last executing test programs: 6m52.419314529s ago: executing program 4 (id=1492): r0 = socket(0x2c, 0x3, 0x1) r1 = socket$nl_route(0x10, 0x3, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x8) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(0xffffffffffffffff, 0x0, 0x0) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x1000000000000037) preadv(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) r3 = syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2) syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), r0) ioctl$VIDIOC_CREATE_BUFS(r3, 0xc100565c, &(0x7f00000013c0)={0x3, 0x2, 0x2, {0x5, @vbi={0xb5, 0x4, 0x3, 0x0, [0x0, 0x18000000], [0x8200, 0x1]}}, 0xe}) ioctl$VIDIOC_QBUF(r3, 0xc058565d, &(0x7f0000000200)=@fd={0x0, 0x5, 0x4, 0x10, 0x0, {}, {0x0, 0x0, 0x0, 0x4, 0x0, 0x0, "001500"}, 0x0, 0x2, {}, 0x18603}) munlockall() ioctl$IOCTL_VMCI_VERSION2(0xffffffffffffffff, 0x7a7, &(0x7f0000000040)=0x90000) ioctl$IOCTL_VMCI_DATAGRAM_SEND(0xffffffffffffffff, 0x7ab, &(0x7f0000000080)={&(0x7f0000000180)={{@host}, {@hyper, 0x2}, 0x400, "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"}, 0x418, 0x7}) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000c40)=ANY=[@ANYBLOB="580000001000010009000000000000000000ffff", @ANYRES32=0x0, @ANYBLOB="00000000da44000024001a8020000a8014000700fe8000000000060000020040000000000500080002000000140003007866726d30"], 0x58}}, 0x40408c4) 6m51.447699409s ago: executing program 4 (id=1495): mmap(&(0x7f0000196000/0x1000)=nil, 0x1000, 0x0, 0x840000000000a132, 0xffffffffffffffff, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00') unshare(0x6a040000) socket$nl_generic(0x10, 0x3, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) r0 = socket(0x8, 0x0, 0x8000) ioctl$sock_netrom_SIOCADDRT(r0, 0x6180, 0x0) sendmmsg$inet6(r0, &(0x7f0000003740)=[{{0x0, 0x0, &(0x7f00000033c0)=[{&(0x7f0000000080)="b8", 0x1}], 0x1}}], 0x1, 0xc0000) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0xa, 0x20000000ec071, 0xffffffffffffffff, 0x0) 6m50.318523051s ago: executing program 4 (id=1497): r0 = socket$netlink(0x10, 0x3, 0x0) (async) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000002c0)={'ipvlan1\x00', 0x0}) (async) syz_open_procfs(0x0, &(0x7f0000000340)='fd\x00') (async) r3 = syz_usb_connect$hid(0x5, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000204f045db600000000000109022d00010000600209040010050300010009210000360122050009058103"], 0x0) syz_usb_control_io(r3, 0x0, 0x0) (async) syz_usb_control_io(r3, &(0x7f0000000380)={0x18, &(0x7f0000000100)=ANY=[@ANYBLOB="000457"], 0x0, 0x0, 0x0, 0x0}, 0x0) (async) syz_usb_control_io(r3, 0x0, &(0x7f00000006c0)={0x84, &(0x7f0000000280), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'netdevsim0\x00', 0x0}) (async) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_inet6_SIOCSIFADDR(r6, 0x8916, &(0x7f0000000280)={@empty, 0x44, r5}) (async) r7 = socket$nl_rdma(0x10, 0x3, 0x14) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0xec25, 0x8, 0x1, 0x40000333}, &(0x7f0000000dc0)=0x0, &(0x7f00000001c0)=0x0) r12 = syz_usb_connect(0x0, 0x3c, &(0x7f0000000380)=ANY=[@ANYBLOB="120101000814c910be0632a2f333010203010902120001000000000904"], 0x0) syz_usb_control_io$uac1(r12, 0x0, 0x0) (async) syz_usb_control_io$hid(r12, 0x0, 0x0) syz_usb_control_io$hid(r12, &(0x7f0000000300)={0x24, &(0x7f0000000400)={0x20, 0x4, 0x5d, {0x5d, 0xd, "fcf0a914322aca497e86f204f13e9db75765474fad020425b53c1bc31c76aacdc9146cb991f9b750cac7caf16a8fa4f34cd076f056405a1e85ac9311f6b4406ef16256c1f42583d829b94e4673f1ecfe245ecdb2fdbc778d2ee853"}}, &(0x7f0000000480)={0x0, 0x3, 0xea, @string={0xea, 0x3, "390cf1b9fd857179c5b22e934239b5aed095afe005093a63b5e503073b0f336a02a58552ac085e3abf8350b91335b433b5c63c11567dfbf8e67484ee308f17e217aa6dbb60c65a9a56bd8abcb01aab04eb41a0ae01dd5f0e08a27bf2752577fac503ae1b4b94415c49ac8fb4e51b6f7128c697dc7e837bbcec41238395477b70ab07325cc5bc3b7ae387d812ba94ec6b9c9409d6bb4386bafbdd0619c0196dc058f5af4d2d63bd5d30b711221014d3c65a50e3a27c3f2ece7dff3eadf6e200d0b649a209b528d003964edc913de42832395b64f68a8345bb880996b9d381a81d043f0bec09971b38"}}, &(0x7f00000000c0)={0x0, 0x22, 0xf, {[@global=@item_4={0x3, 0x1, 0x4, "7fabe782"}, @main=@item_4={0x3, 0x0, 0xa, "50e9a127"}, @main=@item_4={0x3, 0x0, 0xb, "601ca7f3"}]}}, &(0x7f0000000140)={0x0, 0x21, 0x9, {0x9, 0x21, 0x3, 0x7, 0x1, {0x22, 0x61e}}}}, &(0x7f00000008c0)={0x2c, &(0x7f0000000780)={0x20, 0x11, 0x9d, "cb80d289e7e3226b62787713678b13028f3c6ffb934425496e0ecc99a9936639ee8990b6db9b76e8052954ec8fe7c5a7a987bb446d622f9904a4086144acabd0a99c42316a38022801243c59595221b00e2d59d4e6b27b44df60b9ec6df194cfb0d4d296ca6f3252ac30642266fed0382ce8ba7c877ca1530f1df91048ba81862d26da9881503f040c3669f33cfe5a639d4d18c3f580801755bdcd0e18"}, &(0x7f0000000580)={0x0, 0xa, 0x1, 0x9e}, &(0x7f00000005c0)={0x0, 0x8, 0x1, 0x13}, &(0x7f0000000840)={0x20, 0x1, 0x16, "88373fa96da770c2d01dbb2d0c1520bee31705dc5f08"}, &(0x7f0000000880)={0x20, 0x3, 0x1, 0x1}}) syz_memcpy_off$IO_URING_METADATA_GENERIC(r10, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) setresgid(0xee00, 0xee01, 0x0) syz_io_uring_submit(r10, r11, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000600)=[{&(0x7f0000001800)=""/216, 0xd8}], 0x1}) io_uring_enter(r9, 0x847ba, 0x0, 0xe, 0x0, 0x0) (async) splice(r7, 0x0, r8, 0x0, 0x2, 0x0) (async) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r7, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="00010000031401"], 0x100}, 0x1, 0x0, 0x0, 0x4040024}, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=@newlink={0x44, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3958b}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macsec={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACSEC_PROTECT={0x5}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x44}}, 0x0) 6m48.03585606s ago: executing program 4 (id=1506): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$afs(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='dyn']) chdir(&(0x7f0000000340)='./file0\x00') mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) setreuid(0xffffffffffffffff, 0xee00) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = dup2(r0, r0) faccessat2(r1, &(0x7f0000000880)='\x00', 0x1, 0x1100) r2 = dup2(0xffffffffffffffff, 0xffffffffffffffff) open_tree(r2, &(0x7f0000000000)='./file0\x00', 0x800) 6m47.679247104s ago: executing program 4 (id=1508): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000101c1b021b00000000000109022400010000400009040000010300400009210000000122050009058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000300)={0x2c, &(0x7f00000000c0)={0x0, 0x9, 0x81, {0x81, 0x10, "8c5ac9593abcc833a42e6e6c21e92f8bb133e5614f0c7d0f23879cf3d7342d4eca64751abae7743b2c0e855543f29412a54d2d202ef590220dd0b7ef3f01b637ff06255e3c43fbd2300c834783c98837697973c592ef20e2dc11a83a6f9555c34bed2a688c39a6328cf82e71c2f96b8b7ce1e82700d8f5e9d7f26c9a6a7240"}}, &(0x7f0000000200)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x843}}, &(0x7f0000000240)={0x0, 0xf, 0x29, {0x5, 0xf, 0x29, 0x1, [@ssp_cap={0x24, 0x10, 0xa, 0xc, 0x6, 0x0, 0xf0f, 0x100, [0x3f0f, 0x3f0f, 0x0, 0xff0000, 0xff0000, 0x1013fff]}]}}, &(0x7f0000000280)={0x20, 0x29, 0xf, {0xf, 0x29, 0x8, 0x8, 0xfc, 0x4, "55486b83", "6c4ba491"}}, &(0x7f00000002c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x4, 0x0, 0x75, 0x81, 0x4, 0x1, 0x4}}}, &(0x7f00000007c0)={0x84, &(0x7f0000000340)={0x20, 0x7, 0xa6, "22a5a680607115aae8a2326020c3ebf1797447abcd3fc2e9fdd59250842ce6c27bf6b15a050bec0646c77c410be5209a193af66bccdff7c7a576a1217ab20262fede6488482076b788d32494fd4caf8922111ee24febefc0987dca2755d37471d43047fb50a368e79fccb78267b116bebe845c06bdbdbf7737137d436869ecd1e0dd7fd964bd99ee02f6c40419d553b2406b38669689ffc3399b1ae70585c240d0bcf4c25a90"}, &(0x7f0000000400)={0x0, 0xa, 0x1, 0xd}, &(0x7f0000000440)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000000480)={0x20, 0x0, 0x4, {0x1, 0x1}}, &(0x7f00000004c0)={0x20, 0x0, 0x4, {0x1000, 0x8}}, &(0x7f0000000500)={0x40, 0x7, 0x2, 0xb}, &(0x7f0000000540)={0x40, 0x9, 0x1, 0x9}, &(0x7f0000000580)={0x40, 0xb, 0x2, "979a"}, &(0x7f00000005c0)={0x40, 0xf, 0x2, 0x8}, &(0x7f0000000600)={0x40, 0x13, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, &(0x7f0000000640)={0x40, 0x17, 0x6, @multicast}, &(0x7f0000000680)={0x40, 0x19, 0x2, "3495"}, &(0x7f0000000900)={0x40, 0x1a, 0x2, 0xfffe}, &(0x7f0000000700)={0x40, 0x1c, 0x1, 0x7}, &(0x7f0000000740)={0x40, 0x1e, 0x1, 0x4}, &(0x7f0000000780)={0x40, 0x21, 0x1, 0xb5}}) 6m46.887364471s ago: executing program 4 (id=1511): socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x8000000000002) sched_setscheduler(r0, 0x2, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000700)=ANY=[], 0x0, 0x58, 0x0, 0x1, 0x3ff}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$inet6(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000001040)=@raw={'raw\x00', 0x3c1, 0x3, 0x360, 0x0, 0x12, 0x600, 0x1c0, 0x202, 0x290, 0x2e8, 0x2e8, 0x290, 0x2c0, 0x4, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth1_to_bond\x00', 'geneve1\x00'}, 0x0, 0x190, 0x1c0, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "0000000000000019b5115c2aee68d23a465cd431e150c3234e082555f67222476147864fa03182f5cf11d8c348cbd06dc8de1dcbde7d4e252c3394fed47bf78c70f607b0178fa5ea335019ac07a602061c96baeb8989f1f34a214e6726411fe4b124e0f7323a587d2a1fcf07000000eca0a7b66c60c527bac2b500", 0x2}}, @common=@inet=@socket2={{0x28}}]}, @common=@unspec=@CONNMARK={0x30}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00', 0x0, {0x2}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3c0) r4 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r4, &(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x200, 0xfffffffd}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000140)={0x42, 0xf5, 0x1}, 0x10) r5 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r5, &(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10) socket$tipc(0x1e, 0x5, 0x0) socket$tipc(0x1e, 0x5, 0x0) close(r4) socket$key(0xf, 0x3, 0x2) 6m46.654910172s ago: executing program 32 (id=1511): socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x8000000000002) sched_setscheduler(r0, 0x2, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000700)=ANY=[], 0x0, 0x58, 0x0, 0x1, 0x3ff}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$inet6(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000001040)=@raw={'raw\x00', 0x3c1, 0x3, 0x360, 0x0, 0x12, 0x600, 0x1c0, 0x202, 0x290, 0x2e8, 0x2e8, 0x290, 0x2c0, 0x4, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth1_to_bond\x00', 'geneve1\x00'}, 0x0, 0x190, 0x1c0, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "0000000000000019b5115c2aee68d23a465cd431e150c3234e082555f67222476147864fa03182f5cf11d8c348cbd06dc8de1dcbde7d4e252c3394fed47bf78c70f607b0178fa5ea335019ac07a602061c96baeb8989f1f34a214e6726411fe4b124e0f7323a587d2a1fcf07000000eca0a7b66c60c527bac2b500", 0x2}}, @common=@inet=@socket2={{0x28}}]}, @common=@unspec=@CONNMARK={0x30}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00', 0x0, {0x2}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3c0) r4 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r4, &(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x200, 0xfffffffd}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000140)={0x42, 0xf5, 0x1}, 0x10) r5 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r5, &(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10) socket$tipc(0x1e, 0x5, 0x0) socket$tipc(0x1e, 0x5, 0x0) close(r4) socket$key(0xf, 0x3, 0x2) 2m14.157807972s ago: executing program 5 (id=1975): syz_usb_connect$uac1(0x0, 0x0, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) io_uring_enter(0xffffffffffffffff, 0x847ba, 0x0, 0xe, 0x0, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3c00000010001fff000000000100000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800900010076657468000000000400028008000a00", @ANYRES32=r2, @ANYBLOB], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'veth1\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@newlink={0x4c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x90646}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x4}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x4c}, 0x1, 0x0, 0x0, 0x600}, 0x2000000) 1m45.777765761s ago: executing program 5 (id=1975): syz_usb_connect$uac1(0x0, 0x0, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) io_uring_enter(0xffffffffffffffff, 0x847ba, 0x0, 0xe, 0x0, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3c00000010001fff000000000100000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800900010076657468000000000400028008000a00", @ANYRES32=r2, @ANYBLOB], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'veth1\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@newlink={0x4c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x90646}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x4}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x4c}, 0x1, 0x0, 0x0, 0x600}, 0x2000000) 1m39.518389132s ago: executing program 2 (id=2577): r0 = socket(0xa, 0x3, 0x3a) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vxcan1\x00', 0x0}) setsockopt$MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f00000000c0)={0x3, 0x0, 0x0, r1, 0x3}, 0xc) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x281c2, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000240)={'virt_wifi0\x00', &(0x7f00000001c0)=@ethtool_coalesce={0xe, 0x2, 0x37, 0x3, 0x2, 0x4, 0x8, 0xaa4, 0x68bf, 0x6, 0x200, 0x7, 0x1, 0xf0, 0x6, 0x6, 0x6, 0x3, 0x0, 0x80000001, 0x0, 0x8, 0xffffffff}}) userfaultfd(0x801) syz_open_dev$usbfs(&(0x7f0000000040), 0x20000007d, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x129202, 0x0) mq_open(&(0x7f00005a1ffb)='eth0\x00', 0x42, 0x0, 0x0) pselect6(0x40, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x2, 0x0, 0x0, 0x2}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0xffffffffffffffff}, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000001d00)=ANY=[@ANYBLOB="0b00000005000000050000000900000001"], 0x48) r4 = epoll_create1(0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0xc, &(0x7f0000000280)=0xf, 0x4) epoll_ctl$EPOLL_CTL_DEL(r4, 0x2, r3) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r3, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) ioctl$F2FS_IOC_MOVE_RANGE(r4, 0xc020f509, &(0x7f0000000040)={r2, 0x6, 0x8, 0x10000}) landlock_restrict_self(r6, 0x7) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000cc0)='mmap_lock_acquire_returned\x00', r7}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x3, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) setsockopt$MRT6_FLUSH(r0, 0x29, 0xd4, &(0x7f0000000080)=0xc, 0x4) r8 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_int(r8, 0x1, 0x2c, &(0x7f0000000180)=0x4, 0x4) setsockopt$SO_ATTACH_FILTER(r8, 0x1, 0x33, &(0x7f0000000000)={0x0, 0x0}, 0x10) 1m38.461553591s ago: executing program 2 (id=2582): socket$nl_route(0x10, 0x3, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'\x00', 0x5}) ioctl$TUNSETPERSIST(r0, 0x400454c9, 0x1) ioctl$TUNSETPERSIST(r0, 0x400454cb, 0x40000) ioctl$TUNSETPERSIST(r0, 0x400454cb, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000003480)=[{0x0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) socket$inet6_sctp(0xa, 0x4, 0x84) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, 0x0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) sendmmsg$inet(r1, &(0x7f00000039c0)=[{{&(0x7f0000000080)={0x2, 0x4e20, @local}, 0x10, 0x0}}], 0x1, 0x2000c044) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB="8000000002000200080004000000000008001b"], 0x30}}, 0x0) sendto$inet(r1, 0x0, 0x0, 0x60, 0x0, 0x0) 1m36.700415857s ago: executing program 2 (id=2588): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000600)={0x26, 'hash\x00', 0x0, 0x0, 'xxhash64\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, 0x0, 0x0) sendmsg$NFT_MSG_GETRULE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000002280)=ANY=[@ANYRES16=r1], 0x38}, 0x1, 0x0, 0x0, 0x4000}, 0x4c410) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x20000090) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r2, 0x89f0, &(0x7f0000000180)={'syztnl1\x00', &(0x7f0000000200)={'syztnl2\x00', 0x0, 0x29, 0x5, 0x2, 0xbdb, 0x50, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @rand_addr=' \x01\x00', 0x10, 0x7, 0x7, 0x4}}) fsmount(0xffffffffffffffff, 0x1, 0x2) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000580)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000001a40)=""/102392, 0x18ff8) r4 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000005780), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r4, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r4, 0x4008af03, &(0x7f0000000f40)) ioctl$VHOST_SET_FEATURES(r4, 0x4008af00, &(0x7f0000000080)=0x200000000) r5 = dup2(r4, r4) preadv(r5, &(0x7f0000000440)=[{&(0x7f0000000100)=""/224, 0xe0}], 0x1, 0x0, 0x10000ac1) ioctl$VHOST_VSOCK_SET_RUNNING(r5, 0x4004af61, &(0x7f0000000000)=0x5) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, 0x0, 0x0}, 0x94) fchmodat(0xffffffffffffff9c, &(0x7f00000003c0)='./file0/file0\x00', 0x10) mount$binderfs(0x0, &(0x7f00000001c0)='./binderfs\x00', &(0x7f0000000280), 0x0, &(0x7f0000000000)={[{}]}) 1m35.955520066s ago: executing program 2 (id=2592): mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101097, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000100)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b100a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0\x00', 0x0, 0x80000, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) r2 = socket$igmp(0x2, 0x3, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000100)={0x1d, r3, 0x1, {}, 0xff}, 0x18) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmsg$can_j1939(r1, &(0x7f0000000140)={&(0x7f0000000440)={0x1d, r3, 0x0, {0x0, 0xff, 0x3}, 0xff}, 0x18, &(0x7f0000000180)={0x0}, 0x4, 0x0, 0x0, 0x24000044}, 0x4008010) read$FUSE(r0, &(0x7f0000000f00)={0x2020}, 0x2020) 1m35.765454632s ago: executing program 2 (id=2593): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0xe, 0x4, 0x4, 0x3}, 0x50) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000680)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x8, 0x1c, &(0x7f00000004c0)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x60}, {{0x18, 0x1, 0x1, 0x1c, r0}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0x0, 0x8}}, {{0x5, 0x0, 0x3}, {0x95, 0x0, 0x0, 0x700}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9, 0xfe00}, {0x6, 0x0, 0x6, 0x9}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff0, 0x50}, {0x7, 0x1, 0xb, 0x6, 0x8, 0x20}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {0x7, 0x0, 0x7, 0x0}, {0x18, 0x2, 0x2, 0x0, r1}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0x0, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1m34.663174221s ago: executing program 2 (id=2599): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000002540)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$tipc(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001800)={0x6, 0x3, &(0x7f00000006c0)=@framed, &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x100000, '\x00', r4}, 0x94) 1m34.33787345s ago: executing program 33 (id=2599): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000002540)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$tipc(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001800)={0x6, 0x3, &(0x7f00000006c0)=@framed, &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x100000, '\x00', r4}, 0x94) 1m16.213330384s ago: executing program 5 (id=1975): syz_usb_connect$uac1(0x0, 0x0, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) io_uring_enter(0xffffffffffffffff, 0x847ba, 0x0, 0xe, 0x0, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3c00000010001fff000000000100000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800900010076657468000000000400028008000a00", @ANYRES32=r2, @ANYBLOB], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'veth1\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@newlink={0x4c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x90646}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x4}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x4c}, 0x1, 0x0, 0x0, 0x600}, 0x2000000) 54.207010395s ago: executing program 5 (id=1975): syz_usb_connect$uac1(0x0, 0x0, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) io_uring_enter(0xffffffffffffffff, 0x847ba, 0x0, 0xe, 0x0, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3c00000010001fff000000000100000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800900010076657468000000000400028008000a00", @ANYRES32=r2, @ANYBLOB], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'veth1\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@newlink={0x4c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x90646}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x4}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x4c}, 0x1, 0x0, 0x0, 0x600}, 0x2000000) 26.606083242s ago: executing program 5 (id=1975): syz_usb_connect$uac1(0x0, 0x0, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) io_uring_enter(0xffffffffffffffff, 0x847ba, 0x0, 0xe, 0x0, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3c00000010001fff000000000100000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800900010076657468000000000400028008000a00", @ANYRES32=r2, @ANYBLOB], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'veth1\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@newlink={0x4c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x90646}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x4}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x4c}, 0x1, 0x0, 0x0, 0x600}, 0x2000000) 9.709273474s ago: executing program 6 (id=2836): mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', 0x14) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="12000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000040)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x4}, {0x6, 0x0, 0xa}, {}, {}, {0x85, 0x0, 0x0, 0x57}}]}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mount_setattr(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x100, &(0x7f00000004c0)={0x100003, 0x100080, 0x100000}, 0x20) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000001c0)=0x0) r3 = socket$packet(0x11, 0x3, 0x300) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r5, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r5, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB="4c000000100039042abd70000000000000000000", @ANYRES32=r6, @ANYBLOB="01180200031100002c0012800e00010069703665727370616e0000001800028008001500a8bc0d00040012"], 0x4c}}, 0x0) sendto$packet(r3, &(0x7f0000000480)="7eeb99b6f78c67515ea2f0d01d76", 0xac, 0x94, &(0x7f0000000140)={0x11, 0x86dd, r6, 0x1, 0x6, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x14) ioctl$sock_SIOCADDRT(r1, 0x890b, &(0x7f0000000380)={0x0, @nl=@proc={0x10, 0x0, 0x25dfdbfd, 0x1000001}, @nfc={0x27, r2, 0x0, 0x7}, @can={0x1d, r6}, 0x4, 0x0, 0x0, 0x0, 0xd30, 0x0, 0x3, 0x9, 0x7fff}) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000240)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@redirect_dir_off}]}) chdir(&(0x7f0000000140)='./bus\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) 9.70855104s ago: executing program 1 (id=2837): syz_open_dev$vim2m(&(0x7f0000000480), 0xfffffffffffffffe, 0x2) syz_emit_ethernet(0xc8, &(0x7f00000001c0)=ANY=[@ANYBLOB="856b934629fabbbbbbbbbbbb86dd6000000000922f00fc000000000000000000000000000000ff020000000000000000000000000001042022eb000000004d9800000800000086d5c047c4b8d25dc7ce1030c1b7a50211b9f80ac509cedbdbbbef820331f9c7c7cac5023e608bf41d578422a9a46756018189a801a443f8099cdb227f1bdf144b72d5b5de85e4f8eb45fd056478082986dd88be00000000100000000100000000000000"], 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) r0 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r0, 0xc0184800, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x8, 0xfffa}, 0x3a, [0x8000, 0x3ff, 0xf, 0x8, 0x80000001, 0x2, 0x7, 0x7f, 0xa9, 0x4d, 0x6, 0x5f, 0x9, 0x15, 0xffff2d37, 0xff7fff01, 0x7, 0x5, 0x1fd, 0x0, 0x6, 0x0, 0x7, 0x3c5b, 0x1, 0x22, 0xd, 0x4001, 0x0, 0xffffffff, 0xe661, 0x0, 0x7, 0x5, 0x8, 0x4c74, 0x10000, 0x242, 0x3, 0xe, 0x0, 0x80008071, 0x7, 0x0, 0x1, 0x7, 0x5, 0x3e, 0x20018e, 0xa, 0xfffffeff, 0x0, 0x6, 0x4, 0x8, 0x3ff, 0xfffffff9, 0x0, 0x2004, 0x6, 0x4, 0x4, 0xfffffffd, 0x40], [0x10000007, 0x9, 0x8000012f, 0x8008, 0x5, 0xfffffff3, 0x129432f6, 0xc8, 0x5, 0x1510edcf, 0x2c1, 0x6c7, 0x9, 0x0, 0x3, 0x0, 0x0, 0x5, 0x2f, 0xe, 0x312, 0x66abcbd2, 0xea4, 0x0, 0x4, 0x7, 0x7fff, 0x6, 0x400, 0x401, 0x6, 0x2, 0xff, 0x5, 0x1000005, 0x5f2d, 0xd, 0x4e0, 0x381, 0x4, 0xb, 0x4, 0x9, 0x8, 0x44, 0x6, 0x47, 0x8000, 0x1, 0x0, 0xffff, 0x2, 0x4, 0x9, 0x4, 0x3, 0x4000009, 0x6, 0x0, 0x3, 0x1, 0x48c93793, 0x42, 0x3], [0x7, 0x408, 0x3ff, 0x5, 0xffffffff, 0x100, 0x4, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0x10b, 0x4, 0x5, 0x5, 0x80, 0x1ef, 0x5, 0x8, 0x86, 0x3, 0x303c, 0x3e7, 0xb, 0x5, 0x2, 0x2, 0x3, 0x20000008, 0x4, 0x6d01, 0x6, 0x38, 0x200, 0x200, 0xffffffff, 0x3, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x4, 0x4000a9, 0x5, 0x6, 0xac4, 0xbf, 0xfffffffe, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0xa, 0xffffffff, 0x5, 0x1c, 0x120000, 0x7ff, 0x2009, 0x80a2ed, 0x4, 0x25], [0x9, 0xbb33, 0x7, 0xb, 0x5, 0x938, 0x6, 0x6, 0x0, 0xb9, 0xce4, 0x1ff, 0x2, 0x57, 0x4000005, 0x3, 0x6b6, 0x10000, 0x4, 0x7fff, 0xffff, 0xa620, 0x1, 0x2, 0x0, 0x2000006, 0x150, 0x1, 0x6, 0x16, 0xffffffff, 0x80000004, 0x5, 0x5, 0x1, 0x1, 0xfffff002, 0x10000, 0x3, 0x7e, 0x100, 0x9622, 0x8, 0xae, 0x20000008, 0x5, 0x226, 0x1, 0x5, 0x0, 0x30b1d693, 0xa1f, 0xf3f, 0x7, 0x530e, 0x6c1f, 0x0, 0x4, 0x5, 0x7ff, 0xd7, 0x200, 0xb, 0xfff]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x275a, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) ioctl(0xffffffffffffffff, 0x824e, &(0x7f000001b000)="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") sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000002000)=""/102400, 0x19000) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000300)='net/ip_tables_matches\x00') read$FUSE(r2, &(0x7f0000000640)={0x2020}, 0x2020) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000640), 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x2, 0x16, &(0x7f0000000800)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) 9.251843405s ago: executing program 3 (id=2839): bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) chdir(0x0) r0 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_GET_SEC_LEVEL(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000002740)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r0, @ANYBLOB="090328bd7000ffdbdf251f"], 0x1c}, 0x1, 0x0, 0x900000000000000, 0x4004}, 0x8010) 9.121518041s ago: executing program 1 (id=2840): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001e40)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a50000000060a09040000000000000000020000000900020073797a32000000000900010073797a30000000002400048020000180080001006c6f6700140002800800064000008801080005400000000814000000110001"], 0x78}}, 0x2000000) 8.855475462s ago: executing program 6 (id=2841): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x14}}, 0x4008000) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b708000002001e007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000d00)='sched_switch\x00', r4}, 0x10) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000300)='net/igmp6\x00') preadv(r5, &(0x7f0000002400)=[{&(0x7f0000001340)=""/4096, 0x1000}], 0x1, 0x39c5, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89fe, &(0x7f0000000340)={'bridge0\x00', &(0x7f0000000000)=@ethtool_coalesce={0xf, 0x0, 0x1fd, 0x6, 0x7, 0x9, 0x0, 0x5, 0x9, 0x2, 0xca1, 0x8, 0x1, 0x6, 0xff, 0x9, 0x2, 0x7, 0x7, 0xb, 0x64, 0x1, 0x6}}) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000000a40)=@newsa={0x138, 0x10, 0x1, 0x0, 0x0, {{@in6=@remote, @in=@remote, 0x4, 0xfff9, 0x2000, 0x1, 0x0, 0x0, 0x0, 0x1d, 0x0, 0xffffffffffffffff}, {@in=@dev={0xac, 0x14, 0x14, 0x2a}, 0x0, 0x6c}, @in=@remote, {0x0, 0x0, 0x0, 0x0, 0x1, 0xfffffffffffffffd, 0x4}, {0x2, 0x4, 0x40000000}, {0x2000000}, 0x70bd25, 0x0, 0xa, 0x0, 0x1}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x80ffffffffffffff, 0x0, 0x44}, 0x4810) 8.854899385s ago: executing program 3 (id=2842): socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$kvm(0xffffff9c, &(0x7f0000000100), 0x41, 0x0) r1 = socket$netlink(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, 0x0) ioctl$DRM_IOCTL_MODE_GETFB2(0xffffffffffffffff, 0xc06864ce, &(0x7f0000000440)={0x0, 0xffffffbd, 0x0, 0x0, 0x1, [], [0x0, 0x0, 0x3], [], [0x0, 0x100000000, 0x1, 0x9]}) socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r4 = socket$inet(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x4000000000000, 0x40, &(0x7f0000000140)=@raw={'raw\x00', 0x8, 0x3, 0x1e0, 0x0, 0x43, 0x90, 0x0, 0x98, 0x2d0, 0x178, 0x178, 0x2d0, 0x178, 0x3, 0x0, {[{{@ip={@empty, @local, 0x0, 0x0, 'macsec0\x00', 'ip6erspan0\x00'}, 0x0, 0x70, 0x90, 0x0, {0x0, 0x7a010000}}, @unspec=@NOTRACK={0x20}}, {{@ip={@multicast1, @multicast2, 0x0, 0x0, 'team_slave_1\x00', 'syzkaller1\x00'}, 0x0, 0x70, 0xb8}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@broadcast, 'dummy0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x240) r5 = dup(r3) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) r6 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000580), 0x2, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_SEND(0xffffffffffffffff, 0xc0502103, 0xfffffffffffffffe) write$UHID_CREATE(r6, &(0x7f0000000b00)={0x0, {'syz1\x00', 'syz0\x00', 'syz0\x00', &(0x7f0000000040)=""/15, 0xf, 0xa0, 0x8, 0x3, 0x5, 0x1635}}, 0x120) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) write$UHID_INPUT(r6, &(0x7f0000000c40)={0x8, {"751be3c602a0e5276e79c086adc21270633fb3d067b21d544abb92036ecf489f5b3345ad3d6df45ba403e3d9b1137267182b6c67e967f54aaae1a43f4632e4e173f8ce97adfb7996e5cd702f546f95645b64fc34a8730dc2b3be9d88f47e1f6a862b07ab1d850e3e817f6005dabb3381780aa95a7c31cb78bf8721902712937891e9438cd773ef9e8c64c67bf47ea562d9f71def0c6ea559873b67cbdec5e83ec479104c3b3d54aa973d173522c9779135e0b5d91a1cdec65798dd915f2f59515b9335b256d166d9aace8f6c881272af4514796e6bc6549a4c65a0b1fe100f9136250d114800ff60013f6361bd7a772bdba813242130a6afcd8df14522aeb8ab20c8b7ceaae10e40c273c91c9c6462141ccb4f873279862524f0252c25aabc8386c3e404f0acd9033d24103d662d33be10a409713a13b557843396136ffc3111cbebac293d82cf913a5ea34a5b728d8da1f80327f4386ae7e9c2b6997638c372ef75f40a8688e8c74b2689dafb6b2ad2b3d6b7d558beb22a305e5904ac8a291f188334baeecbabd5d0431d63468e2d456a30da83ce133247a76e72cb1b8794e2967ef0bc18f8fdab10838b725840dba1817f2ba431b5f4ff40c19f5c36195afd79cba926416b0f94283ecb68aab6bf10a562cc3291fd5b2ce009f966fd0a94b388a6c172305e281cfeec6f8688b98b36e9910913b12d7e8c4bee96918f412d409a873a56d863df5c254afed14ce8a8c43fc84d2036b40879290f282faf06a2884c74a79594776f260618a245769ab877c1ef31e27878ea89e4ca8bdd646ce95bab8a7d5a1de735048639a2d3680126211dc9c20085dd8d715e647197a0187d03a985bf06c8da5fd961aa49645b88a927b2a2455cbda4dd3382dd2af7a9430b8606f984f4424d19562d14380b171ef1424b84ea1d22e31555b7758264962a6fa03d39c7887f47a91815189dc63ab0ecef4692b2983025bab06aad0c7ff178aa62cc882a482940f3767ea1c679176a9bd308222625570ce4ce1b49cef27a3e2f50fae9eea4a6819be790a685ede4a36d6eaba696cde1d5b7b05765b84d4b70f750aff9dd455106d816ca6324b85b07d2622150605472b72a36f503dc5e01a5390458747aa3f19c8db247b97cb14222b5e79cc6e3135be812bc8ca7c9a155852cef9dcf017ae378d9ecc9482b4857dc98c403beaf9f8bc4960292777fc58221ad46e9d5976ce2941e4fe427810dfb032c99cef90cf17f4e0083c986d66e0e170c2fea96a7360897a81a57921a9025dd021c2b0f6bbe08f8a49d8ac428a7074930bd2ef7ad28a0f17550b45bbfddd723b710994160bcc0ea2e92dbcbb114fefe22db643b9d392118ec05d7f48807ea1c4b5e39845d8207dc6b24d5d8a573034189b3563cdd14f102e2b41239ad1581a7839981d56cbdb7d8c843560272a075788603ec9b62aec5de81c734e3d8118e271179cfdb9e0ffb460519d769c05ad2b5044c2eca76a2c0824b5275c06b8715c0b6df6625a70ca14cc86ebc401f7abbd6d53e8e5d391371840510a9fb2d515be1bb1581a7e2b3a8610425da60d9ba8a841c324c3e1487036a20bc4d9149cbad2be5ed0e37f5cd21eb0d475f0c5730139d8b790e768ea169ef74069b6ccb4d09c78fcd1f1b791faef2218ce5e2707ffd0e38ada6a96a88a53dfc2ad72c9791a92d6a4d86f0f832062d62d3b425f260f654266196584729971fc3903d24300c9da725d47daa985bddff4b6fe301eb324bf6a35157bd79a0cf213398380de3bd91f583d537415afff80658992a949e433ff048c1d2495dec0461f0dd5bf4c8ac506268cd959f3493d37f8feb754062ca89398ade01f923c850eebc84ba9ee3d8c46d880d6f54f0ceafa451669c44b3e5c64411b0c855c94e8d3c345915412e041d284481e4242a1ae828345d76614979c252316b0f5eec34b98077cf89ff1834c25de73e83ad92873f2da115c02af04b71e7303e6289dbe76aaf9e5400dbbd9952c985283ff18aea8a7cab00ae650d21d235b62d9c21965c9888deebd4102bc75b95d33c6b5548f64c3c3f8fa256f21ab2577354221d5ddbc7247d46fb3532ed6322eef55aa24ac77797a38d1614923e24a9d70f6a24e0a1f28519a202fd91100f4d12ce61c37c819874bfbe5c61b4eb06c1b2b1cce56afaf16d560cf4ea727566f701e10233051dd633f4cca90c09c7aa733ecc0932d855abc08566dffe484de6d498c3625f7c2ba5bb12925d5f12e6194e21df4a4d69e1d0915963a04959348d49de928635128126557f8b5b87e1a47da42b311c47d3f0f969f069404e72d8a0d3cb0147ae6ee87abf994f384959eae9c7a91509f94f53098a8017d62bb1050b28c7976309957c34321d5a9520567970280714857904fb6e8f8c54fcdbb768028e4b37d47fd53ebd9cadb94baecbb54c78c81f7a80dd4c616df98d20ec22a0459844828c18eb7ec6d46cdc535266468bef9cfc6ce844b4b7ec9e3ff9e2619c05b477f72be3448f931312ff85727d8e1f48fbb978cb4b22bf959e97ebf4f25e19710f38a2c518702853410b32e74a68c98d58973a4a5c9d3d99c331f0d918a76fd047bb77a18eb655f72f6867cb3093438a26f080dbff4c4cd9544b9f401da3db9d235921a44c61e8292b83f83e8c9825d50bb0dbe32216e21733da8024343206e571c1d051daa670895566a9a218fb112ab2cdfa6a76bfd6374454ee1c211e5871d4186af9c7fef85af11c5b8a11774a1dd890ed2d5723b8698c339bc32473a1b5a9ec39b093ed24a3ec02b6455479bb34fa5a96c1b38fbe356c36b863e28d1234b64bcc0d071c790283b9b71137948776d6a60b67ff552d64286db810ecb90f1117dbedf6d2ce3162ec4ca4070333d1bce11419c13fdc1772ffe70fb03ad824f285660ec0c1985fff2441eddd0fa4b58dc53256ffa0df94a59a3c4165d4ae8bb883b23a8512d435e026da4583183d5147dfb2e05742803c6e9a3166f9dc40e1565887b3fd5d97c00b97b1ac542c23658d4ff03e8b9f3ecf3e35206e6ab3f38f26b70ee4e101f84ad6e3dce689ebdfa544b27af4a9a78667f6ef3564f1f0ffd0a9ed142c77961c7ae9c9a1b300023b6d79511e65d3db989052be9166b4bf9fc128b05fc500af7e7938f4e7ba7d67a117cde6c6330ca18d57150c2d51281df54d8735410805a92d4e5885a580124ecc54bc49bf451c6110a7fa195ae5691743bc4f0d3ab0a1e434884bbfbe8d0e8a5de217269c54f2f2415dbdb7e9285c7006c21cf3b593eefffd79c52c4a95da668651ed12ffe7ec0d2206588c452d107d543cf90f514a417d67b30082ed8ea7ab609d27b4ef9a7e3ac9c0d32020bca61f1df1c83e0b9625e7d6944f6d1fa3e388fb88dc0fd053fe1f1d2c5fa282a59eb2459475c6f1b556fbc791104a6707b8d37d81e7bdf158417f3e920d07d3b6ff305bafec00291c825ffc7d965e570094853389f6996ef02cc3e2f5ce3468e2d0a4ded990d372c2b234c3c1bbd6b6cff24ce474cdd98c42e7179295ac12740cefaf6e86898fb7180db31116ac7bb6d06a242f1fff5530ac7fc47f6593ac73c1a231a73e28d5b4b90d1a596b981675e4f7e0616095dffa6807c49c9d147f5a81b2822b128b035f4de8e017e54ac06e2e7dd52b3bbd778a76477dbe33e6fce5ae786879ba0739de0dee0987258912445664a405cb12a01bb94a97abccdc6d3afe7b61ba72b403a2e66c4c6b2cad20c427c0daf1d9d2dc57ccd502ff4993367dd0debcadee0e431e9115977e1c51a1905fb54268d25aa71cf056358f6d2c4c8bccdc675e350499f7776a15b41fb9e74d56ce3c82a28e9ee1815e039c6b18c8c551ddd46689e27e4c6b4ec384ee8d7fe1bd0ef40a6c288111fd61f00302f7dc442183e6dc0a2cdbbd6d43e061687989f9fef7ce54b238038461bf941a0706e2dfa8c069f4d90d1381a7429b3e692e346074c4de9e208f473a8794a6aaac2a297c29a396a28a10f4a5fa17863ed592fc39d7e8549af9f952366cee76372cf17812964c7322b370ff7f8f2074cc16b88b7cf8fd44bc3504c77efa6effb0813fe4f8ad6da76054d84d50bd9d7e1ff78b9afb4988d843d298515895d9aeaa29e496492097c79d0ecd887045cbd37cc476decc5836640d9a000e2a0a9e389dd6a996cea1dc0a7f62e2abf25d6ebee990ef19db33783d0485eaf43476b134d6873fd9a4f376ec2e4ae0993407683597ebd9376ca9d9d85d4399b3d24b8b6bf0e4910f257f6f54887f321a3768f82982144c5fe4fdf40068c3c71d34ffec82726e704c40f82f537d41b3621f06c1bb11b1665de3732df4f3eb727c04ad6b25910d9d97163119a2b72ff40109edbc58676682e0f86f75870b6f639d368d11aa1ceae80708288757db2389b16a4420008ce4a7a8487cbb7c922108a1acff54a0da5fc32c4c1e29a483e50ab9818c15c86a4997b4c8ef8dce08f633d2b558823a1c3476e61badcbb4ebcfd5f89f4075f093f5ea52c5c6f6c3025a8558ffb7c38a0662c05b8c44c0af1f15d3df1b1814255e27e9edec3346e2d59202fd643cf51a8ac5fe2a17579433afb9898cdba1c31c6083a8040064cd67c5012738660a09677e2b2156074a6586c76b86b745e7e209884185226fdbc2d826e2264e0b8d9e8896af60d82cc06452366c5dbf959e14a1a12b56bea30e35b1f50cdf95e37e0a5d272a792caec048947dd56abfe85271f0131e8d7f542525230ee0b005fe6bdec05a5f42c7027b555292374b210b7a6d72139574e10500f7db0914270d122ad93a0893c6875008e6b055a0358a48ef9b9309089323a110fcc7c5122c45401532c075957214dd6c86305819ead9cdcddec00faf31b0be040165aee5210c648eb7ac1d856dfce811391876735a05e71f2c8fa0beed3c5489897de524dd52da8a18c5a69d0be29a59dba736addf52ba02bb14121660f973a030d705480ae121b44f6d46441af124982c6b759389977e32de862bf409eeae3eaf7321c779b1c2e32080e031d854c34ce5413a098e18ac7a4b871985c83b0ba4fe68d82061923547d3ea28e004fab11afa63fcd5a6149c4bb3a2480061e5d58899a5d717893c0b73be62d4a42eb3fec479aea240fae76ef79561d4a7bf26c4f67cbe1659557f20f8fce0e183e2b4da3553741cbd764714d3e6ebec6ff0a9fb7efcd99bc71c3938b4142ca0a69faa54bab2b4f7b9143633fd6e9a26f7766b8353f491a0bcb62066df77faaaf7b639d9455bdc8937968c51848e4391c52db579a48dcc3a7f1406053bbf06ee64eb3a5b7d2e0c63efdd5edeef53820e3e52d3d12828e39d698095aa3c3cd84989fc7ca73e541ba7da40aa2297a5e3633096dfb81b5c2ec6fbeb894e41bce4e8ec5096326feece88f5a795cad6097ea7c91ec487092ebad33c06f355a195d64d17afe092a0d7ae2161ad3d33f863336ed1e4055f7f81c065230e0c1fa5b332cd6a57692f3b0f60115dcece23ee7c46a45ac79e8ec19ca091c98f06750c802b103480ebe72849b22b7419ea1e35999d0b374286c20fe64880fc5259c61e300d15659b9f6a43127aaf0587048ca9a4284b2e25f3d079ddc194a7bf12a211bdc8f969be78e6d9a686c8ebdec19bd3518a901fd9bc3ad02065f0b145a8b72abf97d7584c7ebe6054e36d6f095df5a0cfc80e82878c4a5845f31e8f351e7411b0c81880523040585881fd87424e6288fc4b877a39bb81a9a40200c8e7a438d944c268d12d7ff1f234d2a12001d3a97ad15da3d628a420bcecd3f365488120", 0x1000}}, 0x1006) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mbind(&(0x7f00001fa000/0x2000)=nil, 0x2000, 0x1, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x3) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000000), r7) sendmsg$L2TP_CMD_TUNNEL_CREATE(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000280)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="1709000000000000000001000000050007000000000008000900fffffffe060002000000060108000a000100000008001800ac1414aa08001900e000000214001b0017"], 0x58}}, 0x0) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000006800)={&(0x7f0000000080)=ANY=[@ANYBLOB, @ANYRES16=r2, @ANYBLOB="150600000000000000000100000030000180140004007f020000000000000000000000000001060005004e220000060001000a00000008000600010000"], 0x44}, 0x5}, 0x0) r9 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r10, 0x4008ae89, &(0x7f0000000000)=ANY=[@ANYBLOB="01000000000000000a0100"/23]) 8.634027923s ago: executing program 1 (id=2843): sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x24000001, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10) r0 = eventfd(0x7) socket$inet6_tcp(0xa, 0x1, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d000000850000000800000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001000)=ANY=[@ANYBLOB="1e0000000000000001000000080000", @ANYRES32=r0, @ANYBLOB='\b\x00'/15, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0100000003000000050006000f00"/28], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000300), &(0x7f0000000200), 0x2, r2}, 0x38) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x6}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x3}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x20000800}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x15, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffe8a, 0x10, &(0x7f00000000c0), 0xfffffffffffffd27}, 0x48) 7.445355709s ago: executing program 6 (id=2844): r0 = socket(0x10, 0x3, 0x0) r1 = syz_open_procfs$namespace(0x0, &(0x7f0000000340)='ns/time\x00') ioctl$NS_GET_PARENT(r1, 0xb702, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x0, 0x2}, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00'}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x0, 0x0) r2 = openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, &(0x7f0000000140)) read$FUSE(r2, &(0x7f00000021c0)={0x2020}, 0x2020) r3 = syz_usb_connect$printer(0x2, 0x2d, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x20, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0xff, 0x20, 0x8, [{{0x9, 0x4, 0x0, 0xfd, 0x1, 0x7, 0x1, 0x1, 0x5, "", {{{0x9, 0x5, 0x1, 0x2, 0x20, 0x4, 0x0, 0xb}}}}}]}}]}}, 0x0) syz_usb_control_io(r3, &(0x7f0000000180)={0x2c, 0x0, &(0x7f0000001480)=ANY=[@ANYBLOB="0003840000000403"], 0x0, 0x0, 0x0}, 0x0) r4 = io_uring_setup(0xd1b, &(0x7f0000000300)={0x0, 0xa06c, 0x0, 0x5, 0x28b}) io_uring_register$IORING_REGISTER_FILES(r4, 0x20, 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000004c0)={0x2c, r6, 0x1, 0x70bd29, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_TX_RATES={0x10, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0xc, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x4}, @NL80211_TXRATE_LEGACY={0x4}]}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000801}, 0x0) 7.43609076s ago: executing program 1 (id=2845): socket$inet6(0xa, 0xa, 0x7c) syz_emit_ethernet(0x9a, &(0x7f0000000040)=ANY=[@ANYBLOB="0180c2000000aaaaaaaaaa0e86dd600101000064110000000000000000000000000000000000ff020000000000000000000000000000000000000000007802000000000000000062585a0ff12af8010d489432cc01f9f39c6526ece5d2603725b9cabfc2c9f4513d3dfb201f3a70a41ff6c2fca06a9bd768d5f177c14a5cd359c721417b883ecdcaba159514b06796dbf2ea9e520f1475c8e05b"], 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x5, 0x5, 0x2, 0x7}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0xa, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r3, 0x2000002, 0xe, 0xfffffffffffffda9, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000000000000000000000000ec4f95"], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000140)='contention_end\x00', r5}, 0x10) r6 = syz_open_procfs(0x0, &(0x7f0000000000)='setgroups\x00') write$vhost_msg(r6, &(0x7f0000000840)={0x796e6564, {0x0, 0x0, 0x0}}, 0x7) mkdir(0x0, 0x0) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r8 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSIGACCEPT(r8, 0x5607, 0x2c) ioctl$sock_bt_hci(r7, 0x800448f0, &(0x7f0000000080)) write$binfmt_script(r4, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, r4, 0x0) preadv(r4, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r9 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r9, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x60, 0x0, 0x0) ioctl$KVM_SET_FPU(r4, 0x41a0ae8d, &(0x7f0000000240)={'\x00', 0x4, 0x9, 0xbd, 0x0, 0x0, 0x2, 0x2}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) bind$xdp(0xffffffffffffffff, 0x0, 0x0) creat(0x0, 0x0) 5.749393667s ago: executing program 0 (id=2847): openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x6700c0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/protocols\x00') socket$kcm(0xa, 0x2, 0x73) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000001a300)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.current\x00', 0x26e1, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="110000000400000004000000"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000001f00b7080000000200007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x5, 0x7, 0x0, &(0x7f0000000040)="25a688a800a344", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, 0x0) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000380)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000000000000006600000008000300", @ANYRES32, @ANYBLOB], 0x2c}}, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r8}, 0x10) fcntl$notify(0xffffffffffffffff, 0x402, 0x5) 5.712660027s ago: executing program 3 (id=2848): r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDSKBLED(r0, 0x4b65, 0xb6) ioctl$KDGKBMODE(r0, 0x4b44, &(0x7f0000000000)) ioctl$TCSETSF(r0, 0x5404, 0x0) ioctl$KDSIGACCEPT(r0, 0x4b4e, 0x31) openat$ttynull(0xffffffffffffff9c, 0x0, 0x1, 0x0) r1 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) bind$802154_raw(r1, &(0x7f0000000240)={0x24, @short={0x2, 0x0, 0xfffe}}, 0x14) syz_open_dev$ptys(0xc, 0x3, 0x0) (async) ioctl$KDSKBLED(r0, 0x4b65, 0xb6) (async) ioctl$KDGKBMODE(r0, 0x4b44, &(0x7f0000000000)) (async) ioctl$TCSETSF(r0, 0x5404, 0x0) (async) ioctl$KDSIGACCEPT(r0, 0x4b4e, 0x31) (async) openat$ttynull(0xffffffffffffff9c, 0x0, 0x1, 0x0) (async) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) (async) bind$802154_raw(r1, &(0x7f0000000240)={0x24, @short={0x2, 0x0, 0xfffe}}, 0x14) (async) 5.631767016s ago: executing program 3 (id=2849): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c00000011000500000000000000000007000000", @ANYRES32=r3, @ANYBLOB="00000000000000000c001a80080005"], 0x2c}}, 0x0) sendmsg$nl_xfrm(r0, 0x0, 0x0) syz_usb_connect(0x2, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000693f0c104410017020050102030109022400010400aa0309042c0002c10db28709050201200003100d090585"], 0x0) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000380), 0x80000) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r4, 0xc058534f, &(0x7f00000001c0)={{0xf}, 0x0, 0x0, 0x5, {0x4}, 0x0, 0x1}) 5.121259113s ago: executing program 1 (id=2850): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0xc8c0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) close(0xffffffffffffffff) socket$inet6_mptcp(0xa, 0x1, 0x106) socket$phonet(0x23, 0x2, 0x1) r4 = syz_io_uring_setup(0x9e, &(0x7f0000000000)={0x0, 0xec25, 0x0, 0x2, 0x40080333}, &(0x7f0000000240)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x6007, @fd_index=0x4, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001800)=""/211, 0xd3}], 0x1}) io_uring_enter(r4, 0x47ba, 0x0, 0x0, 0x0, 0x0) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) r7 = syz_usb_connect(0x2, 0x4a, &(0x7f0000000300)=ANY=[@ANYBLOB="12011003a12591405e043f0490fc010203010902380001010090050904000004441b5c0009050000000000000009050402000000000009058802"], &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r7, 0x0, 0x0) connect$inet(r2, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) getsockopt$inet_IP_IPSEC_POLICY(r2, 0x0, 0x10, &(0x7f00000004c0)={{{@in=@initdev, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in6=@local}}, &(0x7f00000003c0)=0xe8) setsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x4}, @in6=@empty, 0x0, 0xfffc, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, r8}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, {}, 0x0, 0x0, 0x1}, {{@in6=@dev, 0x0, 0x32}, 0x0, @in=@private=0xa010100, 0x0, 0x3, 0x0, 0xb7, 0x2}}, 0xe8) sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x1c) r9 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$sock_SIOCETHTOOL(r9, 0x8946, &(0x7f0000000140)={'netdevsim0\x00', &(0x7f00000000c0)=@ethtool_coalesce={0xe, 0x8000, 0x8, 0x6, 0x7, 0x5bf10b45, 0x8, 0xfffffe00, 0xb, 0x80000000, 0x5, 0x4, 0xfffffff9, 0xfffff801, 0x3, 0x10000, 0x8, 0x9, 0xbe2d, 0xe, 0x80000, 0x1}}) shutdown(r9, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r9, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x0, 0x0}, &(0x7f0000000180)=0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r9, 0x84, 0x25, &(0x7f0000000280)={r10, @in={{0x2, 0x4e21, @empty}}, 0x0, 0x1, 0x3, 0x8, 0x0, 0xfffffffd}, 0x9c) bpf$TOKEN_CREATE(0x24, &(0x7f0000000000), 0x8) 5.058123s ago: executing program 6 (id=2851): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400010bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x10, 0xe, &(0x7f0000003540)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x10, &(0x7f00000000c0), 0xffffffffffffffc2}, 0x48) 4.987719908s ago: executing program 5 (id=1975): syz_usb_connect$uac1(0x0, 0x0, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) io_uring_enter(0xffffffffffffffff, 0x847ba, 0x0, 0xe, 0x0, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3c00000010001fff000000000100000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800900010076657468000000000400028008000a00", @ANYRES32=r2, @ANYBLOB], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'veth1\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@newlink={0x4c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x90646}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x4}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x4c}, 0x1, 0x0, 0x0, 0x600}, 0x2000000) 2.811643551s ago: executing program 0 (id=2852): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) setuid(0xee00) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000380), 0x101040) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000080)={{0xd248ec47ceaee1cf, 0x2, 0x7c77, 0x2, 0x8}}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x40005) 2.808450308s ago: executing program 6 (id=2853): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r0 = openat$cuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f00000024c0)={0x2020, 0x0, 0x0}, 0x1fbb) close(0xffffffffffffffff) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0)={0x78, 0xfffffffffffffffe, 0x0, {0x410000003, 0x10, 0x0, {0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x2}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_CREATE_OPEN(r0, &(0x7f0000000240)={0xa0, 0x0, r1, {{0x2, 0x2, 0x5bc, 0xfffffffffffffffe, 0x8, 0x81, {0x4, 0x5, 0x952, 0x6, 0x2, 0x7, 0x4945d687, 0x5, 0xd, 0x8000, 0x6, 0x0, 0xee00, 0x4, 0x2cd}}, {0x0, 0x2}}}, 0xa0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000032680)=""/102392, 0x18ff8) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$KVM_GET_MSR_INDEX_LIST(r3, 0xc004ae02, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2800, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="f80000001600010029bd7000ffdbdf25ac141443000000000000000000000000640101000000000000000000000000004e1d00024e220b07020080402f000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ac1414aa0000000000000000000000000a0004d26c"], 0xf8}, 0x1, 0x0, 0x0, 0x9010}, 0x8800) 2.800809696s ago: executing program 3 (id=2854): r0 = socket(0x2c, 0x3, 0x1) r1 = socket$nl_route(0x10, 0x3, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x8) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(0xffffffffffffffff, 0x0, 0x0) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) preadv(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) r3 = syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2) syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), r0) ioctl$VIDIOC_CREATE_BUFS(r3, 0xc100565c, &(0x7f00000013c0)={0x3, 0x2, 0x2, {0x5, @vbi={0xb5, 0x4, 0x3, 0x0, [0x0, 0x18000000], [0x8200, 0x1]}}, 0xe}) ioctl$VIDIOC_QBUF(r3, 0xc058565d, &(0x7f0000000200)=@fd={0x0, 0x5, 0x4, 0x10, 0x0, {}, {0x0, 0x0, 0x0, 0x4, 0x0, 0x0, "001500"}, 0x0, 0x2, {}, 0x18603}) munlockall() ioctl$IOCTL_VMCI_VERSION2(0xffffffffffffffff, 0x7a7, &(0x7f0000000040)=0x90000) ioctl$IOCTL_VMCI_DATAGRAM_SEND(0xffffffffffffffff, 0x7ab, &(0x7f0000000080)={&(0x7f0000000180)={{@host}, {@hyper, 0x2}, 0x400, "74752971e3de6d77f998948fcfdc896e88f24af61923640697831c25670eabe2df84dcba01aa9482568dff36d6c782e3d49f6ce06ddc471c1c8afcbea60d857b859516d8ea877af53facbfa190488bcaa5be5b0877a97c3842ad48e019160b4ac3ad52ba14cdcb1653aa7dec7e5aa0bd9cb912154851c47fe81142359a53f8d5f26014f69514e6d9cfdb905347870890b6b97c592dc7ff950b71f401e7adbbf1e4ecf610faaaa58f4a124d3d94250af4cc9b5c6210f134632b30f2bd0844f2eb9e4294fb040f318d0631919a3448413701aaaf61dc2ee777700ad5a958b8f429f8c758c0147e96c987a41ce7febfd18269fc108fee6be4cc384e41869ea77c67a68f471ad3d8a048e9e8894d41a50651e5ee73d4eb5c0c6ab653715be0a5fcfeb2e78b2b9b9a3bfad4ef0ad26c0c057d52178e962b05c5b3bc40d723f2ea0b7dcab4e8383e41f924f2ea863c7396940c671119d42f30098f02978774c78481ebdac3e7beca0ab5739d18793ccebd68290018b4760422dce2f5364000071acec5585cd0e1b8c07df0621015ee5484475424472e67a699aa4a308d9055deee82e282de530fc19fa1141cc52e35bbce84f0dd93e8974ebf6916b6969b97efd8c12b7ac424121a7ff1819a96107313b7e09fda1498575e8d4e4f93e03c371adbf5b3757a20d55d25992f827541f7bbdddae16cae23078fccb9ad270299699f7c6fe09a85fdc12ebd6612afc5948b464150773fdf3578d8bf351f2ea2b3b9b3f2f18fa719dc7392756267cd6c8fd79db7ce90aef0750eeafd070e55e660ff5d0878c52bb77f02de3e5cd27e8394997e0138140406e68d6192965eddd38e43c6777108829182fcb29ca803279726575151f309de24b900e22e114cf7ba3ee14b7a9f48adddd3b62198a4336ff46c17c889fea264c53d3ebd00dd997b5fcebcfcd9ffcde93b2019ee218fe9f7f02f209e6ab828a0dde7cab93ed7e4c164a6474cc618489e304efc641ad6bcc133821af28f965de58dd96c64dffeda93ddccabc60c8cd200ee0a2e6c45671e2a243383be236cab6df1d34d9d5dbaa4a0767629a476cebfce63be1eb2355b04c0753f2e8fa9713b7cf6e70eb362219242a2829dcf392ceebad4da3988094d3c51bf3ce702f52af23a577bb8a279ecd372a215e89091e1c65806b18a8d81c68fb272ce5ebf2f8ae2c13b466e6dc20a9520c00a3240fa68dfa34b20b96502da80466621d0e9ccc856f7f6666e59bf075f5799f206fc4d4fa5f16950559b1e28e63c028dabed50f7f2603b73ffbce74c617347175e01d307c9574dfd7c80b724d084029b425390e667de020f504af8b091807e64f7a41f5592eb879cb2d56eb175fc3ba17505b4f0196153a7521f40fccbf202338934c054eeb9b56e922de2d061eaa8cc202f0d60b11a2e55b0c8168f97acbb7912724105ee"}, 0x418, 0x7}) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000c40)=ANY=[@ANYBLOB="580000001000010009000000000000000000ffff", @ANYRES32=0x0, @ANYBLOB="00000000da44000024001a8020000a8014000700fe8000000000000000020040000000000500080002000000140003007866726d30"], 0x58}, 0x1, 0x0, 0x0, 0x2c}, 0x40408c4) 2.617074657s ago: executing program 6 (id=2855): r0 = socket$inet6(0xa, 0x80002, 0x88) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = add_key(&(0x7f0000000080)='user\x00', &(0x7f0000000000)={'syz', 0x2}, &(0x7f0000000040)='9', 0x1, 0xfffffffffffffffc) keyctl$chown(0x4, r2, 0xee00, 0xffffffffffffffff) keyctl$setperm(0x5, r2, 0x4002410) keyctl$chown(0x4, r2, 0x0, 0x0) r3 = socket(0x11, 0x80a, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c000000100001040000000003ecffffff0021ac", @ANYRES32=r4, @ANYBLOB="00000000000000001c00128009000100626f6e64000000000c000280080007"], 0x3c}}, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x10000000004e20, 0x0, @mcast2, 0x6}, 0x1c) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x3000004, 0x3032, 0xffffffffffffffff, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0xb, &(0x7f0000002740)=0x401, 0x4) ioctl$EXT4_IOC_CLEAR_ES_CACHE(r0, 0x6628) syz_emit_ethernet(0x83, &(0x7f0000000040)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaf9ff030486dd601b8b97004d88c19e9ace5ffb2e9fc603dd282100000002ff02000000000000000000000000000104004e200023b0"], 0x0) r5 = creat(&(0x7f0000000440)='./file0\x00', 0x0) open_by_handle_at(r5, &(0x7f0000000c80)=ANY=[@ANYBLOB="18000000f800030000000000fbd5"], 0x4000) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000140)={'erspan0\x00', &(0x7f00000000c0)={'gretap0\x00', 0x0, 0x700, 0x10, 0x2, 0x0, {{0xa, 0x4, 0x1, 0x4, 0x28, 0x67, 0x0, 0xb, 0x2f, 0x0, @private=0xa010102, @private=0xa010100, {[@timestamp={0x44, 0x14, 0x4f, 0x0, 0x3, [0xffff, 0x3, 0x3, 0x9]}]}}}}}) sendmsg$nl_route_sched(r5, &(0x7f0000000500)={&(0x7f0000000080), 0xc, &(0x7f00000004c0)={&(0x7f00000001c0)=@delqdisc={0x2c4, 0x25, 0x8, 0x70bd27, 0x25dfdbff, {0x0, 0x0, 0x0, r6, {0xfff2, 0x5}, {0xffe0, 0x9}, {0xfff1, 0xfff1}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x3, '\x00', 0x20000000, 0x2, 0x4, 0xb}}}}, @TCA_STAB={0x170, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x2, 0x9, 0x3, 0x7, 0x1, 0x7, 0x7, 0x2}}, {0x8, 0x2, [0x6, 0x8]}}, {{0x1c, 0x1, {0xd1, 0x6, 0x5, 0x5, 0x2, 0xfffffffd, 0xffffd741, 0x1}}, {0x6, 0x2, [0xfff]}}, {{0x1c, 0x1, {0x9, 0x5, 0x7c6, 0x4, 0x1, 0x0, 0xd1b5, 0x8}}, {0x14, 0x2, [0x5, 0x7fff, 0x74, 0x6, 0x0, 0xab, 0x401, 0x6]}}, {{0x1c, 0x1, {0x80, 0x7, 0x1, 0x5, 0x2, 0x3, 0x4, 0x1}}, {0x6, 0x2, [0x4]}}, {{0x1c, 0x1, {0x4b, 0x7, 0x4, 0x13e0000, 0x1, 0x6, 0x2, 0xa}}, {0x18, 0x2, [0x3, 0xe4, 0x9, 0x3, 0x4, 0x3, 0x9, 0x5, 0x7fff, 0x6]}}, {{0x1c, 0x1, {0xe, 0x3, 0x1, 0x400, 0x2, 0x2, 0xb, 0x5}}, {0xe, 0x2, [0xfff, 0x5, 0x0, 0x2e46, 0x9]}}, {{0x1c, 0x1, {0xf8, 0xa9, 0x4, 0x47, 0x0, 0x9, 0x4, 0x1}}, {0x6, 0x2, [0x1ff]}}, {{0x1c, 0x1, {0x1, 0x7f, 0x1, 0x3, 0x2, 0x5, 0xd093, 0x2}}, {0x8, 0x2, [0xcf2e, 0x800]}}, {{0x1c, 0x1, {0x2, 0x5, 0x7, 0x101, 0x0, 0x0, 0x8, 0x3}}, {0xa, 0x2, [0x9, 0x3, 0x6]}}]}, @TCA_STAB={0xa4, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x3, 0xd, 0x7ff, 0x1ff, 0x2, 0x6, 0x9, 0x5}}, {0xe, 0x2, [0x1, 0x4, 0x5, 0x2, 0x2]}}, {{0x1c, 0x1, {0x7f, 0xff, 0x4, 0x716c, 0x2, 0x4, 0x5, 0x2}}, {0x8, 0x2, [0x0, 0x3]}}, {{0x1c, 0x1, {0x1, 0x1, 0x7f, 0x9, 0x0, 0x400, 0x15, 0x1}}, {0x6, 0x2, [0xba]}}, {{0x1c, 0x1, {0x6, 0xdb, 0x5, 0x1, 0x1, 0x4, 0x81, 0x5}}, {0xe, 0x2, [0x8, 0x7fff, 0x8000, 0x9, 0x0]}}]}, @TCA_STAB={0x50, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x3, 0x7f, 0x101, 0xf2, 0x0, 0x7, 0x3, 0x1}}, {0x6, 0x2, [0x3]}}, {{0x1c, 0x1, {0x3, 0x23, 0x713, 0x8, 0x0, 0x3, 0xfffffffb, 0x4}}, {0xc, 0x2, [0x80, 0xbc, 0x9, 0x16]}}]}, @TCA_RATE={0x6, 0x5, {0x5, 0x8}}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0xd9}, @TCA_RATE={0x6, 0x5, {0x0, 0xff}}]}, 0x2c4}, 0x1, 0x0, 0x0, 0x5e40e90ee2e2c3a6}, 0x4080) r7 = socket$inet6(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x40, &(0x7f00000003c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x308, 0x0, 0x12, 0x60a, 0x0, 0x202, 0x238, 0x2e8, 0x2e8, 0x238, 0x2c0, 0x4, 0x0, {[{{@ipv6={@ipv4={'\x00', '\xff\xff', @dev}, @mcast2, [0x4000000], [], 'veth1_to_bond\x00', 'xfrm0\x00'}, 0x0, 0x108, 0x130, 0x0, {}, [@common=@unspec=@statistic={{0x38}}, @common=@inet=@socket2={{0x28}}]}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0xffffffffffffffff}, {0xffffffffffffffff, 0x1}}}}, {{@ipv6={@private2, @loopback, [], [], 'vxcan1\x00', 'geneve0\x00'}, 0x0, 0xa8, 0x108}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv4=@empty}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x368) syz_usb_connect(0x5, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="1201000000145f405e04bd84b689010203010902240001000000000904ed0002ff5d010009050303000000050009058a03"], 0x0) 1.601244425s ago: executing program 0 (id=2856): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="1b0000000000000000000000000004", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xf, 0x10, &(0x7f0000000040)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@func={0x85, 0x0, 0x1, 0x2000, 0xfffffff5}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000140)='syzkaller\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_device, 0x0, 0x8300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 1.099142018s ago: executing program 0 (id=2857): r0 = openat2(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x480042, 0x40, 0x8}, 0x18) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000000080)={0x7, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}], 0x7, "900333975a4623"}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000001080)={{r1, 0x0, 0x5, 0xac7, 0x9, 0x9, 0x8001, 0x2, 0xc, 0x9, 0x6, 0x8, 0x1, 0x37, 0x6}, 0x10, [0x0, 0x0]}) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000001140), 0xffffffffffffffff) sendmsg$IEEE802154_START_REQ(r2, &(0x7f0000001200)={&(0x7f0000001100)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000011c0)={&(0x7f0000001180)={0x3c, r3, 0x300, 0x70bd27, 0x25dfdbff, {}, [@IEEE802154_ATTR_PAN_COORD={0x5, 0x19, 0x7}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xaaa3}, @IEEE802154_ATTR_PAGE={0x5, 0x1d, 0x9}, @IEEE802154_ATTR_BAT_EXT={0x5, 0x1a, 0x8c}, @IEEE802154_ATTR_COORD_PAN_ID={0x6, 0xa, 0xffff}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x20000887) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000001280), r0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f00000013c0)={'syztnl1\x00', &(0x7f00000012c0)={'sit0\x00', 0x0, 0x8, 0x40, 0x3, 0x1000, {{0x37, 0x4, 0x1, 0x2, 0xdc, 0x65, 0x0, 0x1, 0x4, 0x0, @broadcast, @multicast2, {[@noop, @timestamp_addr={0x44, 0x34, 0x1d, 0x1, 0xb, [{@private=0xa010100, 0x7}, {@local, 0x1}, {@empty, 0x2}, {@broadcast, 0x800}, {@local, 0x80000}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x9}]}, @timestamp_addr={0x44, 0x44, 0x1b, 0x1, 0x4, [{@broadcast, 0x80}, {@broadcast}, {@remote, 0x9}, {@dev={0xac, 0x14, 0x14, 0x27}, 0x3}, {@rand_addr=0x64010102, 0x4}, {@remote, 0x2}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x10}, {@remote, 0xfffffffc}]}, @ssrr={0x89, 0x1b, 0x5e, [@local, @remote, @private=0xa010100, @broadcast, @empty, @local]}, @timestamp={0x44, 0x28, 0x75, 0x0, 0xa, [0x3, 0x10, 0x0, 0xb, 0x8, 0x9, 0x2, 0x0, 0x2]}, @timestamp_addr={0x44, 0xc, 0x58, 0x1, 0x8, [{@dev={0xac, 0x14, 0x14, 0xc}, 0x668}]}]}}}}}) sendmsg$ETHTOOL_MSG_RINGS_SET(r0, &(0x7f00000014c0)={&(0x7f0000001240)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000001480)={&(0x7f0000001400)={0x64, r4, 0x200, 0x70bd25, 0x25dfdbfe, {}, [@ETHTOOL_A_RINGS_RX_MINI={0x8, 0x7, 0x6}, @ETHTOOL_A_RINGS_TX={0x8, 0x9, 0x2}, @ETHTOOL_A_RINGS_RX_JUMBO={0x8, 0x8, 0x8}, @ETHTOOL_A_RINGS_RX_MINI={0x8, 0x7, 0xf43}, @ETHTOOL_A_RINGS_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}, @ETHTOOL_A_RINGS_TX={0x8, 0x9, 0x3c}, @ETHTOOL_A_RINGS_RX_MINI={0x8}, @ETHTOOL_A_RINGS_RX={0x8, 0x6, 0x6}, @ETHTOOL_A_RINGS_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x64}}, 0x20000090) r6 = syz_genetlink_get_family_id$nfc(&(0x7f0000001540), r2) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f0000001580)=0x0) sendmsg$NFC_CMD_FW_DOWNLOAD(r2, &(0x7f0000001640)={&(0x7f0000001500)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001600)={&(0x7f00000015c0)={0x28, r6, 0x8, 0x70bd26, 0x25dfdbfb, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_FIRMWARE_NAME={0x4}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r7}]}, 0x28}, 0x1, 0x0, 0x0, 0x4}, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) lseek(r8, 0x400, 0x0) ioctl$SG_SET_COMMAND_Q(r0, 0x2271, &(0x7f0000001680)=0x1) sendmsg$IEEE802154_LLSEC_ADD_KEY(r2, &(0x7f0000001780)={&(0x7f00000016c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000001740)={&(0x7f0000001700)={0x28, r3, 0x400, 0x70bd28, 0x25dfdbfd, {}, [@IEEE802154_ATTR_LLSEC_KEY_BYTES={0x14, 0x30, "47c775fd2075dada5ec503642bec6083"}]}, 0x28}, 0x1, 0x0, 0x0, 0x800a1}, 0x40) r9 = openat$uhid(0xffffffffffffff9c, &(0x7f00000017c0), 0x2, 0x0) write$UHID_CREATE2(r9, &(0x7f0000001800)={0xb, {'syz0\x00', 'syz0\x00', 'syz0\x00', 0x21, 0x5, 0x98, 0x7, 0x9, 0xff, "e7b2f9a7f6472baee4691b5b48ee43c29bac2536c67f09853479c2a4c2fda336b5"}}, 0x139) r10 = syz_clone(0x10000000, &(0x7f0000004000)="61d5196256ff8542c8ee06a75fa9bf95f8f85c", 0x13, &(0x7f0000004040), &(0x7f0000004080), &(0x7f00000040c0)="79b7939127fc891559c392e0d9ca1f7ce448be3b105891507abb313b4385bb4ebe2fd8376ba73c21bfc244315e9490c0e91b95bf90e6ab6e310726cf9710258751349c9cc6ba9afb41a945668188c082dbb15fe69412aeae414891853c79d8c496cc9e01fc422b4a4c8ffea7d86fc7fa1d9eb4b4db75bfaca97edfe80d7ed2217bfcfe9ebc371427f3ac5e62a8555372556f64d0d518b1e649495050d078b64184f79b9ff81c3e7f5578e37bf42f68c3b6077205551b1b156645c7868e240f87380a4c80b7dbd1a219594d5062a5338725fcfadcd2033d3a2bc6a621f8f2de") statx(r0, &(0x7f00000041c0)='./file0\x00', 0x0, 0x2, &(0x7f0000004200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fcntl$getownex(r8, 0x10, &(0x7f0000004780)={0x0, 0x0}) fstat(r9, &(0x7f00000047c0)={0x0, 0x0, 0x0, 0x0, 0x0}) statx(r0, &(0x7f0000004840)='./file0\x00', 0x800, 0x8, &(0x7f0000004880)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r15 = getpid() ioctl$NS_GET_OWNER_UID(r0, 0xb704, &(0x7f0000004980)=0x0) sendmmsg$unix(r0, &(0x7f0000004c00)=[{{&(0x7f0000001940)=@abs={0x0, 0x0, 0x4e20}, 0x6e, &(0x7f0000003f40)=[{&(0x7f00000019c0)="43dfe01f03accf5b3e9d5981faeda5aba493f55e62ca3cba3ad2934782418685d8ad6440a2d98c6c97a8b2f402002d6065b18a360efc9fa277daf90e8976a183b62e3dcbaa987b5068c6b5a5036ac7876962200b439c629d8ecc123aaf2a40ae61ef4d8f3703c7a21f816041631199191aaa2536f6960bfebf511a55d2fcc1e03ae28c650c6bbc409f36f14e52f9680281c566eae7fccc5ec6820028c3f91c7f77cf460ce540a4424b48aa89d45373a5be2e6197bfe09595a097f2815a616001be20001a98678599209bf326ff3db40d145afda3ce5aa18facf04b10c2", 0xdd}, {&(0x7f0000001ac0)="c76f9bc31575d8f10a838d68034cfcee5ec64094586b180e279330a216c946883b503ceffef699d4911ea11baee7a2fd3b", 0x31}, {&(0x7f0000001b00)="aae6ec505675ca6e3cce79a8a60d32815189a664ae25d523e84d2f9b439dce62f26b219a40bcceb5e89609411810cc8cd6f1c1a6ca7465eea284c3d8b55e9782658698c55fe99ba395b6d8ef8d240ed77ade5d002cc687b34175c9129282e794e730f1f986cb9dbb766e5fea9fb268ddd23672349d4b6c5a2a5267c95ea698db8754667580f40f9bccf9ff32601a4395c349a291c7d955a77f330d98edbe97bb0a05b67f1caa0eaeedff40d429791f5178f5cdbd6f35309106bf77794708682b136a44ba1254885d4dc0dd1f0823513768e74d58f61625ef208151694b7b3d38f74e42586b0a512e7f397cf29c2fd1d5175f44a8220edb", 0xf7}, {&(0x7f0000001c00)="3f0a15fea900622a58babc44174812f61351e2a4941a3f992aaeeb029b0034bcd8fedd1fd0d6434e2ddc19897eed9ee39863c117fe7b1fca999bd4c5f3e0682d4958a6e64d8e92b807f8bf485a223a0d6106b8957e9a2f34e1d662b96b95903b617c83828370a1b79998d3c00d0af5c8faa2c0f6c2896d739c89a139bfa0bca4cec49b2ae876da72d8e90e975af6d1ccd51ef79c72427303a4ce3b369a1306938169958025873126e6315dd91405d1bfe16f883a4ecebfd1a8d6017deb71c086185b7e4eaf15e784f48d0f89", 0xcc}, {&(0x7f0000001d00)="c7a0b15bd46d7596cfabe3f004a3da56b6c25ee46e0e3834354613daf63ee9e83c01c939918823799c908da116932581f2df3a20fdc791b6acf4e5401590368168cdfd2a15184167e8c37956b06a1786c60328acdf486275e028d69f36135d7181ed9f6e79e3e54c1c403760a7f281399bd2f62a01ab56e637d8c02f04680aaaaeb684a9e3d64b852b8c98176064090add0a9d7f778c29801b85384c2c27a86409e3088ab503d5fa481b48bda9e3f65725633e408f58b5f58f0edd4570efa736c5e5e7d468b7bf679b18a35e7385fc7a94a58a7c8e1ed8c90bc804b8d7d930c9df830e8ea3589f668f2612f7e48d557a9ad273f26fcf36ffb1ca2fa19e3961df1f70b80de62c814c5ab892d97be4b555f590ff58f4b0f4c9fd452bd800a06fd456e822792804d181d7c60ded309dbd1cf6d5ee88d14d92282f1bad37afc58125c2c608b33f4f3f86846a631a70a797f5f9e2150593412babaca2d6cede0db8d763e50b4bfd16b14ac2391eecc52533dfc3eb391bacb2db348e74ac42b2d571bab58d6e25fcd7c2b52be0fbcf0b2470d6e9b9cc8252e43876dee649dc2fa976ff1e2eec421492ccc2abca713be72d5c643c08c0275a8c4724272435d13b9682d9ef8924553e0a777f8f2be3a3395057d57f1e8ccd22f649776f94d8ecb995c009dc9a5d20fa284d0daae22abd246d696b2b5b06901114f957ff27fad205ef821e743c9269b5f93caa9c3a6c68603ef505aee30ce3f65d06f32544c7293372b5822b13889bcb3723f86ecb81617213a60355c07da39eaf35f8680823e602356f7dfe655e29d6a00c64d1051d2b232085073d1e4457635537c47b1179eda574355f96aa3ee97208d7fb568f92da71b8646e9ac2ca7a5a364ae690d614142baf0e70e08d24caa3cf2b77c41c16c2d6d857639af0ae6cec8d8d6faa1020116041a5d8a4e6e4e19b934c213a573cf947462f3c0346dbcb8a7707adea816aa84e459edd51dc76390a40d863645e85dcc4bdcf1dace6b3260095f1af58505be70b43fb068b04c770a36e7b750407ab3950c2a09d13791ad4ad23a96992e32f57e4ccd1724e33e6bc94e70e417347e5a3b6fb46a781b37d21c26aeeccb87980dd580875bbeb95b8749bb5c5a10cc8a23aaf30ec4a27b59016baa3002fc07284583ba2dd8586634e21fb3e15c51e7b00087357b00a4f7158cdf80c9fbe2e00a7bb648400a478f62b2b83e4a1917c0debf5d15bc92bf09503339967d2d4408267937ae18cba56bd3bf27e2cb821ac9ec444b2e9cc0546ce15f51736f85b937254c58757fd192aa2a4edbc2c1412d90e2b91b8f8379ebbb9ec7822c63ff8c311251b06ff1e93220f92d8e23cc1c9e6086e2fce822462c88bf723ece67467d811a138b2357885aa1b0bb0fec34b1c905420660b7b1ae4c057871954dce4595c4ee4dae3c7c2becc00bb2e6679e65534041e168440300e7b0f5a4148dc0b3566a819213938d53630a608bb2b3aea7df79b1db92db0ddf5d97863da6be42d3435e5b55cd06f39c8e584d68b3f08b1ab12ea2fa8c5a40e08e18df46035f59514ed184d05f7f6762446e1db0dc635b73cf89b6907f9598aae8885da22898ad8c6d644361e6787ddf43f7831cf6abd5f40a0c1e4daa621e4e27bd460daa1b424202ad084c67a2266ca6ba4f7eb96249aca61b09d77e50c5f3b386efa0743f3f0902352fcd006ee57cd49f9a35f80fac2968756eb97d36b6eb856ec89ec0f2c2252a0fa1d99deddf204efed559af2175d3984eed37711099912755888f83e8c33f62db06580a8b154becba53922ada0fd1fb198472b201303c504a7cb46a56d26d0d69eac6c5c231e82eaf149658221407094ec85dddf0955811ce4cc09511de942ce528328fd28b769f9a0e80748e65a323ce11f051e700c4d42ff5883afe972448e4141147497175c3bc84989474337095cd3bc04003e9df7d8c4039d77b4016fb67978c10f6f15754440fa75d84e2ce58f797fe54e53d104aacf8feb736bed1fb2241a1f7d83a76b46c9f55c19b679439c2ad8f81e2a2cb53cc371eff836e2c9ca086c01fce5b1d732649a7eece4846d9d0f47ce2bd01947634d2c3dc652cf0218efe965786026c57592df0819c74ecff0653fd082abe238d305e26dd1eb73f1abd9b45bce0e23c3b51a464425529e0c0458421e78df500f78b71d5ce9ed98c130d6b34e2b3fa626d49780ad8267370dd945cd7bee8085e60de215354bf689198135253713578e009d2894cbcd9c3a7996eeb98fa3180d77c180ba3ce42d40b68020bb02cce12ed94dfd2dbffd953ea648ad57c655a5a5926c9609916653799eb175f5f53dd674ce9de07f2fd76232f80bd333a672ec64eeeea81a655a058362cb44d54f55881cb689815bcef42417ff0ae2cddfc38b8b89f83a2a2a51afcb675cea30d0ee944f739717d03725af72db643410665b8694395d0d862308c4ab5bb1d32dae5509c458bf941c97fb269270c4fcc990875d43a199d66d80bc3de8799f752bbaf2e9754edccbf079926bb5d4a2485099682d4a5b32af218a3716e2c25f0029480cd0ad9a091c169e57ab8320171c6e87b999f7fd135e8490daa5bad808f7deac58e18575d3637d074da9300d0855ac3641ac6904592520d2580092672afc6e6140f8d7d81cfaa367dce24cf14fc84bdc15d0a633801944d32c24661544f519b4e973279084b5fc8bb3a6c40e8b3753d4ff925890b36aead14cc1a4004b8efb30cf29565d8fd6af634cb538bf43ea4af4c061d65eb5e1040ab86668a6404cf64276dbe8c75141c4726e89b8273a18ee310e8c8b27379bb548ec261f2855ddf61fd570fcd87957825e7235aa3bd430b97c02270d6f284e808f03e8464594de1b47132ec8896a8f328637368085a3776d49e41e9fb2114ebbe9af753480dd0e4a4c7f19057cbfcc2d0d6fbc8380d1a6cf5518261710e73659ddf026ae9b0f0182e6e8df5f6d90f2669d572974ab3d47c861573b19597ab6d14ef3c09bdbe7bcb17b44646f1e1fa06a4625f60d97c06d1ae74190074f903a578d5575a37dc80316771bbcf77bcb01c6c63a6331405b127008356f5a357299eb47823cbf4643b06f662b8d93f5b84735b86e863b3bef041d9f49dca017de491393908c6cb9e0ffec17d5ef3a235ce3a102a0f70db05398124be71c6e545d5ad32ac5e8276a9d2f0e2b07825a2908b7ca8daa1f1f2bfc8883680c395fea8094bcdd64f697757fa9800e051fde96f1841d74b31ae7512762bddfd29fb7c0c495b98436039ddc6fd3485cde349137cae286e099215098b4ed74a6d31453628945f036d21a173554ff55245edd7ed7a404cd540483967298d99109442c80f943fd7322da40a213206801bb4bcd89f6246b2f63b9a8953d24375619a88ec0a2ce402aa25c08b96c98e9b627b7ee2a116ca6d8ae39d895bb99368bd01113b90ad94f91a06bf43c39373abec8e9bae52d98efa138f1b24ac89bf0e6b0139592ec1bd91a8db800ee66385d655e9720b5bd1282b1f075dd7ebb812cdb02e77b23bb3ca0b6cd26070d51a56c4cfbbf0facf20a59e686d08af6b3a1f1030dbe5f130e93f388174f4f206abaf8b952916297eec030f709929cb5db5fca9d4170db7e9378f58ed6db1cc0279e1da434bbba6609028807280eef2bd8f55d0456e8695bc9d27f2a7306b94aa575aa0d4916cfeccdb90ca4636b7c55eb660d7c584c6b4da7262493d03d4ac92b50b420a5380cb5eb887684ab595bc5458b8eb2e6daea7f9b44df55ded8ed28724c6f84d533ad0b7f6ffb4e995ee0888b13673fcf4dcfff1247c684c9d5e774a4bd1b1d74af708149fd3fece9c9df9f7981009c1504031360e4693d94f98c8e31844c6b2b1583b3b18d861f3f84c698aed35245a6ef9f7045f7690f0665195a47bf98a3f7bedef6eebd0367f031584768631675816b19441f8cf5a168c290d03a6311582f9b5255cc56c8abf69e8a8b0f6ed898022e327a7537d4c48796fe5696da4ce17231abffda7719f72fcee9cd13c0b0698b51290ec464d5b2cc103659c90803890bd9439364809d0dd59225e4462ef913198376b96d6176e9085902f1d595e71c81772a023f2b449947eb249cf08d0e93f244f0cd798042fbbaaef6383419d3ea911a6b22497dcbc0ee002986dd5fc01557e9861094c55f3220b47616dc8a698c9dadcca7a416151a884c6c590c7e4e2561a03069c5477161c72a6cf3bfe282bbe7e38df938cb14cdf63d8ecab269db6614b9d52582f2b7287c483d3230988979fd951ab1dcebd01848defad5f47d4b68b40b78e9cf3d4ea4d2e56d927fa322df5e3c5047dd0e2d2e921b0c586b2b49c26bc42d3f70a5705664f78cf0c36dd4363023e3ef8cf7e9c43a6414bad7c2b64ec8ee54673c7b2ee71e36db3b73800cac289afd1b191e4a5b835607e9fbba0b10486bed51265708b45c24b3909e3fe74ba47c1a647a9e587f7ca50fdd519f33288c5cf6be7a34ba1a7563ac4c3a0e32424eadabf9cf02886a09a9d9cf2d921d2ad2fa7635f4c9a83ec6a84acffc886d0a2c26d654caa16ac39d9d0a627ce906c1d809fb74cdc9aae658d21597aac09ef35d6e551cf23bcb1cba23efb17f4e956995d262283e1821f2a6e466011621edb099c2c555947e4051875dd0c84698d759c7cd952cf8a27099ed2f529f920f9bbf18258dc2e70e2a376eb284e7137f3f38e36250b02b474cc2281fa93eddb89674d7ef78dfccf7c5b0da2a8f3bc416b37a25cf9329e7f507f02a53bf5c7a6f66ae0da7e442243fe21e19767e449f89f68e1742df1da70fbfb31d1427414c0c123bab9ac0b9a7ef02ff53e7afc3fe76d7ea7ad6f6909c4e62e0157bfca5b89d81a559375bd035942ceae85e30bf0ceb77bd9478bb6f5da4b5547b3f03a2d7311c2904158edab592d67dd1ec8c91fdf59b868ea2e044b5408a731ca08fdff863068739020b3a9f1163f1d17c6e0625b85491384d3bcf9c343686cab15b24ca5238268301f4aba609d810f3cf6b4361d736459a20d25a1bf4b06105fe73ac53af247506937439420ebdf8e659895f1ee035fc60488f520a5870f161daa644c9963b261b715b887c3f1443ffb6e95ba7b81eab2ead14fad1831f42f8185dc0d44e90b1103f817015b70e4fcf2428b3dac5d81bb98691b48072e3b5048608fde7c16855ca6889bc2cd53d52cf2a6d936c96ce7effd9d9315f184566f6dfd87330d2ad070d5ec6828886139d452a36d3686eec4994ae9e984c637c4b21c499a3401997a0589293d58ea80039ab8328fe5de3416494f267b432be4733a2847c2bd0e5414002a8065ae30ec007182c7ee07f2b8c92e42fc1866f5a2cd8557dc9a91457fba33ee3460bd1249f4030a48089b7e87d0b21fa36e9744e489fb83e9f68cccee1626c71749cfb85b74efe0f61f0965971fd7e01074103edf415cbfbf13320bdd4926ab664818ed5742a14518b25925effd0f97d9a9aa19d32ba2765b7007d9569b86df402a97812d5a69fc9e1a358aba7577ea56c79138550fb7f21c4bac37585f040474878c3aaaa5168896e1b7d26f94cb71b18b4037897657278684a4b030ba66d78b8a62825c82091861b9c89e44dd2d7a187ae788f763df10486b043ce1cf9f178f1c3d72e8295c19f09382d36a8afe238af3be44d5c1e4dd3c4740b6f1eedff55ab0ea334bd9a1a52477ba2a7d0bc17f939a3a946efd68214d2367d00d1e5ca4000f61b9c441537863dd6948b158f1bfa53a4b087791b7f334758bbd3128220afd4eb7b", 0x1000}, {&(0x7f0000002d00)="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", 0x1000}, {&(0x7f0000003d00)="3d03bd3bbc19bb40d6d7a455b80da303da3649135a1e2f8f48fc466dd9b4e62a05cc4425fe7124bbede60b825ac67b5a6f843c853d0bed909d3dc314e33c9d24d62686d5b5d07af87ac9adc5a04199b3b5bec548142cd9e1e4a27a2448feae6b5fc36494ca04c0e478be68cd7d160ddf05dfa3dfeef598076e3cd3271cd9e8fc998bdcd1ec008919130753c6144d5224832007efa79d7294c9ed418717f65297cd5ea228e4a11207c18fd63f0b4bf331d04810", 0xb3}, {&(0x7f0000003dc0)="78e7350fc1e2272fb5e533fdf3f212ef432927f645066e7156a7b71f1a909f7de4492f487d667e6ecdccd480415a10b7d90f834ff38d5c4661c0581c9131a090a90cd160ed801248d6132e0b0e47e4df05f25b28d5e8dddd805c5ccd19280378f94fbb", 0x63}, {&(0x7f0000003e40)="f0218800e54980bdfc973c0312092ee2d546934034b920b80f525bd4f74aba57f1f8ee4e45f5d2a09c492c924500a5277d0811ba719c7a51ebfb4be81def7950f08ce6b2d2816571b61b2635c0b8f6e22afb8184ef779d5496de0d5b9dc20cba0d65125674d9a888241d1104857da100dcb3ee7045c94b2bc833cf83e1380797d613445fd86ca0ae9cdec70704ba9f0ecf66c1b8986ad4b87730ae344491e59148746d76cc85e2df7faa770c762934f78fbaa8f81bc9b2f893246b4d251c66a7dd", 0xc1}], 0x9, &(0x7f0000004300)=[@rights={{0x14, 0x1, 0x1, [r8]}}, @rights={{0x20, 0x1, 0x1, [r8, r9, r0, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {r10, 0xffffffffffffffff, r11}}}], 0x58, 0x4000}}, {{&(0x7f0000004380)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000004700)=[{&(0x7f0000004400)="181cd758dbaf65f6f83ef4833452e695760a69d99256cce9be785fe9fc162a50594171edacef218f9245fc00365f6fd70577ad52fb2fc0a4f4afe7700e8d4e344a61111e8afd482a4939c5e0ef34bf229a7c820f6bd002aa8064a06009e38f03c2981951957dca93b2eaff666cc8bbacc84cfef889eee61d3763eb4a2d04bfe8fc0ad02363d2c89f20b75d10b98f398f412f56b60ee31d221fd0065496ed4fdca7f10cc2c4b0650f1634ffeb95c5cf1b000c08dc79864910b3645fbe36dba0ebfa21cd49d052af41b7217d40075f57c069edeee1f48e2e2e7f13b1107d09897d4e", 0xe1}, {&(0x7f0000004500)="a81e60529939f4b4fff4f6360916cd79748b27ec0e1e6e0f809e4dcd3c97a347400cf8359e1125f677d0cb35f0d3843b280d545ef13c5256594eb53d95fb4d32c898fe2c937e0d58e258910aca11d50214a97836e856d8", 0x57}, {&(0x7f0000004580)='~', 0x1}, {&(0x7f00000045c0)="36e86354c1111fafe022b394499df27a3a4889313a69e90c7df73f83c5800bb51142a0517c71dc878a70f81a091754f635b5174f18c5d55b2f66e7f5893d877aabe48c9b9d955e80f57086a7dd84", 0x4e}, {&(0x7f0000004640)="d11fa6fe13ecafb605e9295734addfe40a9184a3c9cc9eb0ef6115bf7057a4f0ab7ffcc58d03c3936293eb1842717071d8b292382f59fdb4b08fae91e26ff1bc6d42ec912e963004f93537c81a76705ff4370faa4395c5da389ea11911b559a7f20e83ef036cf2874517a5287d5c0610a94c77c86117d5c59008737da5e88dd4d28b349efd4c373b410ea23935c6191f8c1ddc8928a069e7e426fc34eb14d6dba1b190ae29dc2fcb00", 0xa9}], 0x5, &(0x7f00000049c0)=[@rights={{0x14, 0x1, 0x1, [r9]}}, @cred={{0x1c, 0x1, 0x2, {r12, r13, r14}}}, @cred={{0x1c, 0x1, 0x2, {r15, r16, 0xee01}}}], 0x58, 0x2000}}, {{&(0x7f0000004a40)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000004bc0)=[{&(0x7f0000004ac0)="7125ee7ec003c11c6ba2749305386cde1c0ae7c1298a64e38a", 0x19}, {&(0x7f0000004b00)="7cc67793fb6ba95f77c7b5d6a4253b76561ec97843a16562a222b5fa131b4b0a093c527964eeb0798346862e84bf12e34863d1e3caf58e72807ad44f6e944bd1c0f31b3f1b1c54571c6318f61ee5fcae3dc0b066cbbf07ac66353d05fb234c4d196efa33e800fe63ae37d7a7573c9799ceb8f79453df172e35742dc8f88b1d6fc700e3ae36674443", 0x88}], 0x2, 0x0, 0x0, 0x4000080}}], 0x3, 0x0) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r0, &(0x7f0000004dc0)={&(0x7f0000004cc0)={0x10, 0x0, 0x0, 0x4000080}, 0xc, &(0x7f0000004d80)={&(0x7f0000004d00)={0x4c, r4, 0x601, 0x70bd27, 0x25dfdbfe, {}, [@ETHTOOL_A_CHANNELS_HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_0\x00'}]}, @ETHTOOL_A_CHANNELS_OTHER_COUNT={0x8, 0x8, 0x7}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8083}, 0x20000084) r17 = syz_genetlink_get_family_id$nl802154(&(0x7f0000004e40), r2) sendmsg$NL802154_CMD_GET_WPAN_PHY(r2, &(0x7f0000004f00)={&(0x7f0000004e00)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000004ec0)={&(0x7f0000004e80)={0x38, r17, 0x800, 0x70bd25, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_WPAN_PHY={0x8}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}]}, 0x38}, 0x1, 0x0, 0x0, 0x80c0}, 0x10) syz_genetlink_get_family_id$net_dm(&(0x7f0000004f40), r2) 837.642208ms ago: executing program 0 (id=2858): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="14000000100001000000f0ff"], 0xac}}, 0x4000014) 757.04358ms ago: executing program 0 (id=2859): r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) syz_emit_ethernet(0x1e, 0x0, 0x0) sendmsg$rds(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) close_range(0xffffffffffffffff, r0, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000004c00)=""/102392, 0x18ff8) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c000ffffe0000000000000002000084ffffffff00000000030000000000000000000000020000000000000000000000000000020300000000000000000000100c"], 0x0, 0x56}, 0x20) 187.628895ms ago: executing program 3 (id=2860): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWSET={0x20, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x48}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r1 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r3 = socket$netlink(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0x13, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x5, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8b04, &(0x7f0000000000)={'wlan1\x00'}) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x28, 0x10, 0x403, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x74, r6, 0x22820, 0x55007}, [@IFLA_CARRIER={0x5, 0x21, 0x7}]}, 0x28}, 0x1, 0x0, 0x0, 0x41}, 0x24040840) ioctl$FS_IOC_SETFLAGS(r3, 0x40086602, &(0x7f00000000c0)=0x2000) sendmsg$nl_route_sched(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000340)=@newqdisc={0xbc, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x8c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [], 0x0, [0x8, 0x4], [0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x28, 0x2, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x10000}, @TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8}, @TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x85}, @TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x2}]}]}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8, 0x5, 0x1}]}}]}, 0xbc}}, 0x0) 0s ago: executing program 1 (id=2861): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000400000008"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000a00)={{r2}, &(0x7f0000000400), &(0x7f00000009c0), 0x1000000}, 0x3a) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000010001, 0xfa11, 0xffffffff}, 0x0) ioctl$USBDEVFS_REAPURBNDELAY(0xffffffffffffffff, 0x4004550c, 0x0) r3 = fsopen(&(0x7f0000000040)='ramfs\x00', 0x0) r4 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r4, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43}}, 0x10) r5 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r5, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r5, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x4, 0x3, 0x3}, 0x10) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x4, 0x3, 0x3}, 0x10) sendmsg$tipc(r4, &(0x7f0000000400)={&(0x7f00000008c0)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x3}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x4008030) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) fsmount(r3, 0x0, 0x1) fsconfig$FSCONFIG_CMD_RECONFIGURE(r3, 0x7, 0x0, 0x0, 0x0) r6 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r6, 0x29, 0x2a, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x2}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) r7 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r7, 0x29, 0x2a, &(0x7f0000000080)={0x20, {{0xa, 0x0, 0x2, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_group_source_req(r7, 0x29, 0x2b, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @mcast1}}}, 0x108) setsockopt$inet6_group_source_req(r7, 0x29, 0x2b, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}}}, 0x108) getsockopt$inet_sctp6_SCTP_RECVRCVINFO(r7, 0x84, 0x20, &(0x7f0000000000), &(0x7f00000001c0)=0x4) close(r6) kernel console output (not intermixed with test programs): 53][T16025] bridge0: port 1(bridge_slave_0) entered blocking state [ 722.749476][T16025] bridge0: port 1(bridge_slave_0) entered disabled state [ 722.781045][T16025] bridge_slave_0: entered allmulticast mode [ 722.792691][T11443] usb 4-1: USB disconnect, device number 62 [ 722.804046][T16025] bridge_slave_0: entered promiscuous mode [ 722.834962][T16025] bridge0: port 2(bridge_slave_1) entered blocking state [ 722.847498][ T5892] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 722.860221][T16025] bridge0: port 2(bridge_slave_1) entered disabled state [ 722.868037][ T5892] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 722.908387][T16176] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2522'. [ 722.917726][T16025] bridge_slave_1: entered allmulticast mode [ 722.925199][T16025] bridge_slave_1: entered promiscuous mode [ 722.961455][ T5892] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 722.989451][ T5892] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 723.019165][T16180] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2522'. [ 723.029721][T16180] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2522'. [ 723.139883][ T5892] usb 3-1: config 0 descriptor?? [ 723.149256][T16025] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 723.171043][T16025] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 723.301192][ T43] usb 1-1: new high-speed USB device number 62 using dummy_hcd [ 723.309149][T16025] team0: Port device team_slave_0 added [ 723.315183][T16025] team0: Port device team_slave_1 added [ 723.375820][T16025] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 723.411713][T16025] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 723.551350][ T43] usb 1-1: Using ep0 maxpacket: 16 [ 723.558962][ T43] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 723.589404][ T5892] plantronics 0003:047F:FFFF.003E: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 723.692129][T16206] binder: Unknown parameter 'func' [ 723.716183][ T43] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 723.728696][T16025] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 723.756405][ T43] usb 1-1: New USB device found, idVendor=1b1c, idProduct=1b02, bcdDevice= 0.00 [ 723.775753][T16025] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 723.809471][ T43] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 723.825859][T16025] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 723.851767][ C1] vkms_vblank_simulate: vblank timer overrun [ 723.890298][ T43] usb 1-1: config 0 descriptor?? [ 723.917993][ T5892] usb 3-1: USB disconnect, device number 56 [ 723.992242][T16025] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 724.265744][T16025] hsr_slave_0: entered promiscuous mode [ 724.278668][T16025] hsr_slave_1: entered promiscuous mode [ 724.298709][T16025] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 724.306650][ T916] usb 2-1: new high-speed USB device number 55 using dummy_hcd [ 724.337249][T16025] Cannot create hsr debugfs directory [ 724.481104][ T916] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 724.499383][ T916] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 724.515682][ T916] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 724.525761][ T916] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 724.546208][ T916] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 724.558229][ T916] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 724.580185][ T916] usb 2-1: config 0 descriptor?? [ 724.721398][T16218] FAULT_INJECTION: forcing a failure. [ 724.721398][T16218] name failslab, interval 1, probability 0, space 0, times 0 [ 724.751967][T16225] gfs2: not a GFS2 filesystem [ 724.897951][ T7051] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 725.050023][T16218] CPU: 0 UID: 0 PID: 16218 Comm: syz.3.2531 Not tainted 6.16.0-rc5-syzkaller-00266-g3f31a806a62e #0 PREEMPT(full) [ 725.050055][T16218] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 725.050066][T16218] Call Trace: [ 725.050072][T16218] [ 725.050079][T16218] dump_stack_lvl+0x16c/0x1f0 [ 725.050113][T16218] should_fail_ex+0x512/0x640 [ 725.050137][T16218] ? kmem_cache_alloc_node_noprof+0x5e/0x3b0 [ 725.050164][T16218] should_failslab+0xc2/0x120 [ 725.050190][T16218] kmem_cache_alloc_node_noprof+0x71/0x3b0 [ 725.050218][T16218] ? __alloc_skb+0x2b2/0x380 [ 725.050246][T16218] __alloc_skb+0x2b2/0x380 [ 725.050269][T16218] ? __pfx___alloc_skb+0x10/0x10 [ 725.050295][T16218] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 725.050331][T16218] netlink_alloc_large_skb+0x69/0x130 [ 725.050349][T16218] netlink_sendmsg+0x6a1/0xdd0 [ 725.050372][T16218] ? __pfx_netlink_sendmsg+0x10/0x10 [ 725.050401][T16218] ____sys_sendmsg+0xa95/0xc70 [ 725.050421][T16218] ? lockdep_hardirqs_on+0x7c/0x110 [ 725.050444][T16218] ? __pfx_____sys_sendmsg+0x10/0x10 [ 725.050473][T16218] ___sys_sendmsg+0x134/0x1d0 [ 725.050495][T16218] ? __schedule+0x1181/0x5de0 [ 725.050518][T16218] ? __pfx____sys_sendmsg+0x10/0x10 [ 725.050540][T16218] ? __lock_acquire+0x622/0x1c90 [ 725.050590][T16218] __sys_sendmsg+0x16d/0x220 [ 725.050613][T16218] ? __pfx___sys_sendmsg+0x10/0x10 [ 725.050654][T16218] do_syscall_64+0xcd/0x4c0 [ 725.050682][T16218] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 725.050700][T16218] RIP: 0033:0x7f931eb8e929 [ 725.050714][T16218] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 725.050729][T16218] RSP: 002b:00007f931f923038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 725.050746][T16218] RAX: ffffffffffffffda RBX: 00007f931edb5fa0 RCX: 00007f931eb8e929 [ 725.050757][T16218] RDX: 0000000000000004 RSI: 0000200000000580 RDI: 0000000000000007 [ 725.050768][T16218] RBP: 00007f931f923090 R08: 0000000000000000 R09: 0000000000000000 [ 725.050778][T16218] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 725.050789][T16218] R13: 0000000000000000 R14: 00007f931edb5fa0 R15: 00007ffebc3e4628 [ 725.050814][T16218] [ 726.134938][ T916] plantronics 0003:047F:FFFF.003F: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 726.150148][ T916] usb 2-1: USB disconnect, device number 55 [ 726.893122][T16238] fido_id[16238]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 727.473592][T14893] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 727.730865][ T916] usb 2-1: new high-speed USB device number 56 using dummy_hcd [ 727.814489][ T43] usbhid 1-1:0.0: can't add hid device: -71 [ 727.823219][ T43] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 727.836370][ T43] usb 1-1: USB disconnect, device number 62 [ 727.941785][ T916] usb 2-1: Using ep0 maxpacket: 16 [ 727.956381][ T916] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 727.994911][ T916] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 727.994957][ T916] usb 2-1: New USB device found, idVendor=1b1c, idProduct=1b02, bcdDevice= 0.00 [ 727.994978][ T916] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 727.998336][ T916] usb 2-1: config 0 descriptor?? [ 728.034964][ T5892] usb 3-1: new high-speed USB device number 57 using dummy_hcd [ 728.090945][ T5899] usb 4-1: new full-speed USB device number 63 using dummy_hcd [ 728.173578][T16025] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 728.196054][ T5892] usb 3-1: config index 0 descriptor too short (expected 45, got 36) [ 728.204710][ T5892] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 728.224022][T16025] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 728.255835][ T5892] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 728.268289][ T5892] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 728.270188][T16025] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 728.287433][ T5892] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 728.301028][ T5899] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 728.313872][T16025] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 728.320662][ T5899] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 728.351978][ T5892] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 728.368478][ T5892] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 728.377218][ T5899] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 728.396145][ T5892] usb 3-1: config 0 descriptor?? [ 728.403630][ T5899] usb 4-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 728.424957][ T916] corsair 0003:1B1C:1B02.0040: hidraw0: USB HID v0.00 Device [HID 1b1c:1b02] on usb-dummy_hcd.1-1/input0 [ 728.442047][ T5899] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 728.450170][ T5899] usb 4-1: Product: syz [ 728.461649][T16264] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 728.464071][ T5899] usb 4-1: Manufacturer: syz [ 728.486899][ T5899] usb 4-1: SerialNumber: syz [ 728.535450][ T5899] usb 4-1: config 0 descriptor?? [ 728.541327][T16265] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 728.554226][ T5899] usb 4-1: ucan: probing device on interface #0 [ 728.560590][ T5899] usb 4-1: ucan: invalid in_ep MaxPacketSize [ 728.576506][ T5899] usb 4-1: ucan: probe failed; try to update the device firmware [ 728.658965][T16025] 8021q: adding VLAN 0 to HW filter on device bond0 [ 728.718908][T16025] 8021q: adding VLAN 0 to HW filter on device team0 [ 728.761486][T14893] bridge0: port 1(bridge_slave_0) entered blocking state [ 728.768735][T14893] bridge0: port 1(bridge_slave_0) entered forwarding state [ 728.792434][T16265] overlayfs: failed to resolve './file0': -2 [ 729.736889][ T5892] usbhid 3-1:0.0: can't add hid device: -71 [ 729.751681][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 729.758958][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 729.794778][ T5892] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 730.124640][ T5892] usb 3-1: USB disconnect, device number 57 [ 730.172784][T14169] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 731.177982][ T43] usb 2-1: USB disconnect, device number 56 [ 731.472598][ T5939] usb 4-1: USB disconnect, device number 63 [ 731.563539][T16306] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2545'. [ 731.850971][ T5885] usb 1-1: new high-speed USB device number 63 using dummy_hcd [ 732.696440][ T5885] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 732.710110][ T5885] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 732.732467][ T5885] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 732.781735][T16025] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 732.826803][ T5885] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 732.882185][ T5885] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 732.916624][ T5885] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 732.934971][T16329] xt_hashlimit: max too large, truncated to 1048576 [ 732.935655][ T5885] usb 1-1: config 0 descriptor?? [ 733.060665][T16329] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 733.228462][ T7058] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 733.231167][ T43] usb 2-1: new high-speed USB device number 57 using dummy_hcd [ 733.475455][T16345] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2554'. [ 733.484872][T16345] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2554'. [ 733.494359][T16345] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2554'. [ 733.924302][T16025] veth0_vlan: entered promiscuous mode [ 733.940878][T16025] veth1_vlan: entered promiscuous mode [ 733.950618][ T5885] plantronics 0003:047F:FFFF.0041: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 734.025670][ T43] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 734.066406][ T5885] usb 1-1: USB disconnect, device number 63 [ 734.105708][T16025] veth0_macvtap: entered promiscuous mode [ 734.117257][ T43] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 734.118206][T16345] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2554'. [ 734.168420][T16025] veth1_macvtap: entered promiscuous mode [ 734.184019][ T43] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 734.201261][T16345] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2554'. [ 734.215505][T16345] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2554'. [ 734.233271][ T43] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 734.250311][T16354] fido_id[16354]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 734.250370][T16025] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 734.358721][T16332] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 734.371608][ T43] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 734.420342][T16025] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 734.543584][T16025] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 734.629731][T16025] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 734.646766][T16332] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 734.659290][T16025] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 734.690815][T16025] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 734.697117][T16332] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 735.351155][T16332] input: syz1 as /devices/virtual/input/input28 [ 735.395744][ T7058] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 735.581255][ T7058] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 735.635599][T16376] netlink: 'syz.3.2557': attribute type 39 has an invalid length. [ 735.783454][ T7065] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 735.908522][ T7053] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 735.926469][T16385] loop6: detected capacity change from 0 to 524287999 [ 736.018396][ T7053] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 736.371815][T16390] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 736.382637][T16390] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 736.435533][T16390] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 737.419772][T10026] usb 2-1: USB disconnect, device number 57 [ 737.681300][ T7061] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 737.899894][ T7061] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 737.967625][ T7061] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 738.026397][ T7061] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 738.141422][ T7061] bridge_slave_1: left allmulticast mode [ 738.147123][ T7061] bridge_slave_1: left promiscuous mode [ 738.158898][ T7061] bridge0: port 2(bridge_slave_1) entered disabled state [ 738.167696][ T7061] bridge_slave_0: left allmulticast mode [ 738.173904][ T7061] bridge_slave_0: left promiscuous mode [ 738.179588][ T7061] bridge0: port 1(bridge_slave_0) entered disabled state [ 738.335989][ T7065] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 738.586043][ T7061] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 738.591886][T16414] netlink: 'syz.2.2563': attribute type 1 has an invalid length. [ 738.675612][ T7061] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 738.718560][T16418] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2563'. [ 738.904192][ T7061] bond0 (unregistering): Released all slaves [ 738.936754][T16415] tipc: Started in network mode [ 738.975317][T16415] tipc: Node identity , cluster identity 4711 [ 739.021139][T16415] tipc: Failed to obtain node identity [ 739.032536][T16415] tipc: Enabling of bearer rejected, failed to enable media [ 739.452637][T16414] workqueue: Failed to create a rescuer kthread for wq "bond8": -EINTR [ 739.492286][T16418] bridge5: the hash_elasticity option has been deprecated and is always 16 [ 740.422520][ T5899] usb 3-1: new high-speed USB device number 58 using dummy_hcd [ 740.432374][ T5836] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 740.447836][ T5836] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 740.457177][ T5836] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 740.465686][ T5836] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 740.476240][ T5836] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 740.641035][ T5899] usb 3-1: Using ep0 maxpacket: 16 [ 740.705168][ T5899] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 740.754237][ T5899] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 740.765678][ T5899] usb 3-1: New USB device found, idVendor=1b1c, idProduct=1b02, bcdDevice= 0.00 [ 740.776971][ T7061] hsr_slave_0: left promiscuous mode [ 740.824928][ T5899] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 740.834486][ T7061] hsr_slave_1: left promiscuous mode [ 740.840419][ T7061] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 740.852187][ T7061] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 740.860317][ T5899] usb 3-1: config 0 descriptor?? [ 740.901779][ T7061] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 740.916485][ T7061] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 740.992504][ T7061] veth1_macvtap: left promiscuous mode [ 741.005863][ T7061] veth0_macvtap: left promiscuous mode [ 741.016700][ T7061] veth1_vlan: left promiscuous mode [ 741.031061][ T7061] veth0_vlan: left promiscuous mode [ 741.532527][T14893] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 741.611042][T16464] gfs2: not a GFS2 filesystem [ 741.915504][T10026] usb 4-1: new high-speed USB device number 64 using dummy_hcd [ 742.076165][T10026] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 742.100200][T10026] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 742.121783][T10026] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 742.156639][T10026] usb 4-1: config 0 descriptor?? [ 742.519814][ T7061] team0 (unregistering): Port device team_slave_1 removed [ 742.569706][ T7061] team0 (unregistering): Port device team_slave_0 removed [ 742.581639][ T5836] Bluetooth: hci1: command tx timeout [ 742.596581][T16460] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 742.605612][T16460] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 742.760964][ T5885] usb 1-1: new full-speed USB device number 64 using dummy_hcd [ 742.935207][ T5885] usb 1-1: not running at top speed; connect to a high speed hub [ 742.945035][ T5885] usb 1-1: config 1 interface 0 altsetting 7 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 742.958351][ T5885] usb 1-1: config 1 interface 0 has no altsetting 0 [ 742.969125][ T5885] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 742.986009][ T5885] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 742.994506][ T5885] usb 1-1: Product: 넊蕄穂戮ᱺ饂é¶ì¶±æ‹½à­–æ±äµ½Ù‡ï°à¹´è™¼ã©Œá“€ç¦¹ä‡†ÏŸí…Žáªäˆ€ï‘½ä£“걎㭮뺥䀘㶚⇯䀭眛à¤ä˜·ä¸šì¨®ç“•à¨…⫄㑙ᴖ싑ᢗ儵ëŸì†¯á¬–俿ﰷ⫃믉攽洿㰅˹켳郄流覈복ç°ï³´ä§‹î‚«äºì´‘櫛탆攒æ¸â…€ãµ®ã˜¼ç“›î´šå€³á«†á²éœ¯äŽà±Ÿè®’㯨涉砒줓ޕ散酯羛嶺曥䴿멗ë“ἱ壘႕庰ᲭⒷ앖༻碟á’î—“ê³†ì¬ [ 743.028561][ C1] vkms_vblank_simulate: vblank timer overrun [ 743.035491][ T5885] usb 1-1: Manufacturer: ï“¿ [ 743.040438][ T5885] usb 1-1: SerialNumber: 《 [ 743.051665][T16469] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 743.258402][ T5899] usbhid 3-1:0.0: can't add hid device: -71 [ 743.273136][ T5899] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 743.305583][ T5899] usb 3-1: USB disconnect, device number 58 [ 743.367410][T10026] usbhid 4-1:0.0: can't add hid device: -71 [ 743.373764][T14888] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 743.431093][T10026] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 743.479434][T16469] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 743.491368][T16469] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 743.510962][T10026] usb 4-1: USB disconnect, device number 64 [ 743.616316][T16477] bridge0: left allmulticast mode [ 743.764861][T16469] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 743.798291][T16469] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 743.832990][T10026] usb 1-1: USB disconnect, device number 64 [ 743.845028][T16435] chnl_net:caif_netlink_parms(): no params data found [ 744.138960][T16435] bridge0: port 1(bridge_slave_0) entered blocking state [ 744.154554][T16435] bridge0: port 1(bridge_slave_0) entered disabled state [ 744.166100][T16435] bridge_slave_0: entered allmulticast mode [ 744.204208][T16435] bridge_slave_0: entered promiscuous mode [ 744.222312][T16435] bridge0: port 2(bridge_slave_1) entered blocking state [ 744.229447][T16435] bridge0: port 2(bridge_slave_1) entered disabled state [ 744.284079][T16435] bridge_slave_1: entered allmulticast mode [ 744.342019][T16435] bridge_slave_1: entered promiscuous mode [ 744.595368][T16435] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 744.658071][T16435] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 744.681817][T16527] FAULT_INJECTION: forcing a failure. [ 744.681817][T16527] name failslab, interval 1, probability 0, space 0, times 0 [ 744.695014][ T5836] Bluetooth: hci1: command tx timeout [ 744.704613][T16525] tun0: tun_chr_ioctl cmd 1074025675 [ 744.709933][T16525] tun0: persist enabled [ 744.742341][T16527] CPU: 0 UID: 0 PID: 16527 Comm: syz.3.2585 Not tainted 6.16.0-rc5-syzkaller-00266-g3f31a806a62e #0 PREEMPT(full) [ 744.742369][T16527] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 744.742378][T16527] Call Trace: [ 744.742384][T16527] [ 744.742392][T16527] dump_stack_lvl+0x16c/0x1f0 [ 744.742421][T16527] should_fail_ex+0x512/0x640 [ 744.742444][T16527] ? kmem_cache_alloc_node_noprof+0x5e/0x3b0 [ 744.742470][T16527] should_failslab+0xc2/0x120 [ 744.742496][T16527] kmem_cache_alloc_node_noprof+0x71/0x3b0 [ 744.742519][T16527] ? __alloc_skb+0x2b2/0x380 [ 744.742547][T16527] __alloc_skb+0x2b2/0x380 [ 744.742570][T16527] ? __pfx___alloc_skb+0x10/0x10 [ 744.742591][T16527] ? selinux_socket_getpeersec_dgram+0x1a4/0x370 [ 744.742615][T16527] ? __pfx_selinux_socket_getpeersec_dgram+0x10/0x10 [ 744.742646][T16527] netlink_alloc_large_skb+0x69/0x130 [ 744.742667][T16527] netlink_sendmsg+0x6a1/0xdd0 [ 744.742689][T16527] ? __pfx_netlink_sendmsg+0x10/0x10 [ 744.742717][T16527] ____sys_sendmsg+0xa95/0xc70 [ 744.742737][T16527] ? copy_msghdr_from_user+0x10a/0x160 [ 744.742761][T16527] ? __pfx_____sys_sendmsg+0x10/0x10 [ 744.742792][T16527] ___sys_sendmsg+0x134/0x1d0 [ 744.742817][T16527] ? __pfx____sys_sendmsg+0x10/0x10 [ 744.742839][T16527] ? __lock_acquire+0x622/0x1c90 [ 744.742889][T16527] __sys_sendmsg+0x16d/0x220 [ 744.742914][T16527] ? __pfx___sys_sendmsg+0x10/0x10 [ 744.742954][T16527] do_syscall_64+0xcd/0x4c0 [ 744.742982][T16527] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 744.743002][T16527] RIP: 0033:0x7f931eb8e929 [ 744.743017][T16527] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 744.743034][T16527] RSP: 002b:00007f931f923038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 744.743051][T16527] RAX: ffffffffffffffda RBX: 00007f931edb5fa0 RCX: 00007f931eb8e929 [ 744.743063][T16527] RDX: 0000000000000000 RSI: 0000200000000240 RDI: 0000000000000003 [ 744.743074][T16527] RBP: 00007f931f923090 R08: 0000000000000000 R09: 0000000000000000 [ 744.743085][T16527] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 744.743095][T16527] R13: 0000000000000000 R14: 00007f931edb5fa0 R15: 00007ffebc3e4628 [ 744.743121][T16527] [ 744.780841][T16519] tun0: tun_chr_ioctl cmd 1074025675 [ 745.026030][T16519] tun0: persist disabled [ 745.184084][T16435] team0: Port device team_slave_0 added [ 745.644021][T16435] team0: Port device team_slave_1 added [ 746.311074][ T5885] usb 1-1: new high-speed USB device number 65 using dummy_hcd [ 746.490890][ T5885] usb 1-1: Using ep0 maxpacket: 8 [ 746.507990][ T5885] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 746.520819][T16435] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 746.542647][T16435] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 746.550938][ T5885] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 746.597527][ T5885] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 200 [ 746.630952][T16435] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 746.639071][ T5885] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 746.664576][ T5885] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 746.671574][T16435] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 746.680910][ T5885] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 746.696908][T16435] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 746.732857][ T5836] Bluetooth: hci1: command tx timeout [ 746.751216][T16435] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 746.896698][T16557] vcan0: tx drop: invalid sa for name 0x0000000000000001 [ 746.905870][ T5885] usb 1-1: GET_CAPABILITIES returned 0 [ 746.921332][ T5885] usbtmc 1-1:16.0: can't read capabilities [ 746.983978][T16435] hsr_slave_0: entered promiscuous mode [ 746.990492][T16435] hsr_slave_1: entered promiscuous mode [ 747.023304][T16435] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 747.042130][T16435] Cannot create hsr debugfs directory [ 747.296465][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 747.344748][ T9] usb 1-1: USB disconnect, device number 65 [ 747.360810][T11443] usb 2-1: new high-speed USB device number 58 using dummy_hcd [ 747.415099][T14893] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 747.649129][T11443] usb 2-1: Using ep0 maxpacket: 16 [ 747.695553][T11443] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 747.736839][T11443] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 747.859997][T11443] usb 2-1: New USB device found, idVendor=1b1c, idProduct=1b02, bcdDevice= 0.00 [ 747.880205][T11443] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 747.920579][T11443] usb 2-1: config 0 descriptor?? [ 747.997704][ T7065] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 748.180814][ T7065] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 748.191121][ T5899] usb 4-1: new high-speed USB device number 65 using dummy_hcd [ 748.297651][ T7065] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 748.361038][ T5899] usb 4-1: Using ep0 maxpacket: 16 [ 748.384491][ T5899] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 748.420543][ T7065] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 748.433927][ T5899] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 748.452401][ T5885] usb 1-1: new full-speed USB device number 66 using dummy_hcd [ 748.452426][ T5899] usb 4-1: New USB device found, idVendor=1b1c, idProduct=1b02, bcdDevice= 0.00 [ 748.472177][ T5899] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 748.493718][ T5899] usb 4-1: config 0 descriptor?? [ 748.582681][T14893] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 748.602250][T11443] corsair 0003:1B1C:1B02.0042: hidraw0: USB HID v0.00 Device [HID 1b1c:1b02] on usb-dummy_hcd.1-1/input0 [ 748.622899][ T5885] usb 1-1: config 1 interface 0 has no altsetting 0 [ 748.644193][ T5885] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 748.676499][ T5885] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 748.695348][ T5885] usb 1-1: Product: syz [ 748.699551][ T5885] usb 1-1: Manufacturer: syz [ 748.729952][ T5885] usb 1-1: SerialNumber: syz [ 748.776768][T11443] corsair 0003:1B1C:1B02.0042: Read invalid backlight brightness: 60. [ 748.811010][ T5836] Bluetooth: hci1: command tx timeout [ 749.022213][ T5844] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 749.033100][ T5844] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 749.051432][ T5844] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 749.061817][ T5844] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 749.102401][ T5844] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 749.261673][T16599] gfs2: not a GFS2 filesystem [ 749.721984][T10026] usb 2-1: USB disconnect, device number 58 [ 750.570527][ T7065] bond0 (unregistering): Released all slaves [ 750.591072][ T7065] bond1 (unregistering): Released all slaves [ 750.605887][ T7065] bond2 (unregistering): Released all slaves [ 750.623827][ T7065] bond3 (unregistering): Released all slaves [ 750.639049][ T30] audit: type=1400 audit(1752944630.805:834): avc: denied { lock } for pid=16616 comm="syz.1.2602" path="socket:[55564]" dev="sockfs" ino=55564 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 750.646511][ T7065] bond4 (unregistering): Released all slaves [ 750.784771][ T7065] bond5 (unregistering): (slave veth5): Releasing active interface [ 750.793048][ T7065] vlan4: entered promiscuous mode [ 750.801869][ T7065] bond5 (unregistering): (slave vlan4): Releasing active interface [ 750.816838][ T7065] bond5 (unregistering): Released all slaves [ 750.830524][ T7065] bond6 (unregistering): Released all slaves [ 750.845735][ T7065] bond7 (unregistering): Released all slaves [ 750.866246][T16619] netlink: 'syz.1.2602': attribute type 9 has an invalid length. [ 750.879020][ T5885] usblp 1-1:1.0: usblp0: USB Unidirectional printer dev 66 if 0 alt 253 proto 1 vid 0x0525 pid 0xA4A8 [ 750.932749][ T5885] usb 1-1: USB disconnect, device number 66 [ 751.011229][ T5899] usbhid 4-1:0.0: can't add hid device: -71 [ 751.018201][ T5899] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 751.034603][ T5885] usblp0: removed [ 751.063768][ T5899] usb 4-1: USB disconnect, device number 65 [ 751.185635][ T7065] tipc: Left network mode [ 751.223646][ T5844] Bluetooth: hci4: command tx timeout [ 751.977697][T16435] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 751.994449][T16435] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 753.001091][ T5885] usb 2-1: new high-speed USB device number 59 using dummy_hcd [ 753.054118][T14169] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 753.111637][T16646] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 753.290909][ T5844] Bluetooth: hci4: command tx timeout [ 753.322976][T16435] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 753.362293][T16435] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 753.397804][ T5885] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 753.422299][ T30] audit: type=1400 audit(1752944633.585:835): avc: denied { bind } for pid=16652 comm="syz.3.2609" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 753.442817][ T5885] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 753.472997][ T5885] usb 2-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 753.495254][ T5885] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 753.535257][ T5885] usb 2-1: config 0 descriptor?? [ 753.698810][T16597] chnl_net:caif_netlink_parms(): no params data found [ 753.967321][T16635] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2605'. [ 754.020134][T16680] netlink: 'syz.3.2610': attribute type 1 has an invalid length. [ 754.045915][T16635] netlink: 31 bytes leftover after parsing attributes in process `syz.1.2605'. [ 754.072383][T16682] netlink: 'syz.3.2610': attribute type 1 has an invalid length. [ 754.143053][T16635] netlink: 'syz.1.2605': attribute type 3 has an invalid length. [ 754.146384][ T5885] cp2112 0003:10C4:EA90.0043: unknown main item tag 0x0 [ 754.159050][ T5885] cp2112 0003:10C4:EA90.0043: unknown main item tag 0x2 [ 754.204537][ T5885] cp2112 0003:10C4:EA90.0043: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.1-1/input0 [ 754.224902][T16635] netlink: 'syz.1.2605': attribute type 2 has an invalid length. [ 754.239671][T16635] netlink: 31 bytes leftover after parsing attributes in process `syz.1.2605'. [ 754.339150][ T7053] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 754.460958][ T5885] cp2112 0003:10C4:EA90.0043: Part Number: 0x00 Device Version: 0x00 [ 754.599881][T16694] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2611'. [ 754.738678][ T7065] hsr_slave_0: left promiscuous mode [ 754.760912][ T7065] hsr_slave_1: left promiscuous mode [ 754.843369][ T7065] dummy0: left allmulticast mode [ 754.864979][ T7065] veth1_macvtap: left promiscuous mode [ 754.899875][ T7065] veth0_macvtap: left promiscuous mode [ 754.999452][ T7065] veth1_vlan: left promiscuous mode [ 755.050144][ T7065] veth0_vlan: left promiscuous mode [ 755.371330][ T5844] Bluetooth: hci4: command tx timeout [ 755.372580][ T5885] cp2112 0003:10C4:EA90.0043: error reading lock byte: -71 [ 755.407988][ T5885] usb 2-1: USB disconnect, device number 59 [ 756.131479][ T9] usb 4-1: new full-speed USB device number 66 using dummy_hcd [ 756.300481][T16727] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2619'. [ 756.309967][T16727] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2619'. [ 756.799376][ T9] usb 4-1: config 1 interface 0 has no altsetting 0 [ 756.923244][ T9] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 756.932778][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 757.037929][ T9] usb 4-1: Product: syz [ 757.110818][ T9] usb 4-1: Manufacturer: syz [ 757.115523][ T9] usb 4-1: SerialNumber: syz [ 757.461768][ T5844] Bluetooth: hci4: command tx timeout [ 758.557359][ T9] usblp 4-1:1.0: usblp0: USB Unidirectional printer dev 66 if 0 alt 253 proto 1 vid 0x0525 pid 0xA4A8 [ 758.650061][ T9] usb 4-1: USB disconnect, device number 66 [ 758.665080][ T9] usblp0: removed [ 758.816133][ T49] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 759.431061][T16766] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2627'. [ 759.521282][T16597] bridge0: port 1(bridge_slave_0) entered blocking state [ 759.541022][T16597] bridge0: port 1(bridge_slave_0) entered disabled state [ 759.552528][T16597] bridge_slave_0: entered allmulticast mode [ 759.610368][T16597] bridge_slave_0: entered promiscuous mode [ 759.617120][T14889] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 759.653100][T16597] bridge0: port 2(bridge_slave_1) entered blocking state [ 759.660465][T16597] bridge0: port 2(bridge_slave_1) entered disabled state [ 759.681832][T16597] bridge_slave_1: entered allmulticast mode [ 759.700424][T16597] bridge_slave_1: entered promiscuous mode [ 759.800536][T16597] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 759.851298][ T5899] usb 4-1: new high-speed USB device number 67 using dummy_hcd [ 759.874569][T16597] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 760.000791][ T5899] usb 4-1: Using ep0 maxpacket: 32 [ 760.007865][ T5899] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 760.021618][ T5899] usb 4-1: can't read configurations, error -61 [ 760.115484][T16597] team0: Port device team_slave_0 added [ 760.143350][T16597] team0: Port device team_slave_1 added [ 760.191989][ T5899] usb 4-1: new high-speed USB device number 68 using dummy_hcd [ 760.294011][T16435] 8021q: adding VLAN 0 to HW filter on device bond0 [ 760.312163][T16597] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 760.343027][T16597] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 760.376493][ T5899] usb 4-1: Using ep0 maxpacket: 32 [ 760.392707][ T5899] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 760.400431][ T5899] usb 4-1: can't read configurations, error -61 [ 760.641388][T16597] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 760.720078][T16597] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 760.722788][ T5899] usb usb4-port1: attempt power cycle [ 760.727144][T16597] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 760.923466][T16597] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 761.000447][ T7065] IPVS: stop unused estimator thread 0... [ 761.056839][T11443] usb 2-1: new high-speed USB device number 60 using dummy_hcd [ 761.068289][T16435] 8021q: adding VLAN 0 to HW filter on device team0 [ 761.132305][ T5899] usb 4-1: new high-speed USB device number 69 using dummy_hcd [ 761.151194][ T9] usb 1-1: new full-speed USB device number 67 using dummy_hcd [ 761.163422][ T5899] usb 4-1: Using ep0 maxpacket: 32 [ 761.181620][ T5899] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 761.189320][ T5899] usb 4-1: can't read configurations, error -61 [ 761.221424][T11443] usb 2-1: Using ep0 maxpacket: 8 [ 761.233946][ T7061] bridge0: port 1(bridge_slave_0) entered blocking state [ 761.241153][ T7061] bridge0: port 1(bridge_slave_0) entered forwarding state [ 761.270555][T11443] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 7 [ 761.296288][T11443] usb 2-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b [ 761.306039][T11443] usb 2-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3 [ 761.331014][ T5899] usb 4-1: new high-speed USB device number 70 using dummy_hcd [ 761.340011][T11443] usb 2-1: Product: syz [ 761.353709][T11443] usb 2-1: Manufacturer: syz [ 761.358668][ T5899] usb 4-1: Using ep0 maxpacket: 32 [ 761.366549][T11443] usb 2-1: SerialNumber: syz [ 761.372412][ T9] usb 1-1: unable to get BOS descriptor or descriptor too short [ 761.380571][ T5899] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 761.388482][ T9] usb 1-1: not running at top speed; connect to a high speed hub [ 761.398778][ T5899] usb 4-1: can't read configurations, error -61 [ 761.406127][ T5899] usb usb4-port1: unable to enumerate USB device [ 761.414202][ T9] usb 1-1: config 6 has an invalid interface number: 7 but max is 0 [ 761.422421][ T9] usb 1-1: config 6 has no interface number 0 [ 761.431196][ T9] usb 1-1: config 6 interface 7 altsetting 5 endpoint 0xB has invalid maxpacket 43400, setting to 64 [ 761.453377][ T9] usb 1-1: config 6 interface 7 has no altsetting 0 [ 761.468158][ T7061] bridge0: port 2(bridge_slave_1) entered blocking state [ 761.475339][ T7061] bridge0: port 2(bridge_slave_1) entered forwarding state [ 761.499725][ T9] usb 1-1: New USB device found, idVendor=1199, idProduct=68aa, bcdDevice=c9.92 [ 761.529802][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 761.554056][ T9] usb 1-1: Product: syz [ 761.559774][T16597] hsr_slave_0: entered promiscuous mode [ 761.565934][ T9] usb 1-1: Manufacturer: syz [ 761.580864][ T9] usb 1-1: SerialNumber: syz [ 761.581968][T16597] hsr_slave_1: entered promiscuous mode [ 761.644742][T16597] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 761.660579][T16597] Cannot create hsr debugfs directory [ 761.660621][T11443] usb 2-1: Handspring Visor / Palm OS: No valid connect info available [ 761.676500][T11443] usb 2-1: Handspring Visor / Palm OS: port 114, is for unknown use [ 761.709967][T11443] usb 2-1: Handspring Visor / Palm OS: port 179, is for unknown use [ 761.737327][T11443] usb 2-1: Handspring Visor / Palm OS: Number of ports: 2 [ 761.834340][T16798] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2634'. [ 761.843573][T16798] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2634'. [ 761.867519][ T30] audit: type=1400 audit(1752944642.035:836): avc: denied { append } for pid=16797 comm="syz.0.2634" name="autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 761.872819][ T9] usb 1-1: Error in usbnet_get_endpoints (-22) [ 761.918139][ T9] usb 1-1: USB disconnect, device number 67 [ 762.083489][T11443] usb 2-1: palm_os_3_probe - error -110 getting bytes available request [ 762.116320][T11443] visor 2-1:1.0: Handspring Visor / Palm OS converter detected [ 762.154432][T11443] usb 2-1: Handspring Visor / Palm OS converter now attached to ttyUSB0 [ 762.199307][T11443] usb 2-1: Handspring Visor / Palm OS converter now attached to ttyUSB1 [ 763.408332][T16435] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 763.448283][T16597] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 763.519407][ T5885] usb 2-1: USB disconnect, device number 60 [ 763.571647][ T5885] visor ttyUSB0: Handspring Visor / Palm OS converter now disconnected from ttyUSB0 [ 763.615925][T16597] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 763.636748][ T5885] visor ttyUSB1: Handspring Visor / Palm OS converter now disconnected from ttyUSB1 [ 763.691882][ T5885] visor 2-1:1.0: device disconnected [ 763.717553][T16597] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 763.755596][T16597] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 763.932423][T14169] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 764.065870][T16597] 8021q: adding VLAN 0 to HW filter on device bond0 [ 764.107768][T16597] 8021q: adding VLAN 0 to HW filter on device team0 [ 764.140611][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 764.147866][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 764.180858][ T5885] usb 2-1: new high-speed USB device number 61 using dummy_hcd [ 764.195603][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 764.202818][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 764.324746][T16597] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 764.363875][ T5885] usb 2-1: Using ep0 maxpacket: 16 [ 764.400106][ T5885] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 764.409723][T16435] veth0_vlan: entered promiscuous mode [ 764.442769][T16435] veth1_vlan: entered promiscuous mode [ 764.464146][ T5885] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 764.496999][ T5885] usb 2-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice= 0.00 [ 764.523299][ T5885] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 764.552268][ T5885] usb 2-1: config 0 descriptor?? [ 764.553400][T16435] veth0_macvtap: entered promiscuous mode [ 764.592871][T16877] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2640'. [ 764.626148][T16877] bridge_slave_0: invalid flags given to default FDB implementation [ 764.643311][T16435] veth1_macvtap: entered promiscuous mode [ 764.700424][T16435] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 764.736830][T16435] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 764.775402][T16435] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 764.800935][T16435] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 764.831073][T16435] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 764.847445][T16435] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 764.917441][T16597] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 764.982118][ T5885] hid-multitouch 0003:1FD2:6007.0044: hidraw0: USB HID v0.00 Device [HID 1fd2:6007] on usb-dummy_hcd.1-1/input0 [ 765.212911][T14888] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 765.242721][ T7053] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 765.287272][T16899] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2641'. [ 765.290719][ T7053] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 765.437762][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 765.499295][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 765.734164][T16597] veth0_vlan: entered promiscuous mode [ 765.806895][T16597] veth1_vlan: entered promiscuous mode [ 766.550683][T16597] veth0_macvtap: entered promiscuous mode [ 766.668815][ T49] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 767.132407][ T9] usb 2-1: USB disconnect, device number 61 [ 767.597977][ T30] audit: type=1400 audit(1752944647.575:837): avc: denied { setopt } for pid=16921 comm="syz.0.2644" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 767.617378][ C0] vkms_vblank_simulate: vblank timer overrun [ 767.747351][T16597] veth1_macvtap: entered promiscuous mode [ 767.822204][ T49] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 767.869570][T16597] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 767.890531][T16597] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 767.906612][T16597] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 767.921441][T16597] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 767.930171][T16597] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 767.942888][T16597] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 768.046277][ T49] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 768.081694][ T1146] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 768.089605][ T1146] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 768.128014][ T49] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 768.149261][ T1146] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 768.157432][ T1146] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 768.327601][ T49] bridge_slave_1: left allmulticast mode [ 768.337003][ T49] bridge_slave_1: left promiscuous mode [ 768.343386][ T49] bridge0: port 2(bridge_slave_1) entered disabled state [ 768.356601][ T49] bridge_slave_0: left allmulticast mode [ 768.362707][ T49] bridge_slave_0: left promiscuous mode [ 768.368462][ T49] bridge0: port 1(bridge_slave_0) entered disabled state [ 768.777022][ T49] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 768.787964][ T49] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 768.797794][ T49] bond0 (unregistering): Released all slaves [ 769.702302][ T7065] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 769.969851][ T49] hsr_slave_0: left promiscuous mode [ 769.995892][T16976] kAFS: No cell specified [ 770.831078][ T49] hsr_slave_1: left promiscuous mode [ 770.855794][ T49] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 770.896854][T16981] loop2: detected capacity change from 0 to 7 [ 770.919985][ T49] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 770.977472][ T7061] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 771.036593][T16981] Dev loop2: unable to read RDB block 7 [ 771.038170][ T49] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 771.045147][T16981] loop2: unable to read partition table [ 771.085657][T16981] loop2: partition table beyond EOD, truncated [ 771.108010][T16987] netlink: 'syz.6.2652': attribute type 1 has an invalid length. [ 771.116220][T16987] netlink: 168864 bytes leftover after parsing attributes in process `syz.6.2652'. [ 771.122534][T16981] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 771.200548][ T5836] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 771.341106][ T5836] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 771.343862][ T49] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 771.358845][ T5836] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 771.380329][ T5836] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 771.392797][ T5836] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 771.437946][T16987] IPVS: set_ctl: invalid protocol: 50 172.20.20.170:20001 [ 771.454911][ T5203] Dev loop2: unable to read RDB block 7 [ 771.468045][ T49] veth1_macvtap: left promiscuous mode [ 771.473816][ T5203] loop2: unable to read partition table [ 771.479621][ T5203] loop2: partition table beyond EOD, truncated [ 771.487384][ T49] veth0_macvtap: left promiscuous mode [ 771.493162][ T49] veth1_vlan: left promiscuous mode [ 771.505480][ T49] veth0_vlan: left promiscuous mode [ 772.082286][ T49] team0 (unregistering): Port device team_slave_1 removed [ 772.139194][ T49] team0 (unregistering): Port device team_slave_0 removed [ 773.331299][T17005] netlink: 104 bytes leftover after parsing attributes in process `syz.3.2657'. [ 773.391024][T10026] usb 1-1: new high-speed USB device number 68 using dummy_hcd [ 773.452688][ T5844] Bluetooth: hci1: command tx timeout [ 773.478859][T17006] netlink: 36 bytes leftover after parsing attributes in process `syz.6.2656'. [ 773.488494][T17006] netlink: 36 bytes leftover after parsing attributes in process `syz.6.2656'. [ 773.510542][T17006] netlink: 36 bytes leftover after parsing attributes in process `syz.6.2656'. [ 773.632315][T10026] usb 1-1: Using ep0 maxpacket: 32 [ 773.656775][T10026] usb 1-1: config 0 has an invalid interface number: 67 but max is 0 [ 773.693497][T10026] usb 1-1: config 0 has no interface number 0 [ 773.762840][T10026] usb 1-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 773.812190][T10026] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 773.838646][T10026] usb 1-1: Product: syz [ 773.857284][T10026] usb 1-1: Manufacturer: syz [ 773.864236][T10026] usb 1-1: SerialNumber: syz [ 773.866567][T17006] netlink: 36 bytes leftover after parsing attributes in process `syz.6.2656'. [ 773.885075][T10026] usb 1-1: config 0 descriptor?? [ 773.896566][T10026] smsc95xx v2.0.0 [ 773.900322][T10026] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 773.978023][T17006] netlink: 36 bytes leftover after parsing attributes in process `syz.6.2656'. [ 773.998154][T17006] netlink: 36 bytes leftover after parsing attributes in process `syz.6.2656'. [ 774.030530][T10026] smsc95xx 1-1:0.67: probe with driver smsc95xx failed with error -22 [ 774.100365][T17001] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 774.112718][T17001] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 774.325732][ T5899] usb 1-1: USB disconnect, device number 68 [ 774.415740][T16986] chnl_net:caif_netlink_parms(): no params data found [ 774.480638][T17032] netlink: 'syz.3.2662': attribute type 1 has an invalid length. [ 774.500383][T17030] tmpfs: Bad value for 'size' [ 774.533091][T17033] netlink: 'syz.3.2662': attribute type 1 has an invalid length. [ 775.157581][T16986] bridge0: port 1(bridge_slave_0) entered blocking state [ 775.190185][T16986] bridge0: port 1(bridge_slave_0) entered disabled state [ 775.212297][T16986] bridge_slave_0: entered allmulticast mode [ 775.219651][T16986] bridge_slave_0: entered promiscuous mode [ 775.436990][T16986] bridge0: port 2(bridge_slave_1) entered blocking state [ 775.444827][T16986] bridge0: port 2(bridge_slave_1) entered disabled state [ 775.451451][ T1146] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 775.457921][T16986] bridge_slave_1: entered allmulticast mode [ 775.511373][T10026] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 775.530873][ T5844] Bluetooth: hci1: command tx timeout [ 775.547246][T16986] bridge_slave_1: entered promiscuous mode [ 775.674710][T10026] usb 7-1: Using ep0 maxpacket: 16 [ 775.688051][T10026] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 775.706005][T16986] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 775.719608][T10026] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 775.751943][T16986] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 775.782849][T10026] usb 7-1: New USB device found, idVendor=1b1c, idProduct=1b02, bcdDevice= 0.00 [ 775.838204][T16986] team0: Port device team_slave_0 added [ 775.879137][T10026] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 775.884599][T16986] team0: Port device team_slave_1 added [ 775.908639][T10026] usb 7-1: config 0 descriptor?? [ 776.049059][T16986] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 776.060894][T16986] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 776.122777][T16986] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 776.166461][T16986] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 776.345652][T16986] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 776.392019][T16986] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 776.773163][ T1146] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 777.024575][T17078] gfs2: not a GFS2 filesystem [ 777.611532][ T5844] Bluetooth: hci1: command tx timeout [ 777.671044][T16986] hsr_slave_0: entered promiscuous mode [ 777.689694][T16986] hsr_slave_1: entered promiscuous mode [ 777.698833][T16986] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 777.718479][T16986] Cannot create hsr debugfs directory [ 777.876415][ T30] audit: type=1400 audit(1752944658.045:838): avc: denied { accept } for pid=17090 comm="syz.3.2672" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 778.860575][T10026] usbhid 7-1:0.0: can't add hid device: -71 [ 778.887791][T10026] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 779.059657][T17087] netlink: 'syz.0.2670': attribute type 1 has an invalid length. [ 779.079021][T10026] usb 7-1: USB disconnect, device number 2 [ 779.079047][T17087] netlink: 236 bytes leftover after parsing attributes in process `syz.0.2670'. [ 779.109396][T17107] loop2: detected capacity change from 0 to 7 [ 779.125569][T17108] xt_hashlimit: max too large, truncated to 1048576 [ 779.147572][T17107] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting. [ 779.168638][T17108] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 779.198074][T17107] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 779.233155][T17107] Dev loop2: unable to read RDB block 7 [ 779.255235][T17107] loop2: AHDI p2 p3 [ 779.261017][T17107] loop2: partition table partially beyond EOD, truncated [ 779.292196][T17107] loop2: p3 start 335544320 is beyond EOD, truncated [ 779.525079][ T9] usb 2-1: new high-speed USB device number 62 using dummy_hcd [ 779.690836][ T5844] Bluetooth: hci1: command tx timeout [ 779.780989][ T9] usb 2-1: device descriptor read/64, error -71 [ 780.044752][ T9] usb 2-1: new high-speed USB device number 63 using dummy_hcd [ 780.124521][T16986] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 780.157377][T16986] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 780.204065][T16986] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 780.211066][ T9] usb 2-1: device descriptor read/64, error -71 [ 780.226972][T16986] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 780.388588][ T9] usb usb2-port1: attempt power cycle [ 780.627143][T16986] 8021q: adding VLAN 0 to HW filter on device bond0 [ 780.651443][T16986] 8021q: adding VLAN 0 to HW filter on device team0 [ 780.677236][ T7061] bridge0: port 1(bridge_slave_0) entered blocking state [ 780.684443][ T7061] bridge0: port 1(bridge_slave_0) entered forwarding state [ 780.781702][ T9] usb 2-1: new high-speed USB device number 64 using dummy_hcd [ 781.119539][ T7061] bridge0: port 2(bridge_slave_1) entered blocking state [ 781.126680][ T7061] bridge0: port 2(bridge_slave_1) entered forwarding state [ 781.138057][ T9] usb 2-1: device descriptor read/8, error -71 [ 781.264453][T14888] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 781.390879][ T9] usb 2-1: new high-speed USB device number 65 using dummy_hcd [ 781.393112][T16986] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 781.432019][ T9] usb 2-1: device descriptor read/8, error -71 [ 781.439809][T16986] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 781.541877][ T9] usb usb2-port1: unable to enumerate USB device [ 781.611116][ T5892] usb 4-1: new high-speed USB device number 71 using dummy_hcd [ 781.795617][ T5892] usb 4-1: Using ep0 maxpacket: 32 [ 781.836076][ T5892] usb 4-1: config 0 has an invalid interface number: 35 but max is 0 [ 782.031795][ T5892] usb 4-1: config 0 has no interface number 0 [ 782.091537][ T5892] usb 4-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.8f [ 782.101012][ T5892] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 782.121670][ T5892] usb 4-1: Product: syz [ 782.125908][ T5892] usb 4-1: Manufacturer: syz [ 782.130553][ T5892] usb 4-1: SerialNumber: syz [ 782.192696][ T9] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 782.209286][ T5892] usb 4-1: config 0 descriptor?? [ 782.223148][ T5892] radio-si470x 4-1:0.35: could not find interrupt in endpoint [ 782.241446][ T5892] radio-si470x 4-1:0.35: probe with driver radio-si470x failed with error -5 [ 782.494721][ T7061] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 782.694452][ T9] usb 7-1: Using ep0 maxpacket: 16 [ 783.096623][ T9] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 783.107814][ T9] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 783.117822][ T9] usb 7-1: New USB device found, idVendor=1b1c, idProduct=1b02, bcdDevice= 0.00 [ 783.127199][ T9] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 783.139173][ T5892] radio-raremono 4-1:0.35: Thanko's Raremono connected: (10C4:818A) [ 783.160973][ T9] usb 7-1: config 0 descriptor?? [ 783.172119][ T5892] radio-raremono 4-1:0.35: V4L2 device registered as radio48 [ 783.277073][T16986] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 783.500087][ T5892] usb 2-1: new high-speed USB device number 66 using dummy_hcd [ 784.067328][T17212] gfs2: not a GFS2 filesystem [ 784.130092][T17207] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 784.720937][ T5892] usb 2-1: Using ep0 maxpacket: 16 [ 784.730599][ T5939] usb 4-1: USB disconnect, device number 71 [ 784.746059][ T5892] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 784.762072][ T5939] radio-raremono 4-1:0.35: Thanko's Raremono disconnected [ 784.774028][ T5892] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 784.816763][ T5892] usb 2-1: New USB device found, idVendor=1b1c, idProduct=1b02, bcdDevice= 0.00 [ 784.867471][ T5892] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 784.900049][ T5892] usb 2-1: config 0 descriptor?? [ 784.934816][T17226] syz.0.2696: attempt to access beyond end of device [ 784.934816][T17226] nbd0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 785.050951][T17232] IPVS: set_ctl: invalid protocol: 255 224.0.0.2:20001 [ 785.088804][T16986] veth0_vlan: entered promiscuous mode [ 785.118974][T16986] veth1_vlan: entered promiscuous mode [ 785.220117][T16986] veth0_macvtap: entered promiscuous mode [ 785.237440][T16986] veth1_macvtap: entered promiscuous mode [ 785.275772][T16986] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 785.305940][T16986] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 785.327986][T16986] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 785.346212][T16986] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 785.356918][T16986] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 785.368348][T16986] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 785.585577][ T7065] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 785.669425][T17245] gfs2: not a GFS2 filesystem [ 786.015313][ T7065] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 786.025454][ T9] usbhid 7-1:0.0: can't add hid device: -71 [ 786.034000][ T9] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 786.061984][ T9] usb 7-1: USB disconnect, device number 3 [ 786.174622][T17255] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2703'. [ 786.193184][T17247] 9pnet: Could not find request transport: fd rýxÕv±”¶‘fdno=0x0000000000000004 [ 786.680589][T17261] xt_addrtype: ipv6 does not support BROADCAST matching [ 786.975885][T14887] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 786.984166][ T49] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 786.996515][T14887] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 787.147100][ T5892] usbhid 2-1:0.0: can't add hid device: -71 [ 787.171316][ T5892] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 787.221517][ T5892] usb 2-1: USB disconnect, device number 66 [ 788.513787][ T1146] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 788.615353][ T30] audit: type=1400 audit(1752944668.785:839): avc: denied { ioctl } for pid=17281 comm="syz.3.2709" path="/dev/autofs" dev="devtmpfs" ino=98 ioctlcmd=0x937d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 788.640422][ C1] vkms_vblank_simulate: vblank timer overrun [ 788.650842][T17280] overlayfs: option "uuid=on" requires an upper fs, falling back to uuid=null. [ 788.730934][T17280] overlayfs: missing 'lowerdir' [ 788.792767][ T49] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 788.976606][ T49] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 789.061080][ T5892] usb 4-1: new high-speed USB device number 72 using dummy_hcd [ 789.096593][ T49] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 789.179761][ T49] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 789.244500][ T5892] usb 4-1: Using ep0 maxpacket: 32 [ 789.276179][ T5892] usb 4-1: config 0 has an invalid interface number: 146 but max is 0 [ 789.301664][ T5892] usb 4-1: config 0 has no interface number 0 [ 789.323393][ T5892] usb 4-1: config 0 interface 146 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 789.349477][ T5892] usb 4-1: config 0 interface 146 altsetting 0 has an endpoint descriptor with address 0xE3, changing to 0x83 [ 789.378859][ T5892] usb 4-1: config 0 interface 146 altsetting 0 endpoint 0x83 has invalid maxpacket 33307, setting to 1024 [ 789.390780][ T49] bridge_slave_1: left allmulticast mode [ 789.399399][ T49] bridge_slave_1: left promiscuous mode [ 789.405962][ T5892] usb 4-1: config 0 interface 146 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 1024 [ 789.418207][ T49] bridge0: port 2(bridge_slave_1) entered disabled state [ 789.431555][ T5892] usb 4-1: config 0 interface 146 altsetting 0 has an endpoint descriptor with address 0xF2, changing to 0x82 [ 789.444384][ T49] bridge_slave_0: left allmulticast mode [ 789.450037][ T49] bridge_slave_0: left promiscuous mode [ 789.456397][ T49] bridge0: port 1(bridge_slave_0) entered disabled state [ 789.464136][ T5892] usb 4-1: config 0 interface 146 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 789.504109][ T5892] usb 4-1: config 0 interface 146 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 789.531014][ T5892] usb 4-1: config 0 interface 146 altsetting 0 endpoint 0x1 has invalid maxpacket 29440, setting to 1024 [ 789.564302][ T5892] usb 4-1: config 0 interface 146 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 789.594181][ T5892] usb 4-1: config 0 interface 146 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 789.656783][ T5892] usb 4-1: New USB device found, idVendor=05da, idProduct=009a, bcdDevice=62.95 [ 789.688058][ T5892] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 789.710738][ T5892] usb 4-1: Product: syz [ 789.718932][ T5892] usb 4-1: Manufacturer: syz [ 789.728625][ T5892] usb 4-1: SerialNumber: syz [ 789.735857][ T5892] usb 4-1: config 0 descriptor?? [ 789.755749][T17290] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 789.788237][T17290] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 789.809199][ T5892] microtek usb (rev 0.4.3): will this work? Response EP is not usually 3 [ 789.836990][ T5892] microtek usb (rev 0.4.3): will this work? Image data EP is not usually 2 [ 789.854594][ T5892] scsi host1: microtekX6 [ 791.170903][ T5939] usb 7-1: new full-speed USB device number 4 using dummy_hcd [ 791.221117][ T49] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 791.264176][ T49] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 791.287898][ T49] bond0 (unregistering): Released all slaves [ 791.382347][ T5939] usb 7-1: config 1 interface 0 has no altsetting 0 [ 791.404941][ T5939] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 791.434655][ T5836] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 791.435466][ T5939] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 791.455272][ T5836] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 791.481058][ T5836] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 791.498693][ T5836] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 791.507104][ T5836] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 791.511264][ T5939] usb 7-1: Product: syz [ 791.514398][T11443] usb 2-1: new high-speed USB device number 67 using dummy_hcd [ 791.525882][ T5939] usb 7-1: Manufacturer: syz [ 791.525907][ T5939] usb 7-1: SerialNumber: syz [ 791.720843][T11443] usb 2-1: Using ep0 maxpacket: 16 [ 791.734262][T11443] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 791.745856][T11443] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 791.760094][T11443] usb 2-1: New USB device found, idVendor=1b1c, idProduct=1b02, bcdDevice= 0.00 [ 791.781005][T11443] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 791.805041][T11443] usb 2-1: config 0 descriptor?? [ 791.873770][ T49] hsr_slave_0: left promiscuous mode [ 791.896800][ T49] hsr_slave_1: left promiscuous mode [ 791.908977][ T49] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 791.921183][ T49] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 791.934992][ T49] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 791.943387][ T49] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 792.005644][ T49] veth1_macvtap: left promiscuous mode [ 792.026900][ T49] veth0_macvtap: left promiscuous mode [ 792.035666][ T49] veth1_vlan: left promiscuous mode [ 792.062296][ T49] veth0_vlan: left promiscuous mode [ 792.430133][ T5899] usb 4-1: USB disconnect, device number 72 [ 792.499527][T17349] gfs2: not a GFS2 filesystem [ 792.895083][T11443] corsair 0003:1B1C:1B02.0045: hidraw0: USB HID v0.00 Device [HID 1b1c:1b02] on usb-dummy_hcd.1-1/input0 [ 793.143628][T17358] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2719'. [ 793.152892][T17358] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2719'. [ 793.163286][T17358] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2719'. [ 793.522269][T17358] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2719'. [ 793.535477][T17358] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2719'. [ 793.545599][T17358] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2719'. [ 793.610854][ T5836] Bluetooth: hci1: command tx timeout [ 793.675883][T17358] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2719'. [ 793.688887][T17358] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2719'. [ 793.709622][T17358] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2719'. [ 793.739784][T17364] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2721'. [ 793.750628][T17364] FAULT_INJECTION: forcing a failure. [ 793.750628][T17364] name failslab, interval 1, probability 0, space 0, times 0 [ 793.763919][T17364] CPU: 0 UID: 0 PID: 17364 Comm: syz.0.2721 Not tainted 6.16.0-rc5-syzkaller-00266-g3f31a806a62e #0 PREEMPT(full) [ 793.763944][T17364] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 793.763954][T17364] Call Trace: [ 793.763960][T17364] [ 793.763967][T17364] dump_stack_lvl+0x16c/0x1f0 [ 793.763996][T17364] should_fail_ex+0x512/0x640 [ 793.764031][T17364] ? kmem_cache_alloc_node_noprof+0x5e/0x3b0 [ 793.764058][T17364] should_failslab+0xc2/0x120 [ 793.764083][T17364] kmem_cache_alloc_node_noprof+0x71/0x3b0 [ 793.764104][T17364] ? __alloc_skb+0x2b2/0x380 [ 793.764131][T17364] __alloc_skb+0x2b2/0x380 [ 793.764151][T17364] ? __pfx___alloc_skb+0x10/0x10 [ 793.764172][T17364] ? genl_rcv_msg+0x4bb/0x800 [ 793.764196][T17364] netlink_ack+0x15d/0xb80 [ 793.764221][T17364] netlink_rcv_skb+0x332/0x420 [ 793.764239][T17364] ? __pfx_genl_rcv_msg+0x10/0x10 [ 793.764259][T17364] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 793.764334][T17364] ? netlink_deliver_tap+0x1ae/0xd30 [ 793.764364][T17364] genl_rcv+0x28/0x40 [ 793.764380][T17364] netlink_unicast+0x58a/0x850 [ 793.764401][T17364] ? __pfx_netlink_unicast+0x10/0x10 [ 793.764426][T17364] netlink_sendmsg+0x8d1/0xdd0 [ 793.764448][T17364] ? __pfx_netlink_sendmsg+0x10/0x10 [ 793.764475][T17364] ____sys_sendmsg+0xa95/0xc70 [ 793.764495][T17364] ? copy_msghdr_from_user+0x10a/0x160 [ 793.764518][T17364] ? __pfx_____sys_sendmsg+0x10/0x10 [ 793.764547][T17364] ___sys_sendmsg+0x134/0x1d0 [ 793.764573][T17364] ? __pfx____sys_sendmsg+0x10/0x10 [ 793.764595][T17364] ? __lock_acquire+0x622/0x1c90 [ 793.764671][T17364] __sys_sendmsg+0x16d/0x220 [ 793.764695][T17364] ? __pfx___sys_sendmsg+0x10/0x10 [ 793.764737][T17364] do_syscall_64+0xcd/0x4c0 [ 793.764766][T17364] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 793.764785][T17364] RIP: 0033:0x7fd6da98e929 [ 793.764800][T17364] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 793.764818][T17364] RSP: 002b:00007fd6db750038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 793.764835][T17364] RAX: ffffffffffffffda RBX: 00007fd6dabb5fa0 RCX: 00007fd6da98e929 [ 793.764847][T17364] RDX: 0000000000000000 RSI: 0000200000000240 RDI: 0000000000000003 [ 793.764858][T17364] RBP: 00007fd6db750090 R08: 0000000000000000 R09: 0000000000000000 [ 793.764869][T17364] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 793.764879][T17364] R13: 0000000000000000 R14: 00007fd6dabb5fa0 R15: 00007fff681076d8 [ 793.764904][T17364] [ 794.027765][ T7053] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 794.297611][T11443] corsair 0003:1B1C:1B02.0045: Failed to get K90 initial state (error -71). [ 794.341045][T11443] usb 2-1: USB disconnect, device number 67 [ 795.690798][ T5836] Bluetooth: hci1: command tx timeout [ 796.572334][ T1146] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 796.703922][ T49] team0 (unregistering): Port device team_slave_1 removed [ 796.772352][ T49] team0 (unregistering): Port device team_slave_0 removed [ 796.819735][ T5939] usblp 7-1:1.0: usblp0: USB Unidirectional printer dev 4 if 0 alt 253 proto 1 vid 0x0525 pid 0xA4A8 [ 797.498753][ T5939] usb 7-1: USB disconnect, device number 4 [ 797.516898][ T5939] usblp0: removed [ 797.590782][ T9] usb 2-1: new full-speed USB device number 68 using dummy_hcd [ 797.741240][T17398] netlink: 'syz.3.2731': attribute type 10 has an invalid length. [ 797.773720][ T5836] Bluetooth: hci1: command tx timeout [ 798.095339][ T9] usb 2-1: config 0 has no interfaces? [ 798.127438][ T9] usb 2-1: New USB device found, idVendor=17dd, idProduct=5500, bcdDevice=f3.5e [ 798.157506][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 798.175893][ T9] usb 2-1: Product: syz [ 798.183153][ T9] usb 2-1: Manufacturer: syz [ 798.188322][ T9] usb 2-1: SerialNumber: syz [ 798.230180][ T9] usb 2-1: config 0 descriptor?? [ 798.467264][ T30] audit: type=1326 audit(1752944678.635:840): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17392 comm="syz.1.2729" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd65938e929 code=0x0 [ 798.467733][T17416] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2733'. [ 798.838863][ T5885] usb 2-1: USB disconnect, device number 68 [ 798.928597][T17333] chnl_net:caif_netlink_parms(): no params data found [ 798.990488][T17430] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2736'. [ 799.160079][T17333] bridge0: port 1(bridge_slave_0) entered blocking state [ 799.175016][T17333] bridge0: port 1(bridge_slave_0) entered disabled state [ 799.197155][T17333] bridge_slave_0: entered allmulticast mode [ 799.206845][T17333] bridge_slave_0: entered promiscuous mode [ 799.234278][T17333] bridge0: port 2(bridge_slave_1) entered blocking state [ 799.757868][T17333] bridge0: port 2(bridge_slave_1) entered disabled state [ 799.771358][T14889] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 799.786717][T17333] bridge_slave_1: entered allmulticast mode [ 799.809204][T17333] bridge_slave_1: entered promiscuous mode [ 799.853641][ T5836] Bluetooth: hci1: command tx timeout [ 799.900566][T17443] netlink: 'syz.6.2738': attribute type 25 has an invalid length. [ 799.917509][T17443] netlink: 'syz.6.2738': attribute type 1 has an invalid length. [ 799.927323][T17443] bridge0: port 1(bridge_slave_0) entered learning state [ 800.102497][T17333] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 800.379101][T17333] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 801.078229][T17473] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2745'. [ 801.122138][T17475] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2744'. [ 801.139121][T17333] team0: Port device team_slave_0 added [ 801.183384][T17333] team0: Port device team_slave_1 added [ 801.210200][ T30] audit: type=1400 audit(1752944681.375:841): avc: denied { write } for pid=17476 comm="syz.0.2746" path="socket:[60811]" dev="sockfs" ino=60811 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 801.316697][T17333] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 801.425598][T17333] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 801.508349][T17488] netlink: 36 bytes leftover after parsing attributes in process `syz.6.2748'. [ 801.517864][T17488] netlink: 36 bytes leftover after parsing attributes in process `syz.6.2748'. [ 801.528300][T17488] netlink: 36 bytes leftover after parsing attributes in process `syz.6.2748'. [ 801.779054][ T7065] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 801.978754][T17333] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 801.994915][T17488] netlink: 36 bytes leftover after parsing attributes in process `syz.6.2748'. [ 802.132366][T17488] netlink: 36 bytes leftover after parsing attributes in process `syz.6.2748'. [ 802.172183][T17488] netlink: 36 bytes leftover after parsing attributes in process `syz.6.2748'. [ 802.187262][T17333] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 802.231288][T17333] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 802.470323][T17333] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 803.224603][T17333] hsr_slave_0: entered promiscuous mode [ 803.253019][T17333] hsr_slave_1: entered promiscuous mode [ 803.253604][T17333] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 803.253623][T17333] Cannot create hsr debugfs directory [ 803.491058][ T9] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 803.599180][ T30] audit: type=1400 audit(1752944683.765:842): avc: denied { ioctl } for pid=17522 comm="syz.3.2758" path="socket:[60887]" dev="sockfs" ino=60887 ioctlcmd=0x890b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 803.722200][ T9] usb 7-1: Using ep0 maxpacket: 32 [ 803.731627][ T9] usb 7-1: config 0 has an invalid interface number: 86 but max is 0 [ 803.748321][ T9] usb 7-1: config 0 has no interface number 0 [ 803.763772][ T9] usb 7-1: config 0 interface 86 has no altsetting 0 [ 803.781787][ T9] usb 7-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=33.7a [ 803.811512][ T9] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 803.819606][ T9] usb 7-1: Product: syz [ 803.836050][ T9] usb 7-1: Manufacturer: syz [ 803.841715][ T9] usb 7-1: SerialNumber: syz [ 803.850161][ T9] usb 7-1: config 0 descriptor?? [ 803.896681][T17537] FAULT_INJECTION: forcing a failure. [ 803.896681][T17537] name failslab, interval 1, probability 0, space 0, times 0 [ 803.921028][T17537] CPU: 0 UID: 0 PID: 17537 Comm: syz.3.2760 Not tainted 6.16.0-rc5-syzkaller-00266-g3f31a806a62e #0 PREEMPT(full) [ 803.921052][T17537] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 803.921062][T17537] Call Trace: [ 803.921068][T17537] [ 803.921074][T17537] dump_stack_lvl+0x16c/0x1f0 [ 803.921103][T17537] should_fail_ex+0x512/0x640 [ 803.921213][T17537] ? kmem_cache_alloc_node_noprof+0x5e/0x3b0 [ 803.921243][T17537] should_failslab+0xc2/0x120 [ 803.921268][T17537] kmem_cache_alloc_node_noprof+0x71/0x3b0 [ 803.921291][T17537] ? __alloc_skb+0x2b2/0x380 [ 803.921319][T17537] __alloc_skb+0x2b2/0x380 [ 803.921339][T17537] ? __pfx___alloc_skb+0x10/0x10 [ 803.921362][T17537] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 803.921411][T17537] netlink_alloc_large_skb+0x69/0x130 [ 803.921432][T17537] netlink_sendmsg+0x6a1/0xdd0 [ 803.921450][T17537] ? __pfx_netlink_sendmsg+0x10/0x10 [ 803.921477][T17537] ____sys_sendmsg+0xa95/0xc70 [ 803.921494][T17537] ? copy_msghdr_from_user+0x10a/0x160 [ 803.921517][T17537] ? __pfx_____sys_sendmsg+0x10/0x10 [ 803.921547][T17537] ___sys_sendmsg+0x134/0x1d0 [ 803.921573][T17537] ? __pfx____sys_sendmsg+0x10/0x10 [ 803.921595][T17537] ? __lock_acquire+0x622/0x1c90 [ 803.921641][T17537] __sys_sendmsg+0x16d/0x220 [ 803.921665][T17537] ? __pfx___sys_sendmsg+0x10/0x10 [ 803.921702][T17537] do_syscall_64+0xcd/0x4c0 [ 803.921730][T17537] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 803.921748][T17537] RIP: 0033:0x7f931eb8e929 [ 803.921764][T17537] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 803.921779][T17537] RSP: 002b:00007f931f923038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 803.921797][T17537] RAX: ffffffffffffffda RBX: 00007f931edb5fa0 RCX: 00007f931eb8e929 [ 803.921809][T17537] RDX: 0000000000008840 RSI: 0000200000000740 RDI: 0000000000000003 [ 803.921819][T17537] RBP: 00007f931f923090 R08: 0000000000000000 R09: 0000000000000000 [ 803.921830][T17537] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 803.921839][T17537] R13: 0000000000000000 R14: 00007f931edb5fa0 R15: 00007ffebc3e4628 [ 803.921862][T17537] [ 804.145243][ C0] vkms_vblank_simulate: vblank timer overrun [ 804.278907][T11443] usb 2-1: new high-speed USB device number 69 using dummy_hcd [ 804.580828][T11443] usb 2-1: Using ep0 maxpacket: 16 [ 804.588235][T11443] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 804.599394][T11443] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 804.616516][T11443] usb 2-1: New USB device found, idVendor=1b1c, idProduct=1b02, bcdDevice= 0.00 [ 804.634800][T11443] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 805.613337][T11443] usb 2-1: config 0 descriptor?? [ 805.775664][T17333] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 805.798068][T17333] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 805.829097][T17333] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 805.844929][T17333] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 805.970867][ T9] usb 4-1: new high-speed USB device number 73 using dummy_hcd [ 805.979306][T17333] 8021q: adding VLAN 0 to HW filter on device bond0 [ 806.010393][T17333] 8021q: adding VLAN 0 to HW filter on device team0 [ 806.135758][ T9] usb 4-1: Using ep0 maxpacket: 16 [ 806.149696][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 806.178778][T14889] bridge0: port 1(bridge_slave_0) entered blocking state [ 806.186009][T14889] bridge0: port 1(bridge_slave_0) entered forwarding state [ 806.189008][ T8035] usb 7-1: USB disconnect, device number 5 [ 806.206111][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 806.287072][T17577] gfs2: not a GFS2 filesystem [ 806.503959][ T9] usb 4-1: New USB device found, idVendor=1b1c, idProduct=1b02, bcdDevice= 0.00 [ 806.623452][T14888] bridge0: port 2(bridge_slave_1) entered blocking state [ 806.630621][T14888] bridge0: port 2(bridge_slave_1) entered forwarding state [ 806.656803][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 806.696191][ T9] usb 4-1: config 0 descriptor?? [ 807.484572][ T7065] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 807.750954][ T30] audit: type=1400 audit(1752944687.855:843): avc: denied { ioctl } for pid=17583 comm="syz.0.2768" path="/dev/btrfs-control" dev="devtmpfs" ino=1316 ioctlcmd=0x9439 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 808.736584][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 809.481103][T11443] usbhid 2-1:0.0: can't add hid device: -71 [ 809.518318][T11443] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 809.551634][ T9] usbhid 4-1:0.0: can't add hid device: -71 [ 809.557701][ T9] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 809.638424][T11443] usb 2-1: USB disconnect, device number 69 [ 809.645089][ T9] usb 4-1: USB disconnect, device number 73 [ 810.040864][T11443] usb 2-1: new high-speed USB device number 70 using dummy_hcd [ 810.071716][T17333] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 810.278180][T11443] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 810.356153][T11443] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 810.462925][T11443] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 810.498571][T11443] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 810.546977][T11443] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 810.629085][T11443] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 810.642860][T11443] usb 2-1: config 0 descriptor?? [ 811.234027][T11443] plantronics 0003:047F:FFFF.0046: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 811.354321][T17648] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2776'. [ 811.371187][T17648] FAULT_INJECTION: forcing a failure. [ 811.371187][T17648] name failslab, interval 1, probability 0, space 0, times 0 [ 811.410946][T17648] CPU: 0 UID: 0 PID: 17648 Comm: syz.0.2776 Not tainted 6.16.0-rc5-syzkaller-00266-g3f31a806a62e #0 PREEMPT(full) [ 811.410972][T17648] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 811.410979][T17648] Call Trace: [ 811.410983][T17648] [ 811.410988][T17648] dump_stack_lvl+0x16c/0x1f0 [ 811.411008][T17648] should_fail_ex+0x512/0x640 [ 811.411031][T17648] should_failslab+0xc2/0x120 [ 811.411049][T17648] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 811.411066][T17648] ? skb_clone+0x190/0x3f0 [ 811.411084][T17648] skb_clone+0x190/0x3f0 [ 811.411101][T17648] netlink_deliver_tap+0xabd/0xd30 [ 811.411123][T17648] netlink_unicast+0x702/0x850 [ 811.411136][T17648] ? __pfx_netlink_unicast+0x10/0x10 [ 811.411146][T17648] ? genl_rcv_msg+0x4bb/0x800 [ 811.411162][T17648] netlink_ack+0x696/0xb80 [ 811.411178][T17648] netlink_rcv_skb+0x332/0x420 [ 811.411188][T17648] ? __pfx_genl_rcv_msg+0x10/0x10 [ 811.411202][T17648] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 811.411219][T17648] ? netlink_deliver_tap+0x1ae/0xd30 [ 811.411242][T17648] genl_rcv+0x28/0x40 [ 811.411253][T17648] netlink_unicast+0x58a/0x850 [ 811.411265][T17648] ? __pfx_netlink_unicast+0x10/0x10 [ 811.411281][T17648] netlink_sendmsg+0x8d1/0xdd0 [ 811.411294][T17648] ? __pfx_netlink_sendmsg+0x10/0x10 [ 811.411311][T17648] ____sys_sendmsg+0xa95/0xc70 [ 811.411323][T17648] ? copy_msghdr_from_user+0x10a/0x160 [ 811.411338][T17648] ? __pfx_____sys_sendmsg+0x10/0x10 [ 811.411357][T17648] ___sys_sendmsg+0x134/0x1d0 [ 811.411373][T17648] ? __pfx____sys_sendmsg+0x10/0x10 [ 811.411388][T17648] ? __lock_acquire+0x622/0x1c90 [ 811.411417][T17648] __sys_sendmsg+0x16d/0x220 [ 811.411433][T17648] ? __pfx___sys_sendmsg+0x10/0x10 [ 811.411459][T17648] do_syscall_64+0xcd/0x4c0 [ 811.411477][T17648] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 811.411489][T17648] RIP: 0033:0x7fd6da98e929 [ 811.411499][T17648] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 811.411510][T17648] RSP: 002b:00007fd6db750038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 811.411521][T17648] RAX: ffffffffffffffda RBX: 00007fd6dabb5fa0 RCX: 00007fd6da98e929 [ 811.411529][T17648] RDX: 0000000000000000 RSI: 0000200000000240 RDI: 0000000000000003 [ 811.411535][T17648] RBP: 00007fd6db750090 R08: 0000000000000000 R09: 0000000000000000 [ 811.411541][T17648] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 811.411548][T17648] R13: 0000000000000000 R14: 00007fd6dabb5fa0 R15: 00007fff681076d8 [ 811.411563][T17648] [ 812.684173][T11443] usb 2-1: USB disconnect, device number 70 [ 812.849591][T17333] veth0_vlan: entered promiscuous mode [ 812.862972][T17652] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2777'. [ 812.875001][T17652] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2777'. [ 812.884614][T17652] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2777'. [ 813.010327][T17333] veth1_vlan: entered promiscuous mode [ 813.145111][T17333] veth0_macvtap: entered promiscuous mode [ 813.179934][ T30] audit: type=1400 audit(1752944693.345:844): avc: denied { accept } for pid=17667 comm="syz.3.2781" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 813.196098][T17333] veth1_macvtap: entered promiscuous mode [ 813.211657][ T1146] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 813.257931][T17333] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 813.309063][T17333] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 813.334300][T17681] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2784'. [ 813.337131][T17333] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 813.353786][ T9] usb 2-1: new high-speed USB device number 71 using dummy_hcd [ 813.365297][T17333] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 813.375322][T17333] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 813.384924][T17333] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 813.394434][T11443] usb 1-1: new full-speed USB device number 69 using dummy_hcd [ 813.520762][ T9] usb 2-1: Using ep0 maxpacket: 16 [ 813.534441][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 813.564432][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 813.597469][T11443] usb 1-1: config 0 has an invalid interface number: 133 but max is 0 [ 813.610490][T14888] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 813.628858][T11443] usb 1-1: config 0 has no interface number 0 [ 813.648326][ T9] usb 2-1: New USB device found, idVendor=1b1c, idProduct=1b02, bcdDevice= 0.00 [ 813.657881][T14888] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 813.672104][T11443] usb 1-1: New USB device found, idVendor=06cd, idProduct=0121, bcdDevice=dd.3d [ 813.695502][T17690] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=17690 comm=syz.6.2782 [ 813.715157][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 813.724116][T11443] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 813.739436][T11443] usb 1-1: Product: syz [ 813.745296][ T9] usb 2-1: config 0 descriptor?? [ 813.750467][T11443] usb 1-1: Manufacturer: syz [ 813.758513][T11443] usb 1-1: SerialNumber: syz [ 813.766687][T11443] usb 1-1: config 0 descriptor?? [ 813.874121][ T1146] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 813.898630][ T1146] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 814.026988][T11443] keyspan 1-1:0.133: Keyspan 1 port adapter converter detected [ 814.383314][T17701] gfs2: not a GFS2 filesystem [ 815.377089][ T9] corsair 0003:1B1C:1B02.0047: hidraw0: USB HID v0.00 Device [HID 1b1c:1b02] on usb-dummy_hcd.1-1/input0 [ 815.432977][T11443] keyspan 1-1:0.133: found no endpoint descriptor for endpoint 81 [ 815.476647][T11443] keyspan 1-1:0.133: found no endpoint descriptor for endpoint 1 [ 815.510649][T11443] keyspan 1-1:0.133: found no endpoint descriptor for endpoint 2 [ 815.570948][T11443] usb 1-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 815.701082][T10026] usb 1-1: USB disconnect, device number 69 [ 815.735258][T10026] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 815.779505][T10026] keyspan 1-1:0.133: device disconnected [ 815.830069][ T30] audit: type=1400 audit(1752944695.995:845): avc: denied { shutdown } for pid=17708 comm="syz.6.2789" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 815.951304][T17707] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2788'. [ 815.965025][T17707] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2788'. [ 816.022312][T17706] SELinux: failed to load policy [ 816.114830][T11443] usb 7-1: new low-speed USB device number 6 using dummy_hcd [ 816.122838][ T9] corsair 0003:1B1C:1B02.0047: Failed to get K90 initial state (error -71). [ 816.153646][ T9] usb 2-1: USB disconnect, device number 71 [ 816.301069][T11443] usb 7-1: Invalid ep0 maxpacket: 64 [ 816.306045][T14893] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 816.423498][T14893] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 816.455296][T11443] usb 7-1: new low-speed USB device number 7 using dummy_hcd [ 816.540442][T14893] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 816.609036][T14893] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 816.641160][T11443] usb 7-1: Invalid ep0 maxpacket: 64 [ 816.648122][T11443] usb usb7-port1: attempt power cycle [ 816.755655][T14893] bridge_slave_1: left allmulticast mode [ 816.774789][T14893] bridge_slave_1: left promiscuous mode [ 816.780514][T14893] bridge0: port 2(bridge_slave_1) entered disabled state [ 816.790000][T14893] bridge_slave_0: left allmulticast mode [ 816.796359][T14893] bridge_slave_0: left promiscuous mode [ 816.802201][T14893] bridge0: port 1(bridge_slave_0) entered disabled state [ 817.001463][T11443] usb 7-1: new low-speed USB device number 8 using dummy_hcd [ 817.033259][T11443] usb 7-1: Invalid ep0 maxpacket: 64 [ 817.110661][T14893] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 817.123092][T14893] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 817.133239][T14893] bond0 (unregistering): Released all slaves [ 817.160925][T11443] usb 7-1: new low-speed USB device number 9 using dummy_hcd [ 817.194216][T11443] usb 7-1: Invalid ep0 maxpacket: 64 [ 817.213728][T11443] usb usb7-port1: unable to enumerate USB device [ 817.459203][T14893] hsr_slave_0: left promiscuous mode [ 817.467707][T14893] hsr_slave_1: left promiscuous mode [ 817.475534][T14893] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 817.483807][T14893] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 817.492116][T14893] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 817.499722][T14893] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 817.523906][T14893] veth1_macvtap: left promiscuous mode [ 817.529539][T14893] veth0_macvtap: left promiscuous mode [ 817.539107][T14893] veth1_vlan: left promiscuous mode [ 817.544943][T14893] veth0_vlan: left promiscuous mode [ 817.655892][T17750] openvswitch: netlink: Duplicate or invalid key (type 0). [ 817.675205][T17750] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 817.978935][T17760] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2795'. [ 818.421825][ T8035] usb 4-1: new high-speed USB device number 74 using dummy_hcd [ 818.700820][ T8035] usb 4-1: Using ep0 maxpacket: 16 [ 818.725932][ T8035] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 818.759692][ T8035] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 818.778092][ T8035] usb 4-1: New USB device found, idVendor=1b1c, idProduct=1b02, bcdDevice= 0.00 [ 818.810732][ T8035] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 818.882763][ T8035] usb 4-1: config 0 descriptor?? [ 818.906849][ T5844] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 818.925217][ T5844] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 818.937657][ T5844] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 818.953958][ T5844] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 818.972139][ T1146] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 818.985701][ T7053] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 819.054718][ T5844] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 819.474157][T17781] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2800'. [ 819.483416][T17781] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2800'. [ 820.945947][ T8035] corsair 0003:1B1C:1B02.0048: hidraw0: USB HID v0.00 Device [HID 1b1c:1b02] on usb-dummy_hcd.3-1/input0 [ 821.098103][T17775] Set syz1 is full, maxelem 65536 reached [ 821.115680][ T8035] corsair 0003:1B1C:1B02.0048: Read invalid backlight brightness: 60. [ 821.130840][ T5844] Bluetooth: hci1: command tx timeout [ 821.393955][ T8035] usb 4-1: USB disconnect, device number 74 [ 822.421498][T17798] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2805'. [ 822.431356][T17798] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2805'. [ 822.440808][T17798] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2805'. [ 822.763465][T14893] team0 (unregistering): Port device team_slave_1 removed [ 822.772230][T17798] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2805'. [ 822.789849][T17798] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2805'. [ 822.821244][T17798] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2805'. [ 822.874455][T14893] team0 (unregistering): Port device team_slave_0 removed [ 823.025310][T17798] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2805'. [ 823.046076][T17798] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2805'. [ 823.060160][T17798] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2805'. [ 823.212991][ T5844] Bluetooth: hci1: command tx timeout [ 823.589173][T17811] netlink: 14601 bytes leftover after parsing attributes in process `syz.3.2807'. [ 823.643831][ T30] audit: type=1326 audit(1752944703.815:846): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17809 comm="syz.3.2807" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f931eb8e929 code=0x0 [ 823.765512][ T30] audit: type=1326 audit(1752944703.935:847): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17809 comm="syz.3.2807" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f931eb8e929 code=0x0 [ 824.171386][ T7058] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 824.466157][T17834] xt_addrtype: ipv6 does not support BROADCAST matching [ 824.731721][ T7058] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 825.298090][T17851] FAULT_INJECTION: forcing a failure. [ 825.298090][T17851] name failslab, interval 1, probability 0, space 0, times 0 [ 825.311378][ T5844] Bluetooth: hci1: command tx timeout [ 825.564035][T17851] CPU: 0 UID: 0 PID: 17851 Comm: syz.0.2814 Not tainted 6.16.0-rc5-syzkaller-00266-g3f31a806a62e #0 PREEMPT(full) [ 825.564054][T17851] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 825.564062][T17851] Call Trace: [ 825.564066][T17851] [ 825.564071][T17851] dump_stack_lvl+0x16c/0x1f0 [ 825.564091][T17851] should_fail_ex+0x512/0x640 [ 825.564107][T17851] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 825.564124][T17851] should_failslab+0xc2/0x120 [ 825.564142][T17851] __kmalloc_cache_noprof+0x6a/0x3e0 [ 825.564155][T17851] ? nfnl_err_add+0x4e/0x350 [ 825.564172][T17851] nfnl_err_add+0x4e/0x350 [ 825.564185][T17851] nfnetlink_rcv_batch+0xc95/0x2330 [ 825.564206][T17851] ? __pfx_nfnetlink_rcv_batch+0x10/0x10 [ 825.564242][T17851] ? avc_has_perm_noaudit+0x149/0x3b0 [ 825.564286][T17851] ? __nla_parse+0x40/0x60 [ 825.564306][T17851] nfnetlink_rcv+0x3c1/0x430 [ 825.564325][T17851] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 825.564353][T17851] netlink_unicast+0x58a/0x850 [ 825.564374][T17851] ? __pfx_netlink_unicast+0x10/0x10 [ 825.564400][T17851] netlink_sendmsg+0x8d1/0xdd0 [ 825.564422][T17851] ? __pfx_netlink_sendmsg+0x10/0x10 [ 825.564449][T17851] ____sys_sendmsg+0xa95/0xc70 [ 825.564469][T17851] ? copy_msghdr_from_user+0x10a/0x160 [ 825.564491][T17851] ? __pfx_____sys_sendmsg+0x10/0x10 [ 825.564520][T17851] ___sys_sendmsg+0x134/0x1d0 [ 825.564544][T17851] ? __pfx____sys_sendmsg+0x10/0x10 [ 825.564565][T17851] ? __lock_acquire+0x622/0x1c90 [ 825.564614][T17851] __sys_sendmsg+0x16d/0x220 [ 825.564639][T17851] ? __pfx___sys_sendmsg+0x10/0x10 [ 825.564679][T17851] do_syscall_64+0xcd/0x4c0 [ 825.564703][T17851] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 825.564714][T17851] RIP: 0033:0x7fd6da98e929 [ 825.564725][T17851] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 825.564736][T17851] RSP: 002b:00007fd6db750038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 825.564748][T17851] RAX: ffffffffffffffda RBX: 00007fd6dabb5fa0 RCX: 00007fd6da98e929 [ 825.564755][T17851] RDX: 0000000020008000 RSI: 0000200000000500 RDI: 0000000000000003 [ 825.564768][T17851] RBP: 00007fd6db750090 R08: 0000000000000000 R09: 0000000000000000 [ 825.564775][T17851] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 825.564781][T17851] R13: 0000000000000000 R14: 00007fd6dabb5fa0 R15: 00007fff681076d8 [ 825.564796][T17851] [ 826.049506][T17767] chnl_net:caif_netlink_parms(): no params data found [ 826.421305][T17767] bridge0: port 1(bridge_slave_0) entered blocking state [ 826.430132][T17767] bridge0: port 1(bridge_slave_0) entered disabled state [ 826.457975][T17767] bridge_slave_0: entered allmulticast mode [ 826.483538][T17767] bridge_slave_0: entered promiscuous mode [ 826.513814][T17767] bridge0: port 2(bridge_slave_1) entered blocking state [ 826.544233][T17767] bridge0: port 2(bridge_slave_1) entered disabled state [ 826.561171][T17767] bridge_slave_1: entered allmulticast mode [ 826.572363][T17767] bridge_slave_1: entered promiscuous mode [ 826.601073][T11443] usb 4-1: new full-speed USB device number 75 using dummy_hcd [ 826.729777][T17578] usb 1-1: new high-speed USB device number 70 using dummy_hcd [ 826.814609][T11443] usb 4-1: config 1 interface 0 has no altsetting 0 [ 826.825256][T11443] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 826.841468][T11443] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 826.960840][T17578] usb 1-1: Using ep0 maxpacket: 16 [ 826.966745][T11443] usb 4-1: Product: syz [ 826.972616][T17578] usb 1-1: config index 0 descriptor too short (expected 1828, got 36) [ 826.984258][T11443] usb 4-1: Manufacturer: syz [ 826.989138][T11443] usb 4-1: SerialNumber: syz [ 826.999224][T17578] usb 1-1: config 0 has an invalid interface number: 0 but max is -1 [ 827.039508][T17578] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 827.060336][T17881] bridge4: entered promiscuous mode [ 827.066426][T17578] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 827.082020][T17767] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 827.103835][T17578] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 827.129117][T17767] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 827.138490][T17578] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 827.213592][T17578] usb 1-1: New USB device found, idVendor=06cd, idProduct=0115, bcdDevice=1a.1e [ 827.230885][ T9] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 827.305710][T17578] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 827.380969][ T5844] Bluetooth: hci1: command tx timeout [ 827.401299][T17578] usb 1-1: Product: syz [ 827.406374][T17578] usb 1-1: Manufacturer: syz [ 827.411752][T17578] usb 1-1: SerialNumber: syz [ 827.423036][T17578] usb 1-1: config 0 descriptor?? [ 827.431982][T17578] keyspan 1-1:0.0: Keyspan 2 port adapter converter detected [ 827.439601][T17578] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 87 [ 827.449585][T17578] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 7 [ 827.458773][T17578] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 81 [ 827.474136][T11443] usblp 4-1:1.0: usblp0: USB Unidirectional printer dev 75 if 0 alt 253 proto 1 vid 0x0525 pid 0xA4A8 [ 827.485493][ T9] usb 7-1: Using ep0 maxpacket: 16 [ 827.493798][ T9] usb 7-1: config 0 interface 0 altsetting 1 endpoint 0x7 has invalid wMaxPacketSize 0 [ 827.506201][T11443] usb 4-1: USB disconnect, device number 75 [ 827.513544][ T9] usb 7-1: config 0 interface 0 altsetting 1 endpoint 0x89 has an invalid bInterval 0, changing to 7 [ 827.525031][T17578] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 1 [ 827.536367][T11443] usblp0: removed [ 827.557765][T17578] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 2 [ 827.561318][T17767] team0: Port device team_slave_0 added [ 827.565507][ T9] usb 7-1: config 0 interface 0 altsetting 1 endpoint 0x89 has invalid wMaxPacketSize 0 [ 827.590380][T17578] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 85 [ 827.600448][T17578] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 5 [ 827.608329][ T9] usb 7-1: config 0 interface 0 has no altsetting 0 [ 827.623639][ T9] usb 7-1: New USB device found, idVendor=06cb, idProduct=0006, bcdDevice=9a.eb [ 827.641203][T17578] usb 1-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 827.655588][ T9] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 827.677920][T17767] team0: Port device team_slave_1 added [ 827.679385][T17578] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 83 [ 827.697107][ T9] usb 7-1: Product: syz [ 827.702207][ T9] usb 7-1: Manufacturer: syz [ 827.707185][ T9] usb 7-1: SerialNumber: syz [ 827.712012][T17578] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 4 [ 827.722170][ T9] usb 7-1: config 0 descriptor?? [ 827.730358][T17578] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 86 [ 827.738670][T17578] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 6 [ 827.755639][T17578] usb 1-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 827.780472][T17578] usb 1-1: USB disconnect, device number 70 [ 827.872386][T17578] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 827.894559][T17767] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 827.901917][T17767] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 827.942928][T17578] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 827.946798][T17767] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 827.956842][ T30] audit: type=1400 audit(1752944708.125:848): avc: denied { getopt } for pid=17887 comm="syz.6.2820" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 827.993826][ T9] input: syz syz as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/input/input33 [ 828.011299][T17578] keyspan 1-1:0.0: device disconnected [ 828.032186][ T5188] synaptics_usb 7-1:0.0: synusb_open - usb_submit_urb failed, error: -90 [ 828.080621][T17905] xt_hashlimit: max too large, truncated to 1048576 [ 828.112620][T17767] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 828.150250][ T5188] synaptics_usb 7-1:0.0: synusb_open - usb_submit_urb failed, error: -90 [ 828.153788][T17905] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 828.170052][T17767] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 828.215944][T17888] synaptics_usb 7-1:0.0: synusb_open - usb_submit_urb failed, error: -90 [ 828.224886][T17767] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 828.517161][ T6192] synaptics_usb 7-1:0.0: synusb_open - usb_submit_urb failed, error: -90 [ 828.564968][ T5188] synaptics_usb 7-1:0.0: synusb_open - usb_submit_urb failed, error: -90 [ 828.580345][T11443] usb 7-1: USB disconnect, device number 10 [ 828.645661][ T5188] synaptics_usb 7-1:0.0: synusb_open - usb_submit_urb failed, error: -19 [ 829.018544][T17767] hsr_slave_0: entered promiscuous mode [ 829.047392][T17767] hsr_slave_1: entered promiscuous mode [ 829.073024][T17767] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 829.330943][T17767] Cannot create hsr debugfs directory [ 830.041499][ T1146] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 830.093778][ T9] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 830.242268][T17934] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 830.353491][T17934] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 830.378077][ T9] usb 7-1: Using ep0 maxpacket: 16 [ 830.425585][T10026] usb 1-1: new high-speed USB device number 71 using dummy_hcd [ 830.438690][ T9] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 830.480980][ T9] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 830.492935][ T1146] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 830.500119][T17941] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2829'. [ 830.513914][ T9] usb 7-1: New USB device found, idVendor=1b1c, idProduct=1b02, bcdDevice= 0.00 [ 830.530163][ T9] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 830.547852][ T9] usb 7-1: config 0 descriptor?? [ 830.611249][T10026] usb 1-1: device descriptor read/64, error -71 [ 830.729249][T17944] Bluetooth: Invalid byte 00 after esc byte [ 830.861210][T10026] usb 1-1: new high-speed USB device number 72 using dummy_hcd [ 831.013264][T10026] usb 1-1: device descriptor read/64, error -71 [ 831.131766][T10026] usb usb1-port1: attempt power cycle [ 831.150814][ T43] usb 2-1: new full-speed USB device number 72 using dummy_hcd [ 831.248190][T17963] gfs2: not a GFS2 filesystem [ 831.349392][ T43] usb 2-1: config 1 interface 0 has no altsetting 0 [ 831.452856][ T43] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 831.521189][T10026] usb 1-1: new high-speed USB device number 73 using dummy_hcd [ 831.654110][ T43] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 831.665316][T10026] usb 1-1: device descriptor read/8, error -71 [ 831.682707][ T43] usb 2-1: Product: syz [ 831.690448][ T43] usb 2-1: Manufacturer: syz [ 831.703862][ T43] usb 2-1: SerialNumber: syz [ 831.847537][T17767] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 831.859712][T17767] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 831.870994][T17767] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 831.881912][T17767] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 831.920909][T10026] usb 1-1: new high-speed USB device number 74 using dummy_hcd [ 831.953969][T10026] usb 1-1: device descriptor read/8, error -71 [ 832.015320][T17767] 8021q: adding VLAN 0 to HW filter on device bond0 [ 832.048056][T17767] 8021q: adding VLAN 0 to HW filter on device team0 [ 832.063755][ T7065] bridge0: port 1(bridge_slave_0) entered blocking state [ 832.070993][ T7065] bridge0: port 1(bridge_slave_0) entered forwarding state [ 832.072993][T10026] usb usb1-port1: unable to enumerate USB device [ 832.094301][ T7065] bridge0: port 2(bridge_slave_1) entered blocking state [ 832.101580][ T7065] bridge0: port 2(bridge_slave_1) entered forwarding state [ 832.153958][ T43] usblp 2-1:1.0: usblp0: USB Unidirectional printer dev 72 if 0 alt 253 proto 1 vid 0x0525 pid 0xA4A8 [ 832.188025][ T43] usb 2-1: USB disconnect, device number 72 [ 832.208184][T17767] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 832.228703][ T43] usblp0: removed [ 832.453967][T17767] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 832.750860][ T5844] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 832.752939][ T9] usbhid 7-1:0.0: can't add hid device: -71 [ 832.757496][ T5836] Bluetooth: hci5: command 0x1003 tx timeout [ 832.791361][ T9] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 832.886508][ T9] usb 7-1: USB disconnect, device number 11 [ 833.135806][T17767] veth0_vlan: entered promiscuous mode [ 833.209882][T17767] veth1_vlan: entered promiscuous mode [ 833.218229][T18014] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2836'. [ 833.525485][T18019] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 833.684441][T17767] veth0_macvtap: entered promiscuous mode [ 833.853025][T18029] netlink: 'syz.0.2838': attribute type 4 has an invalid length. [ 834.177026][T17767] veth1_macvtap: entered promiscuous mode [ 834.325515][T18021] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 834.878519][T17578] hid-generic 00A0:0008:0003.0049: unknown main item tag 0x7 [ 834.891494][T17578] hid-generic 00A0:0008:0003.0049: item fetching failed at offset 14/15 [ 834.900524][T17578] hid-generic 00A0:0008:0003.0049: probe with driver hid-generic failed with error -22 [ 835.425946][T17767] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 835.555149][T17767] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 835.616755][ T7061] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 835.644448][ T7061] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 835.680452][T17767] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 835.697269][T17767] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 835.706821][T17767] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 835.715800][T17767] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 835.811054][T17578] usb 7-1: new full-speed USB device number 12 using dummy_hcd [ 836.031684][T17578] usb 7-1: config 1 interface 0 has no altsetting 0 [ 836.077372][T17578] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 836.106722][T17578] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 836.198849][T17578] usb 7-1: Product: syz [ 836.215097][T17578] usb 7-1: Manufacturer: syz [ 836.230108][T17578] usb 7-1: SerialNumber: syz [ 836.819669][T17578] usblp 7-1:1.0: usblp0: USB Unidirectional printer dev 12 if 0 alt 253 proto 1 vid 0x0525 pid 0xA4A8 [ 836.822362][T14893] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 836.842975][T17578] usb 7-1: USB disconnect, device number 12 [ 836.852082][T17578] usblp0: removed [ 836.898233][ T7061] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 836.948657][ T7061] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 836.960989][T14893] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 837.339274][T18075] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2847'. [ 837.494350][ T8035] usb 4-1: new full-speed USB device number 76 using dummy_hcd [ 837.756383][ T8035] usb 4-1: config 4 has an invalid interface number: 44 but max is 0 [ 837.771894][ T8035] usb 4-1: config 4 has no interface number 0 [ 837.779190][ T8035] usb 4-1: config 4 interface 44 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 837.808076][ T8035] usb 4-1: New USB device found, idVendor=1044, idProduct=7001, bcdDevice= 5.20 [ 837.827479][ T8035] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 837.836511][ T8035] usb 4-1: Product: syz [ 837.843160][ T8035] usb 4-1: Manufacturer: syz [ 837.847935][ T8035] usb 4-1: SerialNumber: syz [ 838.064518][ T49] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 838.231279][ T8035] dvb-usb: found a 'Gigabyte U7000' in cold state, will try to load a firmware [ 838.260846][T17578] usb 2-1: new full-speed USB device number 73 using dummy_hcd [ 838.349012][ T8035] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 838.359506][ T8035] dib0700: firmware download failed at 7 with -22 [ 838.384334][ T49] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 838.463075][T17578] usb 2-1: unable to get BOS descriptor or descriptor too short [ 838.475986][T17578] usb 2-1: not running at top speed; connect to a high speed hub [ 838.488044][ T8035] usb 4-1: USB disconnect, device number 76 [ 838.561027][T17578] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 838.662244][T17578] usb 2-1: config 1 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 838.819308][ T49] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 838.833676][T17578] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 838.960852][T17578] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 838.985459][T17578] usb 2-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 4 [ 839.126618][ T49] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 839.195736][T17578] usb 2-1: New USB device found, idVendor=045e, idProduct=043f, bcdDevice=fc.90 [ 839.218602][T17578] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 839.238938][T17578] usb 2-1: Product: syz [ 839.247865][T17578] usb 2-1: Manufacturer: syz [ 839.274090][T17578] usb 2-1: SerialNumber: syz [ 839.290540][T17578] ipaq 2-1:1.0: PocketPC PDA converter detected [ 839.520507][T17578] usb 2-1: PocketPC PDA converter now attached to ttyUSB0 [ 839.595566][ T49] bridge_slave_1: left allmulticast mode [ 839.655566][ T49] bridge_slave_1: left promiscuous mode [ 839.713915][ T49] bridge0: port 2(bridge_slave_1) entered disabled state [ 839.945470][ T49] bridge_slave_0: left allmulticast mode [ 839.953186][ T49] bridge_slave_0: left promiscuous mode [ 839.987077][ T49] bridge0: port 1(bridge_slave_0) entered disabled state [ 841.372356][ T13] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 841.390394][T14889] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 841.778715][T17578] hid (null): unknown global tag 0xe [ 841.787723][T17578] hid (null): unknown global tag 0xc [ 841.809584][T17578] hid-generic 0005:0098:0007.004A: unknown global tag 0xe [ 841.824857][T17578] hid-generic 0005:0098:0007.004A: item 0 4 1 14 parsing failed [ 841.836534][T17578] hid-generic 0005:0098:0007.004A: probe with driver hid-generic failed with error -22 [ 841.887188][ T5844] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 841.909373][ T43] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 841.925494][ T5844] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 841.947780][ T5844] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 841.966791][ T5844] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 841.975227][ T5844] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 842.075015][ T43] usb 7-1: config 0 has an invalid interface number: 237 but max is 0 [ 842.083795][ T43] usb 7-1: config 0 has no interface number 0 [ 842.089966][ T43] usb 7-1: config 0 interface 237 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 842.102621][ T43] usb 7-1: config 0 interface 237 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 842.112902][ T43] usb 7-1: config 0 interface 237 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 842.124396][ T43] usb 7-1: config 0 interface 237 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 842.136997][ T43] usb 7-1: New USB device found, idVendor=045e, idProduct=84bd, bcdDevice=89.b6 [ 842.152248][ T43] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 842.161099][ T43] usb 7-1: Product: syz [ 842.165337][ T43] usb 7-1: Manufacturer: syz [ 842.169984][ T43] usb 7-1: SerialNumber: syz [ 842.197939][ T43] usb 7-1: config 0 descriptor?? [ 842.229001][ T43] xpad 7-1:0.237: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 842.247330][ T43] input: Generic X-Box pad as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.237/input/input34 [ 842.356084][ T49] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 842.389046][ T49] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 842.413961][ T49] bond0 (unregistering): Released all slaves [ 842.482790][ T43] usb 7-1: USB disconnect, device number 13 [ 842.678133][T17578] usb 2-1: USB disconnect, device number 73 [ 842.762826][T17578] ipaq ttyUSB0: PocketPC PDA converter now disconnected from ttyUSB0 [ 842.794542][T17578] ipaq 2-1:1.0: device disconnected [ 847.602937][ C1] hrtimer: interrupt took 4688345369 ns [ 847.621368][ T7061] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 847.632635][ T7061] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 847.682956][ T5844] Bluetooth: hci1: command tx timeout [ 952.670637][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 952.677614][ C0] rcu: 1-...!: (1 GPs behind) idle=463c/1/0x4000000000000000 softirq=104036/104041 fqs=0 [ 952.688624][ C0] rcu: (detected by 0, t=10505 jiffies, g=82133, q=1146 ncpus=2) [ 952.696427][ C0] Sending NMI from CPU 0 to CPUs 1: [ 952.696454][ C1] NMI backtrace for cpu 1 [ 952.696466][ C1] CPU: 1 UID: 0 PID: 18156 Comm: syz.0.2859 Not tainted 6.16.0-rc5-syzkaller-00266-g3f31a806a62e #0 PREEMPT(full) [ 952.696483][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 952.696491][ C1] RIP: 0010:rb_next+0x0/0x130 [ 952.696513][ C1] Code: 4c 24 08 48 89 14 24 e8 7e b1 9e f6 48 8b 4c 24 08 48 8b 14 24 e9 6c fc ff ff 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1e fa 48 b8 00 00 00 00 00 fc ff df 41 54 48 89 fa 55 48 c1 [ 952.696525][ C1] RSP: 0018:ffffc90000a08dd8 EFLAGS: 00000046 [ 952.696537][ C1] RAX: 0000000080010002 RBX: ffff8880337d2340 RCX: ffffffff8b847d70 [ 952.696546][ C1] RDX: ffff8880227b4880 RSI: ffffffff8b847e00 RDI: ffff8880337d2340 [ 952.696555][ C1] RBP: ffff8880b8527d50 R08: 0000000000000006 R09: ffff8880b8528a60 [ 952.696564][ C1] R10: ffff8880337d2340 R11: 0000000000000001 R12: ffff8880b8527d58 [ 952.696577][ C1] R13: 0000000000000000 R14: ffff8880b8527c80 R15: 0000000000000000 [ 952.696586][ C1] FS: 00007fd6db7506c0(0000) GS:ffff888124813000(0000) knlGS:0000000000000000 [ 952.696600][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 952.696608][ C1] CR2: 0000562fd9a01be0 CR3: 00000000738b7000 CR4: 00000000003526f0 [ 952.696617][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000040020 [ 952.696626][ C1] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 952.696634][ C1] Call Trace: [ 952.696640][ C1] [ 952.696645][ C1] timerqueue_del+0xd8/0x150 [ 952.696660][ C1] __remove_hrtimer+0x99/0x290 [ 952.696677][ C1] __hrtimer_run_queues+0x4f9/0xad0 [ 952.696694][ C1] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 952.696709][ C1] ? read_tsc+0x9/0x20 [ 952.696728][ C1] hrtimer_interrupt+0x397/0x8e0 [ 952.696749][ C1] __sysvec_apic_timer_interrupt+0x10b/0x3f0 [ 952.696764][ C1] sysvec_apic_timer_interrupt+0x9f/0xc0 [ 952.696781][ C1] [ 952.696786][ C1] [ 952.696791][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 952.696805][ C1] RIP: 0010:finish_task_switch.isra.0+0x22a/0xc10 [ 952.696824][ C1] Code: fb 09 00 00 44 8b 05 09 cb 1f 0f 45 85 c0 0f 85 be 01 00 00 4c 89 e7 e8 a4 f6 ff ff e8 df d5 39 00 fb 65 48 8b 1d be e2 46 12 <48> 8d bb 18 16 00 00 48 b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 [ 952.696836][ C1] RSP: 0018:ffffc9000427f6f8 EFLAGS: 00000206 [ 952.696846][ C1] RAX: 0000000000009565 RBX: ffff8880227b4880 RCX: ffffffff81c3c22f [ 952.696854][ C1] RDX: 0000000000000000 RSI: ffffffff8de32e47 RDI: ffffffff8c158f60 [ 952.696863][ C1] RBP: ffffc9000427f740 R08: 0000000000000001 R09: 0000000000000001 [ 952.696871][ C1] R10: ffffffff90a98657 R11: 0000000000000001 R12: ffff8880b853a2c0 [ 952.696880][ C1] R13: ffff88801e2da440 R14: 0000000000000001 R15: ffff8880b853b130 [ 952.696892][ C1] ? trace_irq_enable.constprop.0+0x2f/0x120 [ 952.696910][ C1] ? finish_task_switch.isra.0+0x221/0xc10 [ 952.696926][ C1] ? __switch_to+0x783/0x1170 [ 952.696942][ C1] __schedule+0x1172/0x5de0 [ 952.696965][ C1] ? __pfx___schedule+0x10/0x10 [ 952.696982][ C1] ? find_held_lock+0x2b/0x80 [ 952.697000][ C1] ? schedule+0x2d7/0x3a0 [ 952.697017][ C1] schedule+0xe7/0x3a0 [ 952.697032][ C1] schedule_timeout+0x257/0x290 [ 952.697046][ C1] ? __pfx_schedule_timeout+0x10/0x10 [ 952.697064][ C1] ? rcu_is_watching+0x12/0xc0 [ 952.697080][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 952.697096][ C1] __wait_for_common+0x2ff/0x4e0 [ 952.697113][ C1] ? __pfx_schedule_timeout+0x10/0x10 [ 952.697128][ C1] ? __pfx___wait_for_common+0x10/0x10 [ 952.697147][ C1] ? generic_exec_single+0xbb/0x390 [ 952.697164][ C1] rdmsr_safe_on_cpu+0x1dc/0x210 [ 952.697182][ C1] ? __pfx_rdmsr_safe_on_cpu+0x10/0x10 [ 952.697197][ C1] ? __pfx___rdmsr_safe_on_cpu+0x10/0x10 [ 952.697221][ C1] msr_read+0x19d/0x250 [ 952.697237][ C1] ? __pfx_msr_read+0x10/0x10 [ 952.697250][ C1] ? bpf_lsm_file_permission+0x9/0x10 [ 952.697263][ C1] ? security_file_permission+0x71/0x210 [ 952.697282][ C1] ? rw_verify_area+0xcf/0x680 [ 952.697297][ C1] ? __pfx_msr_read+0x10/0x10 [ 952.697311][ C1] vfs_read+0x1e1/0xc60 [ 952.697329][ C1] ? __pfx_vfs_read+0x10/0x10 [ 952.697343][ C1] ? do_futex+0x122/0x350 [ 952.697361][ C1] ? __pfx_do_futex+0x10/0x10 [ 952.697378][ C1] ? find_held_lock+0x2b/0x80 [ 952.697393][ C1] ? handle_mm_fault+0x2ab/0xd10 [ 952.697409][ C1] ? __x64_sys_futex+0x1e0/0x4c0 [ 952.697427][ C1] ? __x64_sys_futex+0x1e9/0x4c0 [ 952.697446][ C1] ksys_read+0x12a/0x250 [ 952.697462][ C1] ? __pfx_ksys_read+0x10/0x10 [ 952.697480][ C1] do_syscall_64+0xcd/0x4c0 [ 952.697498][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 952.697512][ C1] RIP: 0033:0x7fd6da98e929 [ 952.697524][ C1] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 952.697536][ C1] RSP: 002b:00007fd6db750038 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 952.697548][ C1] RAX: ffffffffffffffda RBX: 00007fd6dabb5fa0 RCX: 00007fd6da98e929 [ 952.697557][ C1] RDX: 0000000000018ff8 RSI: 0000200000004c00 RDI: 0000000000000003 [ 952.697566][ C1] RBP: 00007fd6daa10b39 R08: 0000000000000000 R09: 0000000000000000 [ 952.697578][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 952.697586][ C1] R13: 0000000000000000 R14: 00007fd6dabb5fa0 R15: 00007fff681076d8 [ 952.697600][ C1] [ 952.698449][ C0] rcu: rcu_preempt kthread starved for 10505 jiffies! g82133 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=0 [ 953.237129][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 953.247093][ C0] rcu: RCU grace-period kthread stack dump: [ 953.252970][ C0] task:rcu_preempt state:R running task stack:27672 pid:16 tgid:16 ppid:2 task_flags:0x208040 flags:0x00004000 [ 953.266456][ C0] Call Trace: [ 953.269726][ C0] [ 953.272657][ C0] __schedule+0x116a/0x5de0 [ 953.277176][ C0] ? __lock_acquire+0x622/0x1c90 [ 953.282113][ C0] ? __pfx___schedule+0x10/0x10 [ 953.286968][ C0] ? find_held_lock+0x2b/0x80 [ 953.291645][ C0] ? schedule+0x2d7/0x3a0 [ 953.296583][ C0] schedule+0xe7/0x3a0 [ 953.300649][ C0] schedule_timeout+0x123/0x290 [ 953.305497][ C0] ? __pfx_schedule_timeout+0x10/0x10 [ 953.310866][ C0] ? __pfx_process_timeout+0x10/0x10 [ 953.316158][ C0] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 953.321960][ C0] ? prepare_to_swait_event+0xf5/0x480 [ 953.327429][ C0] rcu_gp_fqs_loop+0x1ea/0xb00 [ 953.332188][ C0] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 953.337467][ C0] ? lockdep_hardirqs_on+0x7c/0x110 [ 953.342664][ C0] ? __pfx_rcu_gp_init+0x10/0x10 [ 953.347593][ C0] ? rcu_gp_cleanup+0x7c1/0xd90 [ 953.352443][ C0] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 953.358250][ C0] rcu_gp_kthread+0x270/0x380 [ 953.362921][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 953.368110][ C0] ? rcu_is_watching+0x12/0xc0 [ 953.372874][ C0] ? lockdep_hardirqs_on+0x7c/0x110 [ 953.378074][ C0] ? __kthread_parkme+0x19e/0x250 [ 953.383102][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 953.388292][ C0] kthread+0x3c5/0x780 [ 953.392357][ C0] ? __pfx_kthread+0x10/0x10 [ 953.396943][ C0] ? rcu_is_watching+0x12/0xc0 [ 953.401705][ C0] ? __pfx_kthread+0x10/0x10 [ 953.406290][ C0] ret_from_fork+0x5d7/0x6f0 [ 953.410886][ C0] ? __pfx_kthread+0x10/0x10 [ 953.415471][ C0] ret_from_fork_asm+0x1a/0x30 [ 953.420247][ C0] [ 953.423257][ C0] rcu: Stack dump where RCU GP kthread last ran: [ 953.429569][ C0] CPU: 0 UID: 0 PID: 18166 Comm: syz.1.2861 Not tainted 6.16.0-rc5-syzkaller-00266-g3f31a806a62e #0 PREEMPT(full) [ 953.441622][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 953.451671][ C0] RIP: 0010:smp_call_function_many_cond+0xd7b/0x1510 [ 953.458346][ C0] Code: e8 6a 19 0c 00 45 85 ed 74 46 48 8b 14 24 49 89 d6 49 89 d5 49 c1 ee 03 41 83 e5 07 4d 01 e6 41 83 c5 03 e8 07 1e 0c 00 f3 90 <41> 0f b6 06 41 38 c5 7c 08 84 c0 0f 85 6f 05 00 00 8b 43 08 31 ff [ 953.477952][ C0] RSP: 0018:ffffc900034773b0 EFLAGS: 00000293 [ 953.484017][ C0] RAX: 0000000000000000 RBX: ffff8880b853fe20 RCX: ffffffff81afd49d [ 953.491978][ C0] RDX: ffff88802c704880 RSI: ffffffff81afd479 RDI: 0000000000000005 [ 953.499946][ C0] RBP: 0000000000000001 R08: 0000000000000005 R09: 0000000000000000 [ 953.507909][ C0] R10: 0000000000000001 R11: 0000000000000001 R12: dffffc0000000000 [ 953.515873][ C0] R13: 0000000000000003 R14: ffffed10170a7fc5 R15: ffff8880b843b580 [ 953.523837][ C0] FS: 0000000000000000(0000) GS:ffff888124713000(0000) knlGS:0000000000000000 [ 953.532762][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 953.539343][ C0] CR2: 00007fd290981ab8 CR3: 000000005800c000 CR4: 00000000003526f0 [ 953.547308][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000040020 [ 953.555278][ C0] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 953.563239][ C0] Call Trace: [ 953.566509][ C0] [ 953.569434][ C0] ? __pfx_flush_tlb_func+0x10/0x10 [ 953.574640][ C0] ? __pfx_smp_call_function_many_cond+0x10/0x10 [ 953.580964][ C0] ? __lock_acquire+0xb8a/0x1c90 [ 953.585899][ C0] ? lock_acquire+0x179/0x350 [ 953.590572][ C0] ? __pfx_flush_tlb_func+0x10/0x10 [ 953.595766][ C0] ? __pfx_should_flush_tlb+0x10/0x10 [ 953.601134][ C0] on_each_cpu_cond_mask+0x40/0x90 [ 953.606246][ C0] flush_tlb_mm_range+0x4a0/0x1790 [ 953.611358][ C0] ? folio_mark_accessed+0xc1/0xc00 [ 953.616556][ C0] ? __pfx_folio_mark_accessed+0x10/0x10 [ 953.622189][ C0] ? arch_check_zapped_pte+0x9d/0x140 [ 953.627558][ C0] ? __pfx_flush_tlb_mm_range+0x10/0x10 [ 953.633102][ C0] ? rcu_is_watching+0x12/0xc0 [ 953.637864][ C0] unmap_page_range+0x21af/0x4350 [ 953.642917][ C0] ? __pfx_unmap_page_range+0x10/0x10 [ 953.648299][ C0] ? uprobe_munmap+0x20/0x5c0 [ 953.652983][ C0] unmap_single_vma.constprop.0+0x153/0x240 [ 953.658880][ C0] unmap_vmas+0x218/0x470 [ 953.663215][ C0] ? __pfx_unmap_vmas+0x10/0x10 [ 953.668070][ C0] ? mas_next_slot+0x12d3/0x21b0 [ 953.673023][ C0] exit_mmap+0x1b9/0xb90 [ 953.677264][ C0] ? __pfx_exit_mmap+0x10/0x10 [ 953.682057][ C0] __mmput+0x12a/0x410 [ 953.686126][ C0] mmput+0x62/0x70 [ 953.689844][ C0] do_exit+0x7c4/0x2bd0 [ 953.694009][ C0] ? __pfx_do_exit+0x10/0x10 [ 953.698599][ C0] ? do_raw_spin_lock+0x12c/0x2b0 [ 953.703619][ C0] ? find_held_lock+0x2b/0x80 [ 953.708297][ C0] do_group_exit+0xd3/0x2a0 [ 953.712807][ C0] get_signal+0x2673/0x26d0 [ 953.717318][ C0] ? __pfx_get_signal+0x10/0x10 [ 953.722171][ C0] ? __pfx_do_futex+0x10/0x10 [ 953.726853][ C0] arch_do_signal_or_restart+0x8f/0x7d0 [ 953.732397][ C0] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 953.738553][ C0] ? xfd_validate_state+0x61/0x180 [ 953.743672][ C0] exit_to_user_mode_loop+0x84/0x110 [ 953.748951][ C0] do_syscall_64+0x3f6/0x4c0 [ 953.753543][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 953.759431][ C0] RIP: 0033:0x7fd65938e929 [ 953.763839][ C0] Code: Unable to access opcode bytes at 0x7fd65938e8ff. [ 953.770843][ C0] RSP: 002b:00007fd65a1a3038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 953.779250][ C0] RAX: 000000000000000b RBX: 00007fd6595b5fa0 RCX: 00007fd65938e929 [ 953.787559][ C0] RDX: 0000000000000318 RSI: 00002000000bd000 RDI: 0000000000000004 [ 953.795521][ C0] RBP: 00007fd659410b39 R08: 0000000000000000 R09: 0000000000000000 [ 953.803488][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 953.811450][ C0] R13: 0000000000000000 R14: 00007fd6595b5fa0 R15: 00007ffd1bfd36e8 [ 953.819428][ C0]