last executing test programs: 8m31.098217411s ago: executing program 32 (id=47): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x420000008b}, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000140)=0x0) r1 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, 0x0, &(0x7f0000000180)) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000380)={0x1, &(0x7f00000000c0)=[{0x2, 0x80, 0x1, 0x3}]}, 0x10) sched_setscheduler(r0, 0x5, &(0x7f00000002c0)=0x100007) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffffffff}) r5 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, 0x0, 0x0) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0xf, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r6}, 0x10) r7 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps\x00') write$sndseq(0xffffffffffffffff, 0x0, 0x3a99c56f) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(0xffffffffffffffff, 0x4058534c, &(0x7f0000000300)={0x400080, 0x1f4, 0x4, 0x0, 0x0, 0x5}) read$FUSE(r7, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000a80)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x2c, &(0x7f0000000000)='/proc/sys/net/\x00\x00v4\x00\x00s/\x92ync_\x00le\xf44.\xab%nN\xd4\xa2\x88\x00\xd1l,'}, 0x30) r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) fchdir(r8) r9 = openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0x0) getdents64(r9, &(0x7f0000000440)=""/54, 0x36) 4m7.123701485s ago: executing program 33 (id=990): r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r0, 0xc0185879, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r1, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = memfd_create(&(0x7f0000000080)='\b\x9dF\xd8\b\xb3~u\xa5\x81\xb1\x8aSpA\xd4\x98\x85D\x89>N\x8ar\x17\x00\x00\x00\x00\xe2{mn\xcc\xbf2\xc0\x90kn\xe8\xfe/\x9e\xee\xe7\xd7E\xe9\t\x83\xdeNX\xec\xe66\x1b\x97\xe7\xe6\x97\xf9\xb3\xf6\xb9\v\xb5$\xee\x84\x1cn,Bd8\x13<\xf0E\x86\xc0v\xd5?\xe5E:+Pm\x1d\xb4\xb8k\x11\x00', 0x6) pipe2(&(0x7f0000000000)={0xffffffffffffffff}, 0x0) splice(r3, 0x0, r2, 0x0, 0x4, 0x0) syz_usb_connect$cdc_ncm(0x4, 0x6e, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000020000002505a1a440000102030109025c0002010000000904000001a3f45747d649f9a30105240000000d240f"], 0x0) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r5, &(0x7f0000000500)=ANY=[@ANYBLOB="1500000065ffff048000000800395032303030"], 0x15) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) bind$unix(r6, &(0x7f0000000180)=@file={0x1, './file0\x00'}, 0x6e) ioctl$ifreq_SIOCGIFINDEX_wireguard(r6, 0x89e0, 0x0) r7 = dup(r5) write$FUSE_BMAP(r3, &(0x7f0000000100)={0x18}, 0x18) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f0, &(0x7f0000001440)={'bridge0\x00', &(0x7f0000000100)=@ethtool_ringparam={0xd, 0x0, 0x20040001, 0x0, 0x2, 0x0, 0x0, 0x100000}}) write$FUSE_NOTIFY_RETRIEVE(r7, &(0x7f00000002c0)={0x199, 0x5, 0x0, {0x0, 0x0, 0x1}}, 0x137) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r7}, 0x2c, {[{@cache_mmap}], [], 0x6b}}) chmod(&(0x7f0000000140)='./file0\x00', 0x0) open$dir(&(0x7f0000000140)='./file0\x00', 0x82c02, 0x40) r8 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f0000000300)={0x2, 0x4e22, @remote}, 0x10, &(0x7f0000000780)=[{&(0x7f0000000340)="ed4216426e984ef5441a98cf38d7053c21013b0ae70e3f6055f19adbfafe1b97713cd644587fcd17bd7ef919ee96968f650c3416e6772f2a5458be192f40a18d8d00215c0a1f9290b21ac2b755adec3180815cdd2d0c3c61415135267dfbf2d502f337a301801d456c16748dd4f16a1bb58ef0b240e5fc77cd2ba9a6633ef48a0f0414d6ee01fd4771cd21085e5bd387b2500de3b4e28f2aa5b2d9fd33b02a85fcc62b4b3835351afd2ddabc2276530c", 0xb0}, {&(0x7f00000005c0)="0a63ed7e0a58cf2601eb5d4256a4d46fdbec062cd10291e8be1571b03998155db7b201dd7b48631ae16fe68b7026bba73c8ddab718b5d01dbd1b4ea8f421d88968468b28be33d437e5e7059949932e6eeba91e79f45d8b70a10ac6f4a3e09c6386b73438ae3493f8ebe1a9413a8e2e014ac211520842a14baf6dc8f38dc8bd92e19aad2ef12469f525d02281e0c44a914bd8efb9193e8003f610d10fcd298132f54e4955185012fd7ef4874d274972eb80cfbff929851cd402fd910e4f7256d10fba32", 0xc3}, {&(0x7f0000001940)="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", 0x1000}, {&(0x7f0000000400)="24fdc7ae7fb1c2d04f44505db82045d53cff4b2770b2134daa02b182ec6bf1b6979689b62615dc58dbbbfc8ce2cffdf0ffaacb996375706c69cf8dcd95f85e08d824f906ff0f78ad3be656fb53c59cfc19ccd6e6994a4d8d89171c0327e65282eb221555fa180bd157dfc81e1bd732b8bd8a5b5d1807", 0x76}, {&(0x7f00000006c0)="8f0a06cf4c4211919fd0c491e3805b5676ca9b4b17cb99acab6d24b7df774e4298027c0a8b118e3930f61cc3668aadfd1b6b2a8c4da208be8165a3192a74e5ad0a9c58b9b8feaf18f7b666a67bd4d0b989f69bfecdbee5905534c6a60ac34ec58a3a76f9b21a2e19d5cf1581002b97bb1be33f49fe5ccad5c1b6c79b54a344dc4c41fbbfa25db1bd09f8a024f2d86c", 0x8f}], 0x5, &(0x7f0000000800)}, 0x40000) r9 = openat$userio(0xffffffffffffff9c, &(0x7f0000000000), 0x2c0080, 0x0) ioctl$int_out(r9, 0x2a32, &(0x7f0000000040)) getsockopt$bt_BT_DEFER_SETUP(r8, 0x112, 0x7, 0x0, &(0x7f0000000080)) socket$packet(0x11, 0x3, 0x300) write$6lowpan_enable(0xffffffffffffffff, &(0x7f00000000c0)='1', 0x1) lremovexattr(&(0x7f0000000200)='./file0/file0\x00', &(0x7f0000000280)=@random={'user.', '/dev/userio\x00'}) 1m54.720588863s ago: executing program 2 (id=1645): r0 = openat$nullb(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOC_PR_RELEASE(r0, 0x401070ca, 0x0) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0) r1 = socket$inet6(0xa, 0x802, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0xe0, 0x0, @loopback, 0x8}, 0x1c) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x20000023896) ioctl$PIO_SCRNMAP(r3, 0x4b41, &(0x7f0000000140)="764eb4e22b5cce6c6bedad2c8c4bb864240ca2c5b0ec72ac11a96b6d13364fc8faff08c88a521edd6da4d679e188dfa4901b2b1630111370d11b525904156c40d94a7e58e13ab710fe6d8a1a272b6b6022d1dc4d64faf2550c47ba2ba41807fd3a17b60f5c040ee81f2cb6089a459ca1eef40ef0cbfd41d664fa6e6228c808c9ce53be0b9c1e55fc5ce440421972800c67a6716a9c") r4 = socket$inet6(0xa, 0x3, 0x1) r5 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0) r6 = openat$cgroup_ro(r3, &(0x7f0000000200)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) dup2(r5, r6) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000005, 0x12, r6, 0x0) read$alg(r6, &(0x7f0000000040)=""/95, 0x5f) connect$inet6(r4, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000940)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f0000000040)}, 0x38) get_mempolicy(0x0, &(0x7f0000001300), 0x7fffffffffffffff, &(0x7f0000fff000/0x1000)=nil, 0xb5a6b3036c59baff) close(r7) socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$SIOCSIFHWADDR(r7, 0x8b34, &(0x7f0000000000)={'wlan1\x00', @random='\\\x00\x00 \x00'}) 1m51.946891377s ago: executing program 2 (id=1656): pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="4400000010000000000000000400002e00000040", @ANYRES32=0x0, @ANYBLOB="00000000400000002400128009000100626f6e64000000001400028008000a"], 0x44}}, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010005fff000005000000000000000000", @ANYRES32=0x0, @ANYBLOB="0092000000000000280012800a00010076786c616e"], 0x3}}, 0x800) write$binfmt_misc(r1, &(0x7f0000000000), 0xfffffecc) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, 0x0}, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getrlimit(0x6, &(0x7f0000000000)) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$FS_IOC_GETFSLABEL(0xffffffffffffffff, 0x400452c8, &(0x7f0000000100)) r6 = syz_open_dev$loop(&(0x7f00000001c0), 0x7, 0x0) ioctl$LOOP_SET_STATUS(r6, 0x40101288, 0x0) splice(r0, 0x0, r2, 0x0, 0x4ffe2, 0x0) 1m50.722856896s ago: executing program 2 (id=1663): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000440)={'batadv0\x00', 0x0}) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x11, 0x3, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffc}}, &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r3}, 0x10) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000880)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000000f0000000500300005a0000008000300", @ANYRES32=r2], 0x2c}}, 0x0) 1m49.348889583s ago: executing program 2 (id=1669): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f00c00e}, 0x0) 1m49.126752951s ago: executing program 2 (id=1674): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) fadvise64(r0, 0x9, 0x6, 0x1) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f0000000400)=0x0) r4 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000600)) socket$netlink(0x10, 0x3, 0x0) sched_setaffinity(r3, 0xffffffffffffffe8, 0x0) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, &(0x7f0000000180)={@multicast2, @broadcast, 0x0}, &(0x7f00000003c0)=0xc) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000008500000005000000950000000000000000"], &(0x7f0000000000)='syzkaller\x00', 0x4, 0x0, 0xfffffffffffffffc, 0x0, 0x0, '\x00', r7, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r8 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) dup(r8) add_key$user(&(0x7f0000000440), &(0x7f0000000480)={'syz', 0x0}, &(0x7f00000004c0)="cc39883ecac07b801463d3ecd2bd0b11d07e773a950d163b9397d272771ba4acfde5a3af724343d71bf68d504d87780af946b3de8d5f760da34a31fe292f464e4f6c6b3ec4c6d66e678fd58ba3fc11f8c8d456a6b6013c444216cd1ca8713b32c2cfd01fbd1b3aec9b400f28385f5164ae0f9460f39baf6f79905f75084209e846", 0x81, 0xfffffffffffffffe) r9 = socket$alg(0x26, 0x5, 0x0) bind$alg(r9, &(0x7f0000000140)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-blowfish-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r9, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5", 0x4) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r10, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="18000000", @ANYRES16=r11, @ANYBLOB="1d0300000000000001800000000000000000"], 0x18}}, 0x0) r12 = accept4(r9, 0x0, 0x0, 0x0) sendmmsg$alg(r12, &(0x7f0000000540)=[{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000000c0)="e4e32dd2b696733552eca3e954943a18709f72fbd259a936c67ebe806ab21823f4a0c47bff45323c2b30982dfc67b46cc9a5a07c33fc", 0xff6d}, {&(0x7f0000000100)="3a10bd003aba0c7026336b", 0xb}], 0x2, &(0x7f0000000740)=ANY=[@ANYBLOB="300000000000000017e2ffff010000001800000045f43a7ce45002bdb85e47ab3e39597e422ffab456dd963a00000000180000000000000017010000040000000602000000400000180000000000000017010000030000000100000000000079240809000000ac87448793609bd8299d6dfc465829b711ce28eb8f568438917ebd0699be96bd1485f6aaa8486e00000000e301f2e09aebda6eeb1c61f96b6d3f91c0f8c1ffbb85cfdd5b8b437a3720ba4cdfb681516c3a240207b6bbdfb37747cc7411886fdba55bcbfa68226644556e8117f9f9fc5be3b7095b2ab7c19b0c6fada03a7f9b9172f0cc960ee263e82e3232edea82b9736d65309e0ad2922ecbb7cde9ce78555fabb941d114e83b37255d6b43b2927696e4f4cf3b23086021fe4e33d049de5318ef3803ceacddc02734c96a9765486a9bf8d65791b000000000000000000000000000000000000000009d97cea3f950d55b265e480ff02c27bda4848c64ca7dcbcd060b9c0dea483c6069d2cdc473cfacc9052cc2c9e3ee037042fd329173c5e7c9ef8800a51332df5a08602a72a553035711cb9159757303a5e7d389786df44441dc82a9d32c56db8a8b3578cd0faabfa23fb46e22b45a464e35315d8c2dd3fae8b530cf8eb0d8dcb682772bed766be5208e61eab965c6c9a217a4e13f0085626c0408f381205251c18a8f6a44"], 0x60}], 0x1, 0x8001) recvmmsg(r12, &(0x7f0000005840)=[{{0x0, 0x0, &(0x7f0000001940)=[{&(0x7f0000000300)=""/66, 0x42}, {&(0x7f0000000940)=""/4096, 0x1000}], 0x2}, 0x4}], 0x1, 0x0, 0x0) add_key$user(&(0x7f0000000580), &(0x7f00000005c0)={'syz', 0x3}, &(0x7f0000000600)="f32e6030bd6b81f9a22cc513af79697cebc0f3486f448ee300566ec83a04d421216054888b73657f3e9c1711c78167787f895982310cb2fb796c73e4d0132aecb8396a72c813147dae1401730a66719577c8307c29500eb131b13f2005309435ffcd17471e4b53c0bb7561ba7c62466f90f9045007f6b1fe82c5ff2526a59caba521a3b6b440e544670a8ab300765374f58b1d2fafe322e56b368f69ba6817f5956a5f3580c28be9f80c82c3e1aa90a3cf119409fc84452f5a1eb8f7b8769ab84a4ddac54a0cc28a7298595050cf1f00f7610db0f4a34cf19610a9bc29a038a3c8c93722ec439d35f7", 0xe9, 0xfffffffffffffffb) 1m46.876494989s ago: executing program 2 (id=1683): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioperm(0x0, 0xd, 0x4000000000000020) r2 = openat$hwrng(0xffffffffffffff9c, 0x0, 0x200000, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x0, &(0x7f00000000c0)=0x4) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000001480)=""/102392, 0xffffff5d) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) r5 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$VHOST_NET_SET_BACKEND(r5, 0x4008af30, &(0x7f0000000000)) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(r6, 0x6, 0x1, &(0x7f0000000000)={0x0, 0x747, 0x0, 0x3}, 0xc) connect$bt_l2cap(r6, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x0, 0x1}, 0xe) sendmsg$inet(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000140)="bb", 0x1}], 0x1}, 0x4040004) shutdown(r6, 0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, 0xffffffffffffffff, 0x0) iopl(0x3) ioperm(0x0, 0x40, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r2, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0, r7}, 0x18) r8 = eventfd(0x0) r9 = eventfd(0x0) eventfd(0xa0fc) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000000100)={r8, 0x0, 0x2, r9}) 1m40.643264596s ago: executing program 1 (id=1700): r0 = openat(0xffffffffffffff9c, 0x0, 0x42, 0x1ff) write$binfmt_elf64(r0, &(0x7f0000000f00)=ANY=[@ANYBLOB="7f454c4600000000ff7f00000000000003003e00ecffffff94020000000000004000d8070000000000000000000000000000000000003800010000000200000003000000970f000080000000000000000d00000000000000c801000000000000070000000000000004009ec698dc956635b9000000000000"], 0x78) close(r0) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x0) 1m40.097865886s ago: executing program 1 (id=1703): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3) syz_clone(0x0, 0x0, 0xfffffe11, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$HIDIOCSFEATURE(0xffffffffffffffff, 0xc0404806, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x402200, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(0xffffffffffffffff) clock_gettime(0x0, &(0x7f0000004c00)) ioctl$TIOCL_SETSEL(r2, 0x4b68, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f00000004c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x458, 0x0, 0x2b8, 0xb0000010, 0x2, 0x5c8f0200, 0x388, 0x3a8, 0x3a8, 0x388, 0x3a8, 0x3, 0x0, {[{{@ipv6={@private1, @local, [], [], 'vlan1\x00', 'veth0_to_team\x00'}, 0x0, 0x248, 0x290, 0x700, {}, [@common=@inet=@hashlimit3={{0x158}, {'geneve1\x00', {0xf1, 0x100000, 0x33, 0x0, 0x0, 0x1, 0x7fffffff}}}, @common=@unspec=@limit={{0x48}, {0x0, 0x3}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x206, 'syz1\x00'}}}, {{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@unspec=@CONNSECMARK={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4b8) 1m39.058713336s ago: executing program 1 (id=1704): shutdown(0xffffffffffffffff, 0x1) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000000)=ANY=[], 0x44}, 0x1, 0x0, 0x0, 0x84}, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x420000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r7}, 0x10) landlock_restrict_self(0xffffffffffffffff, 0x0) r8 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$IP6T_SO_SET_REPLACE(r8, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x410, 0x0, 0x150, 0x150, 0x270, 0xf8010000, 0x340, 0x238, 0x238, 0x340, 0x238, 0x3, 0x0, {[{{@ipv6={@mcast1, @empty, [], [], 'veth0_to_team\x00', 'macvlan1\x00', {}, {}, 0x84}, 0x0, 0x228, 0x270, 0x0, {}, [@common=@unspec=@quota={{0x38}, {0x1, 0x0, 0x0, {0x2}}}, @common=@inet=@sctp={{0x148}, {[0x4e21], [], [0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x78, 0x0, 0x0, 0xfd68, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6], 0x0, [], 0x0, 0x2000000}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x1, 0x0, 'snmp\x00'}}}, {{@ipv6={@empty, @mcast1, [], [], 'batadv_slave_0\x00', 'gre0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffb}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x470) r9 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000000)={0xffffffffffffffff, 0x6, 0x30}, 0xc) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000002c0)={r9, &(0x7f0000000180)="bcfc7650b30052add7d3dc73ec8e34729f8604037254d5af17", &(0x7f00000001c0)=""/228, 0x4}, 0x20) sendmsg$nl_xfrm(r3, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000001300)={&(0x7f0000000640)=ANY=[@ANYBLOB="040100001a00010000000000000000000a0101010000000000000000000000007f0000010000000000000000000000000000000000000000000000003200000091d95565dfeb4f0a6f56933b4dc213ee34ba9626fa31686e2fdd9173484247b48f62087a777095f36662ce06f78db0e6f72b468ce06d13e026fbfede18b0423d68e3f0dced7276423ae46dc7452997e57b9875b9368d55d0a135d00872b8187226709c676529bc66696225818041914ddb01c51fcb5a1387f47ec04fce8a473df0ebdbe9f7c49ee78e90320228abb5eb537bb2", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="e0000002000000000000000000000000000000003c000000fe8000000000000000000000000000bb00000000000000000000000000000000feffffffffffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000033500000a0002fd2c0000000000000014000e00ffffffff00"/188], 0x104}, 0x1, 0x0, 0x0, 0x50}, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000a00)={0xffffffffffffffff}) getsockopt$TIPC_IMPORTANCE(r10, 0x10f, 0x7f, 0x0, &(0x7f0000000a80)) write$binfmt_misc(r1, &(0x7f0000000000), 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe6, 0x0) 1m36.852702822s ago: executing program 1 (id=1706): r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r1, &(0x7f0000000080)={0x0, 0x8000000, &(0x7f0000000680)=[{&(0x7f0000000000)="5c00000014006b05c84e21000ab16d6e230675f802000000440002005817d30461bc24eeb556a705251e6182149a36c23d3b48dfd8cdbf9367b098fa51f60a64c9f408000000e786a6d0bdd70000b6c0504bb9189d9193e9bd1c1b78", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) socket$alg(0x26, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.bfq.time_recursive\x00', 0x275a, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@ipv4_newroute={0x24, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x0, {}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x9}]}, 0x24}}, 0x0) openat$mice(0xffffffffffffff9c, &(0x7f0000000040), 0x0) socket(0x28, 0x2, 0x400) syz_emit_ethernet(0x3e, &(0x7f00000002c0)={@local, @random="ffffffff00", @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "0100", 0x8, 0x11, 0x0, @ipv4={'\x00', '\xff\xff', @private=0xa010101}, @ipv4={'\x00', '\xff\xff', @broadcast}, {[], {0x4e24, 0x0, 0x8}}}}}}, 0x0) r4 = getpid() sched_setscheduler(r4, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="13000000102000000c00"/20, @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) sendmmsg$unix(r6, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='devpts\x00', 0x0, &(0x7f0000000100)) recvmmsg(r5, &(0x7f00000021c0), 0x4000172, 0x2, 0x0) r7 = syz_open_dev$vim2m(&(0x7f00000001c0), 0x1000, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r7, 0xc0145608, &(0x7f0000000040)={0x8, 0x1, 0x1}) ioctl$vim2m_VIDIOC_STREAMOFF(r7, 0x40045612, &(0x7f0000000180)=0x1) ioctl$AUTOFS_DEV_IOCTL_VERSION(r0, 0xc0189371, &(0x7f0000000200)={{0x1, 0x1, 0x18, r2}, './file1/file0\x00'}) write$binfmt_elf64(r0, &(0x7f0000000f00)=ANY=[@ANYBLOB="7f454c4600000000ff7f00000000000003003e00ecffffff94020000000000004000d8070000000000000000000000000000000000003800010000000200000003000000970f000080000000000000000d00000000000000c801000000000000070000000000000004009ec698dc956635b9000000000000"], 0x78) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x0) 1m35.34841205s ago: executing program 4 (id=1710): r0 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x0, @remote}, 0x10, 0x0}, 0x3000c041) r1 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000280)="89000000120081ae08061cdc030ec080000000000000000000e2ffca1b1f0000050004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec08120800030006010000bdad446b9bbc7a46e3988285dcdf12f2130809d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff000000000000000000", 0x89}], 0x1}, 0x0) 1m34.57864274s ago: executing program 4 (id=1711): r0 = openat$nvram(0xffffffffffffff9c, 0x0, 0xa02, 0x0) lseek(r0, 0xd86e, 0x4) 1m34.496808435s ago: executing program 6 (id=1712): mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f00000004c0)='./bus\x00', 0x1cb) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000000140)='./bus\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) lgetxattr(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)=@known='system.posix_acl_access\x00', 0x0, 0x0) umount2(&(0x7f00000005c0)='./file0\x00', 0x2) 1m34.282452288s ago: executing program 5 (id=1713): r0 = openat(0xffffffffffffff9c, 0x0, 0x42, 0x1ff) write$binfmt_elf64(r0, &(0x7f0000000f00)=ANY=[@ANYBLOB="7f454c4600000000ff7f00000000000003003e00ecffffff94020000000000004000d8070000000000000000000000000000000000003800010000000200000003000000970f000080000000000000000d00000000000000c801000000000000070000000000000004009ec698dc956635b9000000000000"], 0x78) close(r0) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x0) 1m34.034389706s ago: executing program 4 (id=1714): creat(&(0x7f0000000040)='./bus\x00', 0x0) (async) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000000)={@in6={{0xa, 0x4e22, 0x3, @dev={0xfe, 0x80, '\x00', 0x17}, 0x8}}, 0x0, 0x0, 0x39, 0x0, "a09368aa323944f80e6b1458e67f744d556133ef0160b1f004fe99a5ce227ef7cbe11d0277ccc0470e9a03d11ed6c7c3e8c2e4bb356dac2480241ed05bfe1b5f66f2d61b31b71e8371c4dfbe6d259272"}, 0xd8) mount(&(0x7f0000000000), &(0x7f0000000280)='./bus\x00', &(0x7f00000002c0)='9p\x00', 0x0, &(0x7f0000000300)='trans=rdma,') syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="120100000cb768405e0483020b990102030109021b00010000000009040000015c29300009050900"], 0x0) 1m34.020227693s ago: executing program 1 (id=1715): r0 = socket(0x200000100000011, 0x3, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) bind$packet(r0, &(0x7f0000000080)={0x11, 0x16, r2, 0x1, 0x0, 0x6, @multicast}, 0x14) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73f72cc9f0ba1f848140000005e140602000000000e000a000f000000058000001294", 0x2e}], 0x1}, 0x0) 1m33.39173742s ago: executing program 5 (id=1716): shutdown(0xffffffffffffffff, 0x1) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000000)=ANY=[], 0x44}, 0x1, 0x0, 0x0, 0x84}, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x420000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r7}, 0x10) landlock_restrict_self(0xffffffffffffffff, 0x0) r8 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$IP6T_SO_SET_REPLACE(r8, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x410, 0x0, 0x150, 0x150, 0x270, 0xf8010000, 0x340, 0x238, 0x238, 0x340, 0x238, 0x3, 0x0, {[{{@ipv6={@mcast1, @empty, [], [], 'veth0_to_team\x00', 'macvlan1\x00', {}, {}, 0x84}, 0x0, 0x228, 0x270, 0x0, {}, [@common=@unspec=@quota={{0x38}, {0x1, 0x0, 0x0, {0x2}}}, @common=@inet=@sctp={{0x148}, {[0x4e21], [], [0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x78, 0x0, 0x0, 0xfd68, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6], 0x0, [], 0x0, 0x2000000}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x1, 0x0, 'snmp\x00'}}}, {{@ipv6={@empty, @mcast1, [], [], 'batadv_slave_0\x00', 'gre0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffb}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x470) r9 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000000)={0xffffffffffffffff, 0x6, 0x30}, 0xc) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000002c0)={r9, &(0x7f0000000180)="bcfc7650b30052add7d3dc73ec8e34729f8604037254d5af17", &(0x7f00000001c0)=""/228, 0x4}, 0x20) sendmsg$nl_xfrm(r3, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000001300)={&(0x7f0000000640)=ANY=[@ANYBLOB="040100001a00010000000000000000000a0101010000000000000000000000007f0000010000000000000000000000000000000000000000000000003200000091d95565dfeb4f0a6f56933b4dc213ee34ba9626fa31686e2fdd9173484247b48f62087a777095f36662ce06f78db0e6f72b468ce06d13e026fbfede18b0423d68e3f0dced7276423ae46dc7452997e57b9875b9368d55d0a135d00872b8187226709c676529bc66696225818041914ddb01c51fcb5a1387f47ec04fce8a473df0ebdbe9f7c49ee78e90320228abb5eb537bb2", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="e0000002000000000000000000000000000000003c000000fe8000000000000000000000000000bb00000000000000000000000000000000feffffffffffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000033500000a0002fd2c0000000000000014000e00ffffffff00"/188], 0x104}, 0x1, 0x0, 0x0, 0x50}, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000a00)={0xffffffffffffffff}) getsockopt$TIPC_IMPORTANCE(r10, 0x10f, 0x7f, 0x0, &(0x7f0000000a80)) write$binfmt_misc(r1, &(0x7f0000000000), 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe6, 0x0) 1m33.215337126s ago: executing program 6 (id=1717): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000240)={0x0, 0x20, 0x10}, 0xc) bind$inet6(r0, &(0x7f0000000280)={0xa, 0x4e23, 0x0, @loopback, 0x3}, 0x1c) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000000c0)={0x60000005}) sendto$inet6(r0, &(0x7f00000002c0)="9e", 0x1a000, 0x0, &(0x7f0000000200)={0xa, 0x4e23, 0x0, @loopback={0x300000000000000}}, 0x1c) 1m32.266737141s ago: executing program 5 (id=1718): r0 = io_uring_setup(0x2e34, &(0x7f0000000180)) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r1) syz_open_procfs(0x0, 0x0) r2 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r2, 0x8923, &(0x7f0000000040)={'vlan0\x00', 0x40}) syz_io_uring_setup(0x22f, &(0x7f0000000080)={0x0, 0x1000001, 0x10100, 0x0, 0xd6}, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r3, r4, &(0x7f00000009c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xffffffffffffff31}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000003e00000095"], &(0x7f00000000c0)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=@base={0x12, 0x4, 0x8, 0xb, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) connect$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) close_range(r0, 0xffffffffffffffff, 0x0) 1m32.185646091s ago: executing program 1 (id=1719): r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000c00)=@raw={'raw\x00', 0x3c1, 0x3, 0x3c0, 0x188, 0x4c, 0x1a, 0x0, 0x73, 0x2f0, 0x258, 0x258, 0x2f0, 0x258, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @mcast2, [], [], 'wg2\x00', 'macvlan1\x00'}, 0x0, 0x128, 0x188, 0x0, {}, [@common=@unspec=@helper={{0x48}, {0x0, 'syz1\x00'}}, @common=@unspec=@statistic={{0x38}}]}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv6=@mcast2, [], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff}}}, {{@uncond, 0x0, 0x100, 0x168, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@srh={{0x30}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf3893b573a807d00}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x420) r1 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)=ANY=[@ANYBLOB="12010000020000402505a1a440000102030109025c0002010040000904000001020d00000524060001052400feff0d240f0100000000000007000006241a00000b0905810308000000000904010000020d00000904010102020d00000905820200020000000905fdffff"], 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) syz_usb_control_io$printer(0xffffffffffffffff, &(0x7f0000000300)={0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="00231d0000001d0795f67276943bcd98eacb28cd3134e58b0bf473898e2c27320b003320df84e6144ebce771498fc3fc0baa7527d183fb"], 0x0}, &(0x7f0000000680)={0x34, &(0x7f0000000440)=ANY=[@ANYBLOB="40010b000013683be9318bac5d680e73fe"], 0x0, &(0x7f0000000540)={0x0, 0x8, 0x1, 0x3}, 0x0, &(0x7f0000000600)={0x20, 0x1, 0x1, 0xd2}, &(0x7f0000000640)={0x20, 0x0, 0x1, 0x9}}) syz_usb_control_io$cdc_ncm(r1, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000240)={0x20, 0x80, 0x1c, {0x4, 0x10, 0x19, 0x10, 0x10, 0x10, 0x0, 0x11, 0x10, 0x10, 0x10, 0x10}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_connect$printer(0x6, 0x36, &(0x7f0000000b80)=ANY=[@ANYBLOB="12011003000000402505a8a4530001020301090224000101026001090400010107010200090501020002e908010905820200020081ee"], &(0x7f0000001180)={0xa, &(0x7f0000000bc0)={0xa, 0x6, 0x200, 0x40, 0x4, 0x29, 0xff, 0x6}, 0x0, 0x0, 0x1, [{0x4, &(0x7f0000001080)=@lang_id={0x4, 0x3, 0xc04}}]}) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) r2 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r3 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) dup(r3) ioctl$VIDIOC_S_SELECTION(r2, 0xc040565f, &(0x7f0000000000)={0x2, 0x0, 0x3}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@newtaction={0x60, 0x30, 0xffff, 0x0, 0x0, {}, [{0x4c, 0x1, [@m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x9}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x60}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r5 = getpid() ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000003c0)={'\x00', 0x5, 0xe, 0xb, 0x7ff, 0x8000000000000001, r5}) sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x0, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="1b000000000000000000000000000417048582b33d959c1e5d6ec5e6dec8bed5a4e53d", @ANYRES32=r2, @ANYRESHEX=r2, @ANYRESHEX], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00'}, 0x2d) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0xf, 0x7fff0006}]}) 1m32.046538108s ago: executing program 4 (id=1720): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) umount2(&(0x7f00000002c0)='./file0\x00', 0x0) 1m31.742454425s ago: executing program 6 (id=1721): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a30000000002c000000030a01020000000000000000010000000900010073797a30000000000900030073797a320000000050000000060a010400000000000000000100000008000b400000000028000480240001800b0001007470726f78790000140002800800034000fdff03080001400000000a0900010073797a30"], 0xc4}}, 0x0) (fail_nth: 11) 1m31.347735963s ago: executing program 34 (id=1683): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioperm(0x0, 0xd, 0x4000000000000020) r2 = openat$hwrng(0xffffffffffffff9c, 0x0, 0x200000, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x0, &(0x7f00000000c0)=0x4) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000001480)=""/102392, 0xffffff5d) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) r5 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$VHOST_NET_SET_BACKEND(r5, 0x4008af30, &(0x7f0000000000)) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(r6, 0x6, 0x1, &(0x7f0000000000)={0x0, 0x747, 0x0, 0x3}, 0xc) connect$bt_l2cap(r6, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x0, 0x1}, 0xe) sendmsg$inet(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000140)="bb", 0x1}], 0x1}, 0x4040004) shutdown(r6, 0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, 0xffffffffffffffff, 0x0) iopl(0x3) ioperm(0x0, 0x40, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r2, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0, r7}, 0x18) r8 = eventfd(0x0) r9 = eventfd(0x0) eventfd(0xa0fc) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000000100)={r8, 0x0, 0x2, r9}) 1m31.255336228s ago: executing program 4 (id=1723): r0 = socket$inet6(0xa, 0xa, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x5d032, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000000000/0x9000)=nil, 0x600a00, 0x200000, 0x3, &(0x7f0000a00000/0x600000)=nil) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f00000001c0)={0x5813}, 0x10) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1c00000022008d2a00000000000000000a000000933e242e30ed20dd14e0bd3a70a0f65b8d2a0c5e2ec01d97f4efcd497b8123afa442e96fb904f31ea86e105959deaf858e1c21ca5751b30922efcd9351fd8649ce931953c2e82e5d3ce50000000000000000305e63223f1830afaa9d9ad9ea20ebe71b7151", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0x1c}}, 0x0) sendmmsg$inet(r0, &(0x7f0000003f40)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @multicast2, @empty}}}], 0x20}}], 0x1, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) listen(r2, 0x101) r3 = socket$inet_dccp(0x2, 0x6, 0x0) getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) r4 = socket$inet(0x2, 0x2, 0x0) read(r4, &(0x7f0000000080)=""/116, 0xffffff2a) connect$inet(r4, &(0x7f00000002c0)={0x2, 0x4e20, @empty}, 0x10) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'poly1305\x00'}, 0x58) connect$inet(r3, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) r6 = accept4(r2, 0x0, 0x0, 0x0) sendmmsg$inet6(r6, &(0x7f0000001840)=[{{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000b40)='\x00', 0x1}], 0x1}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000300)="ce9dd8c69b1089b9cf03f940f7e45f859098d3c2218712a6e67205b6b5576f2bbf18d39d71a392ce5cfbba6f9a2fc3a77f", 0x31}], 0x1, &(0x7f0000000780)=ANY=[@ANYBLOB="14000000000000002900000034ac4a7a8bea0000000000002400040000000000290000003200000000000000000009000000ffff0a010100", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0x40}}], 0x3, 0x40000) 1m31.240081661s ago: executing program 5 (id=1724): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000540)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000480)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x21, 0x0, 0xffffffff, 0x78, 0x18, &(0x7f0000000580)={@ptr={0x70742a85, 0x0, 0x0, 0xfc, 0x100000}, @ptr={0x70742a85, 0x0, &(0x7f0000000900)=""/206, 0xce}, @ptr={0x70742a85, 0x1, 0x0, 0x0, 0x1, 0x14}}, &(0x7f0000001280)={0x0, 0x28, 0x50}}, 0x1000}], 0x0, 0x0, 0x0}) 1m30.40528796s ago: executing program 5 (id=1725): r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r1, &(0x7f0000000080)={0x0, 0x8000000, &(0x7f0000000680)=[{&(0x7f0000000000)="5c00000014006b05c84e21000ab16d6e230675f802000000440002005817d30461bc24eeb556a705251e6182149a36c23d3b48dfd8cdbf9367b098fa51f60a64c9f408000000e786a6d0bdd70000b6c0504bb9189d9193e9bd1c1b78", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) socket$alg(0x26, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.bfq.time_recursive\x00', 0x275a, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@ipv4_newroute={0x24, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x0, {}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x9}]}, 0x24}}, 0x0) openat$mice(0xffffffffffffff9c, &(0x7f0000000040), 0x0) socket(0x28, 0x2, 0x400) syz_emit_ethernet(0x3e, &(0x7f00000002c0)={@local, @random="ffffffff00", @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "0100", 0x8, 0x11, 0x0, @ipv4={'\x00', '\xff\xff', @private=0xa010101}, @ipv4={'\x00', '\xff\xff', @broadcast}, {[], {0x4e24, 0x0, 0x8}}}}}}, 0x0) r4 = getpid() sched_setscheduler(r4, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="13000000102000000c00"/20, @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) sendmmsg$unix(r6, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='devpts\x00', 0x0, &(0x7f0000000100)) recvmmsg(r5, &(0x7f00000021c0), 0x4000172, 0x2, 0x0) r7 = syz_open_dev$vim2m(&(0x7f00000001c0), 0x1000, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r7, 0xc0145608, &(0x7f0000000040)={0x8, 0x1, 0x1}) ioctl$vim2m_VIDIOC_STREAMOFF(r7, 0x40045612, &(0x7f0000000180)=0x1) ioctl$AUTOFS_DEV_IOCTL_VERSION(r0, 0xc0189371, &(0x7f0000000200)={{0x1, 0x1, 0x18, r2}, './file1/file0\x00'}) write$binfmt_elf64(r0, &(0x7f0000000f00)=ANY=[@ANYBLOB="7f454c4600000000ff7f00000000000003003e00ecffffff94020000000000004000d8070000000000000000000000000000000000003800010000000200000003000000970f000080000000000000000d00000000000000c801000000000000070000000000000004009ec698dc956635b9000000000000"], 0x78) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x0) 1m29.803065067s ago: executing program 6 (id=1726): r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) write$binfmt_elf64(r0, 0x0, 0x78) close(r0) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x0) 1m28.17976609s ago: executing program 4 (id=1727): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000001c0)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f0000000180)=0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) ioprio_get$pid(0x2, r3) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000040)=0x14) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000000)=0x5) ioctl$TIOCVHANGUP(r4, 0x5437, 0x0) r5 = syz_usb_connect(0x0, 0x36, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r5, 0x0, 0x0) socket$nl_generic(0x11, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r6 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r6, 0x0, 0x482, &(0x7f0000000040)={0x84, @local, 0x4e23, 0x3, 'wrr\x00', 0xe, 0x7, 0x49}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, &(0x7f0000000000)={{0x84, @initdev={0xac, 0x1e, 0x4, 0x0}, 0x4e21, 0x3, 'lc\x00', 0xa, 0x81, 0x37}, {@local, 0x4e23, 0x4, 0xc3, 0x12d5c, 0x12d5c}}, 0x44) r7 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r7, 0x0, 0x487, &(0x7f0000000000)={{0x84, @initdev={0xac, 0x1e, 0x4, 0x0}, 0x4e21, 0x3, 'lblcr\x00', 0x2, 0x7, 0x19}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4e20, 0x1, 0xc3, 0x12d5d, 0x12d5c}}, 0x44) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='blkio.throttle.io_serviced\x00', 0x275a, 0x0) 1m28.178258936s ago: executing program 6 (id=1728): shutdown(0xffffffffffffffff, 0x1) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000000)=ANY=[], 0x44}, 0x1, 0x0, 0x0, 0x84}, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x420000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r7}, 0x10) landlock_restrict_self(0xffffffffffffffff, 0x0) r8 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$IP6T_SO_SET_REPLACE(r8, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x410, 0x0, 0x150, 0x150, 0x270, 0xf8010000, 0x340, 0x238, 0x238, 0x340, 0x238, 0x3, 0x0, {[{{@ipv6={@mcast1, @empty, [], [], 'veth0_to_team\x00', 'macvlan1\x00', {}, {}, 0x84}, 0x0, 0x228, 0x270, 0x0, {}, [@common=@unspec=@quota={{0x38}, {0x1, 0x0, 0x0, {0x2}}}, @common=@inet=@sctp={{0x148}, {[0x4e21], [], [0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x78, 0x0, 0x0, 0xfd68, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6], 0x0, [], 0x0, 0x2000000}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x1, 0x0, 'snmp\x00'}}}, {{@ipv6={@empty, @mcast1, [], [], 'batadv_slave_0\x00', 'gre0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffb}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x470) r9 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000000)={0xffffffffffffffff, 0x6, 0x30}, 0xc) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000002c0)={r9, &(0x7f0000000180)="bcfc7650b30052add7d3dc73ec8e34729f8604037254d5af17", &(0x7f00000001c0)=""/228, 0x4}, 0x20) sendmsg$nl_xfrm(r3, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000001300)={&(0x7f0000000640)=ANY=[@ANYBLOB="040100001a00010000000000000000000a0101010000000000000000000000007f0000010000000000000000000000000000000000000000000000003200000091d95565dfeb4f0a6f56933b4dc213ee34ba9626fa31686e2fdd9173484247b48f62087a777095f36662ce06f78db0e6f72b468ce06d13e026fbfede18b0423d68e3f0dced7276423ae46dc7452997e57b9875b9368d55d0a135d00872b8187226709c676529bc66696225818041914ddb01c51fcb5a1387f47ec04fce8a473df0ebdbe9f7c49ee78e90320228abb5eb537bb2", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="e0000002000000000000000000000000000000003c000000fe8000000000000000000000000000bb00000000000000000000000000000000feffffffffffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000033500000a0002fd2c0000000000000014000e00ffffffff00"/188], 0x104}, 0x1, 0x0, 0x0, 0x50}, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000a00)={0xffffffffffffffff}) getsockopt$TIPC_IMPORTANCE(r10, 0x10f, 0x7f, 0x0, &(0x7f0000000a80)) write$binfmt_misc(r1, &(0x7f0000000000), 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe6, 0x0) 1m27.726267607s ago: executing program 6 (id=1729): r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000100)={0x400, 0x300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {}, {}, {}, {0x0, 0x0, 0x8}, 0x0, 0x3f0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc}) 1m27.204512417s ago: executing program 5 (id=1730): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) setreuid(0xee01, 0x0) r1 = ioctl$UDMABUF_CREATE(0xffffffffffffffff, 0x40187542, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000002700)=""/102392, 0x18ff8) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) sendmsg$DEVLINK_CMD_TRAP_SET(0xffffffffffffffff, &(0x7f0000000fc0)={0x0, 0x0, &(0x7f0000000f80)={0x0}, 0x1, 0x0, 0x0, 0x48055}, 0x4000880) socket$inet_udplite(0x2, 0x2, 0x88) r3 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_STATUS(r3, 0x84, 0xe, 0x0, 0x0) ioprio_get$uid(0x3, 0xee01) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000740)=@bpf_lsm={0xc, 0x3, &(0x7f0000000080)=@framed={{0x66, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x8c}}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xd, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="8500000005000000d5000000000000009500000000000000722cc00fc5e9f6f7dfa50089f3bf70e7c53ebc"], &(0x7f0000000000)='GPL\x00', 0x5, 0x1af, &(0x7f000000cf3d)=""/195, 0x2b000000, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, 0x0, 0x2, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) getsockopt$inet6_tcp_buf(r4, 0x6, 0x1a, 0x0, &(0x7f00000001c0)) r5 = syz_io_uring_setup(0x3b, &(0x7f0000000880)={0x0, 0x0, 0x1000, 0x0, 0xfffffffe, 0x0, r1}, &(0x7f0000000000), 0x0) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f00000002c0)={0x0, 0x10}, &(0x7f0000000300)=0x8) r6 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x4010, r5, 0x0) syz_io_uring_submit(r6, 0x0, &(0x7f0000000380)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0xe3d08660d7cd4e44}) 1m6.563307031s ago: executing program 35 (id=1729): r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000100)={0x400, 0x300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {}, {}, {}, {0x0, 0x0, 0x8}, 0x0, 0x3f0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc}) 1m3.530955878s ago: executing program 36 (id=1719): r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000c00)=@raw={'raw\x00', 0x3c1, 0x3, 0x3c0, 0x188, 0x4c, 0x1a, 0x0, 0x73, 0x2f0, 0x258, 0x258, 0x2f0, 0x258, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @mcast2, [], [], 'wg2\x00', 'macvlan1\x00'}, 0x0, 0x128, 0x188, 0x0, {}, [@common=@unspec=@helper={{0x48}, {0x0, 'syz1\x00'}}, @common=@unspec=@statistic={{0x38}}]}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv6=@mcast2, [], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff}}}, {{@uncond, 0x0, 0x100, 0x168, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@srh={{0x30}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf3893b573a807d00}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x420) r1 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)=ANY=[@ANYBLOB="12010000020000402505a1a440000102030109025c0002010040000904000001020d00000524060001052400feff0d240f0100000000000007000006241a00000b0905810308000000000904010000020d00000904010102020d00000905820200020000000905fdffff"], 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) syz_usb_control_io$printer(0xffffffffffffffff, &(0x7f0000000300)={0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="00231d0000001d0795f67276943bcd98eacb28cd3134e58b0bf473898e2c27320b003320df84e6144ebce771498fc3fc0baa7527d183fb"], 0x0}, &(0x7f0000000680)={0x34, &(0x7f0000000440)=ANY=[@ANYBLOB="40010b000013683be9318bac5d680e73fe"], 0x0, &(0x7f0000000540)={0x0, 0x8, 0x1, 0x3}, 0x0, &(0x7f0000000600)={0x20, 0x1, 0x1, 0xd2}, &(0x7f0000000640)={0x20, 0x0, 0x1, 0x9}}) syz_usb_control_io$cdc_ncm(r1, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000240)={0x20, 0x80, 0x1c, {0x4, 0x10, 0x19, 0x10, 0x10, 0x10, 0x0, 0x11, 0x10, 0x10, 0x10, 0x10}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_connect$printer(0x6, 0x36, &(0x7f0000000b80)=ANY=[@ANYBLOB="12011003000000402505a8a4530001020301090224000101026001090400010107010200090501020002e908010905820200020081ee"], &(0x7f0000001180)={0xa, &(0x7f0000000bc0)={0xa, 0x6, 0x200, 0x40, 0x4, 0x29, 0xff, 0x6}, 0x0, 0x0, 0x1, [{0x4, &(0x7f0000001080)=@lang_id={0x4, 0x3, 0xc04}}]}) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) r2 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r3 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) dup(r3) ioctl$VIDIOC_S_SELECTION(r2, 0xc040565f, &(0x7f0000000000)={0x2, 0x0, 0x3}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@newtaction={0x60, 0x30, 0xffff, 0x0, 0x0, {}, [{0x4c, 0x1, [@m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x9}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x60}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r5 = getpid() ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000003c0)={'\x00', 0x5, 0xe, 0xb, 0x7ff, 0x8000000000000001, r5}) sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x0, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="1b000000000000000000000000000417048582b33d959c1e5d6ec5e6dec8bed5a4e53d", @ANYRES32=r2, @ANYRESHEX=r2, @ANYRESHEX], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00'}, 0x2d) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0xf, 0x7fff0006}]}) 1m1.842191815s ago: executing program 37 (id=1730): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) setreuid(0xee01, 0x0) r1 = ioctl$UDMABUF_CREATE(0xffffffffffffffff, 0x40187542, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000002700)=""/102392, 0x18ff8) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) sendmsg$DEVLINK_CMD_TRAP_SET(0xffffffffffffffff, &(0x7f0000000fc0)={0x0, 0x0, &(0x7f0000000f80)={0x0}, 0x1, 0x0, 0x0, 0x48055}, 0x4000880) socket$inet_udplite(0x2, 0x2, 0x88) r3 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_STATUS(r3, 0x84, 0xe, 0x0, 0x0) ioprio_get$uid(0x3, 0xee01) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000740)=@bpf_lsm={0xc, 0x3, &(0x7f0000000080)=@framed={{0x66, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x8c}}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xd, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="8500000005000000d5000000000000009500000000000000722cc00fc5e9f6f7dfa50089f3bf70e7c53ebc"], &(0x7f0000000000)='GPL\x00', 0x5, 0x1af, &(0x7f000000cf3d)=""/195, 0x2b000000, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, 0x0, 0x2, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) getsockopt$inet6_tcp_buf(r4, 0x6, 0x1a, 0x0, &(0x7f00000001c0)) r5 = syz_io_uring_setup(0x3b, &(0x7f0000000880)={0x0, 0x0, 0x1000, 0x0, 0xfffffffe, 0x0, r1}, &(0x7f0000000000), 0x0) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f00000002c0)={0x0, 0x10}, &(0x7f0000000300)=0x8) r6 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x4010, r5, 0x0) syz_io_uring_submit(r6, 0x0, &(0x7f0000000380)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0xe3d08660d7cd4e44}) 1m0.935014502s ago: executing program 38 (id=1727): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000001c0)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f0000000180)=0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) ioprio_get$pid(0x2, r3) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000040)=0x14) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000000)=0x5) ioctl$TIOCVHANGUP(r4, 0x5437, 0x0) r5 = syz_usb_connect(0x0, 0x36, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r5, 0x0, 0x0) socket$nl_generic(0x11, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r6 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r6, 0x0, 0x482, &(0x7f0000000040)={0x84, @local, 0x4e23, 0x3, 'wrr\x00', 0xe, 0x7, 0x49}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, &(0x7f0000000000)={{0x84, @initdev={0xac, 0x1e, 0x4, 0x0}, 0x4e21, 0x3, 'lc\x00', 0xa, 0x81, 0x37}, {@local, 0x4e23, 0x4, 0xc3, 0x12d5c, 0x12d5c}}, 0x44) r7 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r7, 0x0, 0x487, &(0x7f0000000000)={{0x84, @initdev={0xac, 0x1e, 0x4, 0x0}, 0x4e21, 0x3, 'lblcr\x00', 0x2, 0x7, 0x19}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4e20, 0x1, 0xc3, 0x12d5d, 0x12d5c}}, 0x44) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='blkio.throttle.io_serviced\x00', 0x275a, 0x0) 15.51859235s ago: executing program 8 (id=1758): r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$KVM_SET_XSAVE(r0, 0x5000aea5, &(0x7f0000000840)={[0x7, 0x46, 0x7fffffff, 0x4, 0x66, 0x6, 0x6, 0x200, 0x200, 0x8004, 0x10, 0xd, 0x80000, 0x7fffffff, 0x3, 0x1, 0x0, 0x9, 0xff, 0x401, 0x7f, 0xd52, 0xace, 0x4, 0x10, 0x1, 0x9, 0x3, 0x2, 0x14a, 0x4352, 0xd, 0x2, 0xffff, 0x3, 0x7, 0x1, 0xffff, 0x6, 0x253, 0x3, 0x3, 0x401, 0x2, 0x1, 0x0, 0x0, 0x200, 0x3, 0x2, 0x3, 0x81, 0xaa, 0x7, 0x100, 0x7, 0x5, 0xe5, 0x3, 0x0, 0xf, 0x7, 0x7, 0xce1, 0x8, 0x5, 0x8, 0x6f, 0x10001, 0xb641, 0x94, 0x5c, 0x4f0, 0x5, 0x9, 0x100, 0x8, 0x5, 0x48be, 0x8e95, 0x5, 0x3, 0x5, 0x16fc, 0xfffffffa, 0x1, 0x3, 0x40, 0x7, 0x5, 0x81, 0x3c, 0x0, 0x7, 0x1, 0x6, 0x4, 0x401, 0x100, 0x1b7, 0x6, 0x2, 0x0, 0xbcfe, 0x9, 0x2, 0x50, 0x1, 0x9, 0x2, 0x2000006, 0x3, 0xc730, 0x7, 0x49, 0x8, 0x7d, 0x8b, 0xe000, 0x3, 0x2, 0x3ff, 0x97, 0x7, 0x4, 0xd8d3, 0x4, 0x6, 0x7fff, 0x258c, 0xff, 0x3, 0x2, 0x5, 0x9, 0x97, 0x5, 0x100, 0x5, 0x1, 0x7, 0x7fff, 0x72, 0x0, 0xb50, 0x34af, 0x3, 0x10, 0x0, 0x9, 0x0, 0x8, 0x3, 0x0, 0x0, 0x60f, 0x9, 0x3f5, 0x6, 0x3, 0x4, 0x7ff, 0x8, 0x2, 0x10001, 0x1, 0x1, 0x9, 0x1ff, 0xffffffff, 0x9, 0x7, 0x3, 0x2, 0x8001, 0x10000, 0x7, 0x6, 0x26, 0x6, 0x9, 0x322, 0xb5, 0x8, 0x7ff, 0xa, 0x3, 0xf6c, 0x5, 0x5, 0x6, 0x57, 0xfffffffd, 0x6, 0x0, 0x2, 0x4, 0x8, 0x5, 0xf2, 0xb, 0x98, 0xb8, 0x9, 0x2, 0xa8, 0x8000, 0x7fff, 0x3, 0x5, 0x8, 0x8000005, 0x101, 0x4, 0x0, 0x9, 0x2, 0x6, 0x0, 0x4, 0x69ca, 0x1, 0x78, 0x2, 0x9, 0x5, 0xf, 0x2c9d, 0x4da08046, 0x6, 0x0, 0x9, 0x401, 0x3, 0xc, 0x3, 0xda, 0x80000001, 0x2, 0x0, 0x8, 0x153, 0x4, 0xfffeffff, 0x7, 0x3, 0x40, 0x2000, 0x0, 0x7, 0x10, 0xc109, 0x9, 0xe31, 0x7, 0x1, 0xd, 0x0, 0x7, 0xfffffffd, 0x6, 0x0, 0xf, 0x7, 0x4, 0x7, 0x2000000, 0x5, 0x5c, 0xd3, 0xe, 0x5, 0x0, 0x8, 0x5, 0x3, 0x5, 0x6, 0x5, 0x7, 0x7, 0x0, 0x4, 0x4c232018, 0x7, 0x8000, 0x2e, 0x10, 0xd30, 0xffffff81, 0x7, 0x2, 0x80000000, 0x9, 0x8, 0x80, 0x0, 0x7, 0x6, 0xfaf3, 0xfffffffd, 0x1185b1bd, 0x0, 0x400, 0x2, 0x81, 0x7, 0x81, 0x1, 0x10000, 0x5, 0x80000001, 0xed3, 0x1ca, 0x3ff, 0x9, 0xa8, 0x9, 0x68, 0x800, 0x40e8, 0x10001, 0x5, 0xfff, 0xe, 0x0, 0x6, 0x9, 0x3, 0xc, 0xf5, 0x1, 0x100, 0xfc, 0xfffffffe, 0x0, 0x4, 0xfffff801, 0xe, 0x997, 0xf, 0x9, 0x2, 0xfffffffe, 0x1, 0xd, 0x40, 0x5, 0x0, 0x0, 0x3, 0xc3, 0x8, 0x4, 0x0, 0x7, 0x1, 0x8001, 0x2, 0x80000000, 0xe, 0x8, 0x5, 0x3, 0x945b, 0x2, 0x1a, 0x3ff, 0x4cf, 0x7, 0xffffffbb, 0xffff, 0x6, 0x6, 0x7, 0x1, 0xd37, 0xc28, 0xfffffeff, 0x3, 0x3, 0x7, 0x8001, 0x4, 0x9, 0x1, 0x8, 0x80000001, 0xa2, 0x432, 0x0, 0x745, 0x7f, 0x8, 0x7, 0x9d8, 0x1, 0xf032, 0x2, 0x2, 0xffffffff, 0xf5c0, 0x7, 0x4, 0x8, 0x3, 0x7fff, 0x9, 0xf, 0x2, 0xfffffff9, 0x1c00, 0x6, 0x8d63, 0x7, 0x4, 0x1, 0x0, 0x8001, 0x60f6, 0x3, 0x9, 0x7, 0x5, 0x3, 0x2, 0x175, 0x2, 0x1, 0x2176, 0x2, 0x3, 0x8, 0x5, 0xfffffff7, 0x284, 0x1, 0x7, 0x0, 0x8000, 0x6, 0x10, 0x100, 0x4, 0x37, 0x2, 0x180, 0x7, 0x6, 0x2, 0x8, 0x9, 0x40, 0xfffffffd, 0x9, 0x10, 0x9, 0x1ff, 0xd8, 0x23b1, 0xff, 0x6d, 0x4, 0xfffffffe, 0x4, 0xffff0000, 0x80000001, 0x1d46, 0x0, 0x3, 0x3, 0x8, 0x101, 0x7, 0x7, 0x1000, 0x499d7bf0, 0x9, 0x100, 0x80000000, 0x0, 0xe76c, 0x0, 0x5, 0xdba, 0xb02, 0x9, 0xd490, 0x5, 0x0, 0x2, 0x2, 0x244082b6, 0x3, 0x6, 0x5, 0x0, 0x1, 0x80000001, 0xe, 0x9, 0x8, 0x10000000, 0xfffffffd, 0x7fffffff, 0xd, 0x2ea, 0x6, 0xe, 0xa, 0x8001, 0x3, 0xf, 0xd, 0xfffffffb, 0x2, 0xcf, 0x4, 0x7, 0x2, 0x4, 0x1, 0xfffff50b, 0x90, 0xffff, 0x3, 0x1, 0x7, 0xbec, 0x4, 0xfffff800, 0x7, 0x0, 0x4, 0xe, 0x5, 0x800, 0x5, 0x6, 0x7f, 0x2, 0x80, 0x5, 0x7, 0x7, 0x6, 0x5, 0x3, 0x8, 0x0, 0x9, 0xfffffff1, 0x5f200000, 0x6, 0x6, 0x7b6ad993, 0x401, 0x0, 0x62, 0x3, 0x1d33, 0xcbfa, 0x8, 0x2, 0x6, 0xb2ac, 0x4, 0x5, 0x1, 0x3, 0xfd, 0x38, 0xf4b, 0x7, 0xaa, 0x3e9, 0xfffffffa, 0x8, 0x7, 0x2, 0x40, 0x1, 0x75, 0x101, 0x81, 0x9, 0x80000000, 0xc6a5, 0x10, 0x6, 0x1000, 0xffff43dc, 0x1000, 0x3, 0x6, 0x6, 0x40, 0x6, 0x7fff, 0xe0, 0x7, 0x401, 0x47aa, 0x49c6, 0x9, 0x67eecbe1, 0x70b, 0x8, 0x5, 0x0, 0x100, 0x9, 0x8001, 0xfffffffd, 0x5, 0x1, 0x800, 0x2, 0x4, 0x8, 0x2, 0x1ff, 0x2, 0x283, 0x8, 0x9, 0x9, 0x1ff, 0x40, 0x1, 0x5, 0xffffff58, 0x8, 0x0, 0x5, 0x7, 0x1, 0xd53e, 0x2, 0x1, 0x4, 0x9, 0xffff, 0x9a9, 0x4, 0x101, 0x5d21, 0x1a, 0xfffffff8, 0x2, 0x8, 0x8, 0xfffffc1f, 0x3, 0x101, 0x7, 0x6, 0x1, 0x9, 0x3, 0x5, 0x7, 0x1, 0x5, 0x200, 0x3ff, 0x8, 0xfffffa88, 0xb, 0x9, 0xe, 0x8, 0xbef, 0xfffffffc, 0x3, 0x9, 0x4, 0x3, 0x3, 0xa, 0x8, 0xffff0000, 0x0, 0x3, 0x4, 0x1, 0x9, 0x2, 0x6a5, 0x10000, 0x400, 0x400, 0x1, 0x10000, 0x2d, 0x0, 0x7, 0xffff, 0x5, 0xf9, 0x40, 0xfffffffb, 0x1, 0x9a8, 0xffffffff, 0x8000, 0x4, 0x3, 0xdf, 0xa, 0x200, 0x41, 0x2, 0x21400000, 0x0, 0xfffff001, 0xffffff5a, 0xfd3, 0x0, 0x4769acf6, 0x7, 0xfffffffa, 0x8, 0x4, 0x7, 0x4, 0xb, 0x5, 0x7, 0x3, 0x1ff, 0x0, 0x0, 0x401, 0x7, 0x0, 0xc, 0x5, 0x63, 0x0, 0xfffffff8, 0x1ff, 0x80, 0x3, 0x2, 0x58dfbad1, 0x5, 0x1, 0x2, 0x5, 0x8000, 0x1, 0xfffffffd, 0x6e6309f5, 0x4, 0x8, 0x3ff, 0x2, 0x7, 0x490, 0x6, 0x80000001, 0x5, 0xfffffff7, 0x4, 0xff, 0x8000, 0x10001, 0x200, 0xf827, 0x6, 0x18000, 0x3a5, 0x3, 0x8059, 0x4, 0x7, 0x8, 0xb, 0xfffffff8, 0xfffffff8, 0x8ca, 0xac74, 0x2, 0xad, 0x5, 0x8, 0x8, 0x100000, 0x81, 0x5, 0xfffffff8, 0x3b, 0x5, 0x7, 0x8, 0x1, 0x8, 0x0, 0x7, 0x800, 0x2797f51b, 0x3, 0x8001, 0x3ff, 0x5, 0x8000, 0x6d5, 0x24, 0x8000, 0x2, 0x7ff, 0x1, 0x400, 0x7fff, 0xffff, 0x6, 0x0, 0x9, 0x2, 0x0, 0x300000, 0xf86, 0x4, 0x9, 0xc, 0x5, 0x9d0, 0x2, 0x7ff, 0x4800, 0x0, 0x0, 0x8, 0x5, 0xd, 0x0, 0x4, 0x7, 0x3ff, 0x40f, 0x2, 0x6, 0x40, 0x2, 0x6e, 0xf, 0x4, 0x7, 0xfffffffc, 0x388, 0x1, 0x7ff, 0x2, 0x7fffffff, 0x1, 0x6, 0x40, 0x1, 0x3, 0xb1ce, 0xfffffffc, 0x3, 0xff, 0x800, 0x9, 0x100, 0x81, 0x4, 0x9a1c, 0x7f, 0x6, 0x4, 0x8, 0x2, 0xeb5, 0xfffffffc, 0x9, 0x9, 0x1, 0x4, 0x0, 0x16b, 0xff, 0x5, 0x3d800000, 0x4, 0xfffffc00, 0x89e, 0x37, 0x4, 0x8001, 0xb6, 0x6d52, 0xfffffffd, 0x0, 0x9, 0x4, 0x5, 0x9, 0x9, 0x1ff, 0x5, 0x6, 0x1, 0x6, 0x200, 0xa59, 0x8, 0x9, 0x4, 0x200, 0x9, 0xb, 0x7ff, 0x9, 0xffffffd5, 0x8, 0x4, 0xfd3, 0x1, 0x6, 0xfffffffe, 0x7, 0xffffffff, 0x0, 0x101, 0x1, 0xff, 0x8, 0x1, 0x5, 0x2eb7ebc8, 0x100, 0x8, 0x7fffffff, 0x10000, 0x7f, 0x7fff, 0xc2, 0xfffffeab, 0x6, 0xfff, 0x48, 0xa53, 0x401, 0x0, 0x0, 0x1, 0x4, 0x6, 0x9e, 0x4, 0x800, 0x10000, 0xde, 0x2, 0xd66, 0x179a, 0xffffffff, 0x9, 0x7, 0x3, 0x5, 0x5, 0xa, 0x5, 0xaf39, 0xfff, 0x0, 0x4, 0xc98, 0x9, 0x2, 0xd, 0x8, 0x2b, 0x0, 0x1, 0x6f, 0xffff, 0x80000000, 0x7, 0xfffffffa, 0x9, 0x2, 0x6, 0x400, 0xc, 0x0, 0x0, 0xcd, 0xfffffff9, 0xaae3, 0x2, 0x3, 0xffffffff, 0x651c59a9, 0x3, 0x0, 0x7, 0x64f864f7, 0x0, 0x1, 0x2, 0x400, 0x90b, 0x8, 0x6271ae8b, 0x6, 0xd32, 0x1000, 0x0, 0x2, 0x81, 0xc, 0x8, 0x4, 0xfffffff7, 0x6, 0x6, 0x1, 0x7, 0x2]}) ppoll(&(0x7f0000000080)=[{r0, 0x4028}], 0x1, &(0x7f0000000140), 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x1a0682) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000780)={0xfffffffe, 0x0, 0x0, 'queue0\x00', 0xdfa}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r1, 0x40bc5311, &(0x7f0000000100)={0x80, 0x1, 'client1\x00', 0xffffffff80000004, "00000000ffffffe3", "e4a18560d99f00", 0x800000}) write$sndseq(r1, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw8={"a357b6b140cbb6215dd33459"}}], 0xfffffee4) 15.300163762s ago: executing program 8 (id=1759): r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000010c0)=ANY=[@ANYBLOB="12010000b1bd2f087d0403508c2f010203010902120001000000000904"], 0x0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x18) syz_usb_control_io$cdc_ecm(r0, &(0x7f00000000c0)={0xc, &(0x7f0000000100)=ANY=[@ANYBLOB="0000f50000000341"], 0x0}, 0x0) mmap(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x0, 0x31, 0xffffffffffffffff, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f0000847fff)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0xffff, 0xb558, @ipv4={'\x00', '\xff\xff', @rand_addr=0x640100fd}}, 0x1c) setsockopt$inet_sctp6_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f00000011c0)={0x4, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x6, 0x3}, 0xe) shutdown(r1, 0x1) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r1, 0x84, 0x21, &(0x7f0000000180)=0x6, 0x4) shutdown(r1, 0x0) recvmmsg(r1, &(0x7f00000020c0)=[{{0x0, 0x0, &(0x7f00000014c0)=[{&(0x7f00000001c0)=""/4096, 0x1000}], 0x1}, 0x7}, {{0x0, 0x0, 0x0}, 0x7}], 0x2, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000021c0)='net\x00') r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) r6 = dup(r5) ioctl$KVM_SET_MSRS(r6, 0xc008ae88, &(0x7f0000000080)=ANY=[@ANYRESHEX=r3]) getdents64(r2, &(0x7f0000002f40)=""/4098, 0x1002) iopl(0x3) fsmount(0xffffffffffffffff, 0x0, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) socket$can_bcm(0x1d, 0x2, 0x2) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) r8 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r8, 0xaf01, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) 12.714940459s ago: executing program 8 (id=1768): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000012000000000000000a20000000000a01010000000000000000010000000900010073797a30000000003c000000090a01040000000000553f000100fffe08000a40000000000900020073797a32000000000900010073797a3000000000080005400000000f840000000c0a01030000000000000000010000000900020073797a32000000005800038054000080080003400000000248000b80200001800a00010071756f7461000000100002800c0001400000000000000000100001800c000100636f756e74657200140001800a00010072616e6765000000040002800900010073797a30"], 0x108}}, 0x0) 11.974353637s ago: executing program 0 (id=1771): r0 = syz_open_dev$vim2m(&(0x7f00000001c0), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x2, 0x1, 0x1}) r1 = socket$rxrpc(0x21, 0x2, 0x2) recvmmsg(r1, &(0x7f0000002a00)=[{{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000340)=""/201, 0xc9}, {&(0x7f0000000440)=""/115, 0x73}, {&(0x7f00000004c0)=""/198, 0xc6}], 0x3, &(0x7f0000000600)=""/86, 0x56}, 0x3}, {{0x0, 0x0, &(0x7f0000002980)=[{&(0x7f0000000800)=""/4096, 0x1000}, {&(0x7f0000000680)=""/205, 0xcd}, {&(0x7f0000001800)=""/141, 0x8d}, {&(0x7f00000018c0)=""/4096, 0x1000}, {&(0x7f00000028c0)=""/158, 0x9e}], 0x5}, 0x512}], 0x2, 0x1, &(0x7f0000002a80)={0x77359400}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) openat$binderfs(0xffffffffffffff9c, 0x0, 0x802, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f00000013c0)=0x80000000001, 0x4) connect$inet6(r2, &(0x7f00000014c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup3(r2, r3, 0x0) sendmmsg$inet6(r4, &(0x7f0000001280)=[{{0x0, 0x0, &(0x7f0000000c80)=[{&(0x7f0000000c00)="03", 0x1}], 0x1}}], 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) r6 = fcntl$dupfd(r3, 0x0, r3) syz_open_dev$usbmon(&(0x7f0000000000), 0x6, 0x2) recvmmsg(r6, &(0x7f0000000dc0)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000100)=""/124, 0x7a}], 0x1}}], 0x400000000000358, 0x40000142, 0x0) semop(0x0, &(0x7f0000000240)=[{0x0, 0x7fff, 0x1000}], 0x1) semop(0x0, &(0x7f0000000100)=[{0x2, 0xd5db}], 0x1) semop(0x0, &(0x7f0000001480)=[{0x0, 0xfffb}, {}], 0x2) syz_usb_control_io$cdc_ecm(0xffffffffffffffff, &(0x7f0000000040)={0x14, &(0x7f0000002ac0)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000180)={0x1c, &(0x7f0000000080)=ANY=[@ANYBLOB="001431000000a8dc4923861e0d7dd6043fb7122dd555221f5136a978660924a75acd895b949e810fc30789c3ac0d90b84635f93654"], &(0x7f0000000100)={0x0, 0xa, 0x1, 0x6}, &(0x7f0000000140)={0x0, 0x8, 0x1, 0xfc}}) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000780)=@multiplanar_mmap={0x0, 0x1, 0x4, 0x0, 0x7, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "a730b801"}, 0x0, 0x1, {0x0}}) 11.18116805s ago: executing program 8 (id=1773): unshare(0x22020600) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000640)=ANY=[@ANYRES32=r0, @ANYRES32=r1, @ANYBLOB="02"], 0x10) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000040)=ANY=[@ANYRES32=r1, @ANYBLOB="02"], 0x10) 11.099924762s ago: executing program 8 (id=1774): capset(&(0x7f0000000100)={0x20071026}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x81, 0xfffffffb}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r0, 0x89fb, &(0x7f0000000440)={'sit0\x00', &(0x7f0000000240)={@private2, @rand_addr, 0x14}}) r1 = getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x6, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="18020000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x2, r1, 0x2, 0x0) syz_open_procfs(0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x1) sched_setaffinity(0x0, 0x0, 0x0) r3 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12012000f1048108cd060202d4921f01000109", @ANYRES16], 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f0000000080)={0x19}) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, 0x0}, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = syz_clone(0x10081000, &(0x7f00000000c0)="aa021410f16bd6448b9bcd4349cc22243cd9abb5d3681162a83f9ad72747cd09b90bc39b0f3cda64dfda", 0x2a, &(0x7f0000000340), &(0x7f0000000380), &(0x7f0000000480)="08ef27dfe45524353675f82d5c1ceff9ebfbf6aee8e822f77d452ac49b6aa804e842e36b9de44de4d10fe9c3be412829291cbbea8e36f20b6f3836f4f11a87a4a5910509d0f9b04ba5eb911034f9bc819c6eecbe8f4fd876c32bf9170685a834ac88fbf85d7efad7ca8cd2947516da7c175d53e56500807f1cbd4a0f8421b3cc41645f07d36b11ac314bacd216cf0c46a299956ca245b49a453290b81f8139c3c9a9de724d6b32c1103422bff4aace5243b9e29686c869da79ddfcc3f8d3ff7f8f5756a0") waitid(0x1, r5, 0x0, 0x4, 0x0) r6 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) sendmsg$NFNL_MSG_COMPAT_GET(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="58000000000b040100000000000000000000000008"], 0x58}, 0x1, 0x0, 0x0, 0x8800}, 0x0) r7 = dup(r6) ioctl$PTP_EXTTS_REQUEST2(r7, 0x40603d10, &(0x7f0000000040)) r8 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNIMAP(r8, 0x4b66, &(0x7f0000000040)={0x3e, 0x0}) 10.808829236s ago: executing program 8 (id=1775): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)={0x48, r1, 0x7, 0x0, 0x0, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKMODES_OURS={0x14, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x10, 0x3, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8}]}]}]}, @ETHTOOL_A_LINKMODES_SPEED={0x8}]}, 0x48}}, 0x1027000000000000) 10.362138405s ago: executing program 9 (id=1777): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$6lowpan_enable(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) ioctl$TUNSETCARRIER(r0, 0x400454e2, &(0x7f0000000040)) mlock2(&(0x7f0000018000/0x2000)=nil, 0x2000, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) 9.266355754s ago: executing program 0 (id=1778): unshare(0x4000600) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0xa, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xb000000}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x5, 0x0, 0xb, 0x9, 0x0, 0x2, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9, 0xfff0}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x0, 0x6, 0xa, 0x9, 0xfff0, 0xf1}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x2, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) 8.665753679s ago: executing program 0 (id=1781): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) socket$alg(0x26, 0x5, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYRES32=0x0], 0x48) r3 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_int(r3, 0x29, 0x4e, 0x0, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r5 = syz_open_procfs$pagemap(0x0, &(0x7f0000000040)) ioctl$PAGEMAP_SCAN(r5, 0xc0606610, &(0x7f00000001c0)={0x60, 0x2, &(0x7f00001b8000/0x2000)=nil, &(0x7f000075c000/0x1000)=nil, 0x40000000, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x2, 0x0, 0x10}) ioctl$MEDIA_IOC_REQUEST_ALLOC(0xffffffffffffffff, 0x80047c05, &(0x7f00000003c0)) ioctl$vim2m_VIDIOC_DQBUF(0xffffffffffffffff, 0xc0585611, 0x0) syz_genetlink_get_family_id$netlbl_mgmt(0x0, 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_ADD(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={0x0, 0x114}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0xd, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000001020000000061198400000000009500000000000000aec4a02d03c1e0bda5dbd4cad6ee5067847e1a0e"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x60, '\x00', 0x0, 0xb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 7.475679293s ago: executing program 9 (id=1783): newfstatat(0xffffffffffffff9c, &(0x7f00000004c0)='.\x00', &(0x7f0000005280)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) setuid(r0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000580)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x8, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x5, 0x0, 0xb, 0x9, 0x0, 0x2, 0x2}, {0x3, 0x2, 0x3, 0xa, 0x9, 0xfe00}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x0, 0x6, 0xa, 0x9, 0xfe04, 0xe1}, {0x7, 0x1, 0xb, 0x7, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x2, 0x2, 0x0, r1}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value=0x40000000}, 0x90) 7.431270221s ago: executing program 0 (id=1784): unshare(0x22020600) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000640)=ANY=[@ANYRES32=r0, @ANYRES32=r1, @ANYBLOB="02"], 0x10) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000040)=ANY=[@ANYRES32=r1, @ANYBLOB="02"], 0x10) 7.303086953s ago: executing program 3 (id=1785): r0 = fanotify_init(0x0, 0x1) r1 = open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0) r2 = fanotify_init(0x0, 0x0) r3 = openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) fanotify_mark(r2, 0x455, 0x8000003, r3, 0x0) fanotify_mark(r0, 0x641, 0x4800003a, r1, 0x0) r4 = fanotify_init(0x8, 0x0) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) fanotify_mark(r4, 0x61, 0x40001002, r5, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) 7.302402176s ago: executing program 9 (id=1786): socket$inet_udplite(0x2, 0x2, 0x88) prlimit64(0x0, 0xe, &(0x7f0000000440)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) syz_open_procfs$namespace(r0, &(0x7f0000000300)='ns/time_for_children\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000008002b000000000000000018040000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000003c0)='sched_switch\x00', r3}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) read$FUSE(r4, &(0x7f0000006380)={0x2020, 0x0, 0x0}, 0x2020) write$binfmt_format(0xffffffffffffffff, &(0x7f0000000340)='1\x00', 0x2) write$FUSE_INIT(r4, &(0x7f0000004200)={0x50, 0x0, r5, {0x7, 0x1f, 0x0, 0x2066012}}, 0x50) syz_fuse_handle_req(r4, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000090c400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000542d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ea8286a2fba523440000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000633956a1000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007d6ab715107fa1820000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f6ffffffffffffff0000000000000e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e1ffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f4000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000286071480000000000b13bc1e6d970884f00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f3ffffffffffffff00", 0x2000, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20, 0xfffffffffffffff5}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x130, 0x0, 0x0, {0x0, 0x0, 0x0, '\x00', {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, {0x7fff, 0x3}}}}}) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) setsockopt$bt_BT_FLUSHABLE(r6, 0x112, 0x8, &(0x7f0000000000)=0x1, 0x4) r7 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) getdents64(r7, 0x0, 0x0) write$FUSE_NOTIFY_DELETE(r4, &(0x7f0000000080)={0x2a, 0x6, 0x0, {0x1, 0x200000000004, 0x1, 0x2, '\x00', 0x8}}, 0x2a) socket$nl_netfilter(0x10, 0x3, 0xc) 7.15903549s ago: executing program 3 (id=1787): bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0000000000000000050000000000000001eb0000", @ANYRES32, @ANYBLOB='\x00'/18, @ANYRES32=0x0, @ANYRES32], 0x50) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x1, 0xf000, 0x2000, &(0x7f0000f9a000/0x2000)=nil}) r3 = dup(r2) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000040)=@x86={0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x1, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x1000000}) ioctl$KVM_SET_VAPIC_ADDR(r3, 0x4008ae93, &(0x7f00000000c0)=0x10000) ioctl$KVM_RUN(r3, 0xae80, 0x0) 6.149682331s ago: executing program 9 (id=1788): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(r0, 0x8, &(0x7f00000002c0)=0x2) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000000)={0x11, @loopback, 0x0, 0x0, 'lblcr\x00'}, 0x2c) syz_open_dev$tty20(0xc, 0x4, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000600)=ANY=[@ANYBLOB="d60a00000000000061110c000000000018000000000000000000000000000018950000000000000015fac5eb47ab2922a4312446ab7446ea5b987e53894beff8672f3d7de66f8e71c918ff689f40119752cf672f17c1a84feaad09900631ef6cbc9a164ca59d8a121196d0361b31b85074863903695e3d617c19caf87976b20b8de40d90d03b3e6cac8c19cecb7275628b3da13e668737e9aeeabddf0b3f586e660bf1e908a298f1e0d1cad8ae45654706d3b676ad22646bd8d4e63c05e815380f21b20413a6b212dc722a7c3ba0ced898f0b39a2d781511751dec3181ba7c6e7ec266a7f4e0beed"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000400), 0x4) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) r3 = syz_clone(0x82200200, &(0x7f00000005c0)="5bd52c5d5c0b28a79fd276ae4bdb17a5eb1e0020cf3a", 0x16, &(0x7f00000001c0), &(0x7f0000000280), 0x0) bpf$BPF_PROG_DETACH(0x9, 0x0, 0x20) write$cgroup_pid(0xffffffffffffffff, &(0x7f00000003c0)=r3, 0x12) readv(0xffffffffffffffff, &(0x7f0000000480)=[{&(0x7f00000003c0)=""/46, 0x2e}, {&(0x7f0000000400)=""/83, 0x53}], 0x2) connect$bt_l2cap(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x1, 0x5, &(0x7f0000001000)=ANY=[], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x68, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 6.074425076s ago: executing program 0 (id=1790): connect$inet6(0xffffffffffffffff, 0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) open$dir(0x0, 0x5c1, 0x0) lstat(0x0, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, "5a1f0010008a3f7f0bc52a1700"}) 5.102654615s ago: executing program 3 (id=1792): r0 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x1, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000340), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f00000008c0)=r2, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f0000000180)={{0x8, 0x0, 0xffffffff, 0x9, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x721, 0xc, 0x0, 0x8, 0x0, 0x0, 0x0, 0x8, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x507e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0xf, 0x2, 0x100000000, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc499, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x1911, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x200000000000000, 0x0, 0x0, 0xd, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0xfffffffffffffffe, 0x0, 0x5a, 0x0, 0x0, 0x0, 0x30000000]}) 4.99104991s ago: executing program 9 (id=1793): r0 = socket(0x1e, 0x2, 0x0) getsockopt$SO_TIMESTAMP(r0, 0x1, 0x1c, 0x0, &(0x7f0000000280)) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000280)={{0x12, 0x1, 0x0, 0xe3, 0xdd, 0xef, 0x20, 0x1d50, 0x60a1, 0xa14f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x9d, 0x14, 0x4e}}]}}]}}, 0x0) syz_usb_control_io$cdc_ecm(r1, 0x0, &(0x7f0000000240)={0x1c, &(0x7f0000000140)=ANY=[], 0x0, 0x0}) r2 = accept4(r0, &(0x7f0000000680)=@l2tp={0x2, 0x0, @multicast2}, &(0x7f0000000500)=0x80, 0x833b0c0fed334a46) r3 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r3, 0x0, &(0x7f00000000c0)=0x0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000740)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_START_SCHED_SCAN(r2, &(0x7f0000000840)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x9a242001}, 0xc, &(0x7f0000000800)={&(0x7f0000000780)={0x5c, 0x0, 0x800, 0x70bd25, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x1, 0x43}}}}, [@NL80211_ATTR_MEASUREMENT_DURATION_MANDATORY={0x4}, @NL80211_ATTR_BG_SCAN_PERIOD={0x6, 0x98, 0x7}, @NL80211_ATTR_SCAN_FLAGS={0x8, 0x9e, 0x8}, @NL80211_ATTR_BSSID={0xa}, @NL80211_ATTR_SCHED_SCAN_RSSI_ADJUST={0x6, 0xf7, {0x8, 0xfe}}, @NL80211_ATTR_MEASUREMENT_DURATION={0x6, 0xeb, 0x1ff}, @NL80211_ATTR_SCAN_FREQUENCIES={0x4}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4000080}, 0x20000000) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r6) sendmsg$NFC_CMD_DEV_UP(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r7, 0x1, 0x0, 0x0, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r4}]}, 0x1c}}, 0x0) write$nci(r3, &(0x7f0000000640)=@NCI_OP_RF_DISCOVER_NTF={0x1, 0x1, 0x3, 0x3, 0x7, @b={0x7, 0x6, 0x1, 0x2, {0x3, "9ec3d6"}, 0x1}}, 0xc) syz_usb_control_io$printer(r1, 0x0, &(0x7f0000000400)={0x34, &(0x7f0000000640)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r1, 0x0, &(0x7f0000000540)={0x44, &(0x7f00000002c0)={0x20, 0x15}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_connect$hid(0x5, 0x3f, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0xff, 0x1c4f, 0x59, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x80, 0x80, 0x6, [{{0x9, 0x4, 0x0, 0x1, 0x2, 0x3, 0x1, 0x3, 0x25, {0x9, 0x21, 0x10, 0x4e, 0x1, {0x22, 0xf5a}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x2, 0x8, 0x8}}, [{{0x9, 0x5, 0x2, 0x3, 0x3ff, 0xff, 0x7, 0x7}}]}}}]}}]}}, &(0x7f00000005c0)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x110, 0x8, 0x2, 0x8, 0x40, 0x40}, 0x1bb, &(0x7f0000000080)={0x5, 0xf, 0x1bb, 0x2, [@generic={0xf3, 0x10, 0xb, "f1bb8cd93b67846d45968a1b6b129b54b0a398e50af723b30d3ea54c98a079239073fb1f524111fa9514ee6262c7ddbf580f0646e0299aca73320c9acb31fbf84c7c17f07bdb00e8fbcf089672231e962260b44e367df0a75bf999d96c9d290b01ff5618821404035ce25423251f7d5b12c2207dec080311c44fce536462b30f4f26db0a20f9cbfb01c724e614d0aecccefed5c42a076cbe25306fa63a0693264ff2e6fc354be0e946c2dc3ce170e01dbff432e5226f116ab8ece40fdca2dadb76912beb7bbd7b21305ce9e6e0317e56d6341d74c2db65a834f2f99206741ec84e5ae88ef9a4383a4ad36dc5ab98b0cc"}, @generic={0xc3, 0x10, 0x2, "d7b2845e458c737995b886fc18f18ad3ba5a3ac43ac68fdb0bcfd37b611f2ef99f461c44076ed1eb1152260a50779a0c7556d1192a2c7dd9f1ad18b681d8fb1bd50565249ee651cf4e6311026716266d80bd14c02addb7ddc833bff3f198971a9880698a9b00bf48157067431e3aca4539e62b6f11bbbcd822dcc384b0d0ebbdc2087a57ed4c11044e106a99872c459f02b2fe5823b559ad6062d3ec685d6b2aa43924d97f5dc68cb72363707fc6a1291db2d3db0134a877056705d8e001f682"}]}, 0x6, [{0x68, &(0x7f0000000300)=@string={0x68, 0x3, "d0dbb7bbd220e20f2ed40f06d051af65757f965dd121eff1d0dbfef720908cf6280176750347d5efad0894ab0b1d14e30b2448818f5d8751ddd69ba2b8dc935abebceb58d7f5a4ffb3aabff9d5318167aaecb8f7c6f0ac2af2a3b59e02c950e216c826f980b6"}}, {0x4, &(0x7f0000000380)=@lang_id={0x4, 0x3, 0x52}}, {0x4, &(0x7f00000003c0)=@lang_id={0x4, 0x3, 0x403}}, {0x20, &(0x7f0000000440)=@string={0x20, 0x3, "8bf0995d79465992d05611911c6b62f1021396e292f71b07f9352c2aeb53"}}, {0x4, &(0x7f0000000480)=@lang_id={0x4, 0x3, 0x44c}}, {0x4, &(0x7f00000004c0)=@lang_id={0x4, 0x3, 0x400a}}]}) syz_usb_control_io(r1, 0x0, &(0x7f0000000a40)={0x84, &(0x7f0000000640)={0x0, 0x11}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 4.767244735s ago: executing program 3 (id=1795): r0 = io_uring_setup(0x2e34, &(0x7f0000000180)) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r1) syz_open_procfs(0x0, &(0x7f0000000080)='net/vlan/vlan0\x00') r2 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r2, 0x8923, &(0x7f0000000040)={'vlan0\x00', 0x40}) syz_io_uring_setup(0x22f, 0x0, 0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(0x0, r3, &(0x7f00000009c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xffffffffffffff31}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) close_range(r0, 0xffffffffffffffff, 0x0) (fail_nth: 1) 3.795000762s ago: executing program 7 (id=1797): socket$inet6_sctp(0xa, 0x1, 0x84) r0 = getpid() syz_pidfd_open(r0, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) pselect6(0x40, &(0x7f0000000600)={0x0, 0x0, 0x0, 0xeb, 0x0, 0x3}, 0x0, &(0x7f0000000680)={0xff, 0x0, 0xfffffffffffffffc, 0x0, 0xfffffffffffffffe, 0x3e36, 0x0, 0x900000000000000}, 0x0, 0x0) 3.668162922s ago: executing program 7 (id=1798): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000080)={0x19, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f00000000c0)={0x28, 0x7, r1, 0x0, &(0x7f0000ffa000/0x3000)=nil, 0x3000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f00000001c0)={0x48, 0x5, r1, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES(r0, 0x3ba0, &(0x7f0000000100)={0x48, 0x7, r2, 0x0, 0x0, 0x0, 0x0, 0x8, 0x20000000}) 3.475589458s ago: executing program 7 (id=1799): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="5c000000020601030000000000000000000000000900020073797a300000000005000100060000000600050000000000050004000000000014000780080011400000000005001500800000000d000300686173683a6d616300"], 0x5c}, 0x1, 0x0, 0x2000000000000000}, 0x0) 3.298691568s ago: executing program 7 (id=1800): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f00000024c0)="c7442400a2000000c744240200000000c7442406000000000f011424440f20c03506000000440f22c0c74424000e000000c744240200000000c7442406000000000f0114242667640f01c80fc7680ab9bc090000b8252e2d50ba50c25a050f30266526660f3a611a05420f01b3809bd21165660f384064aad7b96b0300000f32", 0x80}], 0x1, 0x4e, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mq_notify(0xffffffffffffffff, 0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000280)=ANY=[@ANYRES32=r3, @ANYRES32=r4, @ANYBLOB="020000000200000000000000", @ANYRES32, @ANYBLOB="8a76ab4b3f0e165bb32aa2113a586034b7716e85b8f768a603b41cb988fd274533a584208b30c70b0fabb78f5fef4514665f5a13f3f6de30ccd13adba6dbb3ef3f05623ab8f44f608281f2f63e9eb380d662179fee62d5731c6d17a2e8f0612711d271a4ca31c188143fed5d73f078d965613e2429c4316f8b9c96a74ab49d00cc89a917bb40595b481417aacf20bc", @ANYRES64=0x0], 0x10) r5 = syz_open_dev$mouse(&(0x7f0000000100), 0x1, 0x22441) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000002540)={0x4000000000008, 0x6}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r6 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r8, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r9, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x3e0, 0x1b0, 0xc8, 0x8, 0x1b0, 0x5803, 0x310, 0x2e8, 0x2e8, 0x310, 0x2e8, 0x3, 0x0, {[{{@ipv6={@loopback, @mcast1, [0x0, 0xb0010000], [], 'erspan0\x00', 'geneve1\x00'}, 0x0, 0x190, 0x1b0, 0x0, {0x0, 0x2000000000000}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'kmp\x00', "cfcaf80c672f61cd17ae5119b5135c2aee68d23a465cd431e1ecef50c3234e082555f67222476147864fa03182f5cf11d8c348cbd06dc8de1dcbde7d4e252c3394fed47bf78c70f607b0178fa5ea335019ac07a602061c96baebc989f1f34a214e67442c1fe4b124e0f7323a587d2a1fcfe36bbf12eca0a7b66c60c527bac2b5", 0x1}}, @common=@inet=@socket1={{0x28}, 0xa490f54eab606508}]}, @unspec=@TRACE={0x20}}, {{@ipv6={@remote, @mcast2, [], [], 'macvtap0\x00', 'syzkaller1\x00'}, 0x0, 0xf8, 0x160, 0x0, {}, [@inet=@rpfilter={{0x28}}, @inet=@rpfilter={{0x28}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x440) writev(r5, &(0x7f00000000c0)=[{&(0x7f0000000080)='9\x00\x00\x00', 0x4}], 0x1) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x5, 0x3032, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000180)={@ifindex, 0x2e, 0x0, 0x0, &(0x7f00000001c0)=[0x0, 0x0], 0x2, 0x0, &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x0}, 0x40) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2.98426104s ago: executing program 0 (id=1801): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000540)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000480)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x78, 0x18, &(0x7f0000000580)={@ptr={0x70742a85, 0x1000000, 0x0, 0xfc, 0x100000}, @ptr={0x70742a85, 0x0, &(0x7f0000000900)=""/206, 0xce}, @ptr={0x70742a85, 0x1, 0x0, 0x0, 0x1, 0x14}}, &(0x7f0000001280)={0x0, 0x28, 0x50}}, 0x1000}], 0x0, 0x0, 0x0}) 2.959378175s ago: executing program 3 (id=1802): bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0000000000000000050000000000000001eb0000", @ANYRES32, @ANYBLOB='\x00'/18, @ANYRES32=0x0, @ANYRES32], 0x50) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x1, 0xf000, 0x2000, &(0x7f0000f9a000/0x2000)=nil}) r3 = dup(r2) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000040)=@x86={0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x1, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x1000000}) ioctl$KVM_SET_VAPIC_ADDR(r3, 0x4008ae93, &(0x7f00000000c0)=0x10000) ioctl$KVM_RUN(r3, 0xae80, 0x0) 2.267082994s ago: executing program 3 (id=1803): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="034886dd010000000000140000006000000016082f00fe88a43de1a400000000000000007d01ff020000000000000000000000000001000088be"], 0xfdef) 1.778955919s ago: executing program 7 (id=1804): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='tlb_flush\x00', r0}, 0x10) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='tlb_flush\x00', r0}, 0x10) socket$packet(0x11, 0x2, 0x300) (async) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r1, 0x107, 0xd, &(0x7f0000000100)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) (async) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000100)) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r4 = dup3(r3, r2, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000540)='./binderfs/binder0\x00', 0x0, 0x0) (async) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000540)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r5, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, &(0x7f0000000040)) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000780)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000000)={0xa8, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x4a, 0x18, &(0x7f0000000580)={@flat=@weak_binder={0x77622a85, 0x10a, 0x3}, @ptr={0x70742a85, 0x0, &(0x7f0000000440)=""/218, 0xce, 0x0, 0x15}, @fda={0x66646185, 0x7, 0x1, 0x4000003a}}, &(0x7f0000000240)={0x0, 0x18, 0x40}}, 0x1000}, @reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000280)={@flat=@binder={0x73622a85, 0xa, 0x3}, @ptr={0x70742a85, 0x40000000, &(0x7f0000000140), 0x0, 0x1, 0x2f}, @ptr={0x70742a85, 0x1, &(0x7f00000001c0)=""/125, 0x7d, 0x2, 0x1c}}, &(0x7f0000000300)={0x0, 0x18, 0x40}}, 0x400}, @request_death={0x400c630e, 0x1}], 0x0, 0x0, 0x0}) r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=@framed={{}, [@ringbuf_output={{0x18, 0x2, 0x1, 0x0, r7}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x43}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x5, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x7, 0x4, 0x100, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x7, 0x4, 0x100, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) fadvise64(r6, 0x100000001, 0x2, 0x4) (async) fadvise64(r6, 0x100000001, 0x2, 0x4) mmap(&(0x7f0000ff0000/0x10000)=nil, 0x10000, 0x7fa962bfffff, 0x13012, r1, 0x0) (async) mmap(&(0x7f0000ff0000/0x10000)=nil, 0x10000, 0x7fa962bfffff, 0x13012, r1, 0x0) madvise(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x14) syz_usb_connect(0x2, 0x21a, &(0x7f0000000000)=ANY=[@ANYBLOB="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"], &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x5, [{0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0xf0ff}}, {0xc9, &(0x7f00000002c0)=@string={0xc9, 0x3, "7670f21a62aa3d89f69c55435e06328c97dbf8b88710103bcdbe3ddf1a9871967808150b808ec4d5289d3dd7c67fce57b629e070f8eaf3e93591756c62c965d208fa74bcb50e019f46f17b1d11c94af4346dc308d92b7642682a26b255a22a4b4bc17d20100eec4a21a62884d218f0d16c353ab9c7909cab62c9fdbefa5e49e26d2ceb3881a6399381281d117125283d18e44032301619be478afacdf92859488012ec45eec835987f3b59c8cf7fa0f46dc50e8d0f5da1570cbbe4b1b3b0ffd0bb0efcd5ee8a95"}}, {0xf4, &(0x7f00000003c0)=@string={0xf4, 0x3, "966742a645129de3b5996d32690550c9c50d72a0c0834b984239262c47b1e715d5bb29fb7e0ff4b90b248e60be1977656aaec101e3db8d266dd2c18ea625713c6a7cdc69ff374bc0353f2d5fe4fe39807c2f94f9f2bb15835e6fb6696796f1af4728df5cc7304765f81d6c64bdf637c868d740b9010966fdf818e26a4943750201bf3db0b3e6967bf2102b57e3df500eebb57a3214847a310d0310754674418b9e772a173d8f72e7fcd39864d7049f4cfb8e8fb3ead03ddf741a9fb3a0968a75c22e34c6ca1de32baf2ec1c8198d6587e88b46e2fa614b713393f11c036ca405eab5ba0eb0cb4ad67db67fbaaea906fe3d76"}}, {0xc8, &(0x7f00000005c0)=@string={0xc8, 0x3, "1e77a89ccde7db0ebf1b4c4ded369c7c92e33fe694482479dae4a2a8157b9ac00fc01ad62ea2e23ba9f978e377b0120dcc811a90f971a11a14ecfdfa75219bd53c26ca925ca576f0c67b20c9df6d2ed92ba8f2b9f830e63b9c9a2e9da21023ba0a622adba325bc70e0dfbf0c1ef67a7fe95f85469648810adaea44d20a9af05e5859bcbbd4e2cb85b321a600f9262f9a21f33922ae151e41120d0d3c02421d3fdd3483535c230f0ea21f529af276c0a8c10215db66cbcae545dcca4036c96703d4441503ed3f"}}, {0x4, &(0x7f0000000500)=@lang_id={0x4, 0x3, 0x440a}}]}) 1.36279876s ago: executing program 9 (id=1805): syz_usb_connect(0x0, 0x36, &(0x7f0000000580)=ANY=[@ANYBLOB="1200000030ff21540102030000000000"], 0x0) (async, rerun: 32) r0 = socket$inet_udp(0x2, 0x2, 0x0) (rerun: 32) r1 = io_uring_setup(0x48c8, &(0x7f0000000340)={0x0, 0xad8b, 0x40, 0x3, 0xcd}) syz_io_uring_setup(0x3ab5, &(0x7f00000003c0)={0x0, 0x73b0, 0x8, 0x0, 0x357, 0x0, r1}, &(0x7f0000000440), &(0x7f0000000480)) setsockopt$inet_mreqn(r0, 0x0, 0x20, 0x0, 0x0) syz_usb_connect$printer(0x2, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x10, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x6, 0xa0, 0xe9, [{{0x9, 0x4, 0x0, 0x5, 0x1, 0x7, 0x1, 0x1, 0x8, "", {{{0x9, 0x5, 0x1, 0x2, 0x40, 0x2, 0x3, 0xf}}, [{{0x9, 0x5, 0x82, 0x2, 0x200, 0x4, 0x7f, 0x7}}]}}}]}}]}}, &(0x7f00000002c0)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x200, 0x1, 0x7, 0x7, 0x10, 0xe}, 0x29, &(0x7f0000000080)={0x5, 0xf, 0x29, 0x2, [@ssp_cap={0x14, 0x10, 0xa, 0x9, 0x2, 0x5, 0xff1e, 0x90, [0xc0ff, 0xf]}, @ssp_cap={0x10, 0x10, 0xa, 0x5, 0x1, 0x7ff, 0x0, 0x1d, [0x3f]}]}, 0x4, [{0x4, &(0x7f00000000c0)=@lang_id={0x4, 0x3, 0x140a}}, {0x4, &(0x7f0000000100)=@lang_id={0x4, 0x3, 0x340a}}, {0xd2, &(0x7f0000000140)=@string={0xd2, 0x3, "d90c6df65757c940d81179b1aa7fd87b066c52b3d5765ac3d41df80df150dca9120ed952e2eaf1cbf60283608dfbaef5ddf08328dadd94404fa42140ae4b5781c5b4ba79157ff05d98991526833b4faf3335bd7000c35cedb76a0f3e8bbdb7adf42c2a7c1bf39df3d4367a4b62494029d8935c80db293ac39ab7da126590029381cab13683c02e4be8f951a6d496537c5ee65d1b798c75dce6636bb3b83fefcf91bced4f78dddc2beca9980a35a970ada9696d7b31dc54ee0220a23a633fdd6c1f4d40a549af0cb8b12dd357d64bf1d1"}}, {0x75, &(0x7f0000000240)=@string={0x75, 0x3, "600bb4bc63ceb90ec269d267323164faa83c1a5199524c6ab58a84cdaf37fedc65d8f187f5b345545f4f91fd96cc99ebf41f64db7400db637d42db0e4b908bf3c7e6984cdf14a7f906393e9d5037153891c70300fb5736f1112c0d3de15ec1adc7ec15adfc72394ea1dba9f6ada483e88f8056"}}]}) 0s ago: executing program 7 (id=1806): socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt(0xffffffffffffffff, 0x107, 0x1, &(0x7f00000001c0)="010000000200060000071a80010061cc", 0x10) syz_usb_connect$hid(0x0, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff) r0 = socket(0xa, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000300)=@broute={'broute\x00', 0x20, 0x2, 0x230, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200004c0], 0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"]}, 0x262) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003d000b08d25a80648c7494f90224fc60580002400c000400040082c104003e3719ac018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000780)=ANY=[@ANYBLOB="1c9856312a4a6db80000006800e97800000000000000000a0000272300000004ed04000000000000000fe5597eff3daa46a6304db70fdfc527e9457f24ae4f6ee8f4c0ab6319053a41a20059ccdbb9ec533c52f605a6fa895d92a88f2db7a247dd74000099e8a9216fc0198a5ba3b4ff0160c9dc8e4eb831e48dc50f606edbc4e92842f2b3cf1435e8b619af69c0085c8a7582eb4a03ad0b2adf8fd6e95f439a9863"], 0x1c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000004380)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="240000001800090400000000000000000a000000000000000000000008001e0001000000d75f0f8f801b94cd1b866db41edcd7fd34383fbb1f8e33c73e74cb058ebd97"], 0x24}}, 0x0) r3 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) r4 = socket$inet(0x2, 0x80001, 0x84) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1801"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, 0x0, &(0x7f0000000040)) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000001800010d00000000000000850a000000000000000500000014000500200100000000000000000100000000001c00090008000000", @ANYRES32=r6], 0x4c}, 0x21}, 0x0) kernel console output (not intermixed with test programs): altsetting 0 has an endpoint descriptor with address 0x3F, changing to 0xF [ 378.150197][ T5870] usb 7-1: config 246 interface 0 altsetting 0 endpoint 0xF has an invalid bInterval 255, changing to 11 [ 378.161584][ T5870] usb 7-1: config 246 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 378.172920][ T5870] usb 7-1: config 246 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 378.186675][ T5900] usb 3-1: USB disconnect, device number 16 [ 378.487609][ T5870] usb 7-1: config 246 has too many interfaces: 42, using maximum allowed: 32 [ 378.520069][ T5870] usb 7-1: config 246 descriptor has 1 excess byte, ignoring [ 378.544230][ T5870] usb 7-1: config 246 has 1 interface, different from the descriptor's value: 42 [ 378.561008][ T5870] usb 7-1: config 246 interface 0 altsetting 0 has an endpoint descriptor with address 0x3F, changing to 0xF [ 378.575852][ T5870] usb 7-1: config 246 interface 0 altsetting 0 endpoint 0xF has an invalid bInterval 255, changing to 11 [ 378.587250][ T5870] usb 7-1: config 246 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 378.598362][ T5870] usb 7-1: config 246 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 378.641850][ T5870] usb 7-1: config 246 has too many interfaces: 42, using maximum allowed: 32 [ 378.650940][ T5870] usb 7-1: config 246 descriptor has 1 excess byte, ignoring [ 378.658361][ T5870] usb 7-1: config 246 has 1 interface, different from the descriptor's value: 42 [ 378.667740][ T5870] usb 7-1: config 246 interface 0 altsetting 0 has an endpoint descriptor with address 0x3F, changing to 0xF [ 378.679444][ T5870] usb 7-1: config 246 interface 0 altsetting 0 endpoint 0xF has an invalid bInterval 255, changing to 11 [ 378.699752][ T5870] usb 7-1: config 246 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 378.711420][ T5870] usb 7-1: config 246 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 378.756862][T10333] lo: entered allmulticast mode [ 378.766627][T10333] CUSE: DEVNAME unspecified [ 378.782036][ T5870] usb 7-1: string descriptor 0 read error: -22 [ 378.788491][ T5870] usb 7-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 378.798054][ T5870] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 378.850183][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.856688][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.881412][ T5870] adutux 7-1:246.0: ADU100 now attached to /dev/usb/adutux0 [ 379.917787][ T46] usb 7-1: USB disconnect, device number 3 [ 380.104721][T10329] lo: left allmulticast mode [ 380.132244][T10354] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 380.489502][T10365] xt_limit: Overflow, try lower: 0/0 [ 380.525888][T10365] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 381.214627][T10375] macvlan2: entered promiscuous mode [ 381.235925][T10375] macvlan2: entered allmulticast mode [ 382.475689][T10397] mkiss: ax0: crc mode is auto. [ 383.651749][ T7932] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 383.856375][T10412] sch_tbf: peakrate 64 is lower than or equals to rate 4294967295 ! [ 383.892126][ T5900] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 385.106937][ T7932] usb 2-1: config 0 has more interface descriptors, than it declares in bNumInterfaces, ignoring interface number: 255 [ 385.306770][T10421] xt_hashlimit: max too large, truncated to 1048576 [ 385.313529][T10421] xt_hashlimit: invalid interval [ 386.007888][ T7932] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 386.018245][ T7932] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 386.031432][ T7932] usb 2-1: New USB device found, idVendor=1908, idProduct=1315, bcdDevice= 0.00 [ 386.032781][T10427] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1219'. [ 386.040484][ T7932] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 386.109883][ T7932] usb 2-1: config 0 descriptor?? [ 386.119849][ T7932] usb 2-1: can't set config #0, error -71 [ 386.155708][ T7932] usb 2-1: USB disconnect, device number 28 [ 386.195363][T10425] binder: 10424:10425 unknown command 0 [ 386.219595][T10425] binder: 10424:10425 ioctl c0306201 20000000 returned -22 [ 386.427147][ T5900] usb 5-1: device descriptor read/all, error -71 [ 386.488043][T10437] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1221'. [ 387.485511][T10454] hsr0: entered promiscuous mode [ 388.019009][T10459] openvswitch: netlink: push_nsh: missing base or metadata attributes [ 388.032834][T10462] FAULT_INJECTION: forcing a failure. [ 388.032834][T10462] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 388.085243][T10459] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 388.112057][T10462] CPU: 0 UID: 0 PID: 10462 Comm: syz.1.1227 Not tainted 6.13.0-rc1-syzkaller-00025-gfeffde684ac2 #0 [ 388.122884][T10462] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 388.132963][T10462] Call Trace: [ 388.136267][T10462] [ 388.139220][T10462] dump_stack_lvl+0x241/0x360 [ 388.143936][T10462] ? __pfx_dump_stack_lvl+0x10/0x10 [ 388.149166][T10462] ? __pfx__printk+0x10/0x10 [ 388.153787][T10462] ? __pfx_lock_release+0x10/0x10 [ 388.158835][T10462] ? tomoyo_path_number_perm+0x6f9/0x860 [ 388.164490][T10462] ? __lock_acquire+0x1397/0x2100 [ 388.169547][T10462] should_fail_ex+0x3b0/0x4e0 [ 388.174259][T10462] _copy_from_user+0x2f/0xc0 [ 388.178882][T10462] wext_handle_ioctl+0xef/0x280 [ 388.183767][T10462] ? __pfx_wext_handle_ioctl+0x10/0x10 [ 388.189263][T10462] ? __asan_memset+0x23/0x50 [ 388.193879][T10462] ? smack_file_ioctl+0x29e/0x3a0 [ 388.198937][T10462] sock_ioctl+0x17c/0x8e0 [ 388.203302][T10462] ? __pfx_sock_ioctl+0x10/0x10 [ 388.208186][T10462] ? __fget_files+0x2a/0x410 [ 388.212814][T10462] ? __fget_files+0x2a/0x410 [ 388.217432][T10462] ? __pfx_sock_ioctl+0x10/0x10 [ 388.222309][T10462] __se_sys_ioctl+0xf5/0x170 [ 388.226934][T10462] do_syscall_64+0xf3/0x230 [ 388.231467][T10462] ? clear_bhb_loop+0x35/0x90 [ 388.236179][T10462] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 388.242102][T10462] RIP: 0033:0x7f3f7ed7ff19 [ 388.246540][T10462] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 388.266183][T10462] RSP: 002b:00007f3f7fb95058 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 388.274635][T10462] RAX: ffffffffffffffda RBX: 00007f3f7ef45fa0 RCX: 00007f3f7ed7ff19 [ 388.282637][T10462] RDX: 0000000020000000 RSI: 0000000000008b34 RDI: 0000000000000003 [ 388.290630][T10462] RBP: 00007f3f7fb950a0 R08: 0000000000000000 R09: 0000000000000000 [ 388.298610][T10462] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 388.306582][T10462] R13: 0000000000000000 R14: 00007f3f7ef45fa0 R15: 00007ffd3bfcf4b8 [ 388.314571][T10462] [ 388.317848][ T5900] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 388.339065][T10469] input: syz1 as /devices/virtual/input/input23 [ 388.734635][ T5900] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xE8, changing to 0x88 [ 388.748528][ T5900] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 388.877855][ T5900] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 388.926164][T10481] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1236'. [ 388.956224][ T5900] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 41915, setting to 1024 [ 388.987404][T10481] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1236'. [ 389.138704][T10485] netlink: 'syz.5.1239': attribute type 10 has an invalid length. [ 389.150587][T10486] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1238'. [ 389.166599][ T5900] usb 3-1: New USB device found, idVendor=1781, idProduct=0938, bcdDevice=9b.49 [ 389.175942][ T5900] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 389.214812][ T5900] usb 3-1: Product: syz [ 389.219047][ T5900] usb 3-1: Manufacturer: syz [ 389.255409][ T5900] usb 3-1: SerialNumber: syz [ 389.273382][ T5900] usb 3-1: config 0 descriptor?? [ 389.292183][ T5900] iguanair 3-1:0.0: probe with driver iguanair failed with error -12 [ 389.544968][T10459] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 389.554235][T10459] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 389.787932][T10501] netlink: 'syz.4.1242': attribute type 298 has an invalid length. [ 389.847105][ T1204] usb 3-1: USB disconnect, device number 17 [ 390.246074][T10497] hub 8-0:1.0: USB hub found [ 390.251061][T10497] hub 8-0:1.0: 1 port detected [ 390.700873][T10517] netlink: 'syz.4.1249': attribute type 10 has an invalid length. [ 390.731142][ T7932] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 390.906837][ T7932] usb 6-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 390.984674][ T7932] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 391.096677][ T7932] usb 6-1: Product: syz [ 391.168886][ T7932] usb 6-1: Manufacturer: syz [ 391.258406][ T7932] usb 6-1: SerialNumber: syz [ 391.375762][ T7932] usb 6-1: config 0 descriptor?? [ 392.485867][ T7932] usb 6-1: USB disconnect, device number 18 [ 392.874991][ T6380] udevd[6380]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 393.959769][T10552] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1261'. [ 394.560396][T10560] FAULT_INJECTION: forcing a failure. [ 394.560396][T10560] name failslab, interval 1, probability 0, space 0, times 0 [ 394.575890][T10560] CPU: 1 UID: 0 PID: 10560 Comm: syz.2.1264 Not tainted 6.13.0-rc1-syzkaller-00025-gfeffde684ac2 #0 [ 394.586701][T10560] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 394.596772][T10560] Call Trace: [ 394.600068][T10560] [ 394.603022][T10560] dump_stack_lvl+0x241/0x360 [ 394.607736][T10560] ? __pfx_dump_stack_lvl+0x10/0x10 [ 394.612975][T10560] ? __pfx__printk+0x10/0x10 [ 394.617603][T10560] ? __kmalloc_noprof+0xb5/0x4c0 [ 394.622576][T10560] ? __pfx___might_resched+0x10/0x10 [ 394.627919][T10560] should_fail_ex+0x3b0/0x4e0 [ 394.632637][T10560] should_failslab+0xac/0x100 [ 394.637333][T10560] __kmalloc_noprof+0xdd/0x4c0 [ 394.642100][T10560] ? kernfs_fop_read_iter+0x16c/0x640 [ 394.647472][T10560] kernfs_fop_read_iter+0x16c/0x640 [ 394.652671][T10560] ? rw_verify_area+0x55e/0x6f0 [ 394.657525][T10560] aio_read+0x363/0x500 [ 394.661684][T10560] ? __pfx_aio_read+0x10/0x10 [ 394.666366][T10560] ? __might_fault+0xaa/0x120 [ 394.671046][T10560] ? __pfx_lock_release+0x10/0x10 [ 394.676072][T10560] ? __fget_files+0x2a/0x410 [ 394.680661][T10560] ? __might_fault+0xaa/0x120 [ 394.685346][T10560] io_submit_one+0x884/0x18a0 [ 394.690034][T10560] ? __pfx_io_submit_one+0x10/0x10 [ 394.695151][T10560] ? __might_fault+0xaa/0x120 [ 394.699832][T10560] ? __pfx_lock_release+0x10/0x10 [ 394.704862][T10560] ? lookup_ioctx+0x94/0x6a0 [ 394.709452][T10560] ? __might_fault+0xaa/0x120 [ 394.714130][T10560] ? __might_fault+0xc6/0x120 [ 394.718812][T10560] __se_sys_io_submit+0x171/0x2e0 [ 394.723840][T10560] ? __pfx___se_sys_io_submit+0x10/0x10 [ 394.729385][T10560] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 394.735367][T10560] ? do_syscall_64+0x100/0x230 [ 394.740135][T10560] ? do_syscall_64+0xb6/0x230 [ 394.744813][T10560] do_syscall_64+0xf3/0x230 [ 394.749317][T10560] ? clear_bhb_loop+0x35/0x90 [ 394.754001][T10560] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 394.759900][T10560] RIP: 0033:0x7f876677ff19 [ 394.764312][T10560] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 394.783919][T10560] RSP: 002b:00007f876752a058 EFLAGS: 00000246 ORIG_RAX: 00000000000000d1 [ 394.792335][T10560] RAX: ffffffffffffffda RBX: 00007f8766945fa0 RCX: 00007f876677ff19 [ 394.800303][T10560] RDX: 00000000200004c0 RSI: 0000000000000001 RDI: 00007f87674e8000 [ 394.808273][T10560] RBP: 00007f876752a0a0 R08: 0000000000000000 R09: 0000000000000000 [ 394.816240][T10560] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 394.824204][T10560] R13: 0000000000000000 R14: 00007f8766945fa0 R15: 00007ffe196a8198 [ 394.832186][T10560] [ 395.502665][T10569] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1265'. [ 395.582317][T10569] netlink: 'syz.5.1265': attribute type 25 has an invalid length. [ 395.629330][T10569] netlink: 'syz.5.1265': attribute type 15 has an invalid length. [ 395.686060][T10569] netdevsim netdevsim5 eth0: set [0, 0] type 1 family 0 port 62946 - 0 [ 395.694472][T10569] netdevsim netdevsim5 eth1: set [0, 0] type 1 family 0 port 62946 - 0 [ 395.702833][T10569] netdevsim netdevsim5 eth2: set [0, 0] type 1 family 0 port 62946 - 0 [ 395.711380][T10569] netdevsim netdevsim5 eth3: set [0, 0] type 1 family 0 port 62946 - 0 [ 395.750477][T10569] vxlan0: entered promiscuous mode [ 396.055758][ T29] audit: type=1326 audit(1733345424.925:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10571 comm="syz.1.1267" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f3f7ed7ff19 code=0x0 [ 396.077789][T10589] tipc: Enabling of bearer rejected, already enabled [ 396.328422][T10601] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 397.521081][ T5900] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 399.067305][ T5900] usb 7-1: New USB device found, idVendor=102c, idProduct=6251, bcdDevice=75.3e [ 399.186854][ T5900] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 399.236932][ T5900] usb 7-1: Product: syz [ 399.276428][ T5900] usb 7-1: Manufacturer: syz [ 399.306816][ T5900] usb 7-1: SerialNumber: syz [ 399.344435][ T5900] usb 7-1: config 0 descriptor?? [ 399.353121][ T5900] gspca_main: etoms-2.14.0 probing 102c:6251 [ 399.617888][T10635] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1277'. [ 399.628746][T10635] Invalid ELF header magic: != ELF [ 399.641376][ T29] audit: type=1804 audit(1733345428.485:6): pid=10635 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.6.1277" name="/newroot/44/bus/bus" dev="overlay" ino=266 res=1 errno=0 [ 399.866739][T10639] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 399.930339][T10639] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1288'. [ 401.266467][T10651] syz.5.1291 (10651): /proc/10651/oom_adj is deprecated, please use /proc/10651/oom_score_adj instead. [ 402.250941][ T5870] usb 7-1: USB disconnect, device number 4 [ 404.521580][ T5870] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 404.666310][T10693] mkiss: ax0: crc mode is auto. [ 404.903436][ T5870] usb 7-1: Using ep0 maxpacket: 16 [ 404.917651][ T5870] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 404.930879][ T5870] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 404.940712][ T5870] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 404.953680][ T5870] usb 7-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 404.962821][ T5870] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 404.981934][ T5870] usb 7-1: config 0 descriptor?? [ 405.046379][T10706] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1307'. [ 405.393831][ T5870] usbhid 7-1:0.0: can't add hid device: -71 [ 405.454204][ T5870] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 405.465790][ T5870] usb 7-1: USB disconnect, device number 5 [ 407.669986][T10739] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1317'. [ 407.680629][T10739] netlink: 'syz.5.1317': attribute type 25 has an invalid length. [ 407.695431][T10724] dccp_close: ABORT with 1 bytes unread [ 407.704759][T10739] netlink: 'syz.5.1317': attribute type 15 has an invalid length. [ 408.613934][ T5963] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 408.710090][T10756] netlink: 'syz.2.1321': attribute type 32 has an invalid length. [ 409.032697][T10765] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1326'. [ 409.066154][ T5963] usb 2-1: Using ep0 maxpacket: 8 [ 409.156058][ T5963] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 409.166563][ T5963] usb 2-1: New USB device found, idVendor=0bda, idProduct=0139, bcdDevice=db.d0 [ 409.175907][ T5963] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 409.674194][T10768] sch_tbf: peakrate 64 is lower than or equals to rate 4294967295 ! [ 410.053109][ T5963] usb 2-1: config 0 descriptor?? [ 410.207869][ T5963] rtsx_usb 2-1:0.0: probe with driver rtsx_usb failed with error -8 [ 410.294439][ T46] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 410.704560][ T46] usb 3-1: config 0 has an invalid interface number: 117 but max is 0 [ 410.713055][ T46] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 410.723382][ T46] usb 3-1: config 0 has no interface number 0 [ 410.735713][ T46] usb 3-1: config 0 interface 117 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 410.750161][ T46] usb 3-1: config 0 interface 117 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 410.808742][T10786] xt_NFQUEUE: number of total queues is 0 [ 411.228098][ T46] usb 3-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice=99.d0 [ 411.436376][ T46] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 411.466716][ T46] usb 3-1: Product: syz [ 411.473114][ T46] usb 3-1: Manufacturer: syz [ 411.477753][ T46] usb 3-1: SerialNumber: syz [ 411.497094][ T46] usb 3-1: config 0 descriptor?? [ 411.549499][T10787] mkiss: ax0: crc mode is auto. [ 411.654575][ T7932] IPVS: starting estimator thread 0... [ 411.767747][ T7932] usb 2-1: USB disconnect, device number 29 [ 411.911078][T10797] IPVS: using max 21 ests per chain, 50400 per kthread [ 413.850114][T10805] could not allocate digest TFM handle sha224-ni [ 414.241744][ T5900] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 414.521046][ T5900] usb 6-1: Using ep0 maxpacket: 16 [ 414.530826][ T5900] usb 6-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 414.540262][ T5900] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 414.569877][ T5900] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 414.610613][ T5900] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 414.626386][ T5900] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 414.655094][ T5900] usb 6-1: Product: syz [ 414.671280][ T5900] usb 6-1: Manufacturer: syz [ 414.687696][ T5900] usb 6-1: SerialNumber: syz [ 414.941021][ T5870] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 415.075386][ T46] usbtouchscreen 3-1:0.117: probe with driver usbtouchscreen failed with error -71 [ 415.123855][ T5870] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 415.152724][ T5870] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 415.153418][ T46] usb 3-1: USB disconnect, device number 18 [ 415.164698][T10841] FAULT_INJECTION: forcing a failure. [ 415.164698][T10841] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 415.219516][ T5870] usb 2-1: New USB device found, idVendor=0f30, idProduct=0111, bcdDevice= 0.00 [ 415.252891][ T5900] usb 6-1: 0:2 : does not exist [ 415.267666][T10841] CPU: 0 UID: 0 PID: 10841 Comm: syz.2.1340 Not tainted 6.13.0-rc1-syzkaller-00025-gfeffde684ac2 #0 [ 415.278498][T10841] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 415.288587][T10841] Call Trace: [ 415.291888][T10841] [ 415.294839][T10841] dump_stack_lvl+0x241/0x360 [ 415.299553][T10841] ? __pfx_dump_stack_lvl+0x10/0x10 [ 415.304785][T10841] ? __pfx__printk+0x10/0x10 [ 415.309417][T10841] ? __pfx_lock_release+0x10/0x10 [ 415.314482][T10841] should_fail_ex+0x3b0/0x4e0 [ 415.319194][T10841] _copy_to_iter+0x21f/0x1e70 [ 415.323908][T10841] ? __virt_addr_valid+0x183/0x530 [ 415.329030][T10841] ? __pfx_lock_release+0x10/0x10 [ 415.334065][T10841] ? __mutex_unlock_slowpath+0x21e/0x790 [ 415.339708][T10841] ? __pfx__copy_to_iter+0x10/0x10 [ 415.344857][T10841] ? __virt_addr_valid+0x183/0x530 [ 415.349973][T10841] ? __virt_addr_valid+0x183/0x530 [ 415.355087][T10841] ? __virt_addr_valid+0x45f/0x530 [ 415.360220][T10841] ? __phys_addr_symbol+0x2f/0x70 [ 415.365245][T10841] ? __check_object_size+0x48e/0x900 [ 415.370571][T10841] kernfs_fop_read_iter+0x48e/0x640 [ 415.375783][T10841] aio_read+0x363/0x500 [ 415.379950][T10841] ? __pfx_aio_read+0x10/0x10 [ 415.384633][T10841] ? __might_fault+0xaa/0x120 [ 415.389311][T10841] ? __pfx_lock_release+0x10/0x10 [ 415.394337][T10841] ? __fget_files+0x2a/0x410 [ 415.398931][T10841] ? __might_fault+0xaa/0x120 [ 415.403615][T10841] io_submit_one+0x884/0x18a0 [ 415.408301][T10841] ? __pfx_io_submit_one+0x10/0x10 [ 415.413417][T10841] ? __might_fault+0xaa/0x120 [ 415.418096][T10841] ? __pfx_lock_release+0x10/0x10 [ 415.423123][T10841] ? lookup_ioctx+0x94/0x6a0 [ 415.427711][T10841] ? __might_fault+0xaa/0x120 [ 415.432385][T10841] ? __might_fault+0xc6/0x120 [ 415.437064][T10841] __se_sys_io_submit+0x171/0x2e0 [ 415.442095][T10841] ? __pfx___se_sys_io_submit+0x10/0x10 [ 415.447646][T10841] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 415.453628][T10841] ? do_syscall_64+0x100/0x230 [ 415.458401][T10841] ? do_syscall_64+0xb6/0x230 [ 415.463088][T10841] do_syscall_64+0xf3/0x230 [ 415.467603][T10841] ? clear_bhb_loop+0x35/0x90 [ 415.472285][T10841] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 415.478179][T10841] RIP: 0033:0x7f876677ff19 [ 415.482602][T10841] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 415.502211][T10841] RSP: 002b:00007f876752a058 EFLAGS: 00000246 ORIG_RAX: 00000000000000d1 [ 415.510631][T10841] RAX: ffffffffffffffda RBX: 00007f8766945fa0 RCX: 00007f876677ff19 [ 415.518601][T10841] RDX: 00000000200004c0 RSI: 0000000000000001 RDI: 00007f8767509000 [ 415.526570][T10841] RBP: 00007f876752a0a0 R08: 0000000000000000 R09: 0000000000000000 [ 415.534543][T10841] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 415.542601][T10841] R13: 0000000000000000 R14: 00007f8766945fa0 R15: 00007ffe196a8198 [ 415.550583][T10841] [ 415.553744][ C0] vkms_vblank_simulate: vblank timer overrun [ 415.561136][ T5870] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 415.654135][ T5870] usb 2-1: config 0 descriptor?? [ 415.711150][T10854] lo: entered allmulticast mode [ 415.723006][T10854] netlink: 168864 bytes leftover after parsing attributes in process `syz.6.1343'. [ 415.733409][T10854] openvswitch: netlink: Message has 44053 unknown bytes. [ 415.780501][T10852] lo: left allmulticast mode [ 415.819911][T10818] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 415.839152][T10818] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 415.861188][ T7932] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 416.116012][ T5870] pantherlord 0003:0F30:0111.0005: hidraw0: USB HID v0.00 Device [HID 0f30:0111] on usb-dummy_hcd.1-1/input0 [ 416.135923][ T5870] pantherlord 0003:0F30:0111.0005: no output reports found [ 416.211330][ T7932] usb 5-1: config 0 interface 0 altsetting 12 endpoint 0x87 has invalid wMaxPacketSize 0 [ 416.299000][ T7932] usb 5-1: config 0 interface 0 altsetting 12 bulk endpoint 0x87 has invalid maxpacket 0 [ 416.398809][ T7932] usb 5-1: config 0 interface 0 has no altsetting 0 [ 416.580583][ T7932] usb 5-1: New USB device found, idVendor=06cd, idProduct=0115, bcdDevice=d9.c3 [ 416.745149][ T7932] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 416.760836][ T7932] usb 5-1: Product: syz [ 416.765247][ T7932] usb 5-1: Manufacturer: syz [ 416.769913][ T7932] usb 5-1: SerialNumber: syz [ 416.773665][T10833] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 416.782766][ T7932] usb 5-1: config 0 descriptor?? [ 416.790551][ T7932] keyspan 5-1:0.0: Keyspan 2 port adapter converter detected [ 416.804412][ T7932] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 7 [ 416.819206][ T7932] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 81 [ 416.829925][ T7932] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 1 [ 416.838262][T10833] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 416.902810][ T46] usb 2-1: USB disconnect, device number 30 [ 416.953782][ T7932] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 2 [ 416.973951][ T7932] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 85 [ 416.985843][ T7932] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 5 [ 417.015308][ T7932] usb 5-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 417.036851][ T7932] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 83 [ 417.049340][ T7932] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 3 [ 417.066992][ T7932] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 4 [ 417.077615][ T7932] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 86 [ 417.086024][ T7932] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 6 [ 417.114267][ T7932] usb 5-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 417.128687][ T5900] usb 6-1: USB disconnect, device number 19 [ 417.165598][ T7932] usb 5-1: USB disconnect, device number 17 [ 417.239391][ T7932] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 417.266521][ T7932] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 417.278109][ T7932] keyspan 5-1:0.0: device disconnected [ 417.940163][ T5870] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 418.101173][ T5870] usb 7-1: Using ep0 maxpacket: 32 [ 418.127088][ T5829] udevd[5829]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 418.867114][ T5870] usb 7-1: config 0 interface 0 altsetting 3 endpoint 0x81 has an invalid bInterval 32, changing to 9 [ 418.867154][ T5870] usb 7-1: config 0 interface 0 altsetting 3 endpoint 0x81 has invalid wMaxPacketSize 0 [ 418.867177][ T5870] usb 7-1: config 0 interface 0 has no altsetting 0 [ 418.867207][ T5870] usb 7-1: New USB device found, idVendor=056a, idProduct=00c4, bcdDevice= 0.00 [ 418.867232][ T5870] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 418.891239][T10879] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1351'. [ 418.902221][ T5870] usb 7-1: config 0 descriptor?? [ 419.332415][ T5870] wacom 0003:056A:00C4.0006: unknown main item tag 0x0 [ 419.334916][ T5870] wacom 0003:056A:00C4.0006: hidraw0: USB HID v0.00 Device [HID 056a:00c4] on usb-dummy_hcd.6-1/input0 [ 419.368814][T10891] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1353'. [ 419.368884][T10891] netlink: 'syz.1.1353': attribute type 25 has an invalid length. [ 419.368910][T10891] netlink: 'syz.1.1353': attribute type 15 has an invalid length. [ 419.409606][ T5914] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 419.560375][ T5914] usb 5-1: invalid descriptor for config index 0: type = 0x2, length = 41 [ 419.560414][ T5914] usb 5-1: can't read configurations, error -22 [ 419.691161][ T5914] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 419.850757][ T5914] usb 5-1: invalid descriptor for config index 0: type = 0x2, length = 41 [ 419.880412][ T5914] usb 5-1: can't read configurations, error -22 [ 419.910303][ T5914] usb usb5-port1: attempt power cycle [ 419.938221][T10905] FAULT_INJECTION: forcing a failure. [ 419.938221][T10905] name failslab, interval 1, probability 0, space 0, times 0 [ 419.956051][T10905] CPU: 0 UID: 0 PID: 10905 Comm: syz.2.1358 Not tainted 6.13.0-rc1-syzkaller-00025-gfeffde684ac2 #0 [ 419.966861][T10905] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 419.976922][T10905] Call Trace: [ 419.980206][T10905] [ 419.983150][T10905] dump_stack_lvl+0x241/0x360 [ 419.987844][T10905] ? __pfx_dump_stack_lvl+0x10/0x10 [ 419.993063][T10905] ? __pfx__printk+0x10/0x10 [ 419.997657][T10905] ? __kmalloc_cache_noprof+0x48/0x390 [ 420.003134][T10905] ? __pfx___might_resched+0x10/0x10 [ 420.008428][T10905] ? dma_resv_iter_first_unlocked+0x26/0x2e0 [ 420.014431][T10905] should_fail_ex+0x3b0/0x4e0 [ 420.019136][T10905] should_failslab+0xac/0x100 [ 420.023823][T10905] __kmalloc_cache_noprof+0x70/0x390 [ 420.029113][T10905] ? vgem_gem_create_object+0x4c/0xb0 [ 420.034496][T10905] vgem_gem_create_object+0x4c/0xb0 [ 420.039703][T10905] __drm_gem_shmem_create+0x82/0x2e0 [ 420.044996][T10905] drm_gem_shmem_prime_import_sg_table+0x75/0x100 [ 420.051417][T10905] drm_gem_prime_import_dev+0x26b/0x390 [ 420.056971][T10905] drm_gem_prime_fd_to_handle+0x1db/0x4b0 [ 420.062743][T10905] drm_ioctl_kernel+0x337/0x440 [ 420.067601][T10905] ? __pfx_drm_prime_fd_to_handle_ioctl+0x10/0x10 [ 420.074019][T10905] ? __pfx_drm_ioctl_kernel+0x10/0x10 [ 420.079390][T10905] ? __might_fault+0xc6/0x120 [ 420.084076][T10905] drm_ioctl+0x60e/0xad0 [ 420.088327][T10905] ? __pfx_drm_prime_fd_to_handle_ioctl+0x10/0x10 [ 420.094755][T10905] ? __pfx_drm_ioctl+0x10/0x10 [ 420.099528][T10905] ? __fget_files+0x2a/0x410 [ 420.104124][T10905] ? __pfx_drm_ioctl+0x10/0x10 [ 420.108891][T10905] __se_sys_ioctl+0xf5/0x170 [ 420.113492][T10905] do_syscall_64+0xf3/0x230 [ 420.118002][T10905] ? clear_bhb_loop+0x35/0x90 [ 420.122690][T10905] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 420.128591][T10905] RIP: 0033:0x7f876677ff19 [ 420.133009][T10905] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 420.152618][T10905] RSP: 002b:00007f876752a058 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 420.161045][T10905] RAX: ffffffffffffffda RBX: 00007f8766945fa0 RCX: 00007f876677ff19 [ 420.169029][T10905] RDX: 0000000020000180 RSI: 00000000c00c642e RDI: 0000000000000003 [ 420.177003][T10905] RBP: 00007f876752a0a0 R08: 0000000000000000 R09: 0000000000000000 [ 420.184978][T10905] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 420.192954][T10905] R13: 0000000000000000 R14: 00007f8766945fa0 R15: 00007ffe196a8198 [ 420.200961][T10905] [ 420.381015][ T5900] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 420.501072][ T5914] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 420.532951][ T5914] usb 5-1: invalid descriptor for config index 0: type = 0x2, length = 41 [ 420.537486][ T5900] usb 6-1: config 0 has more interface descriptors, than it declares in bNumInterfaces, ignoring interface number: 255 [ 420.543389][ T5914] usb 5-1: can't read configurations, error -22 [ 420.571134][ T5900] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 420.586623][ T5900] usb 6-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 420.601154][ T5900] usb 6-1: New USB device found, idVendor=1908, idProduct=1315, bcdDevice= 0.00 [ 420.610494][ T5900] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 420.635466][ T5900] usb 6-1: config 0 descriptor?? [ 420.643062][ T5900] usb-storage 6-1:0.0: USB Mass Storage device detected [ 420.664797][ T5900] usb-storage 6-1:0.0: Quirks match for vid 1908 pid 1315: 20000 [ 420.693981][ T5914] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 420.727510][ T5914] usb 5-1: invalid descriptor for config index 0: type = 0x2, length = 41 [ 420.740472][ T5914] usb 5-1: can't read configurations, error -22 [ 420.749110][ T5914] usb usb5-port1: unable to enumerate USB device [ 420.848066][ T5900] usb 6-1: USB disconnect, device number 20 [ 421.001263][ T9] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 421.211201][ T9] usb 3-1: Using ep0 maxpacket: 16 [ 421.288682][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 421.365730][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 421.446917][ T9] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 421.526582][ T9] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 421.576234][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 421.587968][ T9] usb 3-1: config 0 descriptor?? [ 421.847740][ T5870] usb 7-1: USB disconnect, device number 6 [ 421.983085][T10938] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 422.103837][T10918] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 422.113371][T10918] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 422.191125][T10929] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 423.109782][T10951] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1374'. [ 423.234599][ T5870] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 423.261002][T10929] usb 2-1: Using ep0 maxpacket: 8 [ 423.273480][T10929] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 128, changing to 11 [ 423.291012][T10929] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 423.306281][T10929] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 32 [ 423.393142][ T5870] usb 6-1: config 0 has an invalid interface number: 221 but max is 0 [ 423.402749][ T5870] usb 6-1: config 0 has no interface number 0 [ 423.423345][ T5870] usb 6-1: New USB device found, idVendor=05e0, idProduct=2006, bcdDevice=10.18 [ 423.708059][ T5870] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 423.720206][ T5870] usb 6-1: Product: syz [ 423.730765][ T5870] usb 6-1: Manufacturer: syz [ 423.756854][T10956] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 424.423049][T10956] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 424.446587][ T5870] usb 6-1: SerialNumber: syz [ 424.456550][ T5870] usb 6-1: config 0 descriptor?? [ 424.760768][ T5870] usb 6-1: USB disconnect, device number 21 [ 424.989063][T10929] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 425.014251][T10929] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 425.041270][T10929] usb 2-1: can't set config #1, error -71 [ 425.056024][T10929] usb 2-1: USB disconnect, device number 31 [ 426.843755][ T9] usbhid 3-1:0.0: can't add hid device: -32 [ 426.849813][ T9] usbhid 3-1:0.0: probe with driver usbhid failed with error -32 [ 426.953942][ T9] usb 3-1: USB disconnect, device number 19 [ 427.008614][T10974] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1382'. [ 427.025632][T10974] tipc: Started in network mode [ 427.030556][T10974] tipc: Node identity @, cluster identity 4711 [ 427.291049][ T7932] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 427.421436][T10986] lo speed is unknown, defaulting to 1000 [ 427.528132][ T7932] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 427.539330][ T7932] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 427.549461][ T7932] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 427.562752][ T7932] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 427.572283][ T7932] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 427.583235][ T7932] usb 2-1: config 0 descriptor?? [ 427.911048][ T5900] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 428.146498][ T7932] plantronics 0003:047F:FFFF.0007: No inputs registered, leaving [ 428.155762][T11011] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 428.162414][ T7932] plantronics 0003:047F:FFFF.0007: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 428.173323][T11011] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 428.190844][ T5900] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 428.225869][ T5900] usb 6-1: New USB device found, idVendor=056a, idProduct=0315, bcdDevice= 0.00 [ 428.230979][ T9] usb 2-1: USB disconnect, device number 32 [ 428.260693][ T5900] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 428.282661][ T5900] usb 6-1: config 0 descriptor?? [ 428.367634][T11018] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1396'. [ 428.539976][T11022] xt_nfacct: accounting object `syz0' does not exists [ 428.657543][T11024] tipc: Enabling of bearer rejected, already enabled [ 429.328683][T11036] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1404'. [ 429.474749][T11039] netlink: 'syz.6.1405': attribute type 3 has an invalid length. [ 430.021743][T11040] IPv6: Can't replace route, no match found [ 430.461110][T11045] siw: device registration error -23 [ 430.934791][ T5900] usb 6-1: string descriptor 0 read error: -71 [ 430.965472][ T5900] usb 6-1: USB disconnect, device number 22 [ 431.335698][T11058] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1410'. [ 431.511601][T11071] xt_CT: You must specify a L4 protocol and not use inversions on it [ 431.612039][T11073] FAULT_INJECTION: forcing a failure. [ 431.612039][T11073] name failslab, interval 1, probability 0, space 0, times 0 [ 431.637302][T11073] CPU: 1 UID: 0 PID: 11073 Comm: syz.2.1416 Not tainted 6.13.0-rc1-syzkaller-00025-gfeffde684ac2 #0 [ 431.648140][T11073] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 431.658228][T11073] Call Trace: [ 431.661532][T11073] [ 431.664488][T11073] dump_stack_lvl+0x241/0x360 [ 431.669200][T11073] ? __pfx_dump_stack_lvl+0x10/0x10 [ 431.674425][T11073] ? __pfx__printk+0x10/0x10 [ 431.679040][T11073] ? fs_reclaim_acquire+0x93/0x130 [ 431.684186][T11073] ? __pfx___might_resched+0x10/0x10 [ 431.689522][T11073] ? dynamic_dname+0x141/0x1b0 [ 431.694331][T11073] should_fail_ex+0x3b0/0x4e0 [ 431.699064][T11073] should_failslab+0xac/0x100 [ 431.703785][T11073] __kmalloc_noprof+0xdd/0x4c0 [ 431.708589][T11073] ? tomoyo_encode+0x26f/0x540 [ 431.713385][T11073] tomoyo_encode+0x26f/0x540 [ 431.717997][T11073] ? __pfx_anon_inodefs_dname+0x10/0x10 [ 431.723564][T11073] tomoyo_realpath_from_path+0x59e/0x5e0 [ 431.729220][T11073] tomoyo_path_number_perm+0x236/0x860 [ 431.734689][T11073] ? __lock_acquire+0x1397/0x2100 [ 431.739721][T11073] ? tomoyo_path_number_perm+0x206/0x860 [ 431.745379][T11073] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 431.751491][T11073] ? __fget_files+0x2a/0x410 [ 431.756096][T11073] ? __fget_files+0x2a/0x410 [ 431.760724][T11073] security_file_ioctl+0xc6/0x2a0 [ 431.765766][T11073] __se_sys_ioctl+0x46/0x170 [ 431.770399][T11073] do_syscall_64+0xf3/0x230 [ 431.774929][T11073] ? clear_bhb_loop+0x35/0x90 [ 431.779623][T11073] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 431.785523][T11073] RIP: 0033:0x7f876677ff19 [ 431.789956][T11073] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 431.809587][T11073] RSP: 002b:00007f876752a058 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 431.818034][T11073] RAX: ffffffffffffffda RBX: 00007f8766945fa0 RCX: 00007f876677ff19 [ 431.826012][T11073] RDX: 0000000020000000 RSI: 000000004008ae89 RDI: 0000000000000005 [ 431.834004][T11073] RBP: 00007f876752a0a0 R08: 0000000000000000 R09: 0000000000000000 [ 431.841989][T11073] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 431.849983][T11073] R13: 0000000000000000 R14: 00007f8766945fa0 R15: 00007ffe196a8198 [ 431.858007][T11073] [ 431.892218][T11073] ERROR: Out of memory at tomoyo_realpath_from_path. [ 432.198787][T11088] x_tables: ip_tables: REDIRECT target: used from hooks INPUT, but only usable from PREROUTING/OUTPUT [ 432.845420][T11096] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1426'. [ 433.041094][ T7932] usb 6-1: new high-speed USB device number 23 using dummy_hcd [ 433.202168][ T7932] usb 6-1: Using ep0 maxpacket: 8 [ 433.217244][ T7932] usb 6-1: New USB device found, idVendor=10d2, idProduct=2865, bcdDevice=a4.c9 [ 433.232054][ T7932] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 433.248947][ T7932] usb 6-1: config 0 descriptor?? [ 433.260003][ T7932] usblcd 6-1:0.0: USBLCD model not supported. [ 433.480355][ T5870] usb 6-1: USB disconnect, device number 23 [ 434.164442][T11120] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1434'. [ 434.183989][T11120] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1434'. [ 434.231412][T11123] dccp_invalid_packet: P.Data Offset(0) too small [ 434.309561][T11126] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1436'. [ 434.331074][ T5870] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 434.497523][ T5870] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 434.519634][ T5870] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 434.552706][ T5870] usb 5-1: New USB device found, idVendor=1532, idProduct=011d, bcdDevice= 0.00 [ 434.577511][ T5870] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 434.599902][ T5870] usb 5-1: config 0 descriptor?? [ 435.089106][ T7932] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 435.272792][ T7932] usb 2-1: Using ep0 maxpacket: 16 [ 435.298503][ T7932] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 435.318917][ T5870] hid-rmi 0003:1532:011D.0008: hidraw0: USB HID v0.00 Device [HID 1532:011d] on usb-dummy_hcd.4-1/input0 [ 435.321586][ T7932] usb 2-1: New USB device found, idVendor=046d, idProduct=c626, bcdDevice= 0.00 [ 435.390993][ T7932] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 435.410186][ T7932] usb 2-1: config 0 descriptor?? [ 435.532744][ T5870] usb 5-1: USB disconnect, device number 22 [ 435.540249][T11154] hfs: Bad value for 'gid' [ 435.556732][T11154] hfs: Bad value for 'gid' [ 435.567084][T11154] hfs: Bad value for 'gid' [ 435.573444][T11154] hfs: Bad value for 'gid' [ 435.578548][T11154] hfs: Bad value for 'gid' [ 435.584578][T11154] hfs: Bad value for 'gid' [ 435.835523][ T7932] logitech 0003:046D:C626.0009: item fetching failed at offset 8/9 [ 435.844848][ T7932] logitech 0003:046D:C626.0009: parse failed [ 435.851329][ T7932] logitech 0003:046D:C626.0009: probe with driver logitech failed with error -22 [ 435.966287][T11166] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1449'. [ 436.021484][ T5900] usb 6-1: new high-speed USB device number 24 using dummy_hcd [ 436.058338][ T7932] usb 2-1: USB disconnect, device number 33 [ 436.353038][ T5900] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 436.368956][ T5900] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 436.378893][ T5900] usb 6-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 437.349922][ T5900] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 437.361853][ T5900] usb 6-1: config 0 descriptor?? [ 437.887355][T11186] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1456'. [ 437.897818][T11161] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1447'. [ 437.926810][T11161] netlink: 52 bytes leftover after parsing attributes in process `syz.5.1447'. [ 437.957582][ T5870] usb 6-1: USB disconnect, device number 24 [ 438.089860][T10929] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 438.254375][T10929] usb 3-1: config 0 has more interface descriptors, than it declares in bNumInterfaces, ignoring interface number: 255 [ 438.281151][T10929] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 438.289032][T11193] dccp_close: ABORT with 1 bytes unread [ 438.307814][T10929] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 438.326608][T10929] usb 3-1: New USB device found, idVendor=1908, idProduct=1315, bcdDevice= 0.00 [ 438.345450][T10929] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 438.382204][T10929] usb 3-1: config 0 descriptor?? [ 438.388858][T10929] usb-storage 3-1:0.0: USB Mass Storage device detected [ 438.421748][T10929] usb-storage 3-1:0.0: Quirks match for vid 1908 pid 1315: 20000 [ 438.592991][T10929] usb 3-1: USB disconnect, device number 20 [ 439.749248][ T5870] usb 6-1: new high-speed USB device number 25 using dummy_hcd [ 439.961439][ T5869] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 440.163043][ T5869] usb 2-1: config 0 has an invalid interface number: 4 but max is 0 [ 440.175059][ T5869] usb 2-1: config 0 has no interface number 0 [ 440.312439][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.318978][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.347816][ T5869] usb 2-1: New USB device found, idVendor=05c6, idProduct=9035, bcdDevice=26.4c [ 440.398255][ T5869] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 440.427346][ T5869] usb 2-1: Product: syz [ 440.439414][ T5869] usb 2-1: Manufacturer: syz [ 440.449936][ T5869] usb 2-1: SerialNumber: syz [ 440.485884][ T5869] usb 2-1: config 0 descriptor?? [ 440.530027][T11235] netlink: 'syz.4.1472': attribute type 2 has an invalid length. [ 440.551101][ T5870] usb 6-1: Using ep0 maxpacket: 32 [ 440.561723][ T5870] usb 6-1: config 1 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 440.591188][ T5870] usb 6-1: config 1 interface 0 has no altsetting 0 [ 440.599888][ T5870] usb 6-1: New USB device found, idVendor=2505, idProduct=0220, bcdDevice= 0.40 [ 440.609383][ T5870] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 440.623720][ T5870] usb 6-1: Product: 梡죠롢折ஏ뺲蘹ⱼ桺ꚫ糜銍渑疩㖫㿠硄磻螓胖얠ﭢ쾇ⵇ [ 440.658108][ T5870] usb 6-1: Manufacturer: ꦵﴆ纯刑퐦勗靠튢㴁芁怚瘨抖凜喚壾ﾵ䩲謜홣艏䦽邾⣟핟瘃嫆 [ 440.675792][ T5870] usb 6-1: SerialNumber: syz [ 440.701085][ T5900] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 440.750630][ T5869] usb 2-1: USB disconnect, device number 34 [ 440.871347][ T5900] usb 3-1: Using ep0 maxpacket: 32 [ 440.896589][ T5900] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 36 [ 440.949693][ T5900] usb 3-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c [ 440.975983][ T5900] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 441.009558][ T5900] usb 3-1: Product: syz [ 441.023667][ T5900] usb 3-1: Manufacturer: syz [ 441.028535][ T5900] usb 3-1: SerialNumber: syz [ 441.049771][ T5900] usb 3-1: config 0 descriptor?? [ 441.056419][T11232] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 441.066987][ T5900] hub 3-1:0.0: bad descriptor, ignoring hub [ 441.775168][ T5900] hub 3-1:0.0: probe with driver hub failed with error -5 [ 441.789091][ T5900] input: syz syz as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input29 [ 441.829517][ T5900] usb 3-1: USB disconnect, device number 21 [ 441.835549][ C1] usbtouchscreen 3-1:0.0: usbtouch_irq - usb_submit_urb failed with result: -19 [ 441.947993][ T5870] usbhid 6-1:1.0: can't add hid device: -71 [ 441.960440][ T5870] usbhid 6-1:1.0: probe with driver usbhid failed with error -71 [ 442.018574][ T5870] usb 6-1: USB disconnect, device number 25 [ 442.043108][T11258] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1481'. [ 443.593992][T11281] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci5/hci5:200/input30 [ 444.392787][T11295] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1490'. [ 445.993615][T11310] IPv6: sit2: Disabled Multicast RS [ 446.041178][ T5870] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 447.261027][ T5870] usb 2-1: Using ep0 maxpacket: 16 [ 447.276213][T11315] vivid-000: disconnect [ 447.298091][T11315] vivid-000: reconnect [ 447.476439][ T5870] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 447.494465][ T5870] usb 2-1: can't read configurations, error -71 [ 447.647558][T11323] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(7) [ 447.654142][T11323] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 447.722749][T11323] vhci_hcd vhci_hcd.0: Device attached [ 447.748506][T11329] vhci_hcd: connection closed [ 447.772228][ T12] vhci_hcd: stop threads [ 447.781414][ T12] vhci_hcd: release socket [ 447.785863][ T12] vhci_hcd: disconnect device [ 448.806482][ T9] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 449.568966][T11348] gretap1: entered allmulticast mode [ 449.584076][T11348] bridge0: port 2(gretap1) entered blocking state [ 449.590612][T11348] bridge0: port 2(gretap1) entered disabled state [ 449.602839][T11348] gretap1: entered promiscuous mode [ 449.608739][T11348] bridge0: port 2(gretap1) entered blocking state [ 449.617353][T11348] bridge0: port 2(gretap1) entered forwarding state [ 449.639703][T11353] bridge_slave_0: left allmulticast mode [ 449.650207][T11353] bridge_slave_0: left promiscuous mode [ 449.673537][T11353] bridge0: port 1(bridge_slave_0) entered disabled state [ 449.695830][ T9] usb 5-1: Using ep0 maxpacket: 16 [ 449.826153][T11354] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 449.893922][T11353] bridge_slave_1: left allmulticast mode [ 449.899757][T11353] bridge_slave_1: left promiscuous mode [ 449.909317][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 449.919512][T11353] bridge1: port 1(bridge_slave_1) entered disabled state [ 449.920500][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 450.626558][ T9] usb 5-1: New USB device found, idVendor=05ac, idProduct=8241, bcdDevice= 0.00 [ 450.636025][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 450.657342][ T9] usb 5-1: config 0 descriptor?? [ 450.685368][ T9] usbhid 5-1:0.0: can't add hid device: -71 [ 450.692296][ T9] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 450.692723][T11353] bond0: (slave bond_slave_0): Releasing backup interface [ 450.721249][ T9] usb 5-1: USB disconnect, device number 23 [ 450.756373][T11353] bond0: (slave bond_slave_1): Releasing backup interface [ 450.779394][T11353] vxlan0: left allmulticast mode [ 450.785335][T11353] vxlan0: left promiscuous mode [ 450.790407][T11353] bridge0: port 3(vxlan0) entered disabled state [ 450.813902][T11353] macvlan2: left allmulticast mode [ 450.819245][T11353] macvlan2: left promiscuous mode [ 450.824855][T11353] bridge1: port 2(macvlan2) entered disabled state [ 450.839514][T11353] gretap1: left promiscuous mode [ 450.849768][T11353] bridge0: port 2(gretap1) entered disabled state [ 450.924960][T11367] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1514'. [ 451.232799][ T9] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 451.771855][T11376] dvmrp1: entered allmulticast mode [ 451.786936][T11380] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1519'. [ 451.810474][T11380] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1519'. [ 451.871998][T11380] (unnamed net_device) (uninitialized): Removing last arp target with arp_interval on [ 451.969069][T11385] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1520'. [ 452.289651][T11380] bond1: entered allmulticast mode [ 452.300365][T11380] 8021q: adding VLAN 0 to HW filter on device bond1 [ 452.658649][T11389] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1521'. [ 452.672017][ T9] usb 5-1: New USB device found, idVendor=8086, idProduct=0110, bcdDevice=bf.ad [ 452.687217][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 452.708173][ T9] usb 5-1: config 0 descriptor?? [ 452.719734][ T9] gspca_main: spca508-2.14.0 probing 8086:0110 [ 452.849375][T11395] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 453.048428][T11398] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1522'. [ 453.141584][ T5900] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 453.306332][ T9] gspca_spca508: reg_read err -32 [ 453.341519][ T5900] usb 7-1: Using ep0 maxpacket: 8 [ 453.372443][ T5900] usb 7-1: config 7 has an invalid interface number: 108 but max is 0 [ 453.447137][T11402] x_tables: ip_tables: REDIRECT target: used from hooks INPUT, but only usable from PREROUTING/OUTPUT [ 453.555876][ T9] gspca_spca508: reg_read err -71 [ 453.569645][ T9] gspca_spca508: reg_read err -71 [ 453.577881][ T9] gspca_spca508: reg_read err -71 [ 453.626034][ T9] gspca_spca508: reg write: error -71 [ 453.767617][ T9] spca508 5-1:0.0: probe with driver spca508 failed with error -71 [ 453.782154][T11403] xt_connbytes: Forcing CT accounting to be enabled [ 453.791117][ T5900] usb 7-1: config 7 has no interface number 0 [ 453.797494][ T5900] usb 7-1: config 7 interface 108 altsetting 5 endpoint 0x4 has invalid maxpacket 1023, setting to 64 [ 453.808786][ T5900] usb 7-1: config 7 interface 108 altsetting 5 endpoint 0x7 has invalid maxpacket 512, setting to 64 [ 453.819901][ T5900] usb 7-1: config 7 interface 108 altsetting 5 has a duplicate endpoint with address 0x6, skipping [ 453.830733][ T5900] usb 7-1: config 7 interface 108 altsetting 5 endpoint 0xE has invalid maxpacket 1023, setting to 64 [ 453.841877][ T5900] usb 7-1: config 7 interface 108 altsetting 5 endpoint 0x8 has invalid maxpacket 1023, setting to 64 [ 453.852956][ T5900] usb 7-1: config 7 interface 108 has no altsetting 0 [ 453.871570][T11403] xt_bpf: check failed: parse error [ 453.992568][ T5900] usb 7-1: New USB device found, idVendor=2040, idProduct=5530, bcdDevice=ed.82 [ 453.994645][ T9] usb 5-1: USB disconnect, device number 24 [ 454.040597][ T5900] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 454.077208][ T5900] usb 7-1: Product: syz [ 454.094758][ T5900] usb 7-1: Manufacturer: syz [ 454.121005][ T5900] usb 7-1: SerialNumber: syz [ 454.714919][ T5900] smsusb:smsusb_probe: board id=8, interface number 108 [ 455.497556][ T5900] usb 7-1: USB disconnect, device number 7 [ 455.637347][T11430] netlink: 'syz.2.1532': attribute type 4 has an invalid length. [ 455.916913][T11438] netlink: 14 bytes leftover after parsing attributes in process `syz.5.1536'. [ 456.518239][T11458] netlink: 136 bytes leftover after parsing attributes in process `syz.1.1542'. [ 456.754376][T11458] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check. [ 457.531287][T11455] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 461.488820][T11518] do_dccp_setsockopt: sockopt(PACKET_SIZE) is deprecated: fix your app [ 462.372915][T11524] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1564'. [ 462.399851][T11524] smc: net device bond0 applied user defined pnetid SYZ [ 462.711116][ T9] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 462.871102][ T9] usb 7-1: Using ep0 maxpacket: 32 [ 462.878849][ T9] usb 7-1: config 0 has an invalid interface number: 247 but max is 0 [ 462.887643][ T9] usb 7-1: config 0 has no interface number 0 [ 462.893833][ T9] usb 7-1: config 0 interface 247 altsetting 0 endpoint 0xB has invalid maxpacket 512, setting to 64 [ 462.916990][ T9] usb 7-1: config 0 interface 247 altsetting 0 endpoint 0xE has invalid maxpacket 1023, setting to 64 [ 462.948326][ T9] usb 7-1: New USB device found, idVendor=16c0, idProduct=05df, bcdDevice=34.05 [ 462.964528][ T9] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 462.982878][ T9] usb 7-1: Product: syz [ 462.995307][ T9] usb 7-1: Manufacturer: syz [ 463.014087][ T9] usb 7-1: SerialNumber: syz [ 463.039639][ T9] usb 7-1: config 0 descriptor?? [ 463.058451][ T9] usbhid 7-1:0.247: couldn't find an input interrupt endpoint [ 463.259669][ T9] usb 7-1: USB disconnect, device number 8 [ 463.615452][T11544] 9pnet_fd: Insufficient options for proto=fd [ 464.778471][T11568] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1579'. [ 464.813668][T11566] netlink: 'syz.5.1577': attribute type 2 has an invalid length. [ 464.868818][T11568] hsr0: entered promiscuous mode [ 466.506121][T11580] wireguard0: entered promiscuous mode [ 466.572435][T11580] wireguard0: entered allmulticast mode [ 466.842452][T11593] xt_NFQUEUE: number of total queues is 0 [ 467.336480][T11598] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(7) [ 467.343065][T11598] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 467.393231][T11601] vlan2: entered promiscuous mode [ 467.402098][T11598] vhci_hcd vhci_hcd.0: Device attached [ 467.412776][T11601] team0: entered promiscuous mode [ 467.418007][T11601] vlan2: entered allmulticast mode [ 467.455820][T11601] team0: entered allmulticast mode [ 467.579320][T11604] IPv6: sit1: Disabled Multicast RS [ 467.581079][ T9] vhci_hcd: vhci_device speed not set [ 467.670554][ T9] usb 45-1: new full-speed USB device number 2 using vhci_hcd [ 467.716588][T11602] vhci_hcd: connection reset by peer [ 467.724670][ T12] vhci_hcd: stop threads [ 467.728992][ T12] vhci_hcd: release socket [ 467.740548][ T12] vhci_hcd: disconnect device [ 467.916812][T11613] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1590'. [ 467.936650][T11615] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1592'. [ 467.939982][T11613] netlink: 'syz.5.1590': attribute type 25 has an invalid length. [ 467.967380][T11613] netlink: 'syz.5.1590': attribute type 15 has an invalid length. [ 468.431721][T11626] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 468.439293][T11626] UDF-fs: Scanning with blocksize 512 failed [ 468.448161][T11626] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 468.455766][T11626] UDF-fs: Scanning with blocksize 1024 failed [ 468.465317][T11626] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 468.507844][T11626] UDF-fs: Scanning with blocksize 2048 failed [ 468.515346][T11626] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 468.523161][T11626] UDF-fs: Scanning with blocksize 4096 failed [ 468.549630][T11626] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1593'. [ 470.081172][T10929] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 470.292562][T10929] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 470.303772][T10929] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 470.322977][T10929] usb 3-1: config 0 descriptor?? [ 470.667127][T10929] cp210x 3-1:0.0: cp210x converter detected [ 470.981373][T10929] cp210x 3-1:0.0: failed to get vendor val 0x0010 size 3: -32 [ 471.046868][T10929] usb 3-1: cp210x converter now attached to ttyUSB0 [ 471.241710][T11652] binder: 11651:11652 ioctl c0306201 20000680 returned -14 [ 471.519551][T11660] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1605'. [ 471.588103][T11661] x_tables: eb_tables: AUDIT.0 target: invalid size 8 (kernel) != (user) 0 [ 471.916182][T11676] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1612'. [ 472.096384][T11686] netlink: 'syz.6.1618': attribute type 10 has an invalid length. [ 472.439457][ T5900] usb 3-1: USB disconnect, device number 22 [ 472.648014][ T5900] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 472.750083][ T5900] cp210x 3-1:0.0: device disconnected [ 472.821021][ T9] vhci_hcd: vhci_device speed not set [ 473.819369][T11704] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1627'. [ 473.831107][T11704] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1627'. [ 476.945597][T11718] veth3: entered promiscuous mode [ 478.607614][T11778] netlink: 40 bytes leftover after parsing attributes in process `syz.5.1644'. [ 480.334967][T11786] block nbd6: NBD_DISCONNECT [ 480.437766][T11786] block nbd6: Send disconnect failed -107 [ 480.565585][T11786] block nbd6: Disconnected due to user request. [ 480.575287][T11786] block nbd6: shutting down sockets [ 480.671926][T11798] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1651'. [ 480.747305][T11796] netlink: 188 bytes leftover after parsing attributes in process `syz.5.1651'. [ 480.761090][T11796] netlink: 'syz.5.1651': attribute type 1 has an invalid length. [ 481.563343][T11825] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1656'. [ 481.572369][T11825] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1656'. [ 481.586816][T11825] vxlan0: entered allmulticast mode [ 482.533812][T11840] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1663'. [ 482.742900][T11846] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1665'. [ 482.757226][T11846] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1665'. [ 482.849070][T11853] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1668'. [ 483.741176][T11863] netlink: 'syz.5.1670': attribute type 2 has an invalid length. [ 483.926557][T11863] devpts: called with bogus options [ 484.071169][ T9] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 484.091085][T11878] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 484.231109][ T9] usb 5-1: Using ep0 maxpacket: 32 [ 484.238238][ T9] usb 5-1: config index 0 descriptor too short (expected 29220, got 36) [ 484.247351][ T9] usb 5-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 484.258740][ T9] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 484.278108][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 484.300028][ T9] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 484.320141][ T9] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 484.347634][ T9] usb 5-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 484.367386][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 484.389569][ T9] usb 5-1: config 0 descriptor?? [ 484.791766][T11884] 9pnet_fd: Insufficient options for proto=fd [ 484.873014][ T9] usblp 5-1:0.0: usblp0: USB Bidirectional printer dev 25 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 484.886251][ T9] usb 5-1: USB disconnect, device number 25 [ 485.422505][ T9] usblp0: removed [ 485.641481][T11899] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 486.221975][T11912] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1680'. [ 489.928029][T11932] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1692'. [ 492.841826][ T29] audit: type=1326 audit(1733345521.705:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11966 comm="syz.4.1702" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff42497ff19 code=0x7ffc0000 [ 492.892235][T11968] syz.4.1702 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 492.998423][ T29] audit: type=1326 audit(1733345521.705:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11966 comm="syz.4.1702" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff42497ff19 code=0x7ffc0000 [ 493.019907][ C1] vkms_vblank_simulate: vblank timer overrun [ 493.565687][T11972] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 494.135158][ T29] audit: type=1326 audit(1733345521.765:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11966 comm="syz.4.1702" exe="/root/syz-executor" sig=0 arch=c000003e syscall=38 compat=0 ip=0x7ff42497ff19 code=0x7ffc0000 [ 494.211418][ T5900] usb 5-1: new full-speed USB device number 26 using dummy_hcd [ 494.425962][ T5900] usb 5-1: config 0 has an invalid interface number: 39 but max is 0 [ 494.472633][ T5900] usb 5-1: config 0 has no interface number 0 [ 494.516856][ T29] audit: type=1326 audit(1733345521.925:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11966 comm="syz.4.1702" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff42497ff19 code=0x7ffc0000 [ 494.598281][ T5900] usb 5-1: config 0 interface 39 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 494.745773][ T5900] usb 5-1: New USB device found, idVendor=0499, idProduct=4d3f, bcdDevice=d2.2a [ 494.851946][ T5900] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 494.873410][ T29] audit: type=1326 audit(1733345521.965:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11966 comm="syz.4.1702" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff42497ff19 code=0x7ffc0000 [ 494.991549][ T5900] usb 5-1: Product: syz [ 495.416371][T11980] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1704'. [ 495.429761][ T5900] usb 5-1: Manufacturer: syz [ 495.434809][ T5900] usb 5-1: SerialNumber: syz [ 495.516512][ T5900] usb 5-1: config 0 descriptor?? [ 496.384577][T11988] netlink: 'syz.1.1706': attribute type 2 has an invalid length. [ 496.526591][T11990] devpts: called with bogus options [ 496.572232][ T5900] usb 5-1: USB disconnect, device number 26 [ 496.643514][T11992] IPVS: sync thread started: state = BACKUP, mcast_ifn = team_slave_1, syncid = 2, id = 0 [ 496.849224][ T5829] udevd[5829]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.39/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 499.307278][T12025] netlink: 'syz.1.1715': attribute type 10 has an invalid length. [ 499.316085][ T9] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 499.534956][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 499.569941][ T9] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 499.611093][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 499.660290][ T9] usb 5-1: Product: syz [ 499.692573][ T9] usb 5-1: Manufacturer: syz [ 499.697307][ T9] usb 5-1: SerialNumber: syz [ 499.766212][ T9] usb 5-1: config 0 descriptor?? [ 500.021785][T12030] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1716'. [ 500.661623][ T9] usb 5-1: USB disconnect, device number 27 [ 501.173909][ T6385] udevd[6385]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 501.176424][T12037] ip6t_srh: unknown srh invflags 7D00 [ 501.252347][T12036] @: renamed from vlan0 (while UP) [ 501.565193][T12042] FAULT_INJECTION: forcing a failure. [ 501.565193][T12042] name failslab, interval 1, probability 0, space 0, times 0 [ 501.581525][ T5900] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 501.724624][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.731765][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.748426][T12042] CPU: 0 UID: 0 PID: 12042 Comm: syz.6.1721 Not tainted 6.13.0-rc1-syzkaller-00025-gfeffde684ac2 #0 [ 501.759249][T12042] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 501.769345][T12042] Call Trace: [ 501.772652][T12042] [ 501.775609][T12042] dump_stack_lvl+0x241/0x360 [ 501.780331][T12042] ? __pfx_dump_stack_lvl+0x10/0x10 [ 501.785579][T12042] ? __wake_up_klogd+0xcc/0x110 [ 501.790471][T12042] should_fail_ex+0x3b0/0x4e0 [ 501.795178][T12042] should_failslab+0xac/0x100 [ 501.799886][T12042] __kmalloc_cache_noprof+0x70/0x390 [ 501.805222][T12042] ? nft_trans_table_add+0x57/0x400 [ 501.810435][T12042] nft_trans_table_add+0x57/0x400 [ 501.815460][T12042] nf_tables_newtable+0x1172/0x1e40 [ 501.820667][T12042] ? __pfx_nf_tables_newtable+0x10/0x10 [ 501.826220][T12042] ? __nla_parse+0x40/0x60 [ 501.830642][T12042] nfnetlink_rcv+0x14e3/0x2ab0 [ 501.835430][T12042] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 501.840572][T12042] ? netlink_deliver_tap+0x2e/0x1b0 [ 501.845768][T12042] ? skb_clone+0x240/0x390 [ 501.850185][T12042] ? __pfx_lock_release+0x10/0x10 [ 501.855225][T12042] ? netlink_deliver_tap+0x2e/0x1b0 [ 501.860422][T12042] netlink_unicast+0x7f6/0x990 [ 501.865200][T12042] ? __pfx_netlink_unicast+0x10/0x10 [ 501.870486][T12042] ? __virt_addr_valid+0x183/0x530 [ 501.875601][T12042] ? __check_object_size+0x48e/0x900 [ 501.880888][T12042] netlink_sendmsg+0x8e4/0xcb0 [ 501.885654][T12042] ? __pfx_netlink_sendmsg+0x10/0x10 [ 501.890946][T12042] ? __pfx_netlink_sendmsg+0x10/0x10 [ 501.896224][T12042] __sock_sendmsg+0x221/0x270 [ 501.900913][T12042] ____sys_sendmsg+0x52a/0x7e0 [ 501.905694][T12042] ? __pfx_____sys_sendmsg+0x10/0x10 [ 501.910982][T12042] ? __fget_files+0x2a/0x410 [ 501.915573][T12042] ? __fget_files+0x2a/0x410 [ 501.920164][T12042] __sys_sendmsg+0x269/0x350 [ 501.924755][T12042] ? __pfx___sys_sendmsg+0x10/0x10 [ 501.929893][T12042] ? __pfx_sched_clock_cpu+0x10/0x10 [ 501.935180][T12042] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 501.941090][T12042] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 501.947414][T12042] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 501.953737][T12042] ? __irq_exit_rcu+0x105/0x220 [ 501.958603][T12042] ? do_syscall_64+0xb6/0x230 [ 501.963301][T12042] do_syscall_64+0xf3/0x230 [ 501.967803][T12042] ? clear_bhb_loop+0x35/0x90 [ 501.972488][T12042] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 501.978387][T12042] RIP: 0033:0x7f0213b7ff19 [ 501.982804][T12042] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 502.002413][T12042] RSP: 002b:00007f0214957058 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 502.010833][T12042] RAX: ffffffffffffffda RBX: 00007f0213d45fa0 RCX: 00007f0213b7ff19 [ 502.018808][T12042] RDX: 0000000000000000 RSI: 00000000200000c0 RDI: 0000000000000003 [ 502.026773][T12042] RBP: 00007f02149570a0 R08: 0000000000000000 R09: 0000000000000000 [ 502.034738][T12042] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 502.042710][T12042] R13: 0000000000000000 R14: 00007f0213d45fa0 R15: 00007ffda8979778 [ 502.050689][T12042] [ 502.518684][ T5900] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 502.530766][ T5900] usb 2-1: config 1 interface 1 altsetting 1 has an endpoint descriptor with address 0xFD, changing to 0x8D [ 502.542494][ T5900] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 503.111641][ T5900] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 503.120818][ T5900] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 503.129027][ T5900] usb 2-1: Product: syz [ 503.133362][ T5900] usb 2-1: Manufacturer: syz [ 503.138069][ T5900] usb 2-1: SerialNumber: syz [ 503.210019][T12054] netlink: 'syz.5.1725': attribute type 2 has an invalid length. [ 503.212844][T12044] dccp_close: ABORT with 1 bytes unread [ 503.398976][T12054] devpts: called with bogus options [ 503.610575][ T5821] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 503.627953][ T5821] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 503.646755][ T5821] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 503.671960][ T5821] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 503.693803][ T5821] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 503.719827][ T5821] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 503.896294][T12055] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 503.922856][T12061] lo speed is unknown, defaulting to 1000 [ 504.388119][T12072] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1728'. [ 505.496720][T12061] chnl_net:caif_netlink_parms(): no params data found [ 505.804468][ T5821] Bluetooth: hci6: command tx timeout [ 507.931456][ T5821] Bluetooth: hci6: command tx timeout [ 520.950957][ T5821] Bluetooth: hci6: command tx timeout [ 526.192973][ T5900] cdc_ncm 2-1:1.0: bind() failure [ 526.234595][ T5821] Bluetooth: hci6: command tx timeout [ 526.297279][ T5900] cdc_ncm 2-1:1.1: probe with driver cdc_ncm failed with error -32 [ 526.352373][ T5900] cdc_mbim 2-1:1.1: probe with driver cdc_mbim failed with error -32 [ 526.370534][ T5900] usbtest 2-1:1.1: probe with driver usbtest failed with error -32 [ 527.511124][ T5900] usb 2-1: USB disconnect, device number 37 [ 531.849155][ T5821] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 531.889413][ T5821] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 531.909501][ T5821] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 531.918361][T12061] bridge0: port 1(bridge_slave_0) entered blocking state [ 531.927393][T12061] bridge0: port 1(bridge_slave_0) entered disabled state [ 531.992146][ T5821] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 532.043750][ T5821] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 532.062843][T12061] bridge_slave_0: entered allmulticast mode [ 532.071598][ T5821] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 532.151543][T12061] bridge_slave_0: entered promiscuous mode [ 532.256712][T12061] bridge0: port 2(bridge_slave_1) entered blocking state [ 532.352515][T12061] bridge0: port 2(bridge_slave_1) entered disabled state [ 532.363619][T12061] bridge_slave_1: entered allmulticast mode [ 532.388791][T12061] bridge_slave_1: entered promiscuous mode [ 533.299023][T12061] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 533.377876][ T5821] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 533.399359][T12061] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 533.420724][ T5821] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 533.501521][ T5821] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 533.532899][T12089] lo speed is unknown, defaulting to 1000 [ 533.636896][ T5821] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 533.647504][ T5821] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 533.656665][ T5821] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 534.070954][ T5821] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 534.105096][T12098] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 534.124031][T12100] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 534.135164][T12100] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 534.142156][T12101] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 534.151348][T12100] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 534.157231][T12101] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 534.160494][T12100] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 534.166205][T12101] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 534.174518][T12100] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 534.188860][T12100] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 534.200396][ T5837] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 534.211443][T12098] Bluetooth: hci7: command tx timeout [ 534.677063][ T75] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 534.688143][ T75] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 19968 - 0 [ 534.917367][T12061] team0: Port device team_slave_0 added [ 534.976345][ T75] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 534.997652][ T75] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 19968 - 0 [ 535.056353][T12061] team0: Port device team_slave_1 added [ 535.079213][T12096] lo speed is unknown, defaulting to 1000 [ 535.177993][ T75] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 535.188664][ T75] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 19968 - 0 [ 535.222421][T12093] lo speed is unknown, defaulting to 1000 [ 535.309330][T12095] lo speed is unknown, defaulting to 1000 [ 535.376973][ T75] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 535.387914][ T75] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 19968 - 0 [ 535.426295][T12061] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 535.433851][T12061] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 535.460381][T12061] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 535.481279][T12061] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 535.488606][T12061] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 535.514858][T12061] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 536.065611][T12061] hsr_slave_0: entered promiscuous mode [ 536.073219][T12061] hsr_slave_1: entered promiscuous mode [ 536.083194][T12061] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 536.093343][T12061] Cannot create hsr debugfs directory [ 536.121242][ T5837] Bluetooth: hci3: command tx timeout [ 536.214494][T12089] chnl_net:caif_netlink_parms(): no params data found [ 536.291072][ T5837] Bluetooth: hci7: command tx timeout [ 536.296703][ T5837] Bluetooth: hci0: command tx timeout [ 536.361063][ T5837] Bluetooth: hci5: command tx timeout [ 537.274638][ T75] bridge_slave_1: left allmulticast mode [ 537.280429][ T75] bridge_slave_1: left promiscuous mode [ 537.331736][ T75] bridge0: port 2(bridge_slave_1) entered disabled state [ 537.358961][ T75] bridge_slave_0: left allmulticast mode [ 537.371324][ T75] bridge_slave_0: left promiscuous mode [ 537.402383][ T75] bridge0: port 1(bridge_slave_0) entered disabled state [ 538.205752][ T5837] Bluetooth: hci3: command tx timeout [ 538.365232][ T5821] Bluetooth: hci7: command tx timeout [ 538.371178][ T5837] Bluetooth: hci0: command tx timeout [ 538.441328][ T5837] Bluetooth: hci5: command tx timeout [ 538.700453][ T75] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 538.717471][ T75] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 538.729769][ T75] bond0 (unregistering): Released all slaves [ 539.008417][ T75] tipc: Left network mode [ 539.055313][T12089] bridge0: port 1(bridge_slave_0) entered blocking state [ 539.064866][T12089] bridge0: port 1(bridge_slave_0) entered disabled state [ 539.072372][T12089] bridge_slave_0: entered allmulticast mode [ 539.082656][T12089] bridge_slave_0: entered promiscuous mode [ 539.091881][T12089] bridge0: port 2(bridge_slave_1) entered blocking state [ 539.092472][ T75] IPVS: stopping backup sync thread 11992 ... [ 539.099000][T12089] bridge0: port 2(bridge_slave_1) entered disabled state [ 539.114036][T12089] bridge_slave_1: entered allmulticast mode [ 539.124589][T12089] bridge_slave_1: entered promiscuous mode [ 539.609217][T12096] chnl_net:caif_netlink_parms(): no params data found [ 539.704329][T12089] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 539.742321][T12089] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 540.248025][T12093] chnl_net:caif_netlink_parms(): no params data found [ 540.279368][T12089] team0: Port device team_slave_0 added [ 540.285493][ T5837] Bluetooth: hci3: command tx timeout [ 540.310088][T12095] chnl_net:caif_netlink_parms(): no params data found [ 540.435687][T12089] team0: Port device team_slave_1 added [ 540.441605][ T5837] Bluetooth: hci0: command tx timeout [ 540.442484][ T5837] Bluetooth: hci7: command tx timeout [ 540.521049][ T5837] Bluetooth: hci5: command tx timeout [ 540.588332][ T75] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 540.632437][ T75] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 540.659791][ T75] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 540.691179][ T75] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 540.796139][ T75] veth1_macvtap: left promiscuous mode [ 540.823075][ T75] veth0_macvtap: left promiscuous mode [ 540.829011][ T75] veth1_vlan: left promiscuous mode [ 540.861588][ T75] veth0_vlan: left promiscuous mode [ 542.361348][ T5837] Bluetooth: hci3: command tx timeout [ 542.449310][ T75] team0 (unregistering): Port device team_slave_1 removed [ 542.521660][ T5837] Bluetooth: hci0: command tx timeout [ 542.521734][ T75] team0 (unregistering): Port device team_slave_0 removed [ 542.600993][ T5837] Bluetooth: hci5: command tx timeout [ 544.098588][T12089] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 544.131035][T12089] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 544.157591][T12089] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 544.176047][T12089] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 544.183571][T12089] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 544.210144][T12089] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 544.438093][T12096] bridge0: port 1(bridge_slave_0) entered blocking state [ 544.446057][T12096] bridge0: port 1(bridge_slave_0) entered disabled state [ 544.454382][T12096] bridge_slave_0: entered allmulticast mode [ 544.501952][T12096] bridge_slave_0: entered promiscuous mode [ 544.588792][T12061] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 544.675899][T12089] hsr_slave_0: entered promiscuous mode [ 544.757698][T12089] hsr_slave_1: entered promiscuous mode [ 544.770292][T12089] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 544.778420][T12089] Cannot create hsr debugfs directory [ 544.786997][T12096] bridge0: port 2(bridge_slave_1) entered blocking state [ 544.794819][T12096] bridge0: port 2(bridge_slave_1) entered disabled state [ 544.802429][T12096] bridge_slave_1: entered allmulticast mode [ 544.810561][T12096] bridge_slave_1: entered promiscuous mode [ 544.940505][T12061] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 544.976290][T12061] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 545.190947][T12093] bridge0: port 1(bridge_slave_0) entered blocking state [ 545.198399][T12093] bridge0: port 1(bridge_slave_0) entered disabled state [ 545.211345][T12093] bridge_slave_0: entered allmulticast mode [ 545.226862][T12093] bridge_slave_0: entered promiscuous mode [ 545.237131][T12061] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 545.335712][T12096] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 545.380233][T12093] bridge0: port 2(bridge_slave_1) entered blocking state [ 545.391848][T12093] bridge0: port 2(bridge_slave_1) entered disabled state [ 545.399404][T12093] bridge_slave_1: entered allmulticast mode [ 545.412013][T12093] bridge_slave_1: entered promiscuous mode [ 545.449932][ T75] IPVS: stop unused estimator thread 0... [ 545.545463][T12096] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 545.581644][T12095] bridge0: port 1(bridge_slave_0) entered blocking state [ 545.588975][T12095] bridge0: port 1(bridge_slave_0) entered disabled state [ 545.597763][T12095] bridge_slave_0: entered allmulticast mode [ 545.605706][T12095] bridge_slave_0: entered promiscuous mode [ 545.847492][T12095] bridge0: port 2(bridge_slave_1) entered blocking state [ 545.881375][T12095] bridge0: port 2(bridge_slave_1) entered disabled state [ 545.888913][T12095] bridge_slave_1: entered allmulticast mode [ 545.899174][T12095] bridge_slave_1: entered promiscuous mode [ 545.973254][T12093] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 546.023056][T12093] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 546.108628][T12096] team0: Port device team_slave_0 added [ 546.143594][T12096] team0: Port device team_slave_1 added [ 546.775024][T12093] team0: Port device team_slave_0 added [ 546.813789][T12096] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 546.855371][T12096] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 546.887929][T12096] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 546.939008][T12095] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 547.020530][T12093] team0: Port device team_slave_1 added [ 547.073129][T12096] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 547.080321][T12096] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 547.111041][T12096] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 547.182711][T12095] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 547.559838][ T75] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 62946 - 0 [ 547.571887][ T75] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 547.924894][ T75] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 62946 - 0 [ 547.935670][ T75] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 547.961355][T12093] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 547.968451][T12093] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 547.995204][T12093] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 548.062970][T12095] team0: Port device team_slave_0 added [ 548.136903][T12096] hsr_slave_0: entered promiscuous mode [ 548.145916][T12096] hsr_slave_1: entered promiscuous mode [ 548.156868][T12096] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 548.169167][T12096] Cannot create hsr debugfs directory [ 548.216670][ T75] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 62946 - 0 [ 548.227820][ T75] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 548.249399][T12093] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 548.257141][T12093] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 548.284499][T12093] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 548.307861][T12095] team0: Port device team_slave_1 added [ 548.611302][ T75] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 62946 - 0 [ 548.654427][ T75] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 548.788719][T12089] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 548.853495][T12095] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 548.860549][T12095] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 548.905901][T12095] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 548.919048][T12089] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 549.089424][T12095] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 549.098669][T12095] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 549.129255][T12095] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 549.143554][T12089] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 549.232438][T12093] hsr_slave_0: entered promiscuous mode [ 549.253567][T12093] hsr_slave_1: entered promiscuous mode [ 549.262042][T12093] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 549.269690][T12093] Cannot create hsr debugfs directory [ 549.349709][T12089] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 550.118935][T12095] hsr_slave_0: entered promiscuous mode [ 550.143915][T12095] hsr_slave_1: entered promiscuous mode [ 550.172429][T12095] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 550.180141][T12095] Cannot create hsr debugfs directory [ 550.257682][T12061] 8021q: adding VLAN 0 to HW filter on device bond0 [ 550.468108][ T75] erspan0: left allmulticast mode [ 550.491082][ T75] erspan0: left promiscuous mode [ 550.496443][ T75] bridge0: port 4(erspan0) entered disabled state [ 550.551821][ T75] vxlan0: left allmulticast mode [ 550.556992][ T75] vxlan0: left promiscuous mode [ 550.573235][ T75] bridge0: port 3(vxlan0) entered disabled state [ 550.585080][ T75] bridge_slave_1: left allmulticast mode [ 550.605758][ T75] bridge_slave_1: left promiscuous mode [ 550.612612][ T75] bridge0: port 2(bridge_slave_1) entered disabled state [ 550.628247][ T75] bridge_slave_0: left allmulticast mode [ 550.634533][ T75] bridge_slave_0: left promiscuous mode [ 550.640662][ T75] bridge0: port 1(bridge_slave_0) entered disabled state [ 551.692696][ T75] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 551.749140][ T75] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 551.780468][ T75] bond0 (unregistering): Released all slaves [ 551.972466][ T75] bond1 (unregistering): Released all slaves [ 552.000461][ T75] bond2 (unregistering): Released all slaves [ 552.428410][T12061] 8021q: adding VLAN 0 to HW filter on device team0 [ 552.811929][ T7656] bridge0: port 1(bridge_slave_0) entered blocking state [ 552.819023][ T7656] bridge0: port 1(bridge_slave_0) entered forwarding state [ 553.430874][T11983] bridge0: port 2(bridge_slave_1) entered blocking state [ 553.437993][T11983] bridge0: port 2(bridge_slave_1) entered forwarding state [ 553.736507][ T75] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 553.744650][ T75] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 553.757410][ T75] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 553.765475][ T75] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 553.806069][ T75] veth1_macvtap: left promiscuous mode [ 553.812426][ T75] veth0_macvtap: left promiscuous mode [ 553.818206][ T75] veth1_vlan: left promiscuous mode [ 553.824390][ T75] veth0_vlan: left promiscuous mode [ 554.787516][ T75] team0 (unregistering): Port device team_slave_1 removed [ 554.870543][ T75] team0 (unregistering): Port device team_slave_0 removed [ 555.852387][T10929] lo speed is unknown, defaulting to 1000 [ 556.084008][T12089] 8021q: adding VLAN 0 to HW filter on device bond0 [ 556.368412][T12089] 8021q: adding VLAN 0 to HW filter on device team0 [ 556.587292][ T1148] bridge0: port 1(bridge_slave_0) entered blocking state [ 556.594490][ T1148] bridge0: port 1(bridge_slave_0) entered forwarding state [ 556.615521][T12093] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 556.697469][T12093] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 556.755110][ T1148] bridge0: port 2(bridge_slave_1) entered blocking state [ 556.762294][ T1148] bridge0: port 2(bridge_slave_1) entered forwarding state [ 556.800419][ T75] IPVS: stop unused estimator thread 0... [ 556.827837][T12093] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 556.945180][T12093] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 557.656949][T12096] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 557.766795][T12096] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 558.374819][T12096] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 558.427708][T12096] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 558.829907][T12061] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 559.960251][T12095] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 560.091800][T12095] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 560.185231][T12095] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 560.324268][T12093] 8021q: adding VLAN 0 to HW filter on device bond0 [ 560.381902][T12095] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 560.584311][T12093] 8021q: adding VLAN 0 to HW filter on device team0 [ 560.728815][ T1146] bridge0: port 1(bridge_slave_0) entered blocking state [ 560.735960][ T1146] bridge0: port 1(bridge_slave_0) entered forwarding state [ 560.806406][T12096] 8021q: adding VLAN 0 to HW filter on device bond0 [ 560.835501][ T1146] bridge0: port 2(bridge_slave_1) entered blocking state [ 560.842902][ T1146] bridge0: port 2(bridge_slave_1) entered forwarding state [ 561.235770][T12089] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 561.409941][T12096] 8021q: adding VLAN 0 to HW filter on device team0 [ 561.458732][T12061] veth0_vlan: entered promiscuous mode [ 561.606614][T12061] veth1_vlan: entered promiscuous mode [ 561.807460][ T1003] bridge0: port 1(bridge_slave_0) entered blocking state [ 561.814653][ T1003] bridge0: port 1(bridge_slave_0) entered forwarding state [ 561.976455][ T1003] bridge0: port 2(bridge_slave_1) entered blocking state [ 561.983931][ T1003] bridge0: port 2(bridge_slave_1) entered forwarding state [ 563.165166][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.173867][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.419523][T12095] 8021q: adding VLAN 0 to HW filter on device bond0 [ 563.696018][T12095] 8021q: adding VLAN 0 to HW filter on device team0 [ 563.948837][ T5087] bridge0: port 1(bridge_slave_0) entered blocking state [ 563.956294][ T5087] bridge0: port 1(bridge_slave_0) entered forwarding state [ 564.122701][ T5087] bridge0: port 2(bridge_slave_1) entered blocking state [ 564.130072][ T5087] bridge0: port 2(bridge_slave_1) entered forwarding state [ 564.906475][T12089] veth0_vlan: entered promiscuous mode [ 565.205477][ T5821] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 565.220347][ T5821] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 565.223216][T12096] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 565.255403][ T5821] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 565.269347][ T5821] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 565.281929][ T5821] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 565.289739][ T5821] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 565.310122][T12089] veth1_vlan: entered promiscuous mode [ 565.357789][T12093] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 566.900600][ T75] bridge_slave_1: left allmulticast mode [ 566.950057][ T75] bridge_slave_1: left promiscuous mode [ 566.981505][ T75] bridge0: port 2(bridge_slave_1) entered disabled state [ 567.046166][ T75] bridge_slave_0: left allmulticast mode [ 567.071811][ T75] bridge_slave_0: left promiscuous mode [ 567.078055][ T75] bridge0: port 1(bridge_slave_0) entered disabled state [ 567.404151][ T5821] Bluetooth: hci1: command tx timeout [ 568.253272][ T75] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 568.270182][ T75] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 568.288393][ T75] bond0 (unregistering): Released all slaves [ 568.732948][ T75] hsr_slave_0: left promiscuous mode [ 568.743685][ T75] hsr_slave_1: left promiscuous mode [ 568.791129][ T75] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 568.822736][ T75] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 568.918916][ T75] veth1_vlan: left promiscuous mode [ 568.950641][ T75] veth0_vlan: left promiscuous mode [ 569.483321][ T5821] Bluetooth: hci1: command tx timeout [ 570.490007][ T75] team0 (unregistering): Port device team_slave_1 removed [ 570.546901][ T75] team0 (unregistering): Port device team_slave_0 removed [ 571.093226][T12096] veth0_vlan: entered promiscuous mode [ 571.142097][T12089] veth0_macvtap: entered promiscuous mode [ 571.189761][T12096] veth1_vlan: entered promiscuous mode [ 571.230443][T12095] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 571.275145][T12089] veth1_macvtap: entered promiscuous mode [ 571.310756][T12093] veth0_vlan: entered promiscuous mode [ 571.340749][T12096] veth0_macvtap: entered promiscuous mode [ 571.369064][T12252] chnl_net:caif_netlink_parms(): no params data found [ 571.495463][T12096] veth1_macvtap: entered promiscuous mode [ 571.521329][T12093] veth1_vlan: entered promiscuous mode [ 571.567065][ T5821] Bluetooth: hci1: command tx timeout [ 571.635154][T12089] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 571.678966][T12095] veth0_vlan: entered promiscuous mode [ 571.686412][T12096] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 571.697941][T12096] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 571.709883][T12096] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 571.733614][T12089] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 571.786918][T12096] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 571.799572][T12096] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 571.814159][T12096] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 571.829089][T12093] veth0_macvtap: entered promiscuous mode [ 571.846915][T12252] bridge0: port 1(bridge_slave_0) entered blocking state [ 571.854434][T12252] bridge0: port 1(bridge_slave_0) entered disabled state [ 571.862195][T12252] bridge_slave_0: entered allmulticast mode [ 571.868894][T12252] bridge_slave_0: entered promiscuous mode [ 571.876132][T12095] veth1_vlan: entered promiscuous mode [ 571.895758][T12096] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 571.904695][T12096] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 571.913816][T12096] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 571.922602][T12096] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 571.934244][T12089] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 571.944226][T12089] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 571.953162][T12089] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 571.962055][T12089] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 571.974862][T12252] bridge0: port 2(bridge_slave_1) entered blocking state [ 571.982452][T12252] bridge0: port 2(bridge_slave_1) entered disabled state [ 571.989638][T12252] bridge_slave_1: entered allmulticast mode [ 571.996673][T12252] bridge_slave_1: entered promiscuous mode [ 572.045282][T12252] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 572.063270][T12093] veth1_macvtap: entered promiscuous mode [ 572.083580][T12252] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 572.163279][T12252] team0: Port device team_slave_0 added [ 572.183506][T12252] team0: Port device team_slave_1 added [ 572.244599][T12252] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 572.252150][T12252] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 572.289922][T12252] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 572.303930][T12252] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 572.311286][T12252] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 572.337571][T12252] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 572.367778][T12095] veth0_macvtap: entered promiscuous mode [ 572.432321][T12095] veth1_macvtap: entered promiscuous mode [ 572.472037][T12093] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 572.489002][T12093] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 572.503080][T12093] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 572.513636][T12093] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 572.537552][T12093] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 572.615970][T12252] hsr_slave_0: entered promiscuous mode [ 572.627536][T12252] hsr_slave_1: entered promiscuous mode [ 572.633979][T12252] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 572.641894][T12252] Cannot create hsr debugfs directory [ 572.675042][T12093] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 572.690678][T12093] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 572.708459][T12093] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 572.719364][T12093] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 572.734788][T12093] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 572.765266][T12095] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 572.776199][T12095] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 572.787373][T12095] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 572.797942][T12095] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 572.808049][T12095] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 572.818642][T12095] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 572.829584][T12095] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 572.864753][ T75] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 572.888897][ T75] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 572.900194][ T52] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 572.902651][T12095] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 572.918646][ T52] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 572.928829][T12095] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 572.940287][T12095] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 572.953421][T12095] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 572.963643][T12095] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 572.974255][T12095] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 572.985587][T12095] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 572.999580][T12093] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 573.015712][T12093] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 573.026230][T12093] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 573.035165][T12093] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 573.109048][ T1003] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 573.119944][ T1003] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 573.122703][T12095] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 573.137500][T12095] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 573.148343][T12095] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 573.157174][T12095] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 573.176113][ T5087] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 573.191725][ T5087] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 573.523322][T12328] netlink: 28 bytes leftover after parsing attributes in process `syz.8.1731'. [ 573.569852][ T7656] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 573.589437][ T7656] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 573.641113][ T5821] Bluetooth: hci1: command tx timeout [ 573.773154][ T7656] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 573.783032][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 573.807904][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 573.828537][ T7656] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 573.912417][ T7656] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 573.938056][ T7656] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 574.161577][T12252] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 574.255359][T12252] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 574.333593][T12252] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 574.356035][T12252] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 574.394481][T12360] IPVS: sync thread started: state = BACKUP, mcast_ifn = hsr0, syncid = 0, id = 0 [ 574.404846][T12355] IPVS: stopping backup sync thread 12360 ... [ 574.686178][T12252] 8021q: adding VLAN 0 to HW filter on device bond0 [ 574.756886][T12252] 8021q: adding VLAN 0 to HW filter on device team0 [ 574.769802][ T5087] bridge0: port 1(bridge_slave_0) entered blocking state [ 574.776989][ T5087] bridge0: port 1(bridge_slave_0) entered forwarding state [ 574.914544][ T5087] bridge0: port 2(bridge_slave_1) entered blocking state [ 574.921760][ T5087] bridge0: port 2(bridge_slave_1) entered forwarding state [ 574.978173][T12344] dccp_close: ABORT with 1 bytes unread [ 575.143559][T12388] x_tables: ip_tables: osf match: only valid for protocol 6 [ 575.824814][T12252] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 576.581455][ T29] audit: type=1804 audit(1733345605.445:12): pid=12421 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz.0.1750" name="/newroot/3/file1" dev="fuse" ino=1 res=1 errno=0 [ 576.781136][ T5900] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 576.801556][ T29] audit: type=1800 audit(1733345605.485:13): pid=12421 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.0.1750" name="/" dev="fuse" ino=1 res=0 errno=0 [ 576.993378][ T5900] usb 10-1: Using ep0 maxpacket: 16 [ 577.006563][ T5900] usb 10-1: config 6 has an invalid descriptor of length 0, skipping remainder of the config [ 577.049081][ T5900] usb 10-1: config 6 has 1 interface, different from the descriptor's value: 4 [ 577.106378][ T5900] usb 10-1: New USB device found, idVendor=0a12, idProduct=5d10, bcdDevice=e9.aa [ 577.142519][ T5900] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 577.150650][ T5900] usb 10-1: Product: syz [ 577.204661][ T5900] usb 10-1: Manufacturer: syz [ 577.208782][T12252] veth0_vlan: entered promiscuous mode [ 577.234526][ T5900] usb 10-1: SerialNumber: syz [ 577.313763][T12252] veth1_vlan: entered promiscuous mode [ 577.419179][T12252] veth0_macvtap: entered promiscuous mode [ 577.456891][T12252] veth1_macvtap: entered promiscuous mode [ 577.524963][T12252] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 577.545060][ T46] usb 10-1: USB disconnect, device number 2 [ 577.562693][T12252] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 577.600981][T12252] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 577.630929][T12252] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 577.641675][ T5900] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 577.662437][T12252] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 577.694731][T12252] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 577.715325][T12252] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 577.739631][T12252] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 577.745667][T12438] dccp_close: ABORT with 1 bytes unread [ 577.751044][T12252] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 577.815143][ T5900] usb 4-1: Using ep0 maxpacket: 16 [ 577.824446][T12252] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 577.829502][ T5900] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 577.841001][T12252] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 577.854043][ T5900] usb 4-1: New USB device found, idVendor=1b1c, idProduct=1c0d, bcdDevice= 0.00 [ 577.870938][T12252] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 577.909976][T12252] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 577.922440][T12252] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 577.933045][T12252] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 577.936011][ T5900] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 577.942955][T12252] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 577.942978][T12252] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 577.944195][T12252] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 577.961007][T12106] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 577.995859][T12466] overlayfs: failed to resolve './file0': -2 [ 578.006685][ T5900] usb 4-1: config 0 descriptor?? [ 578.018642][T12252] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 578.038479][T12252] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 578.049444][T12252] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 578.058666][T12252] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 578.161132][T12106] usb 9-1: Using ep0 maxpacket: 8 [ 578.193496][T12106] usb 9-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 578.227449][T12106] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 578.269848][T12106] usb 9-1: Product: syz [ 578.287721][T12106] usb 9-1: Manufacturer: syz [ 578.318746][T12106] usb 9-1: SerialNumber: syz [ 578.338205][T12106] usb 9-1: config 0 descriptor?? [ 578.343731][ T5087] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 578.366915][T12106] gspca_main: se401-2.14.0 probing 047d:5003 [ 578.428423][T12457] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 578.460936][ T5087] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 578.474839][T12457] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 578.576676][ T5087] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 578.646132][ T5087] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 579.304357][ T5900] usbhid 4-1:0.0: can't add hid device: -71 [ 579.311057][ T5900] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 579.334660][ T5900] usb 4-1: USB disconnect, device number 3 [ 579.441084][T12106] gspca_se401: write req failed req 0x57 val 0x00 error -71 [ 579.458775][T12106] se401 9-1:0.0: probe with driver se401 failed with error -71 [ 579.500298][T12106] usb 9-1: USB disconnect, device number 2 [ 581.029098][T12511] xt_hashlimit: invalid interval [ 581.881190][ T5869] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 582.051454][ T5900] usb 8-1: new full-speed USB device number 2 using dummy_hcd [ 582.075133][ T5869] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 582.096487][ T5869] usb 4-1: New USB device found, idVendor=28de, idProduct=1205, bcdDevice= 0.00 [ 582.153066][ T5869] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 582.192562][ T5869] usb 4-1: config 0 descriptor?? [ 582.253376][ T5900] usb 8-1: config 0 has an invalid interface number: 23 but max is 0 [ 582.284631][ T5900] usb 8-1: config 0 has no interface number 0 [ 582.321368][ T5900] usb 8-1: config 0 interface 23 altsetting 0 has a duplicate endpoint with address 0xD, skipping [ 582.370895][ T5900] usb 8-1: config 0 interface 23 altsetting 0 endpoint 0x85 has invalid maxpacket 20689, setting to 64 [ 582.406634][ T5900] usb 8-1: config 0 interface 23 altsetting 0 has an endpoint descriptor with address 0x9B, changing to 0x8B [ 582.426962][ T5900] usb 8-1: config 0 interface 23 altsetting 0 endpoint 0x8B has invalid maxpacket 1023, setting to 64 [ 582.458598][ T5900] usb 8-1: config 0 interface 23 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 582.498380][ T1148] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 582.752069][ T5900] usb 8-1: New USB device found, idVendor=19d2, idProduct=ffa0, bcdDevice=38.0e [ 582.761923][ T5900] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 582.770003][ T5900] usb 8-1: Product: syz [ 582.794883][ T5837] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 582.813349][ T5837] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 582.830299][ T5837] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 582.847962][ T5900] usb 8-1: Manufacturer: syz [ 582.858103][ T5900] usb 8-1: SerialNumber: syz [ 582.886766][ T5900] usb 8-1: config 0 descriptor?? [ 582.898951][T12519] raw-gadget.1 gadget.7: fail, usb_ep_enable returned -22 [ 582.906748][ T5837] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 582.918818][ T5837] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 582.928352][ T5837] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 582.941257][T12519] raw-gadget.1 gadget.7: fail, usb_ep_enable returned -22 [ 582.970618][ T5900] option 8-1:0.23: GSM modem (1-port) converter detected [ 582.991503][T12547] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1769'. [ 583.006616][ T1148] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 583.019020][T12547] netlink: 'syz.3.1769': attribute type 11 has an invalid length. [ 583.093653][T12550] vivid-007: disconnect [ 583.105423][ T5869] hid-steam 0003:28DE:1205.000A: hidraw0: USB HID v0.00 Device [HID 28de:1205] on usb-dummy_hcd.3-1/input0 [ 583.164737][T12547] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 583.174017][T12547] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 583.182897][T12547] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 583.191848][T12547] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 583.255564][ T5869] usb 8-1: USB disconnect, device number 2 [ 583.270751][ T5869] option 8-1:0.23: device disconnected [ 583.307397][T12547] vxlan0: entered promiscuous mode [ 583.456502][ T1148] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 583.890182][ T1148] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 584.387797][T12550] vivid-007: reconnect [ 584.527859][T12540] chnl_net:caif_netlink_parms(): no params data found [ 585.357916][ T5837] Bluetooth: hci4: command tx timeout [ 585.509788][ T1148] bridge_slave_1: left allmulticast mode [ 585.515687][ T1148] bridge_slave_1: left promiscuous mode [ 585.523668][ T1148] bridge0: port 2(bridge_slave_1) entered disabled state [ 585.613886][ T5900] usb 4-1: USB disconnect, device number 4 [ 585.890367][ T1148] bridge_slave_0: left allmulticast mode [ 585.896195][ T1148] bridge_slave_0: left promiscuous mode [ 585.956580][ T1148] bridge0: port 1(bridge_slave_0) entered disabled state [ 587.245221][T12606] netlink: 312 bytes leftover after parsing attributes in process `syz.7.1789'. [ 587.675344][ T5837] Bluetooth: hci4: command tx timeout [ 588.253957][ T5900] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 588.511185][ T5900] usb 10-1: Using ep0 maxpacket: 32 [ 588.693190][ T5900] usb 10-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 589.130208][ T5900] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 589.145308][ T5900] usb 10-1: Product: syz [ 589.149622][ T5900] usb 10-1: Manufacturer: syz [ 589.154577][ T5900] usb 10-1: SerialNumber: syz [ 589.164261][ T5900] usb 10-1: config 0 descriptor?? [ 589.601616][ T1148] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 589.632010][ T1148] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 589.663429][ T1148] bond0 (unregistering): Released all slaves [ 589.736322][ T5837] Bluetooth: hci4: command tx timeout [ 589.751034][ T5900] airspy 10-1:0.0: Board ID: 00 [ 589.755952][ T5900] airspy 10-1:0.0: Firmware version: [ 589.789357][ T5087] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 589.812959][T12637] @: renamed from vlan0 (while UP) [ 590.171592][T12668] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 590.180273][T12668] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 590.189732][T12663] xt_socket: unknown flags 0x8 [ 590.356010][T12540] bridge0: port 1(bridge_slave_0) entered blocking state [ 590.366405][T12540] bridge0: port 1(bridge_slave_0) entered disabled state [ 590.385334][T12540] bridge_slave_0: entered allmulticast mode [ 590.400134][T12540] bridge_slave_0: entered promiscuous mode [ 590.481699][ T5821] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 590.497296][ T5821] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 590.507994][ T5821] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 590.522359][ T5821] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 590.539019][ T5821] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 590.547272][ T5821] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 590.664661][T12540] bridge0: port 2(bridge_slave_1) entered blocking state [ 590.691281][T12540] bridge0: port 2(bridge_slave_1) entered disabled state [ 590.716879][T12540] bridge_slave_1: entered allmulticast mode [ 590.761847][T12540] bridge_slave_1: entered promiscuous mode [ 590.847513][ T1148] hsr_slave_0: left promiscuous mode [ 590.863318][ T1148] hsr_slave_1: left promiscuous mode [ 590.875643][ T1148] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 590.885183][ T1148] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 590.894554][ T1148] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 590.902556][ T1148] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 590.943111][ T1148] veth1_macvtap: left promiscuous mode [ 590.948813][ T1148] veth0_macvtap: left promiscuous mode [ 590.956746][ T1148] veth1_vlan: left promiscuous mode [ 590.971533][ T1148] veth0_vlan: left promiscuous mode [ 591.241509][ T5900] airspy 10-1:0.0: usb_control_msg() failed -110 request 12 [ 591.259734][ T5900] airspy 10-1:0.0: Registered as swradio24 [ 591.273208][ T5900] airspy 10-1:0.0: SDR API is still slightly experimental and functionality changes may follow [ 591.457969][T12627] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 591.552934][ T5914] usb 10-1: USB disconnect, device number 3 [ 591.583099][T10929] usb 8-1: new full-speed USB device number 3 using dummy_hcd [ 591.763044][T10929] usb 8-1: unable to get BOS descriptor or descriptor too short [ 591.773239][T10929] usb 8-1: not running at top speed; connect to a high speed hub [ 591.792812][T10929] usb 8-1: config 219 has an invalid interface number: 211 but max is 1 [ 591.802171][T10929] usb 8-1: config 219 has an invalid descriptor of length 0, skipping remainder of the config [ 591.817748][ T5837] Bluetooth: hci4: command tx timeout [ 591.829113][T10929] usb 8-1: config 219 has 1 interface, different from the descriptor's value: 2 [ 591.839236][T10929] usb 8-1: config 219 has no interface number 0 [ 591.845699][T10929] usb 8-1: config 219 interface 211 altsetting 4 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 591.860532][T10929] usb 8-1: config 219 interface 211 has no altsetting 0 [ 591.871131][T10929] usb 8-1: New USB device found, idVendor=1110, idProduct=9024, bcdDevice=37.25 [ 591.880738][T10929] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 591.898247][T10929] usb 8-1: Product: 枖Ꙃቅ馵㉭թ쥐ළꁲ菀顋㥂Ⱖ녇ᗧ믕﬩ཾ맴␋悎ᦾ敷깪ǁ⚍퉭軁▦㱱籪槜㟿쁋㼵弭ﻤ耹⽼璉믲茕潞榶陧꿱⡇峟デ敇᷸摬젷흨륀ँﵦ᣸櫢䍉ɵ뼁뀽箖ჲ圫๐뗫㉺萔ㅺ̍甐瑆譁瞞ᜪ輽폼撘ӗ䲟軻뎏탪ᩴ뎟隠疊⻂옴᷊⯣⺯죁贙蝥诨懺煋錳ᳱ氃֤뗪຺쮰홊뙽멿ꦮ︆瘽 [ 591.971978][T10929] usb 8-1: Manufacturer: 灶᫲ꩢ褽鳶䍕ٞ谲룸ႇ㬐뻍頚陱ࡸକ躀헄鴨휽翆城⦶烠鄵汵쥢퉥行뱴ີ鼁ᵻ중洴ࣃ⯙䉶⩨눦ꉕ䬪셋⁽ฐ䫬꘡萨ᣒ퇰㕬뤺郇ꮜ쥢뻽建Ɑ㣫ꚁ錹⢁ᄝ╱㴨㉀ᘰ븙詇췺⣹䡙ኀ䗬죮頵㭿졙翏앭贎崏垡묌뇤낳탿ົ헼諮 [ 592.004256][ T5914] usb 10-1: new high-speed USB device number 4 using dummy_hcd [ 592.041464][T10929] usb 8-1: SerialNumber: 眞鲨໛ᮿ䵌㛭粜䢔礤ꢢ笕삚쀏혚ꈮ㯢囹끷ഒ臌通燹᪡﫽ⅵ햛☼鋊ꕜ篆줠淟꠫맲ヸ㯦骜鴮Ⴂ먣戊▣炼ಿ罺忩䚅䢖ઁ퉄騊廰奘뮼藋↳¦⛹騯∹ᖮ䄞ഒ㰍䈂㼝㓝厃⍜ฏᾢ驒盲ꣀˁ쭦䃊줶ͧ䓔̕㿭 [ 592.151588][ T5914] usb 10-1: device descriptor read/64, error -71 [ 592.292929][T10929] usb 8-1: [ueagle-atm] ADSL device founded vid (0X1110) pid (0X9024) Rev (0X3725): Eagle II [ 592.390957][ T5914] usb 10-1: new high-speed USB device number 5 using dummy_hcd [ 592.466358][ T1148] team0 (unregistering): Port device team_slave_1 removed [ 592.532037][ T5914] usb 10-1: device descriptor read/64, error -71 [ 592.561207][ T1148] team0 (unregistering): Port device team_slave_0 removed [ 592.611270][ T5837] Bluetooth: hci5: command tx timeout [ 592.649365][ T5914] usb usb10-port1: attempt power cycle [ 592.919443][T12733] netlink: 168864 bytes leftover after parsing attributes in process `syz.7.1806'. [ 592.955216][T12733] openvswitch: netlink: Message has 44053 unknown bytes. [ 593.001068][ T5914] usb 10-1: new high-speed USB device number 6 using dummy_hcd [ 593.032233][ T5914] usb 10-1: device descriptor read/8, error -71 [ 593.232751][T10929] usb 8-1: [ueagle-atm] pre-firmware device, uploading firmware [ 593.249936][T10929] usb 8-1: [ueagle-atm] loading firmware ueagle-atm/eagleII.fw [ 593.258986][ T9] usb 8-1: Direct firmware load for ueagle-atm/eagleII.fw failed with error -2 [ 593.272095][T10929] usb 8-1: USB disconnect, device number 3 [ 593.278101][ T9] usb 8-1: Falling back to sysfs fallback for: ueagle-atm/eagleII.fw [ 593.286505][ T5914] usb 10-1: new high-speed USB device number 7 using dummy_hcd [ 593.322808][ T9] ------------[ cut here ]------------ [ 593.329130][ T9] WARNING: CPU: 0 PID: 9 at fs/kernfs/dir.c:526 kernfs_new_node+0x1d8/0x240 [ 593.338264][ T9] Modules linked in: [ 593.342905][ T9] CPU: 0 UID: 0 PID: 9 Comm: kworker/0:1 Not tainted 6.13.0-rc1-syzkaller-00025-gfeffde684ac2 #0 [ 593.354085][ T9] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 593.364578][ T9] Workqueue: events request_firmware_work_func SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 593.370780][ T9] RIP: 0010:kernfs_new_node+0x1d8/0x240 [ 593.376940][ T9] Code: 74 08 48 89 ef e8 48 f3 c1 ff 48 89 5d 00 4c 89 f0 48 83 c4 10 5b 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc e8 39 36 5a ff 90 <0f> 0b 90 eb a0 89 e9 80 e1 07 fe c1 38 c1 0f 8c 62 fe ff ff 48 89 [ 593.396834][ T9] RSP: 0018:ffffc900000e7578 EFLAGS: 00010293 [ 593.403220][ T9] RAX: ffffffff82453b97 RBX: ffff88807ce42870 RCX: ffff88801d2c8000 [ 593.411341][ T9] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 593.419721][ T9] RBP: 0000000000000000 R08: ffffffff82453b34 R09: 1ffff1100f9c850e [ 593.428066][ T9] R10: dffffc0000000000 R11: ffffed100f9c850f R12: 00000000000041ed [ 593.436220][ T9] R13: 0000000000000000 R14: ffff88805f7a5f00 R15: dffffc0000000000 [ 593.444740][ T9] FS: 0000000000000000(0000) GS:ffff8880b8600000(0000) knlGS:0000000000000000 [ 593.454246][ T9] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 593.461052][ T9] CR2: 0000000000000000 CR3: 00000000602fa000 CR4: 00000000003526f0 [ 593.469063][ T9] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 593.477175][ T9] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 593.485324][ T9] Call Trace: [ 593.488627][ T9] [ 593.491778][ T9] ? __warn+0x165/0x4d0 [ 593.495966][ T9] ? kernfs_new_node+0x1d8/0x240 [ 593.501019][ T9] ? report_bug+0x2b3/0x500 [ 593.505549][ T9] ? kernfs_new_node+0x1d8/0x240 [ 593.510523][ T9] ? handle_bug+0x60/0x90 [ 593.514998][ T9] ? exc_invalid_op+0x1a/0x50 [ 593.519711][ T9] ? asm_exc_invalid_op+0x1a/0x20 [ 593.525394][ T9] ? kernfs_new_node+0x174/0x240 [ 593.530380][ T9] ? kernfs_new_node+0x1d7/0x240 [ 593.535436][ T9] ? kernfs_new_node+0x1d8/0x240 [ 593.540414][ T9] ? kernfs_new_node+0x1d7/0x240 [ 593.545910][ T9] kernfs_create_dir_ns+0x43/0x120 [ 593.551660][ T9] sysfs_create_dir_ns+0x189/0x3a0 [ 593.556827][ T9] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 593.562658][ T9] kobject_add_internal+0x435/0x8d0 [ 593.567916][ T9] kobject_add+0x152/0x220 [ 593.572451][ T9] ? __pfx_kobject_add+0x10/0x10 [ 593.577423][ T9] ? __kasan_kmalloc+0x98/0xb0 [ 593.582292][ T9] ? kobject_init+0x83/0x1f0 [ 593.586913][ T9] get_device_parent+0x391/0x410 [ 593.591944][ T9] device_add+0x325/0xbf0 [ 593.596310][ T9] ? fw_create_instance+0xd2/0x180 [ 593.601527][ T9] firmware_fallback_sysfs+0x307/0x9e0 [ 593.607031][ T9] _request_firmware+0xdf7/0x13b0 [ 593.612184][ T9] ? __pfx__request_firmware+0x10/0x10 [ 593.617689][ T9] request_firmware_work_func+0x12a/0x280 [ 593.623559][ T9] ? __pfx_request_firmware_work_func+0x10/0x10 [ 593.629840][ T9] ? process_scheduled_works+0x976/0x1840 [ 593.635678][ T9] process_scheduled_works+0xa66/0x1840 [ 593.641348][ T9] ? __pfx_process_scheduled_works+0x10/0x10 [ 593.647367][ T9] ? assign_work+0x364/0x3d0 [ 593.652589][ T9] worker_thread+0x870/0xd30 [ 593.657242][ T9] ? __kthread_parkme+0x169/0x1d0 [ 593.662864][ T9] ? __pfx_worker_thread+0x10/0x10 [ 593.668014][ T9] kthread+0x2f0/0x390 [ 593.672181][ T9] ? __pfx_worker_thread+0x10/0x10 [ 593.677319][ T9] ? __pfx_kthread+0x10/0x10 [ 593.681985][ T9] ret_from_fork+0x4b/0x80 [ 593.686427][ T9] ? __pfx_kthread+0x10/0x10 [ 593.691114][ T9] ret_from_fork_asm+0x1a/0x30 [ 593.695921][ T9] [ 593.698985][ T9] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 593.706285][ T9] CPU: 0 UID: 0 PID: 9 Comm: kworker/0:1 Not tainted 6.13.0-rc1-syzkaller-00025-gfeffde684ac2 #0 [ 593.716807][ T9] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 593.726893][ T9] Workqueue: events request_firmware_work_func [ 593.733096][ T9] Call Trace: [ 593.736389][ T9] [ 593.739330][ T9] dump_stack_lvl+0x241/0x360 [ 593.744036][ T9] ? __pfx_dump_stack_lvl+0x10/0x10 [ 593.749261][ T9] ? __pfx__printk+0x10/0x10 [ 593.753888][ T9] ? vscnprintf+0x5d/0x90 [ 593.758254][ T9] panic+0x349/0x880 [ 593.762187][ T9] ? __warn+0x174/0x4d0 [ 593.766369][ T9] ? __pfx_panic+0x10/0x10 [ 593.770814][ T9] ? ret_from_fork_asm+0x1a/0x30 [ 593.775766][ T9] __warn+0x344/0x4d0 [ 593.779748][ T9] ? kernfs_new_node+0x1d8/0x240 [ 593.784686][ T9] report_bug+0x2b3/0x500 [ 593.789016][ T9] ? kernfs_new_node+0x1d8/0x240 [ 593.793956][ T9] handle_bug+0x60/0x90 [ 593.798111][ T9] exc_invalid_op+0x1a/0x50 [ 593.802616][ T9] asm_exc_invalid_op+0x1a/0x20 [ 593.807482][ T9] RIP: 0010:kernfs_new_node+0x1d8/0x240 [ 593.813029][ T9] Code: 74 08 48 89 ef e8 48 f3 c1 ff 48 89 5d 00 4c 89 f0 48 83 c4 10 5b 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc e8 39 36 5a ff 90 <0f> 0b 90 eb a0 89 e9 80 e1 07 fe c1 38 c1 0f 8c 62 fe ff ff 48 89 [ 593.832650][ T9] RSP: 0018:ffffc900000e7578 EFLAGS: 00010293 [ 593.838740][ T9] RAX: ffffffff82453b97 RBX: ffff88807ce42870 RCX: ffff88801d2c8000 [ 593.846729][ T9] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 593.854721][ T9] RBP: 0000000000000000 R08: ffffffff82453b34 R09: 1ffff1100f9c850e [ 593.862701][ T9] R10: dffffc0000000000 R11: ffffed100f9c850f R12: 00000000000041ed [ 593.870675][ T9] R13: 0000000000000000 R14: ffff88805f7a5f00 R15: dffffc0000000000 [ 593.878656][ T9] ? kernfs_new_node+0x174/0x240 [ 593.883597][ T9] ? kernfs_new_node+0x1d7/0x240 [ 593.888538][ T9] ? kernfs_new_node+0x1d7/0x240 [ 593.893474][ T9] kernfs_create_dir_ns+0x43/0x120 [ 593.898603][ T9] sysfs_create_dir_ns+0x189/0x3a0 [ 593.903736][ T9] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 593.909387][ T9] kobject_add_internal+0x435/0x8d0 [ 593.914603][ T9] kobject_add+0x152/0x220 [ 593.919032][ T9] ? __pfx_kobject_add+0x10/0x10 [ 593.923976][ T9] ? __kasan_kmalloc+0x98/0xb0 [ 593.928749][ T9] ? kobject_init+0x83/0x1f0 [ 593.933344][ T9] get_device_parent+0x391/0x410 [ 593.938288][ T9] device_add+0x325/0xbf0 [ 593.942622][ T9] ? fw_create_instance+0xd2/0x180 [ 593.947744][ T9] firmware_fallback_sysfs+0x307/0x9e0 [ 593.953217][ T9] _request_firmware+0xdf7/0x13b0 [ 593.958259][ T9] ? __pfx__request_firmware+0x10/0x10 [ 593.963736][ T9] request_firmware_work_func+0x12a/0x280 [ 593.969467][ T9] ? __pfx_request_firmware_work_func+0x10/0x10 [ 593.975715][ T9] ? process_scheduled_works+0x976/0x1840 [ 593.981439][ T9] process_scheduled_works+0xa66/0x1840 [ 593.987007][ T9] ? __pfx_process_scheduled_works+0x10/0x10 [ 593.992997][ T9] ? assign_work+0x364/0x3d0 [ 593.997596][ T9] worker_thread+0x870/0xd30 [ 594.002193][ T9] ? __kthread_parkme+0x169/0x1d0 [ 594.007218][ T9] ? __pfx_worker_thread+0x10/0x10 [ 594.012359][ T9] kthread+0x2f0/0x390 [ 594.016488][ T9] ? __pfx_worker_thread+0x10/0x10 [ 594.021620][ T9] ? __pfx_kthread+0x10/0x10 [ 594.026239][ T9] ret_from_fork+0x4b/0x80 [ 594.030674][ T9] ? __pfx_kthread+0x10/0x10 [ 594.035276][ T9] ret_from_fork_asm+0x1a/0x30 [ 594.040054][ T9] [ 594.043322][ T9] Kernel Offset: disabled [ 594.047850][ T9] Rebooting in 86400 seconds..