0x1, &(0x7f00000001c0), &(0x7f0000000200)=0x4) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000280)={0x0, r1, 0x0, 0xf, &(0x7f00000001c0)='\x00'}, 0x11) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r4 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000001c0), 0x4) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000002c0)={0x1b, 0x0, 0x0, 0x4, 0x0, 0xffffffffffffffff, 0xfffffbff, '\x00', 0x0, r4, 0x3, 0x3, 0x4, 0x0, @void, @value, @void, @value}, 0x50) mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) open$dir(&(0x7f0000000000)='./file0\x00', 0x400, 0x4) getsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x3f, 0x0, &(0x7f00000000c0)=0x25) 3.706196334s ago: executing program 6 (id=632): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='io_uring_register\x00', r0}, 0x10) sendmsg$NL802154_CMD_DEL_SEC_LEVEL(0xffffffffffffffff, &(0x7f0000001b40)={0x0, 0x0, &(0x7f0000001b00)={&(0x7f0000000000)=ANY=[@ANYBLOB, @ANYRES16, @ANYBLOB="010003001000000000002100000008000300", @ANYRES32], 0x40}}, 0x0) r1 = io_uring_setup(0x504f, &(0x7f0000000400)={0x0, 0xfffffffd, 0x10000, 0x0, 0x2d1}) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r1, 0x18, &(0x7f0000000000), 0x1) 3.398756765s ago: executing program 6 (id=633): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x101401, 0x0) ioctl$PTP_PEROUT_REQUEST(r1, 0x40043d14, &(0x7f0000000600)={{0x11000}, {0x9}, 0x7}) r2 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_int(r2, 0x29, 0x19, &(0x7f0000000000)=0x84, 0xfde1) sendto$inet6(r2, 0x0, 0x0, 0x200c8084, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @mcast2, 0x6}, 0x1c) sendto$inet6(r2, &(0x7f0000001cc0)="2501d77b330b7e73d6b1d1b8a473ff7420b4b43ce0861f000000714fa228ee1f5b48", 0xfffffffffffffe57, 0x8000, 0x0, 0x0) recvmmsg(r2, &(0x7f0000002480)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40002003, 0x0) sendmsg(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000280)="4c0000001200ff09ff3a150099a283ff07b8008000f0ffff000000060040150024001d00120511a09798bc593ab6821148a730cc33a49868c62b2ca654a6613b6aab9d25bf46050d3c3a2b04", 0x4c}], 0x1}, 0x4008000) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000580), 0x0, 0x0) r4 = dup(r3) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, 0x0, &(0x7f0000000140)=0xd) getsockopt$inet_sctp6_SCTP_MAX_BURST(r5, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000300)=0x8) r7 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_RTOINFO(r7, 0x84, 0x0, &(0x7f0000000340)={r6, 0x3ff, 0xffff, 0xfffffffa}, 0x10) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r5, 0x84, 0x75, &(0x7f00000000c0)={r6, 0x9}, 0x8) r8 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r9 = dup(r8) sendfile(r9, r4, 0x0, 0x89ffc) unshare(0x2040400) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(0xffffffffffffffff, 0x114, 0xa, 0x0, 0x4) syz_usb_connect$uac1(0x0, 0x93, &(0x7f0000000000)=ANY=[@ANYBLOB], &(0x7f0000002900)={0x0, 0x0, 0x0, 0x0}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'veth1_to_batadv\x00'}) 2.822099294s ago: executing program 7 (id=634): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000400)=ANY=[@ANYBLOB="18000002dcad6300ad662680e08143e0a8b59064c010aa48c56a9bcce13baca5a7f388b30922dbef2a7bc8977faf886d8d98b4dad5319218cb002e27f39fe2ae2d7aaccfa62dd268d6f930d61f8c67cb94b3f029846f839a6890e150b5aaf94909443453fa41c2db842eb8e298eef9536fcf15598a257fbb6287711241a8c0932eb0d835272aee89cc5ad1f7e2b7eb444948ec23a221a390f948129da6b71bbfc57d17046ede291d3a0000dc8d7f470ded58971fe5e2e0fe"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='contention_end\x00', r0}, 0x10) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f00000002c0)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r2, 0xc08c5335, &(0x7f0000000180)={0x0, 0x80, 0xfffffffd}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000016c0)=ANY=[@ANYBLOB="020d000018000000000000000000000005000600000000000a00000000000000fc010000000000000000000000000000000000000000000005000500000000000a000000000000000000000000000000000000000000000000000000000000000800120002000200000000000000000010002b00020300000200000000000000fe880000000000000000000000000001fc0100"/158], 0xc0}}, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x140, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) socket$nl_xfrm(0x10, 0x3, 0x6) r5 = socket(0x10, 0x3, 0x0) setsockopt$IPT_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x0, 0x61, &(0x7f0000000340)={'filter\x00', 0x2, [{}, {}]}, 0x48) openat$kvm(0x0, &(0x7f0000000040), 0x5e1000, 0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_buf(r6, 0x6, 0x23, &(0x7f0000000040)=""/32, &(0x7f0000000080)=0x20) unshare(0x8020400) r7 = socket$kcm(0x2, 0xa, 0x2) bind$rose(r7, 0x0, 0x0) r8 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_DELDEST(r8, 0x6, 0x9, &(0x7f0000000340)={{0x3b, @private=0xa0100ff, 0x4e20, 0x0, 'sed\x00', 0x13, 0x2, 0x1fffffe}, {@multicast1, 0x0, 0x0, 0x0, 0x7, 0x7}}, 0x6e) ioperm(0x83, 0x6, 0x8) membarrier(0x40, 0x0) getsockopt$inet_tcp_int(r8, 0x6, 0x9, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x30, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r9, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x4}}]}, 0x30}}, 0x44080) 2.778892521s ago: executing program 4 (id=635): r0 = syz_open_dev$video(&(0x7f0000000000), 0x8, 0x0) ioctl$VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000080)={0xa, @pix_mp={0x4, 0x40000000, 0x0, 0x0, 0x8, [{0x1, 0x4}, {}, {0xfffffffc}, {}, {0x0, 0x1}, {0xfffffffe}, {0x20}], 0xfc, 0x0, 0x1}}) (fail_nth: 4) 1.902700088s ago: executing program 4 (id=636): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(arc4)\x00'}, 0x58) openat$dsp(0xffffffffffffff9c, &(0x7f00000003c0), 0x101a02, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) openat$vmci(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000480)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) fsopen(&(0x7f00000001c0)='zonefs\x00', 0x0) r4 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_ERR_FILTER(r4, 0x65, 0x2, 0x0, 0x0) r5 = syz_usb_connect(0x0, 0x36, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r5, 0x0, 0x0) syz_usb_control_io(r5, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r5, 0x0, &(0x7f0000000580)={0x44, &(0x7f00000001c0)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r6 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r6, &(0x7f00000004c0)={0x18, 0x0, {0x1, @random="dffcc2101e34", 'wg2\x00'}}, 0x1e) syz_emit_ethernet(0x0, 0x0, 0x0) sendmmsg$sock(r6, 0x0, 0x0, 0x81) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x0, &(0x7f0000000280)}) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) 1.902198354s ago: executing program 7 (id=637): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000000004000000000000000000008500000050000000850000005000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f0000000300)='sched_switch\x00', r0}, 0x10) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/route\x00') pread64(r1, &(0x7f0000000080)=""/102356, 0x18fd4, 0xc2a) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x2, &(0x7f0000000200)=ANY=[@ANYBLOB="85000000a800000095"], &(0x7f0000000180)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200001c1, 0x0, &(0x7f00000001c0)='{', 0x0}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x6, 0xc, &(0x7f00000008c0)=ANY=[@ANYBLOB="180200000400000000000000000000008500000041000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_linger(r4, 0x1, 0x3c, &(0x7f0000000100)={0x200000000000001}, 0x8) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x5}, 0x1c) setsockopt$inet6_IPV6_HOPOPTS(r4, 0x29, 0x36, &(0x7f0000001440)=ANY=[], 0xc0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r5 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r8 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xf, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b702000016000000b70300000000fff48500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r9}, 0x2d) socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) sendmmsg$inet6(r4, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4000000) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x700, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) 1.493609815s ago: executing program 7 (id=638): getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = dup(r2) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="820000000000000093000040", @ANYRES64]) (fail_nth: 2) 273.220898ms ago: executing program 1 (id=639): r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x420100, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_UPDATE_OWE_INFO(r0, &(0x7f0000000180)={&(0x7f00000000c0), 0xc, &(0x7f0000000140)={&(0x7f0000000280)={0x244, r1, 0x4, 0x70bd29, 0x255fdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_IE={0x8c, 0x2a, [@fast_bss_trans={0x37, 0x0, {0x10, 0x0, "b2e4a6d3e38f5a4eba4cc5293c7ad589", "d9b6604fbf7c2beed3caefb354e80bd4f4e459b182b35128273840e80327af44", "d53ac61b7b5fc88555e8e7f3edb95aefeb95186b94fec863b019c3d601b31f2a", [{0x3, 0x0, "408ca8a9a004f77097d15c0cb996a8b304"}, {0x2, 0x0, "bbaa3a91178ed552b89334f1781316a86fa6d32505e08901a20af4dc062bacee6e3e97"}]}}, @channel_switch={0x25, 0x3, {0x1, 0xa1, 0xa}}, @measure_req={0x26, 0x0, {0x8, 0xef, 0x5, "907ac366443e9bdc5aab81ca37e6b2b4d1901966596edb1fdce09f40b406baaa9eadbd39b0ed1b7b9e212f0b2f5dd05d4e74656cd9775cde9dea50cc1ab7e39c4362eb82e39ede8a942ed279333a84c62dff6dcb060032c9"}}, @tim={0x5, 0x24, {0x0, 0xe5, 0xb, "f08f23f37726f30de512dc015fc9a0b336e564aa1178514841bba30b1b5b6e9ffa"}}, @supported_rates={0x1, 0x3, [{0x4}, {0x16}, {0x60, 0x1}]}, @mesh_config={0x71, 0x7, {0x0, 0x1, 0x0, 0xffffffffffffffff, 0x2, 0x8, 0x21}}, @challenge={0x10, 0x1, 0x44}, @supported_rates={0x1, 0xfffffffffffffe0b, [{0x6, 0x1}, {0xd}, {0x16}, {0x18}, {0x48, 0x1}]}]}, @NL80211_ATTR_IE={0x4}, @NL80211_ATTR_IE={0x198, 0x2a, [@prep={0x83, 0x1f, {{}, 0x80, 0xf8, @device_b, 0x5, @void, 0xcc5, 0x7, @device_a, 0x9ddf}}, @tim={0x5, 0xe4, {0x4, 0xa9, 0x1, "fc5d98881a5adfcef993f48e17d2879f345bc9755157b72a8e34a86103ed827b3bd1d486846e3ee9a4f25a4283faeadd22d6e650762b14b830c3cb0a34ab587321dc98bd95ed70224c5e7a1105aa5cb244af8903907d8dbc2945f27cd585b95ea0c6252964c20506f948747f84a598882f5dbbabc48f0ae0d443c3c6763f1e45617cd418b20c3dcf3ca30bf089b1648c5d4caf0eb9f7153eb338e566673d149e289e014da9cb7d84ee081ab3c0e3f0ae8fc354a7c58d45240edd220b11a467291b8e8b1d50926491ef55f86996f84e4b7bd50f1510884b29f103ed2ed61011996b"}}, @fast_bss_trans={0x37, 0x73, {0xba, 0x1, "7fc039ed1f82b8d07504d7348b1dfc0b", "418f6bb6a7eb693ab0b191ee073d168a34fe709ff1af8cfc869ee9dd657dd6f1", "b3944133e9a4b77e8716b6065c0c1407f04475e64e9d6deedb8f93ba79c9e470", [{0x1, 0x1f, "ee3780e379a3e995b685cf47eae0988b9bebd63826b0f79d63a0982ba5bb1d"}]}}, @supported_rates={0x1, 0x5, [{0x16, 0x1}, {0x4}, {0x48}, {0x24}, {0x38}]}, @mesh_chsw={0x76, 0x0, {0xe, 0x8, 0x34, 0x440e}}, @mesh_chsw={0x76, 0x6, {0x9, 0xd, 0x3d, 0x9}}, @ext_channel_switch={0x3c, 0x4, {0x0, 0x3, 0xb0, 0xb}}]}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0xf}]}, 0x244}, 0x1, 0x0, 0x0, 0x401c4}, 0x4) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0xd, 0x1c, &(0x7f0000000040)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x2}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x0, 0x6, 0xa, 0x8, 0xfff8, 0x50}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {0x7, 0x0, 0xc}, {0x18, 0x2, 0x2, 0x0, r2}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) setresuid(0xee00, 0xee01, 0xee01) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f00000001c0)={0x500, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="020100030a0000000600000000000000030006000000000002000000ffffffff0000000000000000030005000000000002000000ac1e00010000000000000000020013"], 0x50}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000001fd8)=ANY=[@ANYBLOB="360a000000000000620a00000000000007000000000000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f00000006c0)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000680)={&(0x7f00000005c0)={0xc0, r1, 0x4, 0x70bd29, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x7, 0x10}}}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CENTER_FREQ2={0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x26}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x28}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x1000}], @NL80211_ATTR_CH_SWITCH_BLOCK_TX={0x4}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xc}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x8}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x2bf}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x3}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xc}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x4}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x9}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xa}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x14a0}], @NL80211_ATTR_CH_SWITCH_BLOCK_TX={0x4}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x5}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xc}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x2d}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0x8c}]}, 0xc0}, 0x1, 0x0, 0x0, 0x20048000}, 0x80) 146.705539ms ago: executing program 1 (id=640): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) openat$dsp1(0xffffff9c, &(0x7f00000001c0), 0x30002, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet_smc(0x2b, 0x1, 0x0) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r4 = socket$packet(0x11, 0x3, 0x300) sendmmsg$sock(r4, &(0x7f0000006740)=[{{&(0x7f0000000180)=@rxrpc=@in4={0x21, 0x3, 0x2, 0x0, {0x2, 0x4e22, @local}}, 0x80, 0x0, 0x0, &(0x7f0000000000), 0x18}}], 0x29, 0x20020000) shutdown(r3, 0x1) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_HYPERV_EVENTFD(r6, 0x4048aec9, &(0x7f0000000440)={0x5}) fspick(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x1) 0s ago: executing program 6 (id=641): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="050000005f000000050000000100000000000000", @ANYRES32, @ANYBLOB="00000000000000000000000000789ef6e2000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_CREATE(0x0, 0x0, 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0xfffffffffffffe01, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={0x0, r2}, 0x18) fgetxattr(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x64, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @target={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_TARGET_NAME={0x10, 0x1, 'CONNSECMARK\x00'}, @NFTA_TARGET_INFO={0x5, 0x3, "ef"}, @NFTA_TARGET_REV={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x8c}}, 0x14b6deac033214c2) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCMBIS(r3, 0x5416, &(0x7f0000000200)=0x47) r4 = syz_open_procfs(0x0, &(0x7f0000000080)='net/fib_trie\x00') epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x2, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000006c0)=@newsa={0x164, 0x10, 0x713, 0x0, 0x0, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @in6=@empty}, {@in=@empty, 0x0, 0x32}, @in=@broadcast, {}, {}, {0x0, 0x0, 0x40000000}, 0x0, 0x0, 0x2}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @etimer_thresh={0x8}, @lifetime_val={0x24}]}, 0x164}}, 0x4000000) syz_io_uring_setup(0x39, 0x0, 0x0, &(0x7f0000001880)) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0) ioctl$PIO_CMAP(r4, 0x4b71, &(0x7f0000000000)={0x3, 0x7f, 0xa, 0x3, 0x0, 0x2}) r6 = add_key$user(&(0x7f0000000400), &(0x7f0000000000)={'syz', 0x1}, &(0x7f0000000480)="ba", 0x1, 0xfffffffffffffffd) r7 = add_key$user(&(0x7f00000004c0), &(0x7f0000000500)={'syz', 0x2}, &(0x7f0000000540)="ba305a4550bba8977d59d29e8ae45898ed4b3cba97cea2007d716178d189b78f2078e58bcb1cfe09487fd16787fcbc77b5529ce5c68e9ad5a4d599fc40a069498778f6f0c9ad8c3913bed7cad6caae708f3c0326180b069dee6ef7a4c2ef9bb640fae9c28a07948e891ebe98f9a7a51f8307fee83af8a8f2f71752471a192ff4d3aa9cb96cd90f4c42b8ecf326e4c9d204361b42b3906eb8519bcd25915dc9378522f102eeeec1f2281088b99f216b8ab0aa271bea1a3bc7f32c57b4404db397", 0xc0, 0xffffffffffffffff) keyctl$dh_compute(0x17, &(0x7f0000000080)={r6, r7, r7}, &(0x7f000001f600)=""/105, 0x69, &(0x7f0000000240)={&(0x7f000001f680)={'sha3-224-generic\x00'}}) r8 = add_key$user(&(0x7f0000000000), &(0x7f0000000180)={'syz', 0x0}, &(0x7f00000001c0)="83d2782be928427b537100656c510bc7820247ec2f679ab4f46f852407eaa0be151c4481aa9cbcfb582e03f87109b5c898b4ac47575cadc5a3fd3b7452e00e8b6d8cccf0f0823e7761514029c84479c718d33ad1d09fe390c012d238b0fd21f9008593d1591459cb3f3cc733dd6a45a4c452dc6cef549a71edc7ac104b936bec887dc5c21d9ef68ce2d1e6f498b5120e733a9ef3f880987b334f4408", 0x9c, 0xfffffffffffffff8) keyctl$dh_compute(0x17, &(0x7f0000000280)={r6, r8}, &(0x7f0000000340)=""/89, 0x59, &(0x7f0000000400)={&(0x7f00000003c0)={'blake2s-160-generic\x00'}}) kernel console output (not intermixed with test programs): t 2(bridge_slave_1) entered forwarding state [ 76.704493][ T5837] 8021q: adding VLAN 0 to HW filter on device bond0 [ 76.766004][ T5837] 8021q: adding VLAN 0 to HW filter on device team0 [ 76.830500][ T5828] Bluetooth: hci0: command tx timeout [ 76.848268][ T65] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.855514][ T65] bridge0: port 1(bridge_slave_0) entered forwarding state [ 76.908065][ T5828] Bluetooth: hci2: command tx timeout [ 76.913644][ T5828] Bluetooth: hci1: command tx timeout [ 76.922740][ T65] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.929943][ T65] bridge0: port 2(bridge_slave_1) entered forwarding state [ 76.986866][ T5827] Bluetooth: hci3: command tx timeout [ 76.990937][ T5828] Bluetooth: hci4: command tx timeout [ 77.022449][ T5824] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 77.152663][ T5819] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 77.254605][ T5830] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 77.298782][ T5820] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 77.395673][ T5820] veth0_vlan: entered promiscuous mode [ 77.468170][ T5820] veth1_vlan: entered promiscuous mode [ 77.478912][ T5819] veth0_vlan: entered promiscuous mode [ 77.495917][ T5830] veth0_vlan: entered promiscuous mode [ 77.528683][ T5837] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 77.541132][ T5819] veth1_vlan: entered promiscuous mode [ 77.550191][ T5830] veth1_vlan: entered promiscuous mode [ 77.562771][ T5824] veth0_vlan: entered promiscuous mode [ 77.590757][ T5824] veth1_vlan: entered promiscuous mode [ 77.614777][ T5820] veth0_macvtap: entered promiscuous mode [ 77.628807][ T5820] veth1_macvtap: entered promiscuous mode [ 77.686055][ T5820] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 77.711580][ T5820] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 77.720611][ T5837] veth0_vlan: entered promiscuous mode [ 77.730904][ T5830] veth0_macvtap: entered promiscuous mode [ 77.743556][ T5819] veth0_macvtap: entered promiscuous mode [ 77.755335][ T5820] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.765296][ T5820] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.774539][ T5820] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.783507][ T5820] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.798508][ T5830] veth1_macvtap: entered promiscuous mode [ 77.807479][ T5819] veth1_macvtap: entered promiscuous mode [ 77.834248][ T5824] veth0_macvtap: entered promiscuous mode [ 77.849479][ T5837] veth1_vlan: entered promiscuous mode [ 77.865663][ T5824] veth1_macvtap: entered promiscuous mode [ 77.878408][ T5830] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 77.889577][ T5830] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.902406][ T5830] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 77.931151][ T5830] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 77.942095][ T5830] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.955023][ T5830] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 77.975775][ T5830] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.985577][ T5830] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.994806][ T5830] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.003654][ T5830] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.021213][ T5819] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 78.032520][ T5819] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.043635][ T5819] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 78.054790][ T5819] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.067686][ T5819] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 78.079338][ T5824] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 78.092714][ T5824] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.103232][ T5824] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 78.114206][ T5824] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.124679][ T5824] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 78.135772][ T5824] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.148793][ T5824] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 78.171552][ T5837] veth0_macvtap: entered promiscuous mode [ 78.181450][ T5837] veth1_macvtap: entered promiscuous mode [ 78.200373][ T5819] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 78.212790][ T5819] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.225603][ T5819] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 78.236371][ T5819] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.248620][ T5819] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 78.258539][ T5824] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 78.270992][ T5824] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.282647][ T5824] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 78.293364][ T5824] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.303300][ T5824] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 78.313797][ T5824] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.324788][ T5824] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 78.391737][ T5819] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.401907][ T5819] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.411576][ T5819] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.421042][ T5819] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.433409][ T5824] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.443107][ T5824] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.452068][ T5824] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.461032][ T5824] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.479449][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.493116][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.557369][ T5837] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 78.569267][ T5837] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.580473][ T5837] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 78.592785][ T5837] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.602788][ T5837] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 78.613611][ T5837] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.623657][ T5837] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 78.634145][ T5837] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.645030][ T5837] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 78.654723][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.662801][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.704507][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.714023][ T5837] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 78.724667][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.724802][ T5837] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.749903][ T5837] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 78.760547][ T5837] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.771443][ T5837] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 78.782148][ T5837] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.793474][ T5837] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 78.804092][ T5837] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.815135][ T5837] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 78.852739][ T5837] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.862070][ T5837] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.871594][ T5837] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.882596][ T5837] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.906766][ T5828] Bluetooth: hci0: command tx timeout [ 78.917292][ T53] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.925268][ T53] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.965317][ T1083] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.975544][ T1083] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.999218][ T5828] Bluetooth: hci1: command tx timeout [ 78.999265][ T5827] Bluetooth: hci2: command tx timeout [ 79.034301][ T5820] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 79.067958][ T5827] Bluetooth: hci3: command tx timeout [ 79.067969][ T5828] Bluetooth: hci4: command tx timeout [ 79.087294][ T1081] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.095248][ T1081] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.261615][ T1081] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.290629][ T1081] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.336383][ T1081] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.362609][ T1081] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.419961][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.451091][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.460854][ T5910] bridge1: entered promiscuous mode [ 79.477871][ T5872] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 79.527985][ T1081] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.557534][ T1081] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.693450][ T5872] usb 1-1: Using ep0 maxpacket: 32 [ 79.718159][ T5872] usb 1-1: unable to get BOS descriptor or descriptor too short [ 79.756318][ T5872] usb 1-1: config 128 has an invalid interface number: 127 but max is 3 [ 79.816617][ T5872] usb 1-1: config 128 has an invalid descriptor of length 58, skipping remainder of the config [ 79.848227][ T5921] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4'. [ 79.878048][ T5872] usb 1-1: config 128 has 1 interface, different from the descriptor's value: 4 [ 79.932203][ T5872] usb 1-1: config 128 has no interface number 0 [ 79.947349][ T5872] usb 1-1: config 128 interface 127 altsetting 14 endpoint 0x5 has an invalid bInterval 49, changing to 9 [ 79.991739][ T5872] usb 1-1: config 128 interface 127 altsetting 14 endpoint 0x5 has invalid maxpacket 9292, setting to 1024 [ 80.028033][ T5872] usb 1-1: config 128 interface 127 has no altsetting 0 [ 80.051322][ T5872] usb 1-1: Dual-Role OTG device on HNP port [ 80.065385][ T5872] usb 1-1: New USB device found, idVendor=0582, idProduct=295c, bcdDevice=d4.55 [ 80.325789][ T5872] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 80.334681][ T5872] usb 1-1: Product: syz [ 80.340998][ T5872] usb 1-1: Manufacturer: syz [ 80.345955][ T5872] usb 1-1: SerialNumber: syz [ 80.362583][ T5907] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 80.746062][ T5935] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 80.791306][ T5935] xt_CT: You must specify a L4 protocol and not use inversions on it [ 81.005716][ T5827] Bluetooth: hci0: command tx timeout [ 81.331918][ T5822] Bluetooth: hci1: command tx timeout [ 81.338290][ T55] Bluetooth: hci3: command tx timeout [ 81.343874][ T55] Bluetooth: hci4: command tx timeout [ 81.350090][ T5828] Bluetooth: hci2: command tx timeout [ 81.863135][ T5942] Zero length message leads to an empty skb [ 82.171377][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 82.274066][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 82.537134][ T5941] Can't find ip_set type hash:ip,port,ne [ 83.135372][ T5958] netlink: 16 bytes leftover after parsing attributes in process `syz.4.12'. [ 83.321787][ T5870] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 83.546993][ T5870] usb 3-1: Using ep0 maxpacket: 16 [ 83.576621][ T5870] usb 3-1: config 0 has an invalid interface number: 105 but max is 0 [ 83.601456][ T5870] usb 3-1: config 0 has an invalid descriptor of length 65, skipping remainder of the config [ 83.678025][ T5962] FAULT_INJECTION: forcing a failure. [ 83.678025][ T5962] name failslab, interval 1, probability 0, space 0, times 1 [ 83.766722][ T5962] CPU: 1 UID: 0 PID: 5962 Comm: syz.1.17 Not tainted 6.14.0-rc7-syzkaller-00205-g586de92313fc #0 [ 83.766770][ T5962] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 83.766782][ T5962] Call Trace: [ 83.766789][ T5962] [ 83.766799][ T5962] dump_stack_lvl+0x241/0x360 [ 83.766831][ T5962] ? __pfx_dump_stack_lvl+0x10/0x10 [ 83.766851][ T5962] ? __pfx__printk+0x10/0x10 [ 83.766882][ T5962] ? __kmalloc_node_noprof+0xb9/0x4d0 [ 83.766904][ T5962] ? __pfx___might_resched+0x10/0x10 [ 83.766935][ T5962] should_fail_ex+0x40a/0x550 [ 83.766969][ T5962] should_failslab+0xac/0x100 [ 83.767000][ T5962] __kmalloc_node_noprof+0xe1/0x4d0 [ 83.767018][ T5962] ? __kvmalloc_node_noprof+0x72/0x190 [ 83.767044][ T5962] __kvmalloc_node_noprof+0x72/0x190 [ 83.767069][ T5962] simple_xattr_alloc+0x43/0xa0 [ 83.767093][ T5962] shmem_initxattrs+0x248/0x4a0 [ 83.767131][ T5962] security_inode_init_security+0x29c/0x480 [ 83.767159][ T5962] ? __pfx_shmem_initxattrs+0x10/0x10 [ 83.767183][ T5962] ? __pfx_security_inode_init_security+0x10/0x10 [ 83.767221][ T5962] shmem_symlink+0x167/0x610 [ 83.767248][ T5962] ? __pfx_shmem_symlink+0x10/0x10 [ 83.767272][ T5962] ? bpf_lsm_inode_symlink+0x9/0x10 [ 83.767292][ T5962] ? security_inode_symlink+0xbe/0x330 [ 83.767321][ T5962] vfs_symlink+0x137/0x2e0 [ 83.767352][ T5962] do_symlinkat+0x222/0x3a0 [ 83.767377][ T5962] ? __phys_addr_symbol+0x2f/0x70 [ 83.767413][ T5962] ? __pfx_do_symlinkat+0x10/0x10 [ 83.767445][ T5962] ? getname_flags+0x1e3/0x540 [ 83.767469][ T5962] __x64_sys_symlinkat+0x95/0xb0 [ 83.767498][ T5962] do_syscall_64+0xf3/0x230 [ 83.767527][ T5962] ? clear_bhb_loop+0x35/0x90 [ 83.767557][ T5962] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 83.767582][ T5962] RIP: 0033:0x7f116c18d169 [ 83.767600][ T5962] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 83.767615][ T5962] RSP: 002b:00007f116cfd7038 EFLAGS: 00000246 ORIG_RAX: 000000000000010a [ 83.767639][ T5962] RAX: ffffffffffffffda RBX: 00007f116c3a5fa0 RCX: 00007f116c18d169 [ 83.767653][ T5962] RDX: 00002000000000c0 RSI: 0000000000000003 RDI: 0000200000000040 [ 83.767666][ T5962] RBP: 00007f116cfd7090 R08: 0000000000000000 R09: 0000000000000000 [ 83.767677][ T5962] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 83.767689][ T5962] R13: 0000000000000000 R14: 00007f116c3a5fa0 R15: 00007fff63199358 [ 83.767721][ T5962] [ 84.036558][ T5870] usb 3-1: config 0 has no interface number 0 [ 84.230281][ T5964] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 84.918899][ T5870] usb 3-1: New USB device found, idVendor=046d, idProduct=08d3, bcdDevice= b.28 [ 84.978879][ T5870] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 85.027853][ T5870] usb 3-1: Product: syz [ 85.032094][ T5870] usb 3-1: Manufacturer: syz [ 85.056930][ T5870] usb 3-1: SerialNumber: syz [ 85.094250][ T5870] usb 3-1: config 0 descriptor?? [ 85.385401][ T9] usb 3-1: USB disconnect, device number 2 [ 85.692429][ T5826] udevd[5826]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:128.127/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 87.236963][ T59] cfg80211: failed to load regulatory.db [ 87.607670][ T5986] syz.2.23 uses obsolete (PF_INET,SOCK_PACKET) [ 90.692796][ T6005] Bluetooth: MGMT ver 1.23 [ 92.227325][ T5874] usb 2-1: new full-speed USB device number 2 using dummy_hcd [ 92.548202][ T5874] usb 2-1: device descriptor read/64, error -71 [ 92.949332][ T5874] usb 2-1: new full-speed USB device number 3 using dummy_hcd [ 93.001709][ T6016] sch_fq: defrate 0 ignored. [ 93.086584][ T5911] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 93.096593][ T5874] usb 2-1: device descriptor read/64, error -71 [ 93.131686][ T6016] kvm: MONITOR instruction emulated as NOP! [ 93.217032][ T5874] usb usb2-port1: attempt power cycle [ 93.258217][ T5911] usb 5-1: New USB device found, idVendor=056a, idProduct=0030, bcdDevice= 0.00 [ 93.276642][ T5911] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 93.317556][ T5911] usb 5-1: config 0 descriptor?? [ 93.395584][ T6019] netlink: 'syz.3.33': attribute type 21 has an invalid length. [ 93.406640][ T6019] netlink: 128 bytes leftover after parsing attributes in process `syz.3.33'. [ 93.415701][ T6019] netlink: 'syz.3.33': attribute type 4 has an invalid length. [ 93.430401][ T6019] netlink: 'syz.3.33': attribute type 3 has an invalid length. [ 93.439890][ T6019] netlink: 3 bytes leftover after parsing attributes in process `syz.3.33'. [ 93.566712][ T5874] usb 2-1: new full-speed USB device number 4 using dummy_hcd [ 93.630073][ T0] NOHZ tick-stop error: local softirq work is pending, handler #48!!! [ 93.798411][ T5911] wacom 0003:056A:0030.0001: hidraw0: USB HID v1.01 Device [HID 056a:0030] on usb-dummy_hcd.4-1/input0 [ 93.855063][ T6022] netlink: 412 bytes leftover after parsing attributes in process `syz.1.34'. [ 93.866643][ T5874] usb 2-1: device not accepting address 4, error -71 [ 93.932683][ T6014] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 94.059451][ T6014] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 94.102795][ T59] IPVS: starting estimator thread 0... [ 94.112975][ T6022] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 94.131498][ T59] usb 5-1: USB disconnect, device number 2 [ 94.227172][ T6025] IPVS: using max 18 ests per chain, 43200 per kthread [ 94.372095][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 94.377455][ T6030] capability: warning: `syz.2.35' uses 32-bit capabilities (legacy support in use) [ 96.334198][ T6047] xt_l2tp: invalid flags combination: c [ 96.393114][ T5828] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 96.409099][ T5828] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 96.418857][ T5828] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 96.433245][ T5828] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 96.443583][ T5828] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 96.451194][ T5828] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 97.976761][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 98.017090][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 98.045195][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 98.073032][ T6065] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'syz0' [ 98.521917][ T5828] Bluetooth: hci5: command tx timeout [ 98.676738][ T6048] chnl_net:caif_netlink_parms(): no params data found [ 99.156664][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 99.651546][ T6070] netem: incorrect ge model size [ 99.660354][ T6070] netem: change failed [ 99.682613][ T6048] bridge0: port 1(bridge_slave_0) entered blocking state [ 99.698049][ T6048] bridge0: port 1(bridge_slave_0) entered disabled state [ 99.729485][ T6048] bridge_slave_0: entered allmulticast mode [ 99.775205][ T6048] bridge_slave_0: entered promiscuous mode [ 99.807669][ T6048] bridge0: port 2(bridge_slave_1) entered blocking state [ 99.814973][ T6048] bridge0: port 2(bridge_slave_1) entered disabled state [ 99.828959][ T6048] bridge_slave_1: entered allmulticast mode [ 99.857582][ T0] NOHZ tick-stop error: local softirq work is pending, handler #208!!! [ 99.914807][ T6048] bridge_slave_1: entered promiscuous mode [ 100.144602][ T6048] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 100.234524][ T6085] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 100.308598][ T6088] netlink: 4 bytes leftover after parsing attributes in process `syz.2.51'. [ 100.396640][ T10] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 100.755810][ T5828] Bluetooth: hci5: command tx timeout [ 100.938821][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 101.383414][ T6048] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 101.553676][ T10] usb 2-1: Using ep0 maxpacket: 8 [ 101.633228][ T6093] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'syz0' [ 101.713769][ T6048] team0: Port device team_slave_0 added [ 101.713909][ T10] usb 2-1: config 0 has an invalid interface number: 31 but max is 0 [ 101.942973][ T6048] team0: Port device team_slave_1 added [ 101.953917][ T10] usb 2-1: config 0 has no interface number 0 [ 102.293783][ T6096] netlink: 4 bytes leftover after parsing attributes in process `syz.4.54'. [ 103.704868][ T5828] Bluetooth: hci5: command tx timeout [ 105.310959][ T6099] process 'syz.2.56' launched './file0' with NULL argv: empty string added [ 105.753045][ T10] usb 2-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 105.927329][ T5828] Bluetooth: hci5: command tx timeout [ 105.946692][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 105.985445][ T10] usb 2-1: config 0 descriptor?? [ 105.986926][ T6048] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 105.991987][ T10] usb 2-1: can't set config #0, error -71 [ 106.073697][ T10] usb 2-1: USB disconnect, device number 6 [ 106.089591][ T6048] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 106.216884][ T6048] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 106.280198][ T6048] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 106.303308][ T6048] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 106.354838][ T6048] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 106.397236][ T6110] netlink: 71 bytes leftover after parsing attributes in process `syz.2.60'. [ 106.483017][ T6116] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 106.546227][ T30] audit: type=1326 audit(1742770343.620:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6108 comm="syz.4.59" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f0402f8d169 code=0x0 [ 106.589311][ T6116] capability: warning: `syz.1.61' uses deprecated v2 capabilities in a way that may be insecure [ 106.646532][ T6048] hsr_slave_0: entered promiscuous mode [ 106.660267][ T6048] hsr_slave_1: entered promiscuous mode [ 106.673201][ T6048] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 106.715251][ T6048] Cannot create hsr debugfs directory [ 106.851885][ T6124] netlink: 12 bytes leftover after parsing attributes in process `syz.2.63'. [ 107.077383][ T6048] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 107.099901][ T6048] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 107.123940][ T6048] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 107.150355][ T6048] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 107.439887][ T6131] netlink: 4 bytes leftover after parsing attributes in process `syz.3.65'. [ 109.538090][ T6134] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'syz0' [ 110.087654][ T6048] 8021q: adding VLAN 0 to HW filter on device bond0 [ 110.120903][ T6048] 8021q: adding VLAN 0 to HW filter on device team0 [ 110.254017][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 110.261279][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 110.309759][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 110.309788][ T6138] netlink: 'syz.1.68': attribute type 11 has an invalid length. [ 110.317048][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 110.576733][ T9] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 110.748422][ T9] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 110.765745][ T9] usb 5-1: config 0 has no interfaces? [ 110.770543][ T6048] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 110.781768][ T9] usb 5-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 110.815971][ T6153] netlink: 'syz.3.71': attribute type 32 has an invalid length. [ 110.824359][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 110.887207][ T6153] (unnamed net_device) (uninitialized): option coupled_control: invalid value (72) [ 111.117259][ T9] usb 5-1: config 0 descriptor?? [ 111.249531][ T6155] netlink: 'syz.1.72': attribute type 21 has an invalid length. [ 111.262417][ T6155] netlink: 128 bytes leftover after parsing attributes in process `syz.1.72'. [ 111.272096][ T6155] netlink: 'syz.1.72': attribute type 4 has an invalid length. [ 111.280226][ T6155] netlink: 'syz.1.72': attribute type 3 has an invalid length. [ 111.288182][ T6155] netlink: 3 bytes leftover after parsing attributes in process `syz.1.72'. [ 112.677166][ T6176] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'syz0' [ 112.770970][ T59] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 112.817334][ T6048] veth0_vlan: entered promiscuous mode [ 112.971055][ T59] usb 2-1: Using ep0 maxpacket: 16 [ 113.059881][ T59] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 113.079197][ T6048] veth1_vlan: entered promiscuous mode [ 113.154576][ T59] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 113.241828][ T59] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 113.318174][ T5874] usb 5-1: USB disconnect, device number 3 [ 113.335256][ T59] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 113.361592][ T6048] veth0_macvtap: entered promiscuous mode [ 113.395513][ T59] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 113.401422][ T6048] veth1_macvtap: entered promiscuous mode [ 113.452995][ T59] usb 2-1: config 0 descriptor?? [ 113.474466][ T6048] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 113.495071][ T6048] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 113.511411][ T6048] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 113.531476][ T6048] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 113.546117][ T6048] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 113.565323][ T6048] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 113.576042][ T6048] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 113.594641][ T6048] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 113.605348][ T6048] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 113.627669][ T6048] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 113.675617][ T6048] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 113.746842][ T6181] netlink: 4 bytes leftover after parsing attributes in process `syz.3.78'. [ 113.846060][ T6048] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 113.970188][ T6048] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 114.084331][ T6048] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 114.208467][ T6048] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 114.297137][ T6048] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 114.391731][ T6048] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 114.457805][ T6048] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 114.531826][ T6048] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 114.601205][ T6048] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 114.687603][ T6048] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 114.691503][ T59] usbhid 2-1:0.0: can't add hid device: -71 [ 114.837056][ T6048] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 115.028795][ T6048] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.083177][ T59] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 115.104978][ T59] usb 2-1: USB disconnect, device number 7 [ 115.106502][ T6048] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.163071][ T6048] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.217415][ T6048] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.079853][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 116.157864][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 116.547049][ T65] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 116.555055][ T65] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 120.086696][ T10] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 124.306753][ T5874] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 124.506603][ T5874] usb 3-1: Using ep0 maxpacket: 32 [ 124.529847][ T5874] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 124.572724][ T5874] usb 3-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=a6.13 [ 124.616523][ T5874] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 124.651198][ T5874] usb 3-1: Product: syz [ 124.661898][ T5874] usb 3-1: Manufacturer: syz [ 124.683072][ T5874] usb 3-1: SerialNumber: syz [ 124.726348][ T5874] usb 3-1: config 0 descriptor?? [ 124.766922][ T5874] pvrusb2: Hardware description: Terratec Grabster AV400 [ 124.801300][ T5874] pvrusb2: ********** [ 124.823171][ T5874] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 124.853418][ T5874] pvrusb2: Important functionality might not be entirely working. [ 124.870382][ T5874] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 124.901521][ T5874] pvrusb2: ********** [ 126.775244][ T5874] usb 3-1: USB disconnect, device number 3 [ 126.797579][ T5874] pvrusb2: Device being rendered inoperable [ 127.363247][ T6303] netlink: 'syz.1.110': attribute type 32 has an invalid length. [ 127.403888][ T6303] (unnamed net_device) (uninitialized): option coupled_control: invalid value (72) [ 127.720337][ T6306] Mount JFS Failure: -22 [ 127.725139][ T6306] jfs_mount failed w/return code = -22 [ 128.996139][ T6317] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'syz0' [ 130.306643][ T6324] netlink: 52 bytes leftover after parsing attributes in process `syz.4.116'. [ 130.788836][ T6336] IPVS: Error connecting to the multicast addr [ 132.011210][ T6348] netlink: 'syz.4.123': attribute type 32 has an invalid length. [ 132.121560][ T6348] (unnamed net_device) (uninitialized): option coupled_control: invalid value (72) [ 133.325187][ T6357] netlink: 'syz.2.125': attribute type 21 has an invalid length. [ 133.333559][ T6357] netlink: 128 bytes leftover after parsing attributes in process `syz.2.125'. [ 133.343517][ T6357] netlink: 'syz.2.125': attribute type 4 has an invalid length. [ 133.351648][ T6357] netlink: 'syz.2.125': attribute type 3 has an invalid length. [ 133.359715][ T6357] netlink: 3 bytes leftover after parsing attributes in process `syz.2.125'. [ 133.361877][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.391294][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 135.100693][ T59] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 135.222253][ T5874] IPVS: starting estimator thread 0... [ 135.356890][ T6372] IPVS: using max 18 ests per chain, 43200 per kthread [ 135.572304][ T59] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 135.675948][ T59] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 135.761272][ T59] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 135.800949][ T59] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 135.842664][ T59] usb 2-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 135.895912][ T59] usb 2-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 135.914425][ T59] usb 2-1: Manufacturer: syz [ 135.926760][ T5874] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 135.942107][ T59] usb 2-1: config 0 descriptor?? [ 136.096927][ T5874] usb 3-1: Using ep0 maxpacket: 8 [ 136.151847][ T6379] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'syz0' [ 136.278430][ T5874] usb 3-1: New USB device found, idVendor=0ccd, idProduct=0069, bcdDevice=6e.55 [ 136.379486][ T5874] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 136.406594][ T5874] usb 3-1: Product: syz [ 136.413437][ T5874] usb 3-1: Manufacturer: syz [ 136.416063][ T59] appleir 0003:05AC:8243.0002: unknown main item tag 0x0 [ 136.426748][ T5874] usb 3-1: SerialNumber: syz [ 136.434618][ T59] appleir 0003:05AC:8243.0002: No inputs registered, leaving [ 136.583600][ T5874] usb 3-1: config 0 descriptor?? [ 136.622981][ T59] appleir 0003:05AC:8243.0002: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.1-1/input0 [ 137.007535][ T5874] usb 3-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 137.025180][ T5874] dvb_usb_af9015 3-1:0.0: probe with driver dvb_usb_af9015 failed with error -22 [ 137.110006][ T5874] usb 3-1: USB disconnect, device number 4 [ 137.187579][ T6378] could not allocate digest TFM handle blake2s-160-generic [ 137.882172][ T9] usb 2-1: reset high-speed USB device number 8 using dummy_hcd [ 137.964173][ T6400] netlink: 'syz.3.136': attribute type 32 has an invalid length. [ 138.001320][ T6400] netlink: 8 bytes leftover after parsing attributes in process `syz.3.136'. [ 138.048012][ T9] usb 2-1: device descriptor read/64, error -32 [ 138.052649][ T6400] (unnamed net_device) (uninitialized): Setting coupled_control to off (0) [ 138.287543][ T9] usb 2-1: reset high-speed USB device number 8 using dummy_hcd [ 138.466544][ T9] usb 2-1: device descriptor read/64, error -32 [ 138.738415][ T6419] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'syz0' [ 138.810833][ T6414] netlink: 4 bytes leftover after parsing attributes in process `syz.5.140'. [ 138.880955][ T9] usb 2-1: reset high-speed USB device number 8 using dummy_hcd [ 139.099377][ T9] usb 2-1: device descriptor read/8, error -32 [ 139.366629][ T9] usb 2-1: reset high-speed USB device number 8 using dummy_hcd [ 139.889098][ T9] usb 2-1: device descriptor read/8, error -32 [ 140.116931][ T9] raw-gadget.1 gadget.1: failed to queue suspend event [ 140.206746][ T6387] raw-gadget.1 gadget.1: failed to queue disconnect event [ 140.213849][ T5874] usb 2-1: USB disconnect, device number 8 [ 140.326853][ T6419] could not allocate digest TFM handle blake2s-160-generic [ 141.356588][ T5828] Bluetooth: hci4: command tx timeout [ 141.824262][ T6446] netlink: 4 bytes leftover after parsing attributes in process `syz.1.145'. [ 141.907670][ T6442] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 142.252935][ T6453] netlink: 'syz.4.149': attribute type 32 has an invalid length. [ 142.286267][ T6453] netlink: 8 bytes leftover after parsing attributes in process `syz.4.149'. [ 142.400081][ T6453] (unnamed net_device) (uninitialized): Setting coupled_control to off (0) [ 142.912790][ T30] audit: type=1326 audit(1742770379.980:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6462 comm="syz.4.153" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f0402f8d169 code=0x0 [ 143.136687][ T10] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 143.217328][ T52] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 143.390136][ T52] usb 3-1: Using ep0 maxpacket: 32 [ 143.609015][ T52] usb 3-1: New USB device found, idVendor=0ccd, idProduct=0080, bcdDevice=67.fe [ 143.633789][ T10] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 143.645525][ T52] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 143.645623][ T52] usb 3-1: Product: syz [ 143.795836][ T52] usb 3-1: Manufacturer: syz [ 143.858256][ T52] usb 3-1: SerialNumber: syz [ 143.880378][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 143.902706][ T52] usb 3-1: config 0 descriptor?? [ 143.928927][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 143.939437][ T6473] xt_CT: No such helper "snmp_trap" [ 143.985763][ T10] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 144.067111][ T10] usb 2-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 144.096522][ T10] usb 2-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 144.136540][ T10] usb 2-1: Manufacturer: syz [ 144.142428][ T52] snd-usb-6fire 3-1:0.0: unknown device firmware state received from device: [ 144.158332][ T10] usb 2-1: config 0 descriptor?? [ 144.280283][ T52] eb 9a 47 80 9b f8 7a f0 [ 144.406864][ T52] snd-usb-6fire 3-1:0.0: probe with driver snd-usb-6fire failed with error -5 [ 144.708239][ T52] usb 3-1: USB disconnect, device number 5 [ 145.779484][ T10] appleir 0003:05AC:8243.0003: unknown main item tag 0x0 [ 145.807189][ T10] appleir 0003:05AC:8243.0003: No inputs registered, leaving [ 145.908966][ T10] appleir 0003:05AC:8243.0003: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.1-1/input0 [ 146.336511][ T10] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 146.716614][ T5874] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 146.738859][ T10] usb 3-1: unable to get BOS descriptor or descriptor too short [ 146.750874][ T10] usb 3-1: config 1 interface 0 has no altsetting 0 [ 146.782250][ T10] usb 3-1: New USB device found, idVendor=16c0, idProduct=75e1, bcdDevice= 0.40 [ 146.797003][ T6497] netlink: 'syz.5.164': attribute type 32 has an invalid length. [ 146.805060][ T6497] netlink: 8 bytes leftover after parsing attributes in process `syz.5.164'. [ 146.815279][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 146.825683][ T6497] (unnamed net_device) (uninitialized): Setting coupled_control to off (0) [ 146.847854][ T10] usb 3-1: Product: syz [ 146.852345][ T10] usb 3-1: Manufacturer: 邆ⴿ垴á¬ãŸ€å—¤à­šç©žéŽíƒæ¦’㎞厰㔚䀨ᨤ여㋡ཌ⠴꺩ჷ狘㑴ä…县龊鹲厩æ¥à¸‚á¶â²»ï™…鯶æ²î„ºë›´äª°è‹ží™ï‹¹ì«’쇥퟾첯㠌禀⡮쉞쉮猠î¨ê¾›á…¬ë¬¤ê­ïª¡âœ¡á€’킡刘㒭ç€ê¢ã±¨è‹€è­æž”듌꠽ìŸè‹šê°½ä’馋쌿炻騸览瘌ꤟé¤â—²ì味ᴺ但⡵簈ⷵ酸탣㖤ᢎ儂ⴶ᭣쫳請⻚٠畛僣ƞᴢ㛷횣㭸㧀葽᣹å’ᙈ볚᲼ᣦשּׁ቞湓 [ 146.929701][ T5874] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 146.941283][ T5874] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 146.951253][ T10] usb 3-1: SerialNumber: syz [ 146.980659][ T5874] usb 5-1: config 0 descriptor?? [ 147.174894][ T5874] cp210x 5-1:0.0: cp210x converter detected [ 147.771708][ T6509] netlink: 24 bytes leftover after parsing attributes in process `syz.4.163'. [ 149.320535][ T10] usbhid 3-1:1.0: can't add hid device: -71 [ 149.372134][ T10] usbhid 3-1:1.0: probe with driver usbhid failed with error -71 [ 149.397584][ T5871] usb 2-1: USB disconnect, device number 9 [ 149.444567][ T10] usb 3-1: USB disconnect, device number 6 [ 150.768677][ T5874] cp210x 5-1:0.0: failed to get vendor val 0x370c size 13: -71 [ 150.856551][ T5874] cp210x 5-1:0.0: GPIO initialisation failed: -71 [ 150.902187][ T5874] usb 5-1: cp210x converter now attached to ttyUSB0 [ 150.972068][ T5874] usb 5-1: USB disconnect, device number 5 [ 151.041133][ T5874] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 151.105012][ T5874] cp210x 5-1:0.0: device disconnected [ 151.379758][ T6528] netlink: 8 bytes leftover after parsing attributes in process `syz.5.172'. [ 153.077690][ T10] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 153.586586][ T9] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 153.607746][ T10] usb 2-1: device descriptor read/64, error -71 [ 153.767665][ T6551] netlink: 4 bytes leftover after parsing attributes in process `syz.2.179'. [ 153.811239][ T9] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 153.859035][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 153.870419][ T10] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 153.880106][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 153.894680][ T9] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 153.910262][ T9] usb 5-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 153.947599][ T9] usb 5-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 153.958031][ T9] usb 5-1: Manufacturer: syz [ 154.015056][ T9] usb 5-1: config 0 descriptor?? [ 154.236782][ T6553] netlink: 'syz.5.180': attribute type 39 has an invalid length. [ 154.372194][ T6558] syz_tun: entered allmulticast mode [ 154.439158][ T9] appleir 0003:05AC:8243.0004: unknown main item tag 0x0 [ 154.467198][ T6557] syzkaller0: tun_chr_ioctl cmd 1074025677 [ 154.473317][ T6557] syzkaller0: linktype set to 769 [ 154.483888][ T9] appleir 0003:05AC:8243.0004: No inputs registered, leaving [ 154.531305][ T9] appleir 0003:05AC:8243.0004: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.4-1/input0 [ 156.068940][ T6555] syz_tun: left allmulticast mode [ 156.613595][ T10] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 156.826807][ T6575] netlink: 'syz.5.185': attribute type 21 has an invalid length. [ 156.835203][ T6575] netlink: 128 bytes leftover after parsing attributes in process `syz.5.185'. [ 156.845454][ T6575] netlink: 'syz.5.185': attribute type 4 has an invalid length. [ 156.853772][ T6575] netlink: 'syz.5.185': attribute type 3 has an invalid length. [ 156.861920][ T6575] netlink: 3 bytes leftover after parsing attributes in process `syz.5.185'. [ 157.146580][ T10] usb 3-1: Using ep0 maxpacket: 32 [ 157.170763][ T10] usb 3-1: too many configurations: 9, using maximum allowed: 8 [ 157.238077][ T10] usb 3-1: config 0 interface 0 has no altsetting 0 [ 157.259143][ T10] usb 3-1: config 0 interface 0 has no altsetting 0 [ 157.266641][ T5871] usb 5-1: reset high-speed USB device number 6 using dummy_hcd [ 157.285034][ T10] usb 3-1: config 0 interface 0 has no altsetting 0 [ 157.305901][ T10] usb 3-1: config 0 interface 0 has no altsetting 0 [ 157.340104][ T10] usb 3-1: config 0 interface 0 has no altsetting 0 [ 157.368271][ T10] usb 3-1: config 0 interface 0 has no altsetting 0 [ 157.398868][ T10] usb 3-1: config 0 interface 0 has no altsetting 0 [ 157.446652][ T5871] usb 5-1: device descriptor read/64, error -32 [ 157.470854][ T10] usb 3-1: config 0 interface 0 has no altsetting 0 [ 157.498701][ T10] usb 3-1: New USB device found, idVendor=0d81, idProduct=1900, bcdDevice=20.7a [ 157.536181][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 157.566580][ T10] usb 3-1: Product: syz [ 157.571121][ T10] usb 3-1: Manufacturer: syz [ 157.585892][ T10] usb 3-1: SerialNumber: syz [ 157.609613][ T10] usb 3-1: config 0 descriptor?? [ 157.707283][ T5871] usb 5-1: reset high-speed USB device number 6 using dummy_hcd [ 157.856792][ T5871] usb 5-1: device descriptor read/64, error -32 [ 159.387326][ T5905] usb 5-1: USB disconnect, device number 6 [ 159.482616][ T6600] netlink: 4 bytes leftover after parsing attributes in process `syz.5.191'. [ 159.963923][ T10] pwc: Visionite VCS-UC300 USB webcam detected. [ 160.027302][ T10] pwc: Warning: more than 1 configuration available. [ 160.054975][ T10] pwc: Failed to set LED on/off time (-71) [ 160.090603][ T10] pwc: send_video_command error -71 [ 160.149434][ T10] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 160.206632][ T6604] netlink: 8 bytes leftover after parsing attributes in process `syz.2.194'. [ 160.215670][ T10] Philips webcam 3-1:0.0: probe with driver Philips webcam failed with error -71 [ 160.270290][ T6604] netlink: 4 bytes leftover after parsing attributes in process `syz.2.194'. [ 160.299835][ T10] usb 3-1: USB disconnect, device number 7 [ 160.338094][ T6604] netlink: 'syz.2.194': attribute type 1 has an invalid length. [ 160.372874][ T6604] nbd: error processing sock list [ 160.566196][ T6609] overlayfs: failed to decode file handle (len=6, type=251, flags=0, err=-22) [ 160.834045][ T6615] netlink: 4 bytes leftover after parsing attributes in process `syz.2.198'. [ 161.606666][ T1208] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 161.827890][ T1208] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 161.841536][ T1208] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 161.887997][ T1208] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 161.949598][ T1208] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 162.017644][ T1208] usb 4-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 162.106838][ T1208] usb 4-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 162.216816][ T1208] usb 4-1: Manufacturer: syz [ 162.326917][ T1208] usb 4-1: config 0 descriptor?? [ 162.890337][ T1208] appleir 0003:05AC:8243.0005: unknown main item tag 0x0 [ 162.928348][ T1208] appleir 0003:05AC:8243.0005: No inputs registered, leaving [ 163.133248][ T1208] appleir 0003:05AC:8243.0005: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.3-1/input0 [ 163.229952][ T6644] netlink: 16 bytes leftover after parsing attributes in process `syz.2.203'. [ 163.411341][ T6642] hsr_slave_0: left promiscuous mode [ 163.470867][ T6642] hsr_slave_1: left promiscuous mode [ 163.504103][ T9] usb 2-1: new low-speed USB device number 12 using dummy_hcd [ 163.826755][ T9] usb 2-1: Invalid ep0 maxpacket: 64 [ 164.176632][ T9] usb 2-1: new low-speed USB device number 13 using dummy_hcd [ 164.366638][ T9] usb 2-1: Invalid ep0 maxpacket: 64 [ 164.374996][ T10] usb 4-1: reset high-speed USB device number 2 using dummy_hcd [ 164.396521][ T9] usb usb2-port1: attempt power cycle [ 164.526602][ T10] usb 4-1: device descriptor read/64, error -32 [ 164.536601][ T5902] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 164.711534][ T5902] usb 3-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 164.723506][ T5902] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 164.736824][ T9] usb 2-1: new low-speed USB device number 14 using dummy_hcd [ 164.756752][ T5902] usb 3-1: Product: syz [ 164.760993][ T5902] usb 3-1: Manufacturer: syz [ 164.765631][ T5902] usb 3-1: SerialNumber: syz [ 164.777542][ T9] usb 2-1: Invalid ep0 maxpacket: 64 [ 164.790452][ T5902] usb 3-1: config 0 descriptor?? [ 164.796614][ T10] usb 4-1: reset high-speed USB device number 2 using dummy_hcd [ 164.928187][ T9] usb 2-1: new low-speed USB device number 15 using dummy_hcd [ 164.946702][ T10] usb 4-1: device descriptor read/64, error -32 [ 164.986523][ T9] usb 2-1: Invalid ep0 maxpacket: 64 [ 164.992226][ T9] usb usb2-port1: unable to enumerate USB device [ 165.021099][ T6655] tipc: Started in network mode [ 165.030042][ T6655] tipc: Node identity aaaaaaaaaa3, cluster identity 4711 [ 165.037986][ T6655] tipc: Enabled bearer , priority 12 [ 165.206595][ T10] usb 4-1: reset high-speed USB device number 2 using dummy_hcd [ 165.266885][ T10] usb 4-1: device descriptor read/8, error -32 [ 166.625270][ T5873] tipc: Node number set to 10136234 [ 166.745015][ T30] audit: type=1326 audit(1742770403.580:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6681 comm="syz.3.216" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f949b18d169 code=0x0 [ 166.800509][ T1208] usb 4-1: USB disconnect, device number 2 [ 166.860131][ T6686] netlink: 16 bytes leftover after parsing attributes in process `syz.5.217'. [ 167.113350][ T6696] mmap: syz.4.221 (6696) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 167.516713][ T1208] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 167.592989][ T6709] Invalid/unusable pipe [ 167.826979][ T5902] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 167.843168][ T1208] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 168.210577][ T1208] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 168.276896][ T1208] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 168.287712][ T5902] usb 5-1: Using ep0 maxpacket: 16 [ 168.309210][ T5902] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 168.321078][ T1208] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 168.344498][ T5902] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 168.358865][ T1208] usb 2-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 168.381978][ T5902] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 168.409461][ T1208] usb 2-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 168.418055][ T1208] usb 2-1: Manufacturer: syz [ 168.422927][ T5902] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2e22, bcdDevice= 0.00 [ 168.434965][ T1208] usb 2-1: config 0 descriptor?? [ 168.441933][ T5902] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 168.455160][ T6719] x_tables: duplicate underflow at hook 1 [ 168.459846][ T5902] usb 5-1: config 0 descriptor?? [ 168.577425][ T6717] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 168.885139][ T5902] koneplus 0003:1E7D:2E22.0006: item fetching failed at offset 0/2 [ 168.895301][ T1208] appleir 0003:05AC:8243.0007: unknown main item tag 0x0 [ 168.917133][ T1208] appleir 0003:05AC:8243.0007: No inputs registered, leaving [ 168.925153][ T5902] koneplus 0003:1E7D:2E22.0006: parse failed [ 168.948271][ T5902] koneplus 0003:1E7D:2E22.0006: probe with driver koneplus failed with error -22 [ 168.963487][ T1208] appleir 0003:05AC:8243.0007: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.1-1/input0 [ 170.627156][ T5873] usb 5-1: USB disconnect, device number 7 [ 171.120041][ T6745] netlink: 16 bytes leftover after parsing attributes in process `syz.5.237'. [ 171.135996][ T1208] usb 2-1: USB disconnect, device number 16 [ 171.298452][ T9] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 171.876131][ T9] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 172.149503][ T9] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 172.179128][ T9] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 172.222243][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 172.266465][ T9] usb 4-1: SerialNumber: syz [ 172.555878][ T6757] overlayfs: failed to resolve './file0': -2 [ 173.365037][ T9] usb 4-1: 0:2 : does not exist [ 173.438568][ T9] usb 4-1: unit 255 not found! [ 173.466851][ T9] usb 4-1: 5:0: cannot get min/max values for control 2 (id 5) [ 173.556833][ T9] usb 4-1: USB disconnect, device number 3 [ 174.417045][ T5826] udevd[5826]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 174.824200][ T6788] ======================================================= [ 174.824200][ T6788] WARNING: The mand mount option has been deprecated and [ 174.824200][ T6788] and is ignored by this kernel. Remove the mand [ 174.824200][ T6788] option from the mount to silence this warning. [ 174.824200][ T6788] ======================================================= [ 174.859651][ C1] vkms_vblank_simulate: vblank timer overrun [ 175.426170][ T6790] netlink: 148 bytes leftover after parsing attributes in process `syz.1.245'. [ 175.944169][ T6798] netlink: 16 bytes leftover after parsing attributes in process `syz.5.249'. [ 176.006539][ T9] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 176.160400][ T9] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 176.180261][ T6803] netlink: 64 bytes leftover after parsing attributes in process `syz.1.251'. [ 176.207631][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 176.232016][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 177.059618][ T5873] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 177.177269][ T9] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 177.199502][ T9] usb 4-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 177.216478][ T9] usb 4-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 177.224632][ T9] usb 4-1: Manufacturer: syz [ 177.278811][ T9] usb 4-1: config 0 descriptor?? [ 177.350431][ T6810] netlink: 'syz.5.252': attribute type 5 has an invalid length. [ 177.386757][ T5873] usb 5-1: Using ep0 maxpacket: 16 [ 177.413235][ T5873] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xD has an invalid bInterval 0, changing to 7 [ 177.764541][ T5873] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xD has invalid wMaxPacketSize 0 [ 177.875955][ T5873] usb 5-1: New USB device found, idVendor=4752, idProduct=0011, bcdDevice=32.4f [ 177.877799][ T9] appleir 0003:05AC:8243.0008: unknown main item tag 0x0 [ 177.951376][ T5873] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 178.009480][ T5873] usb 5-1: Product: syz [ 178.052671][ T9] appleir 0003:05AC:8243.0008: No inputs registered, leaving [ 178.064844][ T5873] usb 5-1: Manufacturer: syz [ 178.083616][ T5873] usb 5-1: SerialNumber: syz [ 178.102100][ T9] appleir 0003:05AC:8243.0008: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.3-1/input0 [ 178.102806][ T5873] usb 5-1: config 0 descriptor?? [ 178.160834][ T5873] hub 5-1:0.0: bad descriptor, ignoring hub [ 178.202070][ T5873] hub 5-1:0.0: probe with driver hub failed with error -5 [ 178.255830][ T6822] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'syz0' [ 178.434310][ T5873] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 179.022366][ T6822] could not allocate digest TFM handle blake2s-160-generic [ 179.033502][ T5873] snd-usb-audio 5-1:0.0: probe with driver snd-usb-audio failed with error -12 [ 179.152046][ T6833] Mount JFS Failure: -22 [ 179.156899][ T6833] jfs_mount failed w/return code = -22 [ 179.519049][ T9] usb 5-1: USB disconnect, device number 8 [ 179.875945][ T6026] udevd[6026]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 179.955987][ T59] usb 4-1: USB disconnect, device number 4 [ 180.293848][ T6846] IPv6: addrconf: prefix option has invalid lifetime [ 180.335507][ T6846] ubi31: attaching mtd0 [ 180.346748][ T6846] ubi31 error: ubi_attach_mtd_dev: bad VID header (16) or data offsets (80) [ 180.533973][ T6848] netlink: 8 bytes leftover after parsing attributes in process `syz.3.261'. [ 181.244079][ T55] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 181.254397][ T55] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 181.266789][ T55] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 181.275935][ T55] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 181.284141][ T55] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 181.291878][ T55] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 181.316875][ T9] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 181.468496][ T6864] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'syz0' [ 181.946624][ T9] usb 2-1: too many configurations: 151, using maximum allowed: 8 [ 181.993686][ T9] usb 2-1: New USB device found, idVendor=04d8, idProduct=0082, bcdDevice=ce.b7 [ 182.003838][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=130 [ 182.034154][ T9] usb 2-1: Product: syz [ 182.048381][ T9] usb 2-1: Manufacturer: syz [ 182.069417][ T9] usb 2-1: SerialNumber: syz [ 182.107669][ T9] usb 2-1: config 0 descriptor?? [ 182.128732][ T6864] could not allocate digest TFM handle blake2s-160-generic [ 182.461321][ T9] usb 2-1: USB disconnect, device number 17 [ 182.606939][ T59] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 182.846598][ T59] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 182.891222][ T59] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 182.936517][ T59] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 182.954185][ T6860] chnl_net:caif_netlink_parms(): no params data found [ 182.966587][ T59] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 183.011829][ T59] usb 5-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 183.034261][ T59] usb 5-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 183.111802][ T59] usb 5-1: Manufacturer: syz [ 183.123695][ T59] usb 5-1: config 0 descriptor?? [ 183.390533][ T55] Bluetooth: hci6: command tx timeout [ 183.739221][ T59] appleir 0003:05AC:8243.0009: unknown main item tag 0x0 [ 183.800046][ T59] appleir 0003:05AC:8243.0009: No inputs registered, leaving [ 184.001460][ T59] appleir 0003:05AC:8243.0009: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.4-1/input0 [ 184.082700][ T6860] bridge0: port 1(bridge_slave_0) entered blocking state [ 184.125070][ T6860] bridge0: port 1(bridge_slave_0) entered disabled state [ 184.166780][ T6860] bridge_slave_0: entered allmulticast mode [ 184.188257][ T6860] bridge_slave_0: entered promiscuous mode [ 184.236654][ T6860] bridge0: port 2(bridge_slave_1) entered blocking state [ 184.243821][ T6860] bridge0: port 2(bridge_slave_1) entered disabled state [ 184.263098][ T6860] bridge_slave_1: entered allmulticast mode [ 184.281180][ T6860] bridge_slave_1: entered promiscuous mode [ 184.374720][ T6860] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 184.389946][ T6860] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 185.545876][ T55] Bluetooth: hci6: command tx timeout [ 185.550639][ T9] usb 5-1: USB disconnect, device number 9 [ 185.750874][ T6905] evm: overlay not supported [ 187.198382][ T6860] team0: Port device team_slave_0 added [ 187.592088][ T6860] team0: Port device team_slave_1 added [ 187.636618][ T55] Bluetooth: hci6: command tx timeout [ 189.367963][ T6860] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 189.375028][ T6860] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 189.484358][ T6860] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 189.532742][ T6860] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 189.541817][ T6860] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 189.597772][ T6860] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 189.707843][ T55] Bluetooth: hci6: command tx timeout [ 189.796766][ T5871] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 189.815707][ T6860] hsr_slave_0: entered promiscuous mode [ 189.830806][ T6860] hsr_slave_1: entered promiscuous mode [ 189.887139][ T6860] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 190.733553][ T5870] kernel read not supported for file /dsp (pid: 5870 comm: kworker/0:3) [ 190.862039][ T6860] Cannot create hsr debugfs directory [ 190.867975][ T5871] usb 6-1: Using ep0 maxpacket: 32 [ 191.062652][ T5871] usb 6-1: config 0 has an invalid interface number: 132 but max is 0 [ 191.197002][ T5871] usb 6-1: config 0 has no interface number 0 [ 191.213761][ T5871] usb 6-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 191.302824][ T5871] usb 6-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 191.382312][ T5871] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 191.412735][ T5871] usb 6-1: Product: syz [ 191.446228][ T5871] usb 6-1: Manufacturer: syz [ 191.451960][ T5871] usb 6-1: SerialNumber: syz [ 191.476842][ T5871] usb 6-1: config 0 descriptor?? [ 191.500984][ T5871] em28xx 6-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 191.550017][ T5871] em28xx 6-1:0.132: Video interface 132 found: [ 191.905543][ T6956] netlink: 48 bytes leftover after parsing attributes in process `syz.4.290'. [ 192.584159][ T5871] em28xx 6-1:0.132: unknown em28xx chip ID (0) [ 192.685094][ T6957] netlink: 'syz.3.292': attribute type 21 has an invalid length. [ 192.694462][ T6957] netlink: 128 bytes leftover after parsing attributes in process `syz.3.292'. [ 192.718740][ T6955] usb usb1: check_ctrlrecip: process 6955 (syz.1.291) requesting ep 01 but needs 81 [ 192.738905][ T6957] netlink: 'syz.3.292': attribute type 4 has an invalid length. [ 192.743276][ T5871] em28xx 6-1:0.132: failed to trigger read from i2c address 0xa0 (error=-5) [ 192.757433][ T6957] netlink: 'syz.3.292': attribute type 3 has an invalid length. [ 192.769233][ T6957] netlink: 3 bytes leftover after parsing attributes in process `syz.3.292'. [ 192.832309][ T5871] em28xx 6-1:0.132: board has no eeprom [ 192.832363][ T6955] usb usb1: usbfs: process 6955 (syz.1.291) did not claim interface 0 before use [ 192.906712][ T5871] em28xx 6-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 192.921627][ T5871] em28xx 6-1:0.132: analog set to bulk mode. [ 192.977118][ T5873] em28xx 6-1:0.132: Registering V4L2 extension [ 193.000371][ T5871] usb 6-1: USB disconnect, device number 2 [ 193.113413][ T5871] em28xx 6-1:0.132: Disconnecting em28xx [ 193.610077][ T6860] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 193.653595][ T6860] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 193.803891][ T6860] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 194.400431][ T6860] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 194.500818][ T5873] em28xx 6-1:0.132: Config register raw data: 0xffffffed [ 194.520778][ T5873] em28xx 6-1:0.132: AC97 chip type couldn't be determined [ 194.546574][ T5873] em28xx 6-1:0.132: No AC97 audio processor [ 194.593592][ T5873] usb 6-1: Decoder not found [ 194.634268][ T5873] em28xx 6-1:0.132: failed to create media graph [ 194.658393][ T5873] em28xx 6-1:0.132: V4L2 device video103 deregistered [ 194.697737][ T5873] em28xx 6-1:0.132: Remote control support is not available for this card. [ 194.714739][ T6980] tmpfs: Bad value for 'mpol' [ 194.735115][ T5871] em28xx 6-1:0.132: Closing input extension [ 194.763868][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.773082][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.778878][ T6860] 8021q: adding VLAN 0 to HW filter on device bond0 [ 194.785349][ T6980] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 194.842953][ T6860] 8021q: adding VLAN 0 to HW filter on device team0 [ 194.852756][ T5871] em28xx 6-1:0.132: Freeing device [ 194.888292][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 194.895470][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 194.970537][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 194.977937][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 195.086573][ T5873] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 195.263843][ T5873] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 195.347300][ T5873] usb 5-1: New USB device found, idVendor=1de1, idProduct=c102, bcdDevice=7d.08 [ 195.386679][ T5873] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 195.620991][ T5873] usb 5-1: Product: syz [ 195.625776][ T5873] usb 5-1: Manufacturer: syz [ 195.632360][ T5873] usb 5-1: SerialNumber: syz [ 195.648864][ T5873] usb 5-1: config 0 descriptor?? [ 195.656358][ T6860] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 195.668335][ T5873] gm12u320 5-1:0.0: [drm:gm12u320_set_ecomode] *ERROR* Misc. req. error -8 [ 195.686529][ T5873] gm12u320 5-1:0.0: probe with driver gm12u320 failed with error -5 [ 195.706080][ T5873] usb-storage 5-1:0.0: USB Mass Storage device detected [ 196.065135][ T6978] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 196.338458][ T5873] usb-storage 5-1:0.0: device ignored [ 196.348416][ T6978] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 196.602544][ T5873] usb 5-1: USB disconnect, device number 10 [ 196.758575][ T7012] overlayfs: failed to resolve './file0': -2 [ 196.832816][ T55] Bluetooth: hci3: command 0x0406 tx timeout [ 196.832998][ T5822] Bluetooth: hci2: command 0x0406 tx timeout [ 196.838985][ T55] Bluetooth: hci1: command 0x0406 tx timeout [ 196.844393][ T7017] netlink: 8 bytes leftover after parsing attributes in process `syz.3.304'. [ 196.956638][ T7017] bridge0: entered promiscuous mode [ 196.967244][ T7017] macsec1: entered promiscuous mode [ 197.046511][ T9] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 197.332901][ T9] usb 6-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 197.350676][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 197.457215][ T9] usb 6-1: config 0 descriptor?? [ 197.539927][ T9] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 197.617616][ T5870] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 197.748896][ T6860] veth0_vlan: entered promiscuous mode [ 197.787572][ T5870] usb 2-1: Using ep0 maxpacket: 8 [ 197.794787][ T5870] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x94, changing to 0x84 [ 197.821519][ T5870] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 197.856026][ T6860] veth1_vlan: entered promiscuous mode [ 197.867246][ T5870] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 197.905590][ T5870] usb 2-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=ed.ae [ 197.938196][ T5870] usb 2-1: New USB device strings: Mfr=129, Product=2, SerialNumber=3 [ 197.951696][ T6860] veth0_macvtap: entered promiscuous mode [ 197.967150][ T5870] usb 2-1: Product: syz [ 197.981792][ T9] cpia1 6-1:0.0: unexpected state after lo power cmd: 00 [ 197.996461][ T5870] usb 2-1: Manufacturer: syz [ 198.001305][ T5870] usb 2-1: SerialNumber: syz [ 198.017497][ T5870] usb 2-1: config 0 descriptor?? [ 198.028885][ T6860] veth1_macvtap: entered promiscuous mode [ 198.033705][ T5870] input: KB Gear Tablet as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input14 [ 198.125084][ T6860] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 198.172258][ T6860] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 198.720265][ T6860] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 198.757760][ T6860] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 198.769784][ T7016] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 198.822147][ T7029] netlink: 'syz.5.303': attribute type 13 has an invalid length. [ 198.827039][ T6860] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 198.837007][ T7016] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 198.855753][ T6860] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 198.874872][ T6860] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 198.886148][ T6860] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 198.906294][ T6860] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 198.936034][ T6860] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 198.955829][ T6860] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 198.975312][ T6860] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 198.996965][ T6860] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 199.004638][ T5870] usb 2-1: USB disconnect, device number 18 [ 199.081599][ T7029] gretap0: refused to change device tx_queue_len [ 199.089178][ T7029] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 199.228247][ T9] gspca_cpia1: usb_control_msg 05, error -71 [ 199.234454][ T9] cpia1 6-1:0.0: unexpected systemstate: 00 [ 199.270320][ T6860] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 199.303271][ T9] usb 6-1: USB disconnect, device number 3 [ 199.327061][ T6860] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 199.342428][ T6860] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 199.356608][ T6860] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 199.417462][ T7037] netlink: 4 bytes leftover after parsing attributes in process `syz.4.310'. [ 199.458824][ T6860] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 199.479511][ T6860] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 199.490151][ T6860] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 199.506052][ T6860] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 199.517469][ T6860] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 199.538436][ T6860] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 199.549536][ T6860] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 199.560463][ T6860] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 199.577930][ T6860] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 199.594767][ T6860] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 199.633439][ T6860] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 199.674782][ T6860] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 199.685256][ T6860] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 200.159145][ T6202] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 200.187987][ T6202] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 200.273739][ T6157] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 200.291439][ T6157] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 200.485815][ T7053] netlink: 64 bytes leftover after parsing attributes in process `syz.5.313'. [ 201.268588][ T9] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 201.438393][ T7065] netlink: 'syz.6.256': attribute type 10 has an invalid length. [ 201.460829][ T9] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 201.484952][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 201.508002][ T7065] 8021q: adding VLAN 0 to HW filter on device team0 [ 201.591842][ T5902] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 201.614474][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 201.618634][ T7065] bond0: (slave team0): Enslaving as an active interface with an up link [ 201.633297][ T9] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 201.694954][ T9] usb 4-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 201.719005][ T9] usb 4-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 201.742934][ T9] usb 4-1: Manufacturer: syz [ 201.756077][ T9] usb 4-1: config 0 descriptor?? [ 201.801837][ T5902] usb 5-1: config index 0 descriptor too short (expected 23569, got 27) [ 201.838025][ T5902] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 201.891343][ T5902] usb 5-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 201.909841][ T5902] usb 5-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 201.929924][ T5902] usb 5-1: Manufacturer: syz [ 201.952689][ T5902] usb 5-1: config 0 descriptor?? [ 201.993189][ T7076] sit0: entered promiscuous mode [ 202.032254][ T7076] netlink: '¥Gj¨6þyT': attribute type 2 has an invalid length. [ 202.074113][ T7076] netlink: 13 bytes leftover after parsing attributes in process `¥Gj¨6þyT'. [ 202.115101][ T5902] rc_core: IR keymap rc-hauppauge not found [ 202.125642][ T5902] Registered IR keymap rc-empty [ 202.143610][ T5902] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 202.146739][ T7076] 9pnet_fd: Insufficient options for proto=fd [ 202.172329][ T5902] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input15 [ 202.201881][ T9] appleir 0003:05AC:8243.000A: unknown main item tag 0x0 [ 202.219953][ T9] appleir 0003:05AC:8243.000A: No inputs registered, leaving [ 202.288126][ T9] appleir 0003:05AC:8243.000A: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.3-1/input0 [ 202.819385][ T52] usb 5-1: USB disconnect, device number 11 [ 204.629972][ T7078] tun0: tun_chr_ioctl cmd 1074025675 [ 204.637525][ T7078] tun0: persist enabled [ 204.850986][ T7094] tun0: tun_chr_ioctl cmd 1074025675 [ 204.879400][ T7094] tun0: persist enabled [ 204.920623][ T7099] Mount JFS Failure: -22 [ 204.925167][ T7099] jfs_mount failed w/return code = -22 [ 205.254979][ T5902] usb 4-1: USB disconnect, device number 5 [ 205.986576][ T30] audit: type=1326 audit(1742770443.060:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7109 comm="syz.4.329" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f0402f8d169 code=0x0 [ 206.506786][ T7126] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'syz0' [ 207.073232][ T5836] Bluetooth: hci4: command 0x0406 tx timeout [ 207.757036][ T7126] could not allocate digest TFM handle blake2s-160-generic [ 208.700557][ T7145] netlink: 12 bytes leftover after parsing attributes in process `syz.1.338'. [ 208.756532][ T7145] netlink: 'syz.1.338': attribute type 2 has an invalid length. [ 209.322137][ T7158] 9pnet_fd: Insufficient options for proto=fd [ 210.010070][ T7165] netlink: 4 bytes leftover after parsing attributes in process `syz.4.346'. [ 210.131783][ T30] audit: type=1326 audit(1742770447.200:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7159 comm="syz.1.344" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f116c18d169 code=0x0 [ 210.184594][ T7100] syz.5.322 (7100) used greatest stack depth: 18352 bytes left [ 211.052018][ T7175] Mount JFS Failure: -22 [ 211.057065][ T7175] jfs_mount failed w/return code = -22 [ 213.509678][ T7198] openvswitch: netlink: Flow key attr not present in new flow. [ 213.644610][ T7199] openvswitch: netlink: Flow key attr not present in new flow. [ 214.757380][ T7206] xt_CT: No such helper "snmp_trap" [ 215.007306][ T7220] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'syz0' [ 215.279867][ T7226] (syz.5.365,7226,1):dlmfs_mkdir:421 ERROR: invalid domain name for directory. [ 216.507419][ T5905] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 216.886563][ T5905] usb 5-1: device descriptor read/64, error -71 [ 217.138247][ T5905] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 217.316534][ T5905] usb 5-1: device descriptor read/64, error -71 [ 217.334553][ T9] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 217.426949][ T5905] usb usb5-port1: attempt power cycle [ 217.569438][ T9] usb 7-1: Using ep0 maxpacket: 32 [ 217.807236][ T5905] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 217.817787][ T9] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 217.901006][ T5905] usb 5-1: device descriptor read/8, error -71 [ 217.901151][ T9] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 218.000761][ T9] usb 7-1: New USB device found, idVendor=1e7d, idProduct=2ced, bcdDevice= 0.00 [ 218.053822][ T9] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 218.128754][ T9] usb 7-1: config 0 descriptor?? [ 218.196734][ T5905] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 218.234940][ T5905] usb 5-1: device descriptor read/8, error -71 [ 218.360431][ T5905] usb usb5-port1: unable to enumerate USB device [ 218.934392][ T9] usbhid 7-1:0.0: can't add hid device: -71 [ 218.946515][ T9] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 219.016947][ T9] usb 7-1: USB disconnect, device number 2 [ 219.852384][ T7256] xt_CT: No such helper "snmp_trap" [ 222.054626][ T7288] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 222.118409][ T5902] usb 6-1: new full-speed USB device number 4 using dummy_hcd [ 222.150979][ T7288] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 222.433476][ T5828] Bluetooth: hci5: command 0x0406 tx timeout [ 222.532342][ T5902] usb 6-1: config index 0 descriptor too short (expected 9, got 0) [ 222.679425][ T5902] usb 6-1: can't read configurations, error -22 [ 222.908939][ T5902] usb 6-1: new full-speed USB device number 5 using dummy_hcd [ 222.983391][ T7298] xt_connbytes: Forcing CT accounting to be enabled [ 222.990193][ T7298] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 223.149172][ T5902] usb 6-1: config index 0 descriptor too short (expected 9, got 0) [ 223.177398][ T5902] usb 6-1: can't read configurations, error -22 [ 223.218003][ T5902] usb usb6-port1: attempt power cycle [ 223.344237][ T7306] bridge0: entered promiscuous mode [ 223.377460][ T7306] macvlan2: entered promiscuous mode [ 224.469039][ T5902] usb 6-1: new full-speed USB device number 6 using dummy_hcd [ 224.544396][ T5902] usb 6-1: config index 0 descriptor too short (expected 9, got 0) [ 224.566688][ T5902] usb 6-1: can't read configurations, error -22 [ 224.726701][ T5902] usb 6-1: new full-speed USB device number 7 using dummy_hcd [ 224.875066][ T5902] usb 6-1: device descriptor read/8, error -71 [ 225.007536][ T5902] usb usb6-port1: unable to enumerate USB device [ 225.957223][ T7340] netlink: 8 bytes leftover after parsing attributes in process `syz.4.404'. [ 226.029298][ T7340] netlink: 4 bytes leftover after parsing attributes in process `syz.4.404'. [ 228.039677][ T5828] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 228.058909][ T5828] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 228.068583][ T5828] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 228.080541][ T5828] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 228.098139][ T5828] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 228.118619][ T5828] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 228.258150][ T7357] FAULT_INJECTION: forcing a failure. [ 228.258150][ T7357] name failslab, interval 1, probability 0, space 0, times 0 [ 228.306690][ T7357] CPU: 1 UID: 0 PID: 7357 Comm: syz.5.408 Not tainted 6.14.0-rc7-syzkaller-00205-g586de92313fc #0 [ 228.306718][ T7357] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 228.306729][ T7357] Call Trace: [ 228.306736][ T7357] [ 228.306744][ T7357] dump_stack_lvl+0x241/0x360 [ 228.306775][ T7357] ? __pfx_dump_stack_lvl+0x10/0x10 [ 228.306795][ T7357] ? __pfx__printk+0x10/0x10 [ 228.306826][ T7357] ? __kmalloc_cache_noprof+0x48/0x390 [ 228.306847][ T7357] ? __pfx___might_resched+0x10/0x10 [ 228.306876][ T7357] should_fail_ex+0x40a/0x550 [ 228.306909][ T7357] should_failslab+0xac/0x100 [ 228.307029][ T7357] __kmalloc_cache_noprof+0x70/0x390 [ 228.307048][ T7357] ? rds_cong_from_addr+0x51/0x380 [ 228.307079][ T7357] rds_cong_from_addr+0x51/0x380 [ 228.307101][ T7357] ? rds_cong_get_maps+0x1f/0xb0 [ 228.307126][ T7357] rds_cong_get_maps+0x28/0xb0 [ 228.307152][ T7357] __rds_conn_create+0x9d6/0x1f10 [ 228.307182][ T7357] ? __rds_conn_create+0x2d1/0x1f10 [ 228.307219][ T7357] ? __pfx___rds_conn_create+0x10/0x10 [ 228.307260][ T7357] rds_conn_create_outgoing+0x43/0x60 [ 228.307289][ T7357] rds_sendmsg+0x129d/0x2340 [ 228.307328][ T7357] ? __pfx_rds_sendmsg+0x10/0x10 [ 228.307345][ T7357] ? tomoyo_socket_sendmsg_permission+0x288/0x420 [ 228.307381][ T7357] ? __pfx_lock_release+0x10/0x10 [ 228.307433][ T7357] ? __pfx_rds_sendmsg+0x10/0x10 [ 228.307451][ T7357] __sock_sendmsg+0x221/0x270 [ 228.307490][ T7357] ____sys_sendmsg+0x53a/0x860 [ 228.307518][ T7357] ? __pfx_____sys_sendmsg+0x10/0x10 [ 228.307535][ T7357] ? __fget_files+0x2a/0x410 [ 228.307557][ T7357] ? __fget_files+0x2a/0x410 [ 228.307586][ T7357] __sys_sendmsg+0x269/0x350 [ 228.307611][ T7357] ? __pfx___sys_sendmsg+0x10/0x10 [ 228.307644][ T7357] ? do_sys_openat2+0x17a/0x1d0 [ 228.307691][ T7357] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 228.307717][ T7357] ? do_syscall_64+0x100/0x230 [ 228.307745][ T7357] ? do_syscall_64+0xb6/0x230 [ 228.307774][ T7357] do_syscall_64+0xf3/0x230 [ 228.307800][ T7357] ? clear_bhb_loop+0x35/0x90 [ 228.307829][ T7357] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 228.307853][ T7357] RIP: 0033:0x7f54f098d169 [ 228.307871][ T7357] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 228.307895][ T7357] RSP: 002b:00007f54f17ad038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 228.307918][ T7357] RAX: ffffffffffffffda RBX: 00007f54f0ba5fa0 RCX: 00007f54f098d169 [ 228.307931][ T7357] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 0000000000000003 [ 228.307943][ T7357] RBP: 00007f54f17ad090 R08: 0000000000000000 R09: 0000000000000000 [ 228.307954][ T7357] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 228.307965][ T7357] R13: 0000000000000000 R14: 00007f54f0ba5fa0 R15: 00007ffecf327268 [ 228.307993][ T7357] [ 228.823562][ T7352] chnl_net:caif_netlink_parms(): no params data found [ 229.096641][ T9] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 229.279918][ T7352] bridge0: port 1(bridge_slave_0) entered blocking state [ 229.296980][ T9] usb 5-1: Using ep0 maxpacket: 16 [ 229.304470][ T9] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 229.307660][ T7352] bridge0: port 1(bridge_slave_0) entered disabled state [ 229.341314][ T9] usb 5-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice=20.18 [ 229.365340][ T9] usb 5-1: New USB device strings: Mfr=154, Product=2, SerialNumber=0 [ 229.375468][ T7352] bridge_slave_0: entered allmulticast mode [ 229.477996][ T7352] bridge_slave_0: entered promiscuous mode [ 229.527830][ T7352] bridge0: port 2(bridge_slave_1) entered blocking state [ 229.536481][ T9] usb 5-1: Product: syz [ 229.536675][ T7352] bridge0: port 2(bridge_slave_1) entered disabled state [ 229.540682][ T9] usb 5-1: Manufacturer: syz [ 229.555083][ T7352] bridge_slave_1: entered allmulticast mode [ 229.564968][ T7352] bridge_slave_1: entered promiscuous mode [ 229.665548][ T9] usb 5-1: config 0 descriptor?? [ 229.700982][ T9] input: bcm5974 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input16 [ 229.830425][ T7352] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 230.047175][ T5182] bcm5974 5-1:0.0: could not read from device [ 230.093015][ T30] audit: type=1326 audit(1742770467.170:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7384 comm="syz.1.415" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f116c18d169 code=0x7ffc0000 [ 230.210407][ T5836] Bluetooth: hci7: command tx timeout [ 230.215584][ T7352] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 230.218876][ T5182] bcm5974 5-1:0.0: could not read from device [ 230.473354][ T9] usb 5-1: USB disconnect, device number 16 [ 230.502969][ T5182] bcm5974 5-1:0.0: could not read from device [ 230.505831][ T30] audit: type=1326 audit(1742770467.170:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7384 comm="syz.1.415" exe="/root/syz-executor" sig=0 arch=c000003e syscall=64 compat=0 ip=0x7f116c18d169 code=0x7ffc0000 [ 230.578359][ T5182] bcm5974 5-1:0.0: could not read from device [ 230.620278][ T7352] team0: Port device team_slave_0 added [ 230.638809][ T30] audit: type=1326 audit(1742770467.170:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7384 comm="syz.1.415" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f116c18d169 code=0x7ffc0000 [ 230.681178][ T7352] team0: Port device team_slave_1 added [ 230.794044][ T30] audit: type=1326 audit(1742770467.170:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7384 comm="syz.1.415" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f116c18d169 code=0x7ffc0000 [ 230.837497][ T7390] FAULT_INJECTION: forcing a failure. [ 230.837497][ T7390] name failslab, interval 1, probability 0, space 0, times 0 [ 230.931666][ T30] audit: type=1326 audit(1742770467.170:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7384 comm="syz.1.415" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f116c18d169 code=0x7ffc0000 [ 231.047034][ T7390] CPU: 1 UID: 0 PID: 7390 Comm: syz.1.416 Not tainted 6.14.0-rc7-syzkaller-00205-g586de92313fc #0 [ 231.047066][ T7390] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 231.047077][ T7390] Call Trace: [ 231.047084][ T7390] [ 231.047093][ T7390] dump_stack_lvl+0x241/0x360 [ 231.047122][ T7390] ? __pfx_dump_stack_lvl+0x10/0x10 [ 231.047140][ T7390] ? __pfx__printk+0x10/0x10 [ 231.047169][ T7390] ? __kmalloc_node_noprof+0xb9/0x4d0 [ 231.047189][ T7390] ? __pfx___might_resched+0x10/0x10 [ 231.047208][ T7390] ? rcu_is_watching+0x15/0xb0 [ 231.047230][ T7390] should_fail_ex+0x40a/0x550 [ 231.047262][ T7390] should_failslab+0xac/0x100 [ 231.047291][ T7390] __kmalloc_node_noprof+0xe1/0x4d0 [ 231.047307][ T7390] ? __kvmalloc_node_noprof+0x72/0x190 [ 231.047327][ T7390] ? seq_read_iter+0xb4/0xd70 [ 231.047354][ T7390] __kvmalloc_node_noprof+0x72/0x190 [ 231.047375][ T7390] traverse+0xd6/0x550 [ 231.047410][ T7390] seq_read_iter+0xc8c/0xd70 [ 231.047453][ T7390] seq_read+0x3a9/0x4f0 [ 231.047473][ T7390] ? mark_lock+0x9a/0x360 [ 231.047505][ T7390] ? __pfx_seq_read+0x10/0x10 [ 231.047553][ T7390] ? __pfx_seq_read+0x10/0x10 [ 231.047573][ T7390] proc_reg_read+0x201/0x2f0 [ 231.047593][ T7390] ? __pfx_proc_reg_read+0x10/0x10 [ 231.047625][ T7390] vfs_read+0x1f8/0xb40 [ 231.047657][ T7390] ? __pfx_vfs_read+0x10/0x10 [ 231.047676][ T7390] ? do_sys_openat2+0x17a/0x1d0 [ 231.047704][ T7390] ? __fget_files+0x2a/0x410 [ 231.047724][ T7390] ? __fget_files+0x395/0x410 [ 231.047741][ T7390] ? __fget_files+0x2a/0x410 [ 231.047769][ T7390] __x64_sys_pread64+0x1ac/0x240 [ 231.047795][ T7390] ? __pfx___x64_sys_pread64+0x10/0x10 [ 231.047820][ T7390] ? do_syscall_64+0x100/0x230 [ 231.047851][ T7390] ? do_syscall_64+0xb6/0x230 [ 231.047880][ T7390] do_syscall_64+0xf3/0x230 [ 231.047906][ T7390] ? clear_bhb_loop+0x35/0x90 [ 231.047934][ T7390] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 231.047958][ T7390] RIP: 0033:0x7f116c18d169 [ 231.047974][ T7390] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 231.047989][ T7390] RSP: 002b:00007f116cfd7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000011 [ 231.048009][ T7390] RAX: ffffffffffffffda RBX: 00007f116c3a5fa0 RCX: 00007f116c18d169 [ 231.048022][ T7390] RDX: 00000000000000b1 RSI: 0000200000000480 RDI: 0000000000000005 [ 231.048033][ T7390] RBP: 00007f116cfd7090 R08: 0000000000000000 R09: 0000000000000000 [ 231.048044][ T7390] R10: 00000000000000a6 R11: 0000000000000246 R12: 0000000000000001 [ 231.048054][ T7390] R13: 0000000000000000 R14: 00007f116c3a5fa0 R15: 00007fff63199358 [ 231.048084][ T7390] [ 231.685701][ T30] audit: type=1326 audit(1742770467.170:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7384 comm="syz.1.415" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f116c18d169 code=0x7ffc0000 [ 231.747773][ T30] audit: type=1326 audit(1742770467.170:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7384 comm="syz.1.415" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f116c18d169 code=0x7ffc0000 [ 231.848519][ T7352] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 231.878207][ T7352] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 231.880472][ T30] audit: type=1326 audit(1742770467.170:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7384 comm="syz.1.415" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f116c18d169 code=0x7ffc0000 [ 232.036071][ T30] audit: type=1326 audit(1742770467.170:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7384 comm="syz.1.415" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f116c18d169 code=0x7ffc0000 [ 232.057495][ T7352] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 232.064424][ T7352] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 232.112969][ T7352] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 232.160034][ T30] audit: type=1326 audit(1742770467.170:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7384 comm="syz.1.415" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f116c18d169 code=0x7ffc0000 [ 232.270788][ T5836] Bluetooth: hci7: command tx timeout [ 232.285093][ T7352] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 233.015550][ T7352] hsr_slave_0: entered promiscuous mode [ 234.284745][ T7352] hsr_slave_1: entered promiscuous mode [ 234.307591][ T7352] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 234.315406][ T7352] Cannot create hsr debugfs directory [ 234.346593][ T5836] Bluetooth: hci7: command tx timeout [ 234.454857][ T7427] openvswitch: netlink: VXLAN extension message has 4 unknown bytes. [ 236.236576][ T59] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 236.426760][ T5836] Bluetooth: hci7: command tx timeout [ 236.476639][ T59] usb 7-1: Using ep0 maxpacket: 16 [ 236.489664][ T59] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 236.506505][ T59] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 236.544046][ T59] usb 7-1: string descriptor 0 read error: -22 [ 236.550841][ T59] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 236.606643][ T59] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 237.149558][ T59] usb 7-1: 0:2 : does not exist [ 237.189922][ T59] usb 7-1: unit 4 not found! [ 237.203735][ T7352] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 237.281226][ T7352] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 237.331374][ T7352] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 237.347647][ T5902] usb 7-1: USB disconnect, device number 3 [ 237.399028][ T7352] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 237.722696][ T7352] 8021q: adding VLAN 0 to HW filter on device bond0 [ 237.753745][ T7352] 8021q: adding VLAN 0 to HW filter on device team0 [ 237.850489][ T7269] bridge0: port 1(bridge_slave_0) entered blocking state [ 237.857738][ T7269] bridge0: port 1(bridge_slave_0) entered forwarding state [ 237.900114][ T7269] bridge0: port 2(bridge_slave_1) entered blocking state [ 237.907287][ T7269] bridge0: port 2(bridge_slave_1) entered forwarding state [ 240.089291][ T7352] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 240.550143][ T7463] netlink: 8 bytes leftover after parsing attributes in process `syz.1.439'. [ 240.588505][ T7463] netlink: 8 bytes leftover after parsing attributes in process `syz.1.439'. [ 240.688517][ T7463] netlink: 8 bytes leftover after parsing attributes in process `syz.1.439'. [ 240.886819][ T7463] netlink: 8 bytes leftover after parsing attributes in process `syz.1.439'. [ 241.992807][ T7352] veth0_vlan: entered promiscuous mode [ 242.094925][ T7352] veth1_vlan: entered promiscuous mode [ 242.184684][ T7352] veth0_macvtap: entered promiscuous mode [ 242.197896][ T7352] veth1_macvtap: entered promiscuous mode [ 242.358640][ T7352] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 242.395689][ T7352] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 242.438094][ T7352] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 242.469471][ T7352] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 242.499959][ T7352] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 242.526485][ T7352] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 242.561634][ T7352] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 242.654516][ T7352] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 242.718340][ T7352] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 242.818333][ T7352] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 242.872078][ T7352] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 242.977302][ T7352] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 243.049559][ T7352] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 243.137322][ T7352] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 243.269229][ T7352] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 243.333535][ T7352] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 243.396868][ T7352] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 243.436580][ T7352] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 243.476448][ T7352] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 243.512389][ T7352] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 243.544828][ T7352] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 243.774892][ T7352] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 243.786184][ T7352] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 243.796880][ T7352] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 243.807492][ T7352] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 243.836663][ T7352] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 243.876751][ T7352] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 243.919492][ T7352] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 244.207272][ T7352] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 244.941772][ T7352] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 244.954113][ T7352] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 244.963432][ T7352] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 244.972700][ T7352] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 244.983362][ T7352] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 245.106894][ T5902] usb 5-1: new full-speed USB device number 17 using dummy_hcd [ 245.298234][ T5902] usb 5-1: config 4 has an invalid interface number: 24 but max is 0 [ 245.316489][ T5902] usb 5-1: config 4 has no interface number 0 [ 245.342821][ T5902] usb 5-1: New USB device found, idVendor=0959, idProduct=2bd0, bcdDevice=71.20 [ 245.364256][ T5902] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 245.388605][ T5902] usb 5-1: Product: syz [ 245.393364][ T5902] usb 5-1: Manufacturer: syz [ 245.417807][ T5902] usb 5-1: SerialNumber: syz [ 245.428930][ T5902] HFC-S_USB 5-1:4.24: probe with driver HFC-S_USB failed with error -5 [ 247.339172][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 247.368941][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 247.405699][ T9] usb 5-1: USB disconnect, device number 17 [ 247.604561][ T1110] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 247.636880][ T1110] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 248.440981][ T7550] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'syz0' [ 249.349283][ T7564] netlink: 'syz.4.462': attribute type 29 has an invalid length. [ 249.394937][ T7564] netlink: 8 bytes leftover after parsing attributes in process `syz.4.462'. [ 250.244062][ T7580] netlink: 16 bytes leftover after parsing attributes in process `syz.6.465'. [ 250.270382][ T1208] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 250.512844][ T1208] usb 8-1: device descriptor read/64, error -71 [ 250.996677][ T5873] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 251.056294][ T7584] netlink: 96 bytes leftover after parsing attributes in process `syz.5.466'. [ 251.108493][ T1208] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 251.326779][ T1208] usb 8-1: device descriptor read/64, error -71 [ 251.401671][ T7584] netlink: 12 bytes leftover after parsing attributes in process `syz.5.466'. [ 251.587676][ T1208] usb usb8-port1: attempt power cycle [ 251.768870][ T7584] vlan2: entered allmulticast mode [ 251.795859][ T7584] gretap0: entered allmulticast mode [ 251.996637][ T5873] usb 5-1: Using ep0 maxpacket: 32 [ 252.017967][ T5873] usb 5-1: unable to get BOS descriptor or descriptor too short [ 252.032762][ T5873] usb 5-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 252.048286][ T5873] usb 5-1: config 1 has an invalid interface descriptor of length 2, skipping [ 252.061314][ T7592] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'syz0' [ 252.082979][ T1208] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 252.096596][ T5873] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 252.140297][ T1208] usb 8-1: device descriptor read/8, error -71 [ 252.149201][ T5873] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 252.277428][ T5873] usb 5-1: config 1 has no interface number 1 [ 252.283891][ T5873] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 98, changing to 7 [ 252.388439][ T5873] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid maxpacket 25664, setting to 1024 [ 252.496759][ T1208] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 252.526671][ T7602] netlink: 4 bytes leftover after parsing attributes in process `syz.1.472'. [ 252.548704][ T7602] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 252.631771][ T1208] usb 8-1: device descriptor read/8, error -71 [ 252.856616][ T1208] usb usb8-port1: unable to enumerate USB device [ 253.656494][ T5873] usb 5-1: string descriptor 0 read error: -71 [ 253.662852][ T5873] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 253.685485][ T5873] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 253.736596][ T5873] usb 5-1: can't set config #1, error -71 [ 253.750882][ T5873] usb 5-1: USB disconnect, device number 18 [ 254.040921][ T7618] Mount JFS Failure: -22 [ 254.045292][ T7618] jfs_mount failed w/return code = -22 [ 254.623028][ T7622] netlink: 16 bytes leftover after parsing attributes in process `syz.5.479'. [ 254.907791][ T9] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 255.146497][ T9] usb 8-1: Using ep0 maxpacket: 16 [ 255.257616][ T9] usb 8-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 8.00 [ 255.297016][ T9] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 255.626165][ T9] usb 8-1: config 0 descriptor?? [ 255.672648][ T9] ftdi_sio 8-1:0.0: FTDI USB Serial Device converter detected [ 255.729027][ T9] usb 8-1: Detected FT4232H [ 255.894709][ T7637] netlink: 24 bytes leftover after parsing attributes in process `syz.4.484'. [ 255.935187][ T9] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 255.958604][ T9] usb 8-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 256.193730][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.200478][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.964725][ T5905] usb 8-1: USB disconnect, device number 6 [ 257.003302][ T5905] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 257.051122][ T5905] ftdi_sio 8-1:0.0: device disconnected [ 259.695610][ T7675] Mount JFS Failure: -22 [ 259.700483][ T7675] jfs_mount failed w/return code = -22 [ 261.436863][ T1208] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 262.428455][ T1208] usb 7-1: device descriptor read/64, error -71 [ 262.499862][ T7700] netlink: 24 bytes leftover after parsing attributes in process `syz.1.500'. [ 262.571460][ T7703] xt_SECMARK: unable to map security context 'system_u:object_r:dbusd_etc_t:s0' [ 262.844871][ T1208] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 263.449184][ T1208] usb 7-1: device descriptor read/64, error -71 [ 263.912872][ T1208] usb usb7-port1: attempt power cycle [ 268.707667][ T7751] netlink: 24 bytes leftover after parsing attributes in process `syz.1.513'. [ 271.617403][ T7765] netlink: 28 bytes leftover after parsing attributes in process `syz.5.517'. [ 271.676774][ T7765] netlink: 28 bytes leftover after parsing attributes in process `syz.5.517'. [ 271.699721][ T7770] netlink: 40 bytes leftover after parsing attributes in process `syz.4.521'. [ 271.787199][ T7765] batadv0: entered promiscuous mode [ 271.835512][ T7765] dummy0: entered promiscuous mode [ 271.958377][ T5902] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 272.432401][ T5902] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 272.576557][ T5902] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 272.634310][ T5902] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 272.700808][ T5902] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 272.743123][ T5902] usb 2-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 272.926967][ T5902] usb 2-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 273.856600][ T5902] usb 2-1: Manufacturer: syz [ 273.865556][ T5902] usb 2-1: config 0 descriptor?? [ 274.276703][ T7788] Invalid source name [ 274.584534][ T7800] netlink: 16 bytes leftover after parsing attributes in process `syz.5.529'. [ 275.110739][ T5902] appleir 0003:05AC:8243.000B: unknown main item tag 0x0 [ 275.167275][ T5902] appleir 0003:05AC:8243.000B: No inputs registered, leaving [ 275.182998][ T5902] appleir 0003:05AC:8243.000B: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.1-1/input0 [ 275.288417][ T7802] A link change request failed with some changes committed already. Interface wg1 may have been left with an inconsistent configuration, please check. [ 276.590430][ T7821] netlink: 12 bytes leftover after parsing attributes in process `syz.4.535'. [ 276.887597][ T7825] FAULT_INJECTION: forcing a failure. [ 276.887597][ T7825] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 276.887703][ T7825] CPU: 0 UID: 0 PID: 7825 Comm: syz.5.537 Not tainted 6.14.0-rc7-syzkaller-00205-g586de92313fc #0 [ 276.887727][ T7825] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 276.887739][ T7825] Call Trace: [ 276.887746][ T7825] [ 276.887755][ T7825] dump_stack_lvl+0x241/0x360 [ 276.887783][ T7825] ? __pfx_dump_stack_lvl+0x10/0x10 [ 276.887803][ T7825] ? __pfx__printk+0x10/0x10 [ 276.887835][ T7825] ? __pfx_lock_release+0x10/0x10 [ 276.887874][ T7825] ? __lock_acquire+0x1397/0x2100 [ 276.887905][ T7825] should_fail_ex+0x40a/0x550 [ 276.887940][ T7825] _copy_from_user+0x2d/0xb0 [ 276.887966][ T7825] do_seccomp+0x20b/0xf90 [ 276.887993][ T7825] ? __pfx_do_seccomp+0x10/0x10 [ 276.888010][ T7825] ? validate_chain+0x11e/0x5920 [ 276.888032][ T7825] ? cap_task_prctl+0x1e9/0xaf0 [ 276.888057][ T7825] ? static_key_count+0x41/0x70 [ 276.888079][ T7825] ? security_task_prctl+0x13c/0x160 [ 276.888108][ T7825] __se_sys_prctl+0x387/0x40f0 [ 276.888133][ T7825] ? __lock_acquire+0x1397/0x2100 [ 276.888174][ T7825] ? _parse_integer_limit+0x1b5/0x200 [ 276.888196][ T7825] ? mark_lock+0x9a/0x360 [ 276.888240][ T7825] ? __lock_acquire+0x1397/0x2100 [ 276.888276][ T7825] ? __pfx___se_sys_prctl+0x10/0x10 [ 276.888322][ T7825] ? __pfx_lock_acquire+0x10/0x10 [ 276.888349][ T7825] ? get_pid_task+0x23/0x1f0 [ 276.888377][ T7825] ? __pfx_lock_release+0x10/0x10 [ 276.888400][ T7825] ? kstrtouint_from_user+0x128/0x190 [ 276.888447][ T7825] ? ksys_write+0x22a/0x2b0 [ 276.888472][ T7825] ? __pfx_lock_release+0x10/0x10 [ 276.888505][ T7825] ? sb_end_write+0xe9/0x1c0 [ 276.888526][ T7825] ? vfs_write+0x7fa/0xd10 [ 276.888559][ T7825] ? __mutex_unlock_slowpath+0x227/0x800 [ 276.888594][ T7825] ? do_sys_openat2+0x17a/0x1d0 [ 276.888617][ T7825] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 276.888644][ T7825] ? __fget_files+0x2a/0x410 [ 276.888669][ T7825] ? __fget_files+0x2a/0x410 [ 276.888698][ T7825] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 276.888728][ T7825] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 276.888756][ T7825] ? do_syscall_64+0x100/0x230 [ 276.888787][ T7825] ? __x64_sys_prctl+0x20/0xc0 [ 276.888809][ T7825] do_syscall_64+0xf3/0x230 [ 276.888838][ T7825] ? clear_bhb_loop+0x35/0x90 [ 276.888880][ T7825] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 276.888905][ T7825] RIP: 0033:0x7f54f098d169 [ 276.888924][ T7825] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 276.888941][ T7825] RSP: 002b:00007f54f17ad038 EFLAGS: 00000246 ORIG_RAX: 000000000000009d [ 276.888965][ T7825] RAX: ffffffffffffffda RBX: 00007f54f0ba5fa0 RCX: 00007f54f098d169 [ 276.888980][ T7825] RDX: 0000200000000000 RSI: 0000000000000002 RDI: 0000000000000016 [ 276.888993][ T7825] RBP: 00007f54f17ad090 R08: 0000000000000000 R09: 0000000000000000 [ 276.889005][ T7825] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 276.889017][ T7825] R13: 0000000000000000 R14: 00007f54f0ba5fa0 R15: 00007ffecf327268 [ 276.889049][ T7825] [ 278.015070][ T5823] usb 2-1: USB disconnect, device number 19 [ 279.988791][ T7850] netlink: 16 bytes leftover after parsing attributes in process `syz.1.542'. [ 280.294213][ T7854] netlink: 28 bytes leftover after parsing attributes in process `syz.1.545'. [ 280.303642][ T7854] netlink: 28 bytes leftover after parsing attributes in process `syz.1.545'. [ 280.370436][ T7854] team0: entered promiscuous mode [ 280.406542][ T7854] team_slave_0: entered promiscuous mode [ 280.415237][ T7854] team_slave_1: entered promiscuous mode [ 280.439303][ T7854] bond0: entered promiscuous mode [ 280.445420][ T7854] bond_slave_0: entered promiscuous mode [ 280.470654][ T7854] bond_slave_1: entered promiscuous mode [ 280.518907][ T7854] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 280.539386][ T7854] Cannot create hsr debugfs directory [ 280.555083][ T7854] 8021q: adding VLAN 0 to HW filter on device hsr0 [ 280.966943][ T7864] netlink: 28 bytes leftover after parsing attributes in process `syz.6.549'. [ 281.336575][ T9] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 281.871898][ T5905] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 282.312342][ T9] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 282.641673][ T9] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 282.692346][ T9] usb 8-1: New USB device found, idVendor=18d1, idProduct=9400, bcdDevice= 0.00 [ 282.713444][ T9] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 282.743086][ T9] usb 8-1: config 0 descriptor?? [ 282.818778][ T7881] netlink: 16 bytes leftover after parsing attributes in process `syz.6.554'. [ 282.850931][ T7882] netlink: 60 bytes leftover after parsing attributes in process `syz.5.553'. [ 282.868358][ T7882] unsupported nlmsg_type 40 [ 283.421539][ T9] hid (null): invalid report_size -592885765 [ 283.738924][ T9] stadia 0003:18D1:9400.000C: invalid report_size -592885765 [ 283.779284][ T9] stadia 0003:18D1:9400.000C: item 0 4 1 7 parsing failed [ 283.800321][ T9] stadia 0003:18D1:9400.000C: parse failed [ 283.852046][ T9] stadia 0003:18D1:9400.000C: probe with driver stadia failed with error -22 [ 283.888976][ T9] usb 8-1: USB disconnect, device number 7 [ 284.078825][ T7896] netlink: 'syz.6.557': attribute type 29 has an invalid length. [ 284.141122][ T7896] netlink: 8 bytes leftover after parsing attributes in process `syz.6.557'. [ 284.396564][ T9] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 284.586101][ T9] usb 2-1: Using ep0 maxpacket: 8 [ 284.629538][ T9] usb 2-1: unable to get BOS descriptor or descriptor too short [ 284.668020][ T9] usb 2-1: config 0 has an invalid interface number: 88 but max is 0 [ 284.705978][ T9] usb 2-1: config 0 has no interface number 0 [ 284.721061][ T9] usb 2-1: config 0 interface 88 has no altsetting 0 [ 284.761347][ T9] usb 2-1: New USB device found, idVendor=0460, idProduct=0004, bcdDevice=96.31 [ 284.791486][ T9] usb 2-1: New USB device strings: Mfr=1, Product=84, SerialNumber=3 [ 284.833921][ T9] usb 2-1: Product: syz [ 284.844041][ T9] usb 2-1: Manufacturer: syz [ 284.866673][ T9] usb 2-1: SerialNumber: syz [ 284.887612][ T9] usb 2-1: config 0 descriptor?? [ 285.622654][ T9] input: syz syz as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.88/input/input18 [ 285.656951][ T9] usb 2-1: USB disconnect, device number 20 [ 285.662955][ C0] usb_acecad 2-1:0.88: can't resubmit intr, dummy_hcd.1-1/input0, status -19 [ 286.760253][ T7915] netlink: 16 bytes leftover after parsing attributes in process `syz.4.565'. [ 287.690655][ T7928] Cannot find add_set index 0 as target [ 287.831051][ T30] kauditd_printk_skb: 22 callbacks suppressed [ 287.831624][ T30] audit: type=1326 audit(1742770524.900:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7929 comm="syz.1.570" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f116c18d169 code=0x0 [ 289.054243][ T7940] netlink: 'syz.7.573': attribute type 29 has an invalid length. [ 289.079050][ T7940] netlink: 8 bytes leftover after parsing attributes in process `syz.7.573'. [ 289.416482][ T5902] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 289.504784][ T7953] netlink: 16 bytes leftover after parsing attributes in process `syz.6.577'. [ 289.646830][ T5902] usb 8-1: device descriptor read/64, error -71 [ 290.678231][ T5902] usb 8-1: new high-speed USB device number 9 using dummy_hcd [ 291.260799][ T5902] usb 8-1: device descriptor read/64, error -71 [ 291.396973][ T5902] usb usb8-port1: attempt power cycle [ 293.202905][ T7978] Invalid logical block size (16777472) [ 293.394812][ T7971] xt_CT: No such helper "snmp_trap" [ 295.292096][ T7996] netlink: 16 bytes leftover after parsing attributes in process `syz.7.590'. [ 296.507518][ T8003] netlink: 'syz.6.592': attribute type 29 has an invalid length. [ 296.602966][ T8003] netlink: 8 bytes leftover after parsing attributes in process `syz.6.592'. [ 297.346949][ T5873] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 297.667061][ T5873] usb 7-1: device descriptor read/64, error -71 [ 297.736183][ T8016] /dev/nullb0: Can't open blockdev [ 298.285868][ T5873] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 299.077432][ T5873] usb 7-1: device descriptor read/64, error -71 [ 299.198880][ T5873] usb usb7-port1: attempt power cycle [ 299.553124][ T8024] xt_CT: No such helper "snmp_trap" [ 299.858925][ T8040] netlink: 8 bytes leftover after parsing attributes in process `syz.4.603'. [ 302.143064][ T8051] netlink: 80 bytes leftover after parsing attributes in process `syz.5.605'. [ 303.390954][ T8065] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'syz0' [ 304.125890][ T8065] could not allocate digest TFM handle blake2s-160-generic [ 304.167588][ T8073] netlink: 'syz.1.611': attribute type 29 has an invalid length. [ 304.356921][ T5828] Bluetooth: hci6: command 0x0405 tx timeout [ 304.364975][ T8073] netlink: 8 bytes leftover after parsing attributes in process `syz.1.611'. [ 304.696516][ T5905] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 304.856482][ T5905] usb 2-1: device descriptor read/64, error -71 [ 305.127194][ T5905] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 305.349388][ T5905] usb 2-1: device descriptor read/64, error -71 [ 305.589034][ T5905] usb usb2-port1: attempt power cycle [ 306.019581][ T8092] netlink: 8 bytes leftover after parsing attributes in process `syz.4.617'. [ 306.107931][ T5905] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 306.159373][ T5905] usb 2-1: device descriptor read/8, error -71 [ 306.406560][ T5905] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 306.477618][ T5905] usb 2-1: device descriptor read/8, error -71 [ 306.617496][ T5905] usb usb2-port1: unable to enumerate USB device [ 308.689853][ T8119] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'syz0' [ 309.310400][ T9] usb 5-1: new full-speed USB device number 20 using dummy_hcd [ 309.907166][ T8118] could not allocate digest TFM handle blake2s-160-generic [ 310.139817][ T9] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 310.218614][ T8138] netlink: 8 bytes leftover after parsing attributes in process `syz.6.629'. [ 310.235572][ T9] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 310.257447][ T9] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 310.307581][ T9] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 310.377588][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 310.436695][ T9] usb 5-1: Product: syz [ 310.451562][ T9] usb 5-1: Manufacturer: syz [ 310.479102][ T9] usb 5-1: SerialNumber: syz [ 310.518428][ T9] cdc_ncm 5-1:1.0: CDC Union missing and no IAD found [ 310.546469][ T9] cdc_ncm 5-1:1.0: bind() failure [ 310.793102][ T59] usb 5-1: USB disconnect, device number 20 [ 310.935799][ T8147] netlink: 'syz.6.633': attribute type 29 has an invalid length. [ 310.957213][ T8147] netlink: 8 bytes leftover after parsing attributes in process `syz.6.633'. [ 311.346651][ T1208] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 311.516504][ T1208] usb 7-1: device descriptor read/64, error -71 [ 311.657176][ T8152] FAULT_INJECTION: forcing a failure. [ 311.657176][ T8152] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 311.696632][ T8152] CPU: 0 UID: 0 PID: 8152 Comm: syz.4.635 Not tainted 6.14.0-rc7-syzkaller-00205-g586de92313fc #0 [ 311.696665][ T8152] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 311.696676][ T8152] Call Trace: [ 311.696684][ T8152] [ 311.696692][ T8152] dump_stack_lvl+0x241/0x360 [ 311.696715][ T8152] ? __pfx_dump_stack_lvl+0x10/0x10 [ 311.696734][ T8152] ? __pfx__printk+0x10/0x10 [ 311.696752][ T8152] ? __pfx_lock_release+0x10/0x10 [ 311.696772][ T8152] should_fail_ex+0x40a/0x550 [ 311.696790][ T8152] _copy_from_user+0x2d/0xb0 [ 311.696806][ T8152] video_usercopy+0x3ac/0x11e0 [ 311.696824][ T8152] ? __pfx___video_do_ioctl+0x10/0x10 [ 311.696836][ T8152] ? __pfx_video_usercopy+0x10/0x10 [ 311.696847][ T8152] ? smack_file_ioctl+0x304/0x3b0 [ 311.696869][ T8152] ? __fget_files+0x2a/0x410 [ 311.696882][ T8152] ? __fget_files+0x2a/0x410 [ 311.696895][ T8152] v4l2_ioctl+0x189/0x1e0 [ 311.696905][ T8152] ? __pfx_v4l2_ioctl+0x10/0x10 [ 311.696918][ T8152] __se_sys_ioctl+0xf5/0x170 [ 311.696933][ T8152] do_syscall_64+0xf3/0x230 [ 311.696950][ T8152] ? clear_bhb_loop+0x35/0x90 [ 311.696966][ T8152] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 311.696981][ T8152] RIP: 0033:0x7f0402f8d169 [ 311.696992][ T8152] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 311.697002][ T8152] RSP: 002b:00007f0403e56038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 311.697017][ T8152] RAX: ffffffffffffffda RBX: 00007f04031a5fa0 RCX: 00007f0402f8d169 [ 311.697025][ T8152] RDX: 0000200000000080 RSI: 00000000c0d05640 RDI: 0000000000000003 [ 311.697033][ T8152] RBP: 00007f0403e56090 R08: 0000000000000000 R09: 0000000000000000 [ 311.697040][ T8152] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 311.697046][ T8152] R13: 0000000000000000 R14: 00007f04031a5fa0 R15: 00007fff34fdcc38 [ 311.697063][ T8152] [ 312.326602][ T1208] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 312.486578][ T1208] usb 7-1: device descriptor read/64, error -71 [ 312.598243][ T1208] usb usb7-port1: attempt power cycle [ 313.026771][ T1208] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 313.049217][ T1208] usb 7-1: device descriptor read/8, error -71 [ 313.366912][ T1208] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 313.567409][ T1208] usb 7-1: device descriptor read/8, error -71 [ 313.590869][ T8163] FAULT_INJECTION: forcing a failure. [ 313.590869][ T8163] name failslab, interval 1, probability 0, space 0, times 0 [ 313.641401][ T8154] "syz.4.636" (8154) uses obsolete ecb(arc4) skcipher [ 313.659522][ T8163] CPU: 0 UID: 0 PID: 8163 Comm: syz.7.638 Not tainted 6.14.0-rc7-syzkaller-00205-g586de92313fc #0 [ 313.659558][ T8163] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 313.659570][ T8163] Call Trace: [ 313.659578][ T8163] [ 313.659588][ T8163] dump_stack_lvl+0x241/0x360 [ 313.659618][ T8163] ? __pfx_dump_stack_lvl+0x10/0x10 [ 313.659638][ T8163] ? __pfx__printk+0x10/0x10 [ 313.659670][ T8163] ? fs_reclaim_acquire+0x93/0x130 [ 313.659696][ T8163] ? __pfx___might_resched+0x10/0x10 [ 313.659717][ T8163] ? dynamic_dname+0x144/0x1b0 [ 313.659746][ T8163] should_fail_ex+0x40a/0x550 [ 313.659781][ T8163] should_failslab+0xac/0x100 [ 313.659812][ T8163] __kmalloc_noprof+0xdd/0x4c0 [ 313.659831][ T8163] ? tomoyo_encode+0x26f/0x540 [ 313.659859][ T8163] tomoyo_encode+0x26f/0x540 [ 313.659882][ T8163] ? __pfx_anon_inodefs_dname+0x10/0x10 [ 313.659915][ T8163] tomoyo_realpath_from_path+0x59e/0x5e0 [ 313.659951][ T8163] tomoyo_path_number_perm+0x239/0x770 [ 313.659978][ T8163] ? __lock_acquire+0x1397/0x2100 [ 313.660009][ T8163] ? tomoyo_path_number_perm+0x209/0x770 [ 313.660039][ T8163] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 313.660113][ T8163] ? __fget_files+0x2a/0x410 [ 313.660138][ T8163] ? __fget_files+0x2a/0x410 [ 313.660165][ T8163] security_file_ioctl+0xc6/0x2a0 [ 313.660196][ T8163] __se_sys_ioctl+0x46/0x170 [ 313.660224][ T8163] do_syscall_64+0xf3/0x230 [ 313.660254][ T8163] ? clear_bhb_loop+0x35/0x90 [ 313.660284][ T8163] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 313.660309][ T8163] RIP: 0033:0x7f506f78d169 [ 313.660328][ T8163] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 313.660345][ T8163] RSP: 002b:00007f50706a5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 313.660367][ T8163] RAX: ffffffffffffffda RBX: 00007f506f9a5fa0 RCX: 00007f506f78d169 [ 313.660382][ T8163] RDX: 0000200000000040 RSI: 000000004008ae89 RDI: 0000000000000006 [ 313.660395][ T8163] RBP: 00007f50706a5090 R08: 0000000000000000 R09: 0000000000000000 [ 313.660407][ T8163] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 313.660418][ T8163] R13: 0000000000000000 R14: 00007f506f9a5fa0 R15: 00007fff3c7863c8 [ 313.660451][ T8163] [ 313.918533][ T8163] ERROR: Out of memory at tomoyo_realpath_from_path. [ 314.064388][ T1208] usb usb7-port1: unable to enumerate USB device [ 314.498901][ T31] INFO: task syz.2.207:6654 blocked for more than 143 seconds. [ 315.107651][ T31] Not tainted 6.14.0-rc7-syzkaller-00205-g586de92313fc #0 [ 315.456535][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 315.465601][ T31] task:syz.2.207 state:D stack:26064 pid:6654 tgid:6652 ppid:5837 task_flags:0x400140 flags:0x00004004 [ 315.638164][ T8176] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'syz0' [ 315.707313][ T31] Call Trace: [ 315.710767][ T31] [ 315.713735][ T31] __schedule+0x18bc/0x4c40 [ 315.782888][ T31] ? __pfx___schedule+0x10/0x10 [ 315.883485][ T8180] netlink: 8 bytes leftover after parsing attributes in process `syz.7.642'. [ 316.373710][ T8175] could not allocate digest TFM handle blake2s-160-generic [ 316.381777][ T31] ? __pfx_lock_release+0x10/0x10 [ 316.406851][ T31] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 316.456837][ T31] ? schedule+0x90/0x320 [ 316.461262][ T31] schedule+0x14b/0x320 [ 316.496264][ T31] super_lock+0x335/0x400 [ 316.536481][ T31] ? __pfx_super_lock+0x10/0x10 [ 316.597992][ T31] ? __pfx_var_wake_function+0x10/0x10 [ 316.643813][ T31] ? do_raw_spin_unlock+0x13c/0x8b0 [ 316.656617][ T31] iterate_supers+0x8c/0x190 [ 316.680554][ T31] ? __pfx_quota_sync_one+0x10/0x10 [ 316.698893][ T31] __se_sys_quotactl+0x38e/0xa30 [ 316.714020][ T31] ? __pfx___se_sys_quotactl+0x10/0x10 [ 316.738849][ T31] ? do_syscall_64+0x100/0x230 [ 316.804987][ T31] ? do_syscall_64+0xb6/0x230 [ 316.820626][ T31] do_syscall_64+0xf3/0x230 [ 316.835542][ T31] ? clear_bhb_loop+0x35/0x90 [ 316.843316][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 316.856420][ T31] RIP: 0033:0x7f2a6e38d169 [ 316.866658][ T31] RSP: 002b:00007f2a6f171038 EFLAGS: 00000246 ORIG_RAX: 00000000000000b3 [ 316.886192][ T31] RAX: ffffffffffffffda RBX: 00007f2a6e5a5fa0 RCX: 00007f2a6e38d169 [ 316.904718][ T31] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffffff80000101 [ 316.923586][ T31] RBP: 00007f2a6e40e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 316.936410][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 316.955226][ T31] R13: 0000000000000000 R14: 00007f2a6e5a5fa0 R15: 00007ffd73fd2528 [ 316.984960][ T31] [ 316.999131][ T31] [ 316.999131][ T31] Showing all locks held in the system: [ 317.018883][ T31] 1 lock held by khungtaskd/31: [ 317.040343][ T31] #0: ffffffff8eb393e0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x55/0x2a0 [ 317.067963][ T31] 4 locks held by kworker/u8:3/53: [ 317.092974][ T31] 2 locks held by kworker/u8:5/1081: [ 317.116506][ T31] 2 locks held by getty/5576: [ 317.125911][ T31] #0: ffff8880358400a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 317.176679][ T31] #1: ffffc900032fb2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x616/0x1770 [ 317.216514][ T31] 1 lock held by syz-executor/5830: [ 317.221779][ T31] #0: ffff8880b863e7d8 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0xb0/0x140 [ 317.261058][ T31] 1 lock held by syz.0.1/5907: [ 317.276241][ T31] 1 lock held by syz.1.640/8167: [ 317.306590][ T31] #0: ffffffff8eb3e780 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x530 [ 317.326463][ T31] [ 317.328869][ T31] ============================================= [ 317.328869][ T31] [ 317.356775][ T31] NMI backtrace for cpu 0 [ 317.356796][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.14.0-rc7-syzkaller-00205-g586de92313fc #0 [ 317.356821][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 317.356832][ T31] Call Trace: [ 317.356839][ T31] [ 317.356849][ T31] dump_stack_lvl+0x241/0x360 [ 317.356880][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 317.356901][ T31] ? __pfx__printk+0x10/0x10 [ 317.356942][ T31] nmi_cpu_backtrace+0x49c/0x4d0 [ 317.356974][ T31] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 317.356995][ T31] ? _printk+0xd5/0x120 [ 317.357021][ T31] ? __pfx__printk+0x10/0x10 [ 317.357048][ T31] ? __wake_up_klogd+0xcc/0x110 [ 317.357073][ T31] ? __pfx__printk+0x10/0x10 [ 317.357101][ T31] ? __rcu_read_unlock+0xa1/0x110 [ 317.357129][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 317.357154][ T31] nmi_trigger_cpumask_backtrace+0x198/0x320 [ 317.357182][ T31] watchdog+0x1058/0x10a0 [ 317.357209][ T31] ? watchdog+0x1ea/0x10a0 [ 317.357241][ T31] ? __pfx_watchdog+0x10/0x10 [ 317.357267][ T31] kthread+0x7a9/0x920 [ 317.357293][ T31] ? __pfx_kthread+0x10/0x10 [ 317.357321][ T31] ? __pfx_watchdog+0x10/0x10 [ 317.357347][ T31] ? __pfx_kthread+0x10/0x10 [ 317.357371][ T31] ? __pfx_kthread+0x10/0x10 [ 317.357401][ T31] ? __pfx_kthread+0x10/0x10 [ 317.357434][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 317.357459][ T31] ? lockdep_hardirqs_on+0x99/0x150 [ 317.357486][ T31] ? __pfx_kthread+0x10/0x10 [ 317.357514][ T31] ret_from_fork+0x4b/0x80 [ 317.357536][ T31] ? __pfx_kthread+0x10/0x10 [ 317.357563][ T31] ret_from_fork_asm+0x1a/0x30 [ 317.357601][ T31] [ 317.357609][ T31] Sending NMI from CPU 0 to CPUs 1: [ 317.538366][ C1] NMI backtrace for cpu 1 [ 317.538383][ C1] CPU: 1 UID: 0 PID: 6511 Comm: kworker/u8:12 Not tainted 6.14.0-rc7-syzkaller-00205-g586de92313fc #0 [ 317.538401][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 317.538411][ C1] Workqueue: bat_events batadv_nc_worker [ 317.538434][ C1] RIP: 0010:check_preemption_disabled+0x60/0x120 [ 317.538452][ C1] Code: 00 48 3b 44 24 08 0f 85 ce 00 00 00 89 d8 48 83 c4 10 5b 41 5c 41 5e 41 5f c3 cc cc cc cc 48 c7 04 24 00 00 00 00 9c 8f 04 24 04 24 00 02 00 00 74 c5 49 89 f6 49 89 ff 65 4c 8b 24 25 00 d5 [ 317.538465][ C1] RSP: 0018:ffffc90010797948 EFLAGS: 00000046 [ 317.538478][ C1] RAX: 0000000080000000 RBX: 0000000000000001 RCX: ffffc90010797a03 [ 317.538489][ C1] RDX: 0000000000000002 RSI: ffffffff8c2ac600 RDI: ffffffff8c802ce0 [ 317.538499][ C1] RBP: ffffc90010797aa8 R08: ffffffff903bd177 R09: 1ffffffff2077a2e [ 317.538510][ C1] R10: dffffc0000000000 R11: fffffbfff2077a2f R12: 1ffff920020f2f3c [ 317.538521][ C1] R13: 0000000000000246 R14: ffffc90010797a10 R15: dffffc0000000000 [ 317.538532][ C1] FS: 0000000000000000(0000) GS:ffff8880b8700000(0000) knlGS:0000000000000000 [ 317.538545][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 317.538555][ C1] CR2: 00007f0403178ab8 CR3: 000000007da22000 CR4: 00000000003526f0 [ 317.538571][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 317.538580][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 317.538590][ C1] Call Trace: [ 317.538595][ C1] [ 317.538602][ C1] ? nmi_cpu_backtrace+0x3c2/0x4d0 [ 317.538628][ C1] ? __pfx_lock_acquire+0x10/0x10 [ 317.538648][ C1] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 317.538671][ C1] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 317.538688][ C1] ? nmi_handle+0x14f/0x5a0 [ 317.538707][ C1] ? nmi_handle+0x2a/0x5a0 [ 317.538726][ C1] ? check_preemption_disabled+0x60/0x120 [ 317.538740][ C1] ? default_do_nmi+0x63/0x160 [ 317.538756][ C1] ? exc_nmi+0x123/0x1f0 [ 317.538771][ C1] ? end_repeat_nmi+0xf/0x53 [ 317.538795][ C1] ? check_preemption_disabled+0x60/0x120 [ 317.538809][ C1] ? check_preemption_disabled+0x60/0x120 [ 317.538823][ C1] ? check_preemption_disabled+0x60/0x120 [ 317.538837][ C1] [ 317.538842][ C1] [ 317.538849][ C1] lock_release+0x5ec/0xa30 [ 317.538869][ C1] ? batadv_nc_worker+0xcb/0x610 [ 317.538884][ C1] ? __pfx_lock_release+0x10/0x10 [ 317.538904][ C1] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 317.538924][ C1] ? batadv_nc_worker+0xcb/0x610 [ 317.538938][ C1] batadv_nc_worker+0x28b/0x610 [ 317.538952][ C1] ? batadv_nc_worker+0xcb/0x610 [ 317.538966][ C1] ? process_scheduled_works+0x9c6/0x18e0 [ 317.538984][ C1] process_scheduled_works+0xabe/0x18e0 [ 317.539009][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 317.539028][ C1] ? assign_work+0x364/0x3d0 [ 317.539045][ C1] worker_thread+0x870/0xd30 [ 317.539065][ C1] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 317.539084][ C1] ? __kthread_parkme+0x169/0x1d0 [ 317.539103][ C1] ? __pfx_worker_thread+0x10/0x10 [ 317.539119][ C1] kthread+0x7a9/0x920 [ 317.539137][ C1] ? __pfx_kthread+0x10/0x10 [ 317.539156][ C1] ? __pfx_worker_thread+0x10/0x10 [ 317.539172][ C1] ? __pfx_kthread+0x10/0x10 [ 317.539190][ C1] ? __pfx_kthread+0x10/0x10 [ 317.539210][ C1] ? __pfx_kthread+0x10/0x10 [ 317.539227][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 317.539244][ C1] ? lockdep_hardirqs_on+0x99/0x150 [ 317.539262][ C1] ? __pfx_kthread+0x10/0x10 [ 317.539281][ C1] ret_from_fork+0x4b/0x80 [ 317.539298][ C1] ? __pfx_kthread+0x10/0x10 [ 317.539316][ C1] ret_from_fork_asm+0x1a/0x30 [ 317.539337][ C1] [ 318.027784][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 318.034805][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.14.0-rc7-syzkaller-00205-g586de92313fc #0 [ 318.045343][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 318.055426][ T31] Call Trace: [ 318.058812][ T31] [ 318.061764][ T31] dump_stack_lvl+0x241/0x360 [ 318.066564][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 318.071785][ T31] ? __pfx__printk+0x10/0x10 [ 318.076506][ T31] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 318.082591][ T31] ? vscnprintf+0x5d/0x90 [ 318.087055][ T31] panic+0x349/0x880 [ 318.091018][ T31] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 318.097395][ T31] ? __pfx_panic+0x10/0x10 [ 318.101996][ T31] ? tick_nohz_tick_stopped+0x82/0xb0 [ 318.107515][ T31] ? __irq_work_queue_local+0x137/0x410 [ 318.113195][ T31] ? preempt_schedule_thunk+0x1a/0x30 [ 318.118956][ T31] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 318.125577][ T31] ? nmi_trigger_cpumask_backtrace+0x2d4/0x320 [ 318.132081][ T31] ? nmi_trigger_cpumask_backtrace+0x2d9/0x320 [ 318.139077][ T31] watchdog+0x1097/0x10a0 [ 318.143821][ T31] ? watchdog+0x1ea/0x10a0 [ 318.148640][ T31] ? __pfx_watchdog+0x10/0x10 [ 318.153445][ T31] kthread+0x7a9/0x920 [ 318.158015][ T31] ? __pfx_kthread+0x10/0x10 [ 318.162684][ T31] ? __pfx_watchdog+0x10/0x10 [ 318.167695][ T31] ? __pfx_kthread+0x10/0x10 [ 318.172711][ T31] ? __pfx_kthread+0x10/0x10 [ 318.177544][ T31] ? __pfx_kthread+0x10/0x10 [ 318.182355][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 318.187693][ T31] ? lockdep_hardirqs_on+0x99/0x150 [ 318.193123][ T31] ? __pfx_kthread+0x10/0x10 [ 318.197933][ T31] ret_from_fork+0x4b/0x80 [ 318.202479][ T31] ? __pfx_kthread+0x10/0x10 [ 318.207199][ T31] ret_from_fork_asm+0x1a/0x30 [ 318.212003][ T31] [ 318.215336][ T31] Kernel Offset: disabled [ 318.219681][ T31] Rebooting in 86400 seconds..