last executing test programs: 2m18.902032157s ago: executing program 2 (id=2613): r0 = syz_usb_connect$hid(0x0, 0x6c, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x27b8, 0x1ed, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_connect(0x0, 0x48, &(0x7f0000000100)={{0x12, 0x1, 0x250, 0x18, 0x3b, 0x92, 0x20, 0x13b1, 0x42, 0x5816, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x36, 0x2, 0xfd, 0xa, 0xc0, 0x5, [{{0x9, 0x4, 0xca, 0x0, 0x2, 0x7a, 0x8b, 0xb5, 0x4, [], [{{0x9, 0x5, 0x2, 0x0, 0x3ff, 0x5, 0x7, 0xb}}, {{0x9, 0x5, 0x5, 0x10, 0x20, 0x1, 0xb7, 0x4}}]}}, {{0x9, 0x4, 0x4f, 0x40, 0x1, 0xef, 0xf0, 0x4c, 0x4, [], [{{0x9, 0x5, 0x3, 0x3, 0x400, 0x62, 0x3, 0x8}}]}}]}}]}}, &(0x7f0000001400)={0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$hidraw(0x0, 0xf, 0x4100) read$hiddev(0xffffffffffffffff, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001b00)=ANY=[@ANYBLOB="480000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002000128008000100677470001400028008000300", @ANYRES32], 0x48}}, 0x0) r3 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000090400206d041cc340000000000109022400010000a00009040000010301010009210008000122010009058103"], 0x0) syz_usb_control_io$hid(r3, &(0x7f0000000240)={0x24, &(0x7f0000000200)=ANY=[@ANYBLOB="00000c000000070001d9"], 0x0, 0x0, 0x0}, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r4, 0x0, 0x80, &(0x7f0000000000)=@filter={'filter\x00', 0xa, 0x2, 0x250, [0x0, 0x20000100, 0x0, 0x20000280], 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="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"/592]}, 0x2c8) syz_usb_control_io$hid(r0, 0x0, 0x0) r5 = add_key(&(0x7f00000000c0)='ceph\x00', &(0x7f0000000380)={'syz', 0x0}, &(0x7f00000003c0)="ce01822256e1506a599abfd2ecd2873f38ef1d18bb831ba93f9db5ad815bc7fb4b2cf775ad7b963c7cccecc8c5c184888bb7b158be178a128a71495c6a23bc88262c9b190de28034482aaf10766ebf538a140c96bc08977559a01afbe665e43f7c7e1144ed12", 0x66, 0xfffffffffffffffb) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000440)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) getsockopt$XDP_STATISTICS(r6, 0x11b, 0x7, &(0x7f0000000480), &(0x7f00000004c0)=0x30) keyctl$set_timeout(0xf, r5, 0xe13) syz_usb_control_io$hid(r0, &(0x7f00000006c0)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYRES16=r0], 0x0}, 0x0) 2m6.362195828s ago: executing program 3 (id=2624): openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(0xffffffffffffffff, 0x0, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000140), 0x0, 0xa382) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r1, 0x2) syz_emit_ethernet(0x4a, &(0x7f0000000440)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) ioctl$F2FS_IOC_WRITE_CHECKPOINT(r1, 0xf507, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r2, 0x10e, 0x1, &(0x7f0000000000), 0x4) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x4, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="1802000000000000000000000000000085000000500000009500000000000000134917d2acd4685cf82abb3ea23448a5f35f3a12bf7b60a6ddd75e7f6df75d539ca30d401618b92722fa8296d25ed813fd7da324d55fbba7f2c35b0c23b014aa023d3bcb61ab3b54d7f9f3270b207ec0b471c5a6db704b1725b04564ab063d067461c489e82d104bcd0c16e09778574a5b92772ac5adcee8ab9fff9cace8c69a4cecad4788ba28a3833d8b9f5608214dc52bc7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x0, 0x0, 0x0, &(0x7f0000000380), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="fc0000001900674c0000000000000040e0008001000000000000000000000000e000000200000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000400000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000044000500000000000000000000000000000000000000000033"], 0xfc}}, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000440)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a0435", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000080)={@local, @link_local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) ioctl$LOOP_SET_BLOCK_SIZE(r0, 0x301, 0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x10001) r5 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r5, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) mknodat$null(0xffffffffffffffff, &(0x7f00000001c0)='./file0\x00', 0x200, 0x103) socket$inet6_sctp(0xa, 0x5, 0x84) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) dup3(r7, r6, 0x0) 2m5.087806768s ago: executing program 3 (id=2626): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000001c40)=ANY=[@ANYBLOB="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"/3590], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000380)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000400)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_sha512\x00'}, 0x58) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000140)=',', 0x1) r4 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$nl_route_sched_retired(r4, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0) recvmmsg(r4, 0x0, 0x0, 0x0, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x210000000013, 0x0, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000108500000075000000a50000002300000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r5}, 0x10) r6 = syz_open_procfs(0x0, &(0x7f0000000380)='map_files\x00') r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) write$UHID_CREATE2(r7, &(0x7f00000000c0)=ANY=[@ANYBLOB='-'], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r7, 0x0) openat$cgroup_netprio_ifpriomap(r6, &(0x7f0000000000), 0x2, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) socket$inet6_sctp(0xa, 0x0, 0x84) getsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xc, &(0x7f0000000180)=@assoc_value, &(0x7f0000000100)=0x8) 2m2.623458497s ago: executing program 3 (id=2630): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/bus/input/devices\x00', 0x0, 0x0) syz_usb_connect$cdc_ecm(0x0, 0x4d, 0x0, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) r2 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000003080), 0x2, 0x0) clock_gettime(0x0, &(0x7f00000030c0)) ioctl$VIDIOC_QBUF(r2, 0xc058560f, 0x0) ustat(0x801, &(0x7f0000000300)) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a3000000000090003007379"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_group_source_req(r5, 0x0, 0x2a, 0x0, 0x0) setsockopt$inet_group_source_req(r5, 0x0, 0x2e, &(0x7f0000000180)={0x6, {{0x2, 0x0, @multicast1}}, {{0x2, 0x0, @loopback}}}, 0x108) setsockopt$inet_group_source_req(r5, 0x0, 0x2e, &(0x7f00000009c0)={0x6, {{0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}}, {{0x2, 0xffff, @empty}}}, 0x108) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f0000000500)=@raw={'raw\x00', 0x8, 0x3, 0x300, 0x0, 0xa, 0x148, 0x190, 0x10, 0x3e8, 0x2a8, 0x2a8, 0x3e8, 0x2a8, 0x3, 0x0, {[{{@ip={@rand_addr, @multicast1, 0x0, 0x0, 'syz_tun\x00', 'rose0\x00'}, 0x0, 0x120, 0x190, 0x0, {0x200003ae, 0x7f00}, [@common=@inet=@hashlimit1={{0x58}, {'dummy0\x00', {0x0, 0x0, 0x9, 0x0, 0x0, 0xffffffff, 0x7}}}, @common=@inet=@hashlimit1={{0x58}, {'pim6reg0\x00', {0x0, 0x0, 0x10001, 0x0, 0x8, 0x6, 0xa359e000}}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "f2f7b90ad2b60c45cb4ea6e7bf902bdc2ff8a9304d9f655c746adc0bdc773506378bc0d27efd6abb05175089830cc46186074d7de46d5af300"}}}, {{@ip={@empty, @multicast2, 0x0, 0x0, 'pimreg1\x00', 'veth0_to_team\x00'}, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'snmp\x00', 'syz1\x00'}}}], {{'\x00', 0xc8, 0x70, 0x98}, {0x28}}}}, 0x360) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f0000000100)={0x0, 0x0}) process_vm_writev(r6, &(0x7f0000002d00)=[{&(0x7f0000000b00)=""/4096, 0x1000}, {&(0x7f0000000440)=""/141, 0x8d}, {&(0x7f0000000880)=""/65, 0x41}, {&(0x7f0000000900)=""/94, 0x5e}, {&(0x7f0000001b00)=""/4096, 0x1000}, {&(0x7f0000002b00)=""/223, 0xdf}, {&(0x7f0000002c00)=""/253, 0xfd}], 0x7, &(0x7f0000003000)=[{&(0x7f0000000340)=""/46, 0x2e}, {&(0x7f0000002d80)=""/177, 0xb1}, {&(0x7f0000002e40)=""/227, 0xe3}, {&(0x7f0000000980)=""/24, 0x18}, {&(0x7f0000002f40)=""/154, 0x9a}], 0x5, 0x0) timer_create(0x0, 0x0, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f00000001c0)=ANY=[@ANYBLOB="12010000091c2f20c81403006c050102030109021b"], 0x0) preadv(r0, 0x0, 0x0, 0xffff, 0x0) r7 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x800000001fe, 0x82) ioctl$USBDEVFS_CONTROL(r7, 0xc0185500, &(0x7f0000000080)={0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x0}) 14.881819526s ago: executing program 4 (id=2720): munmap(&(0x7f0000647000/0x1000)=nil, 0x1000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000540)={'wlan0\x00'}) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x6) kexec_load(0x0, 0x1, &(0x7f00000002c0)=[{0x0, 0x0, 0x0, 0x10000}], 0x0) r2 = openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) write$FUSE_INIT(r2, &(0x7f0000000000)={0x5f, 0x0, 0x0, {0x7, 0x1f, 0x9, 0x10400, 0x5, 0x0, 0xfffffffe, 0x1}}, 0x50) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) sendmsg$IPCTNL_MSG_EXP_DELETE(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) mount(0x0, &(0x7f0000000240)='.\x00', &(0x7f00000000c0)='nfs\x00', 0x0, &(0x7f0000000000)='\x04\x00\x00\x00\x04\xb0\xfe\x98\x9a!s\x91]\xab\xc9\xa2IV\xb6-\xd9z\x81\x91\x8aP}h\xc6\x0e\xd9\v\xda\xbfS\x16 \x04\r\xcd\xdb\x9a\xd4\xaf\r\x11\xa0\xd7\xd7\xb6\x9bz\x99\xaf\xfd\x87fN\xad\x90U\xb4A\xdf\xabB\xbba\x7f\xb8\x96\x1a\xe7\xc1\xab\x16\x02\x00R\x11\xba\xf9\x17\r\x98\a\x06\xe8\x80\xf3\xdf\x87\x1f\xfd\xb8\x99\x9c\x19\xb4\xac\xca\xc2-\xfc\xe8\xc3qAt\b\x94\xee\x9e4\x85\xd0\xfe+\xc0\x17\xbfE\x15\xfdZ\xce\x954v\x8a\x05\xde\xaal\xf4\x82\xe2?\xabS\xe4\xe2\xe1\xd83\x17\xfe\xf8~\x04\xb6\x11\xc4K3\x82\x127\xf7\xc7\x06\x177\x8bWF\xb21\xce\xc7\x19|\x9f\xe87\x80\xbc\xac\xb6;\xcc\xafr\xbd\x90\xde9\x0e\xda\x05\x86\xf0i\xf4{\xbf\x82#\xfd9\xdc\xa7\x01\x00\x12\xea1K\xc9\xe1\xfdv#0U\xd2\t\x14\x10\xe6\xfc\xba\xa1\xac=\xfd\xd7\xa8\xc8\x18\x00\x00\x00\xc4w', &(0x7f00000020c0)='gcB\xc6+\xbf\xcc_\x81 \xd5\xb9\x93L9\x87\x84K9\"\xf1@\a\xea\xbb\xfe\x9cY\xfc\x80\x99\xb9!\x0eX czg\x14\xec*\xed\xa6u\xc4\x14*\xdb_\xe8\\\x96\n\xa6)\v\xf9 \xddb|\xe7\x14\x82\xc3\x90\xf9\r?i\x86Lpw\xba\xe1\v\x1a9G\x04\fpfP\xcf\xee<:C\x1e\\\x1f&\xaf\xea?\x91\a\xea\x8d\x05\x83aJ\xf0v\xc0q\x84\x93il\v\x03\b\xadT\a\x14\xd7\xd5u\xdfU\xd1\x1f\x9b\x1d2mRQ\xea\x90\xa0m#\xa4\x1dy\x9d\xe9\xfa\x06\xa27\x9d;\xe4\xb4\x86\xa7&\xa9c6\x1b\x8d\xa6$\x82\x1b\x9a\x82\xc0o/\x8c\x97\xb9BJh\x9f\xb2\"\x95j\xd7PN\x89\x7f\xc8AB\xc7}T\xbe\xf1\xe7\xe2\xad\xdd\xc2\xb7\xe8Ac*v\xf7\x16\x8fe\xef\x84\xf5k\xa9\xeb\xebt\xc3\xf1f\xca\x04*\xec\xfa\xe5b\xeb\xb4\x99\xefSv\x82\xe2\xe3\x02)sP%Z\xad\x83\xda\xbe2\xa9\xf2\x04\xda\nU\x84\xc2\xe3E\xc1\xd8L\xb1r\xb0\xdaH\xf2{\xf6~\x0f\xb9\xdd.\x06W\xd7\x1dG<\x1e\f2c\xf4\xa0d\x11\x88\xee\xcc\x18(\rap\x98?\xb1$\xe9\xe9+\xa6\xfb\xb1\xc61\xf1\xe7\xf7\xff]]\xb26\xbfA\x86\f\xda\fi\xc8\xefl&*\"_^5\xd1 H\x17\xf0\xa7\x83}\x92W\xeb\xe5\xa3\xcc\a\x10dxb\xc2\x13mNP\xac]\xc2\xc1\xa8\x1df_\xcax\xbd\xf4m\x1e\x18occU\xb6\\\xf5\xf3\xeb\xa3\x98\f1\x8b\x99\xf0P\x8e\x1b\xe3\x9e\xb9\x0f\xf9\xb0\xadd\x9d=d\x94\xec\xceQx\xdb\xf6zG!3\xd7\x05\xf0=k\xb7vo?1H\x86\x192\xb2&\xa5\x9d\xd7\xbc\x85\a\xfer\x14\x0e\xd9=\xa6\xa1\x03cz>R\x11\xba\xf9\x17\r\x98\ap\xda-\xb0R\t\x93.r/\xce\xa4\rK\xcb\x1aO\x03z$\xbeYvYn\xddI\xe7\x13\x8f\x15\xefL\xba`\x9d\xea\xed\xf0)s\x12r\x9b\xf2&\xf2-\xc6\xec\x96\x19\xc9\xd7\xda\x06\xba\x87\x18\xef+\xcdp\x95\xef\xd9\xb9s\x8b\xf3\x8b\x88<\xa0\xa3\xad\x8c\xaf&iMM\xc5>\xa7v\x17\xdf \xca\x86#\xa7*\xecl\xbfp\xc3x\xc3\xc1r\xbe7\xb5\xa3\xf11[`\xcb7z\xa0P\xd5p\xe9\xddC\xc0\x80=\xd9y\x01\x1c\xe7\x1cdN\xd5x\x89\xc9\xc0\xc4{\x01\xa6o\x9ceZ\xe1\xfa0?\x94\x1f\x9aQ\xf0Lf\x1e\x17A@\x06\x89\xadg+$/V\r\xc9oQ=k\xa0\xa6\\\x00\x99\x94\x10dy\x7f\xd1\xd2\xd04\x96\b\x80/\x9a\xfc\a\'\x83\xb8\xcd\xb1\xf5#\tr\xb4\xc4\x929\x01\xee\xe6\n\x8ba\xde\xdbsAzG\xe86\xfe\x83\x1d\xb3K2\xf0\x8f\xde\x85\x00M&\x00\x00O\x86\xec2/\xea\xe6$(L\x85\xf8Y\xcf,\xa3\x87^\xe1\xd8F\xe4AJ\xaa\x1f\xe9\xff?\x9aF\x97M\x80\xe9LR\xdc\x9f~\xce\xb5\xef\x14M\f#>O\xb44LB\xc6a\x82\xc5\x107\xae\xdb\v\xf7\xc4k\xab\xf8:\x1fj\xa2vf)\xee\xab\xb3C\x92\x8e\x80\xb1\x01\x85\xb1v\xae*\xa7])n)+\xd9\xcf\xe9\x9ag\x8a*u\xe4e?\xf9\x93\x93u\xd2M\xfd\xa1\xc5\xff\xd9\x15-\xabH\x90\x04\xea\x88\"\xfe\v\x1d\xa5}H\xee\xc7\x94\xdb\x02\xf7\t5\x1e\xd6~R\x9e\xb5NV)\xa6\x1ff\xde\xbf\x97V\x87\v\x94\xb4\xb0\x7f3\xa3\x85c=\xb0\x8ab\x06\xfa\xe9\xb3\x1d\x0e0\xfe\xc7\xf9\xde\xd6\xe6\x14O\xc8\xff7\xd8\xed\xc6\xdf\x01\xb3\n8\xbf\xbe\x1e\v\x18\xd9\xb3+X4\xb5S\xe7\xf6oO;\xc5\xc8-\x9e\xb5\xbe\x97\xb4k\xd2n\xfa\xd1\x82\x16\xea\x93\xc7\xb3?\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb7\xf2K\xe9\xcf\xc6y\xb00\xe0\xa0\f\xef\x02\xd5 (S\xffhY\"\x83\x05M\x0f\v\xec0B\x1f\xd7\x80\xdaL\xa2Q\x8c\xde\x17* \xf5)tk\xb6\xb9\x86?\x1a\xff\xdc\xecP\xd1w1\xf4a\x00r\x06,\x86S\x11)\xf4\x16W\xd6\x86\x10\x02\x15mod\x854\xd4\'^\xb6\xe9f\xd6:\xfc5%\x16\xc5\xa5\xf1\x11k\xdd{\xaai\x8a\xde\xa6\x18,H\xd8\xe5\xf5g\xe7U\\(\x01\xc5\xde\x1d\x8acHf\x86`9qV|=\xbb\xd1\x95\x0f\x86\xffa\xb1\xdb\x82l\xc3\xcf\x88\xeeJ\xda\x8b0f\xac\xc2n\xd1\')\xf2\xaf\xc0\x06\x01\xb4b\xef\xa8!\xf9\n\xf7{C\xdc`h\b6>\x171\x16\x89\xa8\xe9OC\x7f\xb1\x1c\xd4\xd5\xa7\x7f\xfd\xa8Y\xf0s_\xfb\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00.\xeb\x1a\x18\xf1h\x04\xa8\xe8\x92\xe6\xbc\xe1O\xcf', &(0x7f0000001e80)='gcB\xc6+[;\x88\xfe\x97B*[\a\x03\x96l\x1e\b\xd9\xbf\xcc_\x81 \xd5\xb9\x93L9\x87\x84K\xb9!\x0eX c\x03\x00\x00\x00\x00\x00\x00\x00\t\x00\x00\x00\x00\x00\x00\x00\n\xa6)\xd9\x10#\xf5b|i\x86Lpw\xba\xe1\v\x1a9G\x04\fpfP\xcf\xee<:C\x1e\\\x1f&\xaf\xea?\x91\a\xea\x8d\x05\x83aJ\xf0v\xc0q\x84\x93il\v\x03\b\xadT\a\x14\xd7\xd5u\x84\x82\xb2\xd4(\x1d\x04\xf2\v\xe9\x8a\xdfE\xd1\x1f\x9b\x1d2mRQ\xea\x90\xa0m#\xa4\x1dy\x9d\xe9\xfa\x06\xa27\x9d;\xe4\xb4\x86\xa7&\xa9c6\x1b\x8d\xa6$\x82\x1b\x9a\x82\xc0o/\x8c\x97\x00\x00Jh\x9f\xb2\"\x95j\xd7PN\x89\x7f\xc8AB\xc7\x8d\xf1\xe7\xe2\xad\xdd\xc2\xb7\xe8Ac*v\xf7\x16\x8f_\xda8l\xc8\xa2\xb0\xd1\fg\x00\x00\x00\x00\x00\x00\xfa\xe5b\xeb\xb4\x99\xefSv\x82\xe2\xe3\x02)sP%Z\xad\x83\xda\xbe2\xa9\xf2\xdaH\xf2{\xf6~\x0f\xb9\xdd.\x06W\xd7\x1dG<\x1e\f2c1\xf1\xe7m\xfd\x00\x00\x00\x00\xe4C\"\xba\xd5\x91]]\xb26\xbfA\x86\f\xda\fi\xc8\xefl&\x9c\xbd\xbb\x90\x17$\x9e\\\xee\xc6\x88?)\r@e*\"_^xb\xc2\x13m[P\xac]\xc2\xc1\xa8\x1df_\xcax\xbd\xf4m\x1e\x18occU\xb5\\\xf5\x05\xec\xa3\x98\f1\x89\x99\xf0P\x8e\x1b\xe3\x9e\xb9\x0f\xf9\xb0\xadd\x9d=d\x94\xec\xceQx\xdb\xf6zG!3\xd7\x05\xf0Xk\xb7vo?1H\x86\x192\xb2&\xa5\x9d\xd7\xbc\x85\a\xfer\x14\x0e\xd9=\x9f\xa1\xda@\xc7-\x93\xbc4\xc0\xfe\xf6\xf6\xc4\xc3ZT>R\x11\xba\xf9\x17\xfd\x98\x06\x06\xe8\x80\xef\xdf\x87\x1f\xfd\xb8\x99\x9c\x19\xb4\xac\xb0\x11i\xcc\xb9BG\x1ac\xbc\xd9&\xb6\xd9\x04\x03\xc6\xebf\x84\xe5\xfe[\xe7\xe6\xb3\xe9\xca\xe7\xc1\xa7\x9aO\xc1\t\x1c\xeb\xfbl\xa4\x80KQG\x80\xcd\xdd\t\x91\xdb}\xb1\xde\xf9\xbe=\x8b\xde\xf2G\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf7\xa9\x99t\x87 \x9f\x03}\x8d\x1b\x14\x1eU.r\xe1\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000d00)='gcB\xc6+\xbf\xcc_\x81 \xd5\xb9\x93L9\x87\x84K\xb9!3\xf2\x84\xa9H\x92\x1e4\"u\xc4\x14*\xdb_\xe8\\\x96\n\xa6)\v\xf9 \xddb|\xe7\x14\x82\xc3\x90\xf9\r?i\x86Lpw\xba\xe1\v\x1a9G\x04\fpfP\xcf\xee<:C\x1e\\\x1f&\xaf\xea?\x91\a\xea\x8d\x05\x83aJ\xf0v\xc0q\x84\x93il\v\x03\b\xadT\a\x14\xd7\xd5u\x84\x82\xb2\xd4(\x1d\x04\xf2\v\xe9\x8a\xdfU\xd1\x1f\x9b\x1d2mRQ\xea\x90\xa0m#\xa4\x1dy\x9d\xe9\xfa\x06\xa27\x9d;\xe4\xb4\x86\xa7&\xa9c6\x1b\x8d\xa6 \x82\x1b\x9a\x82\xc0o/\x8c\x97\xb9BJ9\x13V\x1e\b\x16\xf6/\xc3{h\x9f\xb2\"\x95j\xd7PN\x89\x7f\xc8AB\xc7}T\xbe\x8aO\x9d\x94\x8d\xf1\xe7\xe2\xad\xdd\xc2\xb7\xe8Ac*v\xf7\x16\x8fe\xef\x84\xf5k\xa9\xeb\xebt\xc3\xf1f\xca\x04*\xec\xfa\xe5b\xeb\xb4\x99\xefSv\x82\xe2\x1f\x02)sP%Z\xad\x83\xda\xbe2r\xb0\xdaH\xf2{\xf6~\x0f\xb9\xdd.\x06W\xd7\x1dG<\x1e\f2c\xf4\xafd\x01\x88\xee\xcc\x18(\rap\x98?\xb1$\xe9\xe9+\xa6\xfb\xb1\xc61\xf1\xe7m\xfd\x05\xee\xa0L\xe4C\"\xba\xd5\x91_]\xb26\xbf\x9cA\x86\f\xda\fi\xc8\xefl&*\"_^5\xd1 H\x17\xf0\xcc\a\x10`xb\xc2\x13m[P\xac]\xc2\xc1\xa8\x1df_\xcax\xbd\xf4m\x1e\x18occU\xb5\\\xf5\x05\xec\xa3\x98\f1\x8b\x99\xf0P\x8e\x1b\xe3\x9e\xb9\x0f\xf9\xb0\xadd\x9d=d\x94\xec\xceQx\xdb\xf6zG!3\xd7\x05\xf0\xd8k\xb7vo?1H\x86\x032\xb2&\xa5\x9d\xd7\xbc\x85\a\xfer\x14\x0e\xd9=\x9f\xa1\xda@\xc7-\x93\xbc4\xc0\xfe\xf6\xf6\xc4\xc3ZT>R\x11\xba\xf9\x17\xf2\a\x00\x00\x00\x00\x00\x00\x00\x00\x13\x9eX$\xe1\x00\x00\x00\x00\x00\x00\x003\xe0\xe3\x0e\xaa\x8e\x9a\x1f\x12\fRw\x11B\x17xO0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000380)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000400)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_sha512\x00'}, 0x58) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000140)=',', 0x1) r4 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$nl_route_sched_retired(r4, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0) recvmmsg(r4, 0x0, 0x0, 0x0, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x210000000013, 0x0, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000108500000075000000a50000002300000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r5}, 0x10) r6 = syz_open_procfs(0x0, &(0x7f0000000380)='map_files\x00') r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) write$UHID_CREATE2(r7, &(0x7f00000000c0)=ANY=[@ANYBLOB='-'], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r7, 0x0) openat$cgroup_netprio_ifpriomap(r6, &(0x7f0000000000), 0x2, 0x0) r8 = socket$inet6_sctp(0xa, 0x5, 0x84) socket$inet6_sctp(0xa, 0x0, 0x84) getsockopt$inet_sctp6_SCTP_MAX_BURST(r8, 0x84, 0xc, &(0x7f0000000180)=@assoc_value, &(0x7f0000000100)=0x8) 13.410634884s ago: executing program 1 (id=2722): r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) fchdir(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) dup3(r1, r0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1/file4\x00', 0x0) r2 = landlock_create_ruleset(&(0x7f00000002c0)={0x3f2e}, 0x8, 0x0) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000300)='./file1/file4\x00', 0x0, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r2, 0x1, &(0x7f0000000000)={0x380a, r3}, 0x0) landlock_restrict_self(r2, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file1/file4\x00', 0xfeffffffffffffff, 0x0) 12.502880972s ago: executing program 2 (id=2723): r0 = socket$inet6(0x10, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) sendmsg$NL80211_CMD_NEW_STATION(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000d00)={&(0x7f0000000140)={0x30, r1, 0xb97534d5fe9704cf, 0x0, 0x0, {{0x12}, {@val={0x8}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_AIRTIME_WEIGHT={0x6, 0x112, 0x100}]}, 0x30}}, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r2 = accept4$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @multicast1}, &(0x7f0000000100)=0x10, 0x0) ioctl$sock_inet_SIOCADDRT(r2, 0x890b, &(0x7f0000000400)={0x0, {0x2, 0x4e20, @loopback}, {0x2, 0x4e23, @private=0xa010101}, {0x2, 0x3, @broadcast}, 0x271, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x40, 0x7}) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) fsopen(0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000b80)=@mangle={'mangle\x00', 0x1f, 0x6, 0x470, 0x188, 0x0, 0xe8, 0x0, 0x310, 0x3f8, 0x3f8, 0x3f8, 0x3f8, 0x3f8, 0x6, &(0x7f0000000300), {[{{@ip={@remote, @empty, 0xff000000, 0x0, 'vlan0\x00', 'ipvlan1\x00', {}, {0xff}, 0x4, 0x3, 0x30}, 0x0, 0xb8, 0xe8, 0x0, {}, [@common=@socket0={{0x20}}, @inet=@rpfilter={{0x28}, {0xe}}]}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x7, 0x4, @private=0xa010100, 0x4e20}}}, {{@ip={@private=0xa010100, @remote, 0xffffffff, 0xff000000, 'veth1_virt_wifi\x00', 'wg2\x00', {0xff}, {}, 0x16, 0x3, 0x4}, 0x0, 0x70, 0xa0}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0x2, 0x0, 0x6}, {0x4, 0x2, 0x7}, 0x5540ec61, 0x7}}}, {{@ip={@broadcast, @dev={0xac, 0x14, 0x14, 0x23}, 0xff000000, 0xffffff00, 'syzkaller0\x00', 'ip6_vti0\x00', {}, {0xff}, 0x4, 0x2, 0x20}, 0x0, 0x98, 0xc0, 0x0, {}, [@common=@ttl={{0x28}, {0x3, 0x4}}]}, @ECN={0x28, 'ECN\x00', 0x0, {0x0, 0x1, 0x2}}}, {{@ip={@multicast1, @broadcast, 0x0, 0x0, 'pimreg0\x00', 'pim6reg0\x00', {}, {0xff}, 0x89, 0x1, 0x56}, 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@addrtype={{0x30}, {0x10, 0x65822cea2e4b8a72}}]}, @ECN={0x28, 'ECN\x00', 0x0, {0x50, 0x3, 0x2}}}, {{@uncond, 0x0, 0x98, 0xc8, 0x0, {}, [@common=@unspec=@pkttype={{0x28}, {0xf, 0x6}}]}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x5, 0x7f, @dev={0xac, 0x14, 0x14, 0x12}, 0x4e20}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x4d0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000006c0)=@newsa={0x13c, 0x10, 0x1, 0x0, 0x0, {{@in6=@empty, @in6=@private0}, {@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x32}, @in=@broadcast, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_aead={0x4c, 0x12, {{'aegis128l-generic\x00'}, 0x0, 0x40}}]}, 0x13c}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @tproxy={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_TPROXY_REG_PORT={0x8}, @NFTA_TPROXY_FAMILY={0x8}]}}}]}]}], {0x14}}, 0x7c}}, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_GET(r7, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x54, 0x1, 0x8, 0x3, 0x0, 0x0, {0x1, 0x0, 0x8}, [@CTA_TIMEOUT_DATA={0x1c, 0x4, 0x0, 0x1, @fccp=[@CTA_TIMEOUT_DCCP_CLOSING={0x8, 0x6, 0x1, 0x0, 0x2}, @CTA_TIMEOUT_DCCP_CLOSING={0x8, 0x6, 0x1, 0x0, 0x1}, @CTA_TIMEOUT_DCCP_CLOSEREQ={0x8, 0x5, 0x1, 0x0, 0x2}]}, @CTA_TIMEOUT_DATA={0x24, 0x4, 0x0, 0x1, @tcp=[@CTA_TIMEOUT_TCP_SYN_SENT={0x8, 0x1, 0x1, 0x0, 0x401}, @CTA_TIMEOUT_TCP_CLOSE={0x8, 0x8, 0x1, 0x0, 0x3}, @CTA_TIMEOUT_TCP_SYN_RECV={0x8, 0x2, 0x1, 0x0, 0xfff}, @CTA_TIMEOUT_TCP_SYN_SENT2={0x8, 0x9, 0x1, 0x0, 0x4}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000000) 12.360052704s ago: executing program 4 (id=2724): socket$alg(0x26, 0x5, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) gettid() r3 = socket$inet6_udplite(0xa, 0x2, 0x88) socket$nl_sock_diag(0x10, 0x3, 0x4) syz_open_dev$loop(&(0x7f00000000c0), 0x3, 0x0) r4 = syz_open_dev$loop(&(0x7f00000000c0), 0x0, 0x880) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.stat\x00', 0x275a, 0x0) ioctl$LOOP_CONFIGURE(r4, 0x4c0a, &(0x7f00000002c0)={r5, 0x0, {0x2a00, 0x80010000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd64c6a4b4e00d9683dda1af1ea89de2b7fb0a0100000000000000000300", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "90be8b1c551265406c7f306003d8a0f4bd00"}}) sendmmsg$inet6(r3, &(0x7f0000000a00)=[{{&(0x7f0000000000)={0xa, 0x4e21, 0x0, @remote, 0x6}, 0x1c, &(0x7f0000000140)=[{&(0x7f0000000280)="79ef34395d4c410d25e52319c6a502980fd70906f311", 0x16}, {&(0x7f0000000180)="21e86059062c57c14198b24339ac70b26123e39fda5912aba3c6fb5f31a089a6796a63e8cacd18a3d72d99de7b621f1d3074", 0x32}], 0x2, &(0x7f0000000400)=ANY=[@ANYBLOB="38020000000000002900000036000000004300000000000004013f040100c910ff010000000000000000000000000001c910fc0000000000000000000000000000000001000740000000000e07010101000000010000000200000000000000000000000000000001000000010000002000000000000000ffffffff00000000ffffffffffffff7f06aeb07c1c192077cc9e7c45705803ad5588ca8b194d23f748fe792cfa3d32221f25d73b8ffe64a4ddda6efcfb7483b588194d29c7a04395d8500965a9a1d07879040c44db1d5d6f618d2ab920f0bf168ddc9acc6a51edd1230760d4ae8bf30f5f82a78e8114849ee8e37364560400000035bfa8197ef2ba99103ee5f5aae28ec5c8e2675db11530f5c466d55f2244d479dc653c854406155eada3eaeb90d39149b8d13bab75a9bd1452c8c76284b9ddfbeff41344e64f1771d78a706e1c5a6d63f1c954e24a1e73f75c26e9f09ec9b606cc3470f11c4842db651926bd2263a4a0a8fe80de8b2f9cb176e51819d5f4d10a5d1f0488d5e46953fbfd750f6137fbebe89a8d462158a87f9622355104b4f68d7a6d3ad85c373ea52a25afad37ffb743a5c361158087904b09fcc806d032bac00ee0e0251fc032446e45a3e12417ff4703526ffc45f71567857777927903799e0ba453334186009d22e38099c67b5350c7e82136bba947a18fb61d36fcba1f9efe3d79485d06252702833dc8ee417f40bb9064878fb89dd75a49135e5df148c4ad1e1d5626b44c8112d822f4c9a05e693fd5ae5595627f8684016b37a2bf6d0040030000000000002900000037000000006500000000000000fb1a63687c244e6df3aecb13d6eb957495b669cc032f6d0a11a5e16eed9937b046c9dc1a61dcf9754b767df4735c3f8c37b4d5cd15a99c5a19cc62c921ad4e90d6e3695ec1891223a53600d5031b5735acafb556e22279975f958ad437c76573e544506e58455772eb11493af933099a5dc7e9e0c8b907e68e23e59d7b94bc774309e2047132758b60955301f277a9032b0bc47e660b243e9e2126733f13ab99055a0999068ada35a38d105a5efe6c7115774effe28695ecae3944413b7764eefde26ed571d857b2cb2dd1b2a4a84c1fec0799cf90f57f7a6d35e2b60cd425b9372ae4a27f453e5d7da2eacd3b98cdb10cec9152d5829c2511eb0f9600a0cd280f3d08849b6cd43d25e3dcd62f7c7dee6123a2682daf4aa9a856b31e9204c5c2b80b84dbeec05d93a64a550f1ebc326488cd620c6fe1aa266a0ce5b24be03b5037786e037cc85ed61f362e081fb694e12e54fcb9eb0f86d6d91fd159023a073278f84d6ada8f9aa25ec223d268f3291b25392c941740932bd1a82f40a8fc586db23d2f6240ce883e3c1dc1e0d07fc3aa73a9ac82a1538d129c9e66cb6a8100abe95bc4064581e8c01ce65ba3ea751db5d8c0a1173fe62b2fd2d415042a97ade4d274a466b6d997eed6bf5d7a305ead804c36b9e1c314b26676ed83412417610d3cf4d07e5b24cf3de9c790ae93850e0f8bba047b710cf340c78a80cef5f6665a647681ff5f7b6ecce8ab65e26406b6a6e0e72ff8501c545bffc00f034dc3a5b251390ae68bb61d936dc9a24e6f66c72e7911c51c716dfd4304566fb32e6c2745d232f990d0bbe0ddf9dc58398dda292c07b16da766a37c60bd9993b4f21e641036a8afa2ccdb47d7990d5a007faccb2f86664179f2e229723bce870aec3f7f4e529c92ad", @ANYRESOCT=r1, @ANYRES16=r1, @ANYRES32=r5, @ANYRES16, @ANYRES8=r1, @ANYRES64=r0], 0x590}}], 0x1, 0x8008801) socket$nl_route(0x10, 0x3, 0x0) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000a40)={'bridge_slave_1\x00'}) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, &(0x7f0000bbdffc)) r7 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/ip6_flowlabel\x00') preadv(r7, &(0x7f00000003c0)=[{&(0x7f0000000240)=""/29, 0x1d}], 0x1, 0x0, 0xf) 11.462264606s ago: executing program 0 (id=2725): socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000980), 0xffffffffffffffff) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f0000000100)={'wg1\x00', 0x0}) sendmsg$ETHTOOL_MSG_CHANNELS_SET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010300000000000000000d0000000c00018008000100", @ANYRES32=r2], 0x20}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000080)=0x14) getpeername$packet(0xffffffffffffffff, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000100)=0x14) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="5000000010000100"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000008001b000000000008001680e4ff018008002800000000000400140005001100000000000a000100aa"], 0x50}}, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00'}) setsockopt$packet_int(r5, 0x107, 0x14, &(0x7f0000000480)=0x102, 0x4) setsockopt$packet_int(r5, 0x107, 0xf, &(0x7f0000000080)=0xf3e, 0x62) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r6, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r8) sendmsg$ETHTOOL_MSG_PAUSE_GET(r8, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000280)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r9, @ANYBLOB="01000000000000000000210000000c8782e72a00018008000100", @ANYRES32=r7, @ANYBLOB], 0x20}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d0000009514ae2b9c503510dbe276914edab79de40ccf39ba309ad524fa1220eee7383035ccb0198e7ceaf9288167cd63268d90ae9108", @ANYRES16=r4], &(0x7f0000000100)='GPL\x00', 0x0, 0x30, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r10}, 0x10) rt_sigprocmask(0x0, &(0x7f0000000080)={[0xffffffffffffffff]}, 0x0, 0x8) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) wait4(0xffffffffffffffff, 0x0, 0x80000000, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) r11 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r11) socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r11, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c) 11.343496077s ago: executing program 2 (id=2726): r0 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r0, &(0x7f0000000180)={0x28, 0x0, 0x0, @host}, 0x10) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r0, 0x28, 0x1, &(0x7f0000000100)=0xfffffffffffffffe, 0x112) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) mkdirat(0xffffffffffffff9c, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000380)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6(0xa, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, 0x0, &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r4}, 0x10) r5 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) bind$netrom(r5, &(0x7f0000000000)={{0x6, @rose}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @default]}, 0x48) r6 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) syz_usb_connect(0x3, 0x910, &(0x7f00000013c0)={{0x12, 0x1, 0x300, 0x98, 0x91, 0x6b, 0x10, 0x13d2, 0x400, 0x5554, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x8fe, 0x4, 0x0, 0xb, 0xd0, 0x3, [{{0x9, 0x4, 0x86, 0xc1, 0x1, 0x5a, 0x69, 0x63, 0x8, [], [{{0x9, 0x5, 0xa, 0x2, 0x200, 0x7b, 0xf2, 0x9}}]}}, {{0x9, 0x4, 0x9, 0xfd, 0x7, 0x5f, 0x68, 0xbb, 0x1, [@hid_hid={0x9, 0x21, 0x6, 0xf8, 0x1, {0x22, 0x11b}}], [{{0x9, 0x5, 0xc, 0x0, 0x250, 0x8, 0x9, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0x83, 0xe, 0x8001}]}}, {{0x9, 0x5, 0xc, 0x0, 0x400, 0x40, 0x8, 0xe0}}, {{0x9, 0x5, 0xe, 0x10, 0x3ff, 0x8, 0xf, 0x5, [@generic={0xe2, 0x7, "64ee6ca7bbd3437999d677233e7314963f9a7e5d34a03718cd35d456b0950dd613fcdb2e0ced80d421357b8eab29679dd244be59c43d4bd31e6e931d02eb9feca4399feeb2bb996e44ff15ecd500bddf2d05a255e2640f095090cdc21bf258566f650fb62ae507966beaa947838f08ca0c56d939a5d16c629e0604c3298b230dfff845885f92c47745266b2ad415485bbde174de35e22506e0427eedd5b70d0521af0260a0ca7ec07f6551acc0bda14ebc57d204db0a789c407649525bdcb7957dc9c706a3c9fd1997c3587616958b288ce647e2b75600c1760e11bcc0e76402"}]}}, {{0x9, 0x5, 0xa, 0x10, 0x3ff, 0x3, 0x1, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x83, 0x6, 0x8001}, @generic={0xa8, 0x24, "49ccbd4b5c5b86c429b4f04220c6635dedab0a8a141c22106efcfb9cd759ba7ffba0da0e7cc1dd559e2923ce75d706d50f5f078e46f5a8a96ac5b827c2f88aa942b5985f286b99eace698c55a21bde32e7afb8933ac34d1fadb5f16f571041bbab9888e89c4d70ddff6fac8bc41a88a7b3a6f869d0d7c76b3a8c0d6ab282e196550c78d6e9ae790ad45b511e8b8b2067a9fc943b55ce91c64150990fc591f44009a90bee5a34"}]}}, {{0x9, 0x5, 0x9, 0x10, 0x200, 0x3, 0x7f, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0x82, 0x9}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0x43, 0x4}]}}, {{0x9, 0x5, 0xc, 0xc, 0x40, 0x1, 0xfa, 0x2}}, {{0x9, 0x5, 0xd, 0x3, 0x400, 0x7, 0x2, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x6, 0x3}, @generic={0x4b, 0x21, "50b2889745c5694ebf294dbaa371437946bc4a56c2f0866f922f36c4acf75fe3881bc4b69297557510665aed48a6d8f682f6832a0c36b517b41b60b7c06127dc1bed29c5eeec91c534"}]}}]}}, {{0x9, 0x4, 0x9b, 0x3, 0xb, 0xff, 0xff, 0xff, 0x0, [@hid_hid={0x9, 0x21, 0x400, 0x8, 0x1, {0x22, 0xcb8}}, @hid_hid={0x9, 0x21, 0x3, 0x18, 0x1, {0x22, 0xd44}}], [{{0x9, 0x5, 0xa, 0x0, 0x8, 0x6, 0x7, 0x5}}, {{0x9, 0x5, 0xe, 0x0, 0x10, 0x4, 0x4, 0x58}}, {{0x9, 0x5, 0xc, 0x1, 0x20, 0x9, 0xcd, 0x10, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x2, 0xc0}, @generic={0x7, 0x11, "d9d428cfd3"}]}}, {{0x9, 0x5, 0xd, 0x5d9e9034ad69ff, 0x20, 0x0, 0x4, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x85, 0x9, 0x7}, @generic={0x99, 0x10, "7b2c12150a9f639fc4ac1c8934a24e018385ec0d627c050e029de25829afdfe4e2566eda8eb1e6ec27371176d5612a438a3291065d71b2a3d5c37bd153d8b405b89e995243bf2c681f560fa06872146efa16afbde1755a55fae2b19fef5cc9c29bd6ad40157f513e32c4bf0760c3e1b4b200a7a57da4ee3058cfc0e9a452b414c95c4e34a4cb9db1b71b790861678f354f2d0261a50ed4"}]}}, {{0x9, 0x5, 0xb, 0x1c, 0x200, 0x7, 0x9, 0x40, [@generic={0x67, 0x11, "874f66f559fbfe00c1d0681d5a00b43cc4a929b35c174505728be5624bdd1bddeaf07a119240e486daf37664725f020f6ccb520a1a10c5004c1433dc098d2f1df09267e5ca84701170a1c60eb6666f656c45d6c97f9ca8664a878fb07bd2ccb8979ae3a7c2"}]}}, {{0x9, 0x5, 0xb, 0x10, 0x3ff, 0x5c, 0x0, 0x7}}, {{0x9, 0x5, 0xd, 0x10, 0x3ff, 0xe0, 0x4, 0xfc}}, {{0x9, 0x5, 0x2, 0x0, 0x3ff, 0xdb, 0x43, 0x9}}, {{0x9, 0x5, 0x4, 0x10, 0x8, 0x7, 0x2, 0x4, [@generic={0xc2, 0x2, "9460ba103545d3a64dc43589c8e69833b557e18dd4c2b6f2e8aab9a111e88f9b2edbe88188d11b84d53e4d849bfc8997fa756c61500a893f0ee0b73dee6869891e447d010021e8e01e1f5540abc3515e1f418f163884c42ac071987e658395e87f309d47b7fdd862f88d59377f1be93de26258edc4c3637170d00079e3ae910ae9ae8833f5115cd1fbc8d83282cdba3a4d9f0b162abc3c8a4ed79d2d79f474ab1dff39015ae438b4600a24b2d5e20157cbfa924934d030a023e7634871baf1df"}]}}, {{0x9, 0x5, 0x4, 0x10, 0x200, 0xff, 0x4, 0xd}}, {{0x9, 0x5, 0xa, 0x4, 0x0, 0x0, 0x9d, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0x81}]}}]}}, {{0x9, 0x4, 0x41, 0x81, 0x9, 0xff, 0x2, 0x3e, 0x1, [@cdc_ecm={{0xb, 0x24, 0x6, 0x0, 0x0, "72766e38ea07"}, {0x5, 0x24, 0x0, 0x2}, {0xd, 0x24, 0xf, 0x1, 0x5f, 0x4, 0xe085, 0x3}, [@mdlm={0x15, 0x24, 0x12, 0xfff4}, @mbim={0xc, 0x24, 0x1b, 0x5, 0x843e, 0x70, 0x9, 0x3, 0xf}, @country_functional={0xc, 0x24, 0x7, 0x10, 0xd, [0x2, 0x3ff, 0x8]}, @mdlm={0x15, 0x24, 0x12, 0x9}, @dmm={0x7, 0x24, 0x14, 0x101, 0xb87a}]}, @generic={0x29, 0x2, "b4103557050e7f70584ff4454ba6d05232900bcc32456c3b0b5aa3652dc909db73bc18cb10bb8f"}], [{{0x9, 0x5, 0x6, 0x0, 0x20, 0x2, 0x60, 0x10}}, {{0x9, 0x5, 0x7, 0x2, 0x400, 0x5, 0x6, 0x8, [@generic={0x17, 0x21, "431275bb49a4209ce9c877368a534787dffa9511f4"}]}}, {{0x9, 0x5, 0x0, 0x10, 0x200, 0xa, 0x1, 0x8, [@generic={0xb6, 0x1, "7ed183b42fd80687d20ef4234d3e6446b54915c67033e29f3936b0d998139e2a623822eeca1263a53ab1defa2b3f27ad803a4b8a28d73c277353458a8c926c41e5266a4438d9e540c38055660eed0753171439c6e6054b7422022cc7f6d5d298d654cfeecef1dfd6b0e9158b0b8411af3ab4a08a5a07d7283b5c02a24efa683e4f00ffa688ab65ba8fea0594294a59454505303b1da23072c485598e92224df55a0ab60b6533fc9bb9f855e2dd56e6ee16e73d5a"}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x5, 0x8}]}}, {{0x9, 0x5, 0x3, 0x1, 0x8, 0x6, 0x4, 0xc0, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0xed, 0x2}, @generic={0x49, 0x10, "d323c7b463087b1bcbce8ee18d33b5e521a44a86d178d35487ce9b392362add4ae306ef7ea9a1e8f6cb04950ce669ae1abac1e11821b48fd33d977237640eb80931dcfc96e6f0c"}]}}, {{0x9, 0x5, 0x1, 0x4, 0x400, 0x3, 0x5, 0x6}}, {{0x9, 0x5, 0x4, 0x0, 0x40, 0x5, 0x1, 0x2, [@generic={0x6c, 0xf, "e3923bbd324880790a84e5cb75b94f35cc57341997fcb235614bcb388203fffcebe9236c04e94b0d35c62984a107f37886db0bf744924f1e214dd29409f313aeecfd965796a9b189dc44a22569162acfb4e229357b3d2056b5edd50fdd692d4f45568f48587b2de0d7bd"}, @generic={0xa3, 0x11, "165884215c81be89833f21217a9ef2af3eeb3234cabf9ef8eb4da49e9c6543b2705df2821ff74e2444268f0b6121dfedd87611aeaedeac51f44a19366e212571d7f49043e5e05aa6e6f4615c100dd4df5b82f0623f6bf10c988f4e4fe4458e7519bcea9c005e3bd589fa87b2e13ec729b11bd0c470baa93f7219322676fa48b2ef09c6c4a2a2eee6ba505d15b7c7ff47531cee7f4ab81438096432b3222a961dde"}]}}, {{0x9, 0x5, 0x80, 0x2, 0x200, 0x2, 0xb, 0x5, [@generic={0x56, 0x26, "8b4fdbaafac5367126ce0b625da08e05c2e9a09e20b19d81d9c439464473647f691eb4e2d0bd26a2dbe69ff2693927c373954a86ca66faac9fa45d17fd44b1cbbfd2d4b821bdb71ef73ab7de651c780869b4d9ec"}, @uac_iso={0x7, 0x25, 0x1, 0x80, 0x3, 0x7}]}}, {{0x9, 0x5, 0x8, 0xc, 0x8, 0x0, 0x3, 0x3, [@generic={0x7e, 0x5, "a7037de50197b8c42f6044b1575f615a43a89e78cfb5435c79d481582bb4924ef74c55f3271d8e5870e0101cc1948ab462395a952a3d849a92d862e031ffc43320ca4064bf3539a756d92ea0232e176765a1ae20f8eb17d125648a78517dbe8293ade185481370eec68943fb02722c5755b4ab56c0e4c9a8fdf50a17"}]}}, {{0x9, 0x5, 0x0, 0x8, 0x8, 0xa, 0x7, 0x7, [@generic={0x47, 0xc, "79cd6f5c0426b1d8756c3824ae5db9b78bb4b108e266cde1b805382a519bddcbfdb40cd540450d4be8592f26f4664a3182425bffa3ad339598889777d51d4d739e8ffb3bbf"}]}}]}}]}}]}}, &(0x7f0000001f80)={0xa, &(0x7f0000000240)={0xa, 0x6, 0x300, 0x5, 0x6, 0x1, 0x20, 0x5}, 0x25, &(0x7f0000002000)={0x5, 0xf, 0x25, 0x1, [@ssp_cap={0x20, 0x10, 0xa, 0x12, 0x5, 0x5, 0xf00f, 0x4, [0xffffc7, 0xc0, 0x1b7, 0x0, 0xd8]}]}}) connect$netrom(r6, &(0x7f0000000000)={{0x6, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}}, [@default, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default, @bcast]}, 0x48) close(r6) keyctl$instantiate_iov(0x14, 0x0, 0x0, 0x0, 0x0) r7 = add_key$keyring(&(0x7f0000000040), &(0x7f00000001c0)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffff9) add_key$user(&(0x7f0000000380), &(0x7f0000000000)={'syz', 0x3}, &(0x7f0000000480)="cd2771d674080037a89c6fc43f86764a63874361dd9989402b0d03a05c52478380a756a3044433ac2857e9b1b542892834d73355e648932f6882de8615c116de24a36573dba223b29a12c71a92e2a260affb6e200b9fde0000360ba29cf648a7e3c252380f0a594430a0d596ec40efaf71abec97091d1885701dbd26d977cb24a57300"/141, 0x8d, r7) 11.248929531s ago: executing program 1 (id=2727): bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000002c7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x7c8) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r3, 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000ab4000000060a01040000000000000000020000280900010073797a30000000000900020073797a320000000088000480100001800c000100636f756e7465720014000180090001006d6173710000000004000280600001800a0001006c696d6974000000500002800c000140000000000000000808000440000000010c00014000000000000080010c00024000000000000000090800034000000fba0c00024000000000000000000c000140000000000000000714000000110001"], 0xdc}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x11, 0x4, 0x4, 0xff}, 0x48) sendmsg$NFT_MSG_GETRULE(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="14000000190a01"], 0x14}}, 0x0) syz_open_dev$sg(&(0x7f0000001940), 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xe, 0x5, &(0x7f0000000400)=ANY=[@ANYBLOB="250a00000000000061113c00000000001800000000000000000000000000000095"], &(0x7f0000000000)='GPL\x00'}, 0x90) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)) 10.123847937s ago: executing program 4 (id=2728): socket$kcm(0x10, 0x2, 0x10) r0 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_INIT(r0, 0x29, 0xc8, &(0x7f0000000340), 0x4) setsockopt$MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f0000000040)={0x0, 0x1}, 0xc) setsockopt$MRT6_ADD_MFC_PROXY(r0, 0x29, 0xd2, 0x0, 0x0) setsockopt$MRT6_DONE(r0, 0x29, 0xc9, 0x12, 0x0) recvmsg$kcm(r0, &(0x7f0000001480)={0x0, 0x0, 0x0}, 0xca1a3ad43564d52e) getpid() ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0xb}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008c}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f0000000440), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x6) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) keyctl$clear(0x11, 0xfffffffffffffffd) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, &(0x7f0000000080)={{0x3}}) ioctl$SNDRV_TIMER_IOCTL_START(r2, 0x54a0) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r2, 0x54a3) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r2, 0x5422) r3 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000480)=ANY=[@ANYBLOB="120100000000004020100600000000000001090224000100ffff00090400000103000000092100000001220500010581030000000000e0a37f7cd7e550613e17ad57d2e72bc84fd6dafc904695df"], 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) r4 = inotify_init1(0x0) fcntl$getownex(r4, 0x10, &(0x7f0000000040)={0x0, 0x0}) ptrace$setopts(0x4206, r5, 0x0, 0x3) 8.014312781s ago: executing program 1 (id=2729): mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x0, 0x6031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) mremap(&(0x7f0000a4c000/0xf000)=nil, 0xf000, 0x2000, 0x0, &(0x7f0000ffd000/0x2000)=nil) munmap(&(0x7f0000ba0000/0x2000)=nil, 0x2000) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) munmap(&(0x7f000045e000/0x1000)=nil, 0x1000) mremap(&(0x7f0000dde000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f0000bb3000/0x1000)=nil) ioctl$VT_DISALLOCATE(0xffffffffffffffff, 0x5608) write$P9_RSTATu(0xffffffffffffffff, &(0x7f0000000400)=ANY=[@ANYRESHEX, @ANYBLOB="1e628f"], 0x58) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, 0x0, 0x108) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_clone(0x4021400, 0x0, 0x9000, 0x0, 0x0, 0x0) syz_clone(0x4010e000, 0x0, 0x0, 0x0, 0x0, 0x0) 7.234775577s ago: executing program 0 (id=2730): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100007516b7108c0d0e008f8e0018030109021b0001000000000904080001030000000905", @ANYBLOB="02cf"], 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) shmctl$SHM_INFO(0xffffffffffffffff, 0xe, 0x0) preadv(r0, &(0x7f0000000480)=[{&(0x7f0000019640)=""/102400, 0x19000}], 0x1, 0x4, 0x0) keyctl$restrict_keyring(0x3, 0xfffffffffffffffb, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000340)=ANY=[], 0x3b) setgroups(0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_emit_ethernet(0xb8, &(0x7f0000000180)={@empty, @local, @val={@void, {0x8100, 0x0, 0x1}}, {@llc_tr={0x11, {@snap={0x0, 0x0, "86", "35bf00", 0x886c, "f2df6f40b0cb40bbd631ad3d0f74cf7a2dd5a815d8213a2b3e1bcec7ef6fbc8349f59214139655db004b5068b0ceaad9d85417496ad27eab658810a92719eb2da9bfeda146664ace94bb8eefd9c26f2de9ce371c8e3faf596685dd019ebf2e5fb9df2bc62d9b74798253d5aaab85ae11dc89b2fa3d542f18c226e5d1d135a0444f46f8ab36676be92804ee3b0a44d9b8a043e69688358259859b29ad4fbc"}}}}}, 0x0) r1 = dup2(0xffffffffffffffff, 0xffffffffffffffff) sendmmsg$unix(r1, &(0x7f0000001340), 0x0, 0x4800) r2 = memfd_create(&(0x7f0000000800)='uid<', 0x4) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) fcntl$setstatus(r3, 0x4, 0x2800) close(r3) fstatfs(r2, &(0x7f00000003c0)=""/146) 6.722294094s ago: executing program 2 (id=2731): r0 = socket$inet6(0xa, 0x3, 0x6) r1 = socket$inet(0x2, 0x2, 0x0) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000340)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_POWER_SAVE(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x1c, r3, 0x400, 0x70bd2c, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r4}, @void}}, ["", "", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x8005}, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r5 = getpid() sched_setscheduler(r5, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000280)=@framed, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmsg$netlink(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000001940)={0x114, 0x2b, 0x1, 0x0, 0x0, "", [@nested={0x103, 0x0, 0x0, 0x1, [@typed={0xc, 0x0, 0x0, 0x0, @u64}, @typed={0x14, 0x0, 0x0, 0x0, @ipv6=@mcast2}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a487f26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f55ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fd"]}]}, 0x114}], 0x1}, 0x0) setpriority(0x1, 0x0, 0xfffffffffffdffcd) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000080)={'batadv0\x00', &(0x7f0000000100)=@ethtool_gstrings={0x1b, 0x1}}) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r8, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1001}, 0xc) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000180)={{{@in=@local, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {0x7fffffff}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2e9c8f856eb8cee6}, {{@in=@empty, 0x0, 0x6c}, 0xa, @in6=@loopback, 0x0, 0x4}}, 0xe8) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) r9 = socket$l2tp6(0xa, 0x2, 0x73) sendto$inet6(r9, 0x0, 0x0, 0x4004000, &(0x7f00000002c0)={0xa, 0xffff, 0x0, @mcast2={0xff, 0x5}, 0x1c}, 0x1c) 4.921577008s ago: executing program 1 (id=2732): r0 = gettid() prlimit64(0x0, 0x0, 0x0, 0x0) open(&(0x7f0000000000)='./bus\x00', 0x1c5c7e, 0x0) r1 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) close(r1) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r3) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)) ioctl$SIOCSIFHWADDR(r3, 0x8943, &(0x7f0000002280)={'syzkaller0\x00'}) connect$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x9504, &(0x7f0000000100)=[{&(0x7f0000000000)="2b10", 0xffbd}], 0x1, 0x0, 0x0, 0x2c}, 0x4) mount$9p_fd(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000100), 0x0, &(0x7f0000000040)={'trans=fd,', {'rfdno', 0x3d, r1}}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sync_file_range(0xffffffffffffffff, 0x0, 0x0, 0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r4, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0x18ff2}], 0x1, 0x100, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="14000000240009000000000000000e0006"], 0x14}}, 0x0) r6 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) prlimit64(r0, 0xb, &(0x7f00000000c0)={0x1, 0x5}, &(0x7f0000000200)) r7 = socket$kcm(0x2, 0x200000000000001, 0x106) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r6, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_SETCRTC(0xffffffffffffffff, 0xc06864a2, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, {0x4, 0x1, 0x3, 0x69, 0x200, 0x0, 0x2, 0x5, 0x4cab, 0xe154, 0x1000, 0x0, 0x10, 0xf9, "fe1d00003413000000000000000caa000000090000000000000004b427180010"}}) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x4, 0x7fe2, 0x1, 0x5}, 0x48) bpf$MAP_DELETE_ELEM(0x2, &(0x7f0000000400)={r8, &(0x7f0000000300)="091100", 0x20000000}, 0x20) sendmsg$ETHTOOL_MSG_DEBUG_SET(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB, @ANYRESHEX=r7, @ANYBLOB="e3c03fdd72b79544525161918854803fb45b2969e5dc2bea1742eb4a0c3efda3c27bca4850ed202259eb38b420f76c489bc85447f0b71f3ddeaa2f007cdafa683332551733d11636c08fdc15229af81917ed0399498407f8a900000000000000bd5368"], 0x48}}, 0x0) 4.788695583s ago: executing program 3 (id=2639): bind$tipc(0xffffffffffffffff, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43}}, 0x10) mmap$KVM_VCPU(&(0x7f0000ffe000/0x2000)=nil, 0x930, 0x0, 0x11, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000003900)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0, r0}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x5, 0x1, 0x1, 0x40}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000005c0)="13a9e9f658458227d5110800000051280224819373369ae403f5014060a4221a352495d95dcf183a1f047dcfdbfe9daa0155f9af12253033c2c5756f86bfd4255929f4138c15661dea39436a24af3269e82653d93fc4e62ae384daba7eb706374966b45f957101d8abafbd013a5eb3e39c107e0273a1b45b4456f3c275a609438fb4d3a1c1a4548a072bdc2ccdd2eb6a14059e75f68e510c0ad05c79b68e9909943e748aef1fd3235c71472887735e3a9b211c929b07ee0a545ef0e577f74d1b41efa1d00045f8ae3e49e571adab256156c13210fea441aee86a57ec1f458d364c59eb897cb7ceea45f54d03acc67e57c90bdcaa43dc35f7", &(0x7f0000000d00), 0x1013, r4}, 0x38) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) openat$sw_sync(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) openat$sw_sync(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r5 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000580), 0x0, 0x0) read$FUSE(r5, &(0x7f0000000a00)={0x2020}, 0x2020) r6 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000007940)={0x0, 0x0, &(0x7f0000007900)={&(0x7f00000000c0)=@newtaction={0x90, 0x30, 0x216822a75a8bdd29, 0x0, 0x0, {}, [{0x7c, 0x1, [@m_ct={0x44, 0x1, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18}]}, {0x4}, {0xc}, {0xc}}}, @m_connmark={0x34, 0x2, 0x0, 0x0, {{0xd}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x90}}, 0x0) symlinkat(&(0x7f00000004c0)='./file1\x00', r6, &(0x7f0000000100)='./bus\x00') r8 = syz_open_dev$usbfs(&(0x7f0000003f00), 0x1ff, 0xa401) ioctl$USBDEVFS_DISCONNECT_CLAIM(r8, 0x8108551b, &(0x7f0000000000)={0x0, 0x0, "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"}) 3.422146843s ago: executing program 3 (id=2733): openat$incfs(0xffffffffffffffff, &(0x7f0000000000)='.log\x00', 0x585240, 0x60) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x28, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x9c}}, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x6, 0x1, &(0x7f0000000080)=@gcm_256={{0x304}, "589ba232188cbb01", "c2bb636b5f207b9855e7a4db03a264162bfc18c8e262ddf1f101f39abd0b7395", "9f8b3e0b", "202b1261fb6eff50"}, 0x38) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r1) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macsec={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACSEC_ENCODING_SA={0x5, 0x6, 0x5}]}}}]}, 0x3c}}, 0x0) r4 = syz_clone(0x0, &(0x7f0000000040)="4947a9a64822cf15338f9327f80e03b31aa0404429", 0x15, &(0x7f0000000080), &(0x7f00000000c0), &(0x7f0000000100)="0af0f4255ceddb1804ea2fcb02d6663ec3fb5e7185d5980d6bf1f7ff3a4a4babe22b24d39c58daa9de4774d5a8a77f2c7a4e23d2d6cf9d0ff4046d535eef6219ef61fe935df4e31c7d58f06be742adcae22024cd9c38c3709e71b6722e34c5279795a6") getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, 0x0, &(0x7f0000000280)) r5 = getgid() openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$IOMMU_HWPT_ALLOC$NONE(0xffffffffffffffff, 0x3b89, &(0x7f0000000200)={0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000280)="c5"}) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000001e40)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000007c850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000ac0)='percpu_alloc_percpu\x00', r6}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x16, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x79, 0x10, 0x90}, [@ldst={0x3, 0x3, 0xb, 0xa, 0x0, 0xffffffffffffffe8}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x3f}, 0x48) syz_emit_vhci(0x0, 0xb) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r7 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r7, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) r8 = creat(&(0x7f0000000040)='./file0\x00', 0x1de) close(r8) execve(&(0x7f0000000280)='./file0\x00', 0x0, &(0x7f0000000080)=[&(0x7f00000002c0)='\\\\B\xc6+\xd5\xb9\x93L\\\x87\x84K\xb9!\x0eX =z\\\x14\xec*\xed\xa6u\xc4\x14=\xdb_\xe8\\\x96\n\xa6)\v\xf9 \xddb|\xe7\x14\x82\xc3\x90\xf9=?i\x86Lpw\xba\xe1\v\x1a9G\a\xf9\x18\xe4\xf6f\xd6\fpfP\xcf\xee<\\C\x1e\\\x1f&\xaf\xea?\x91\a\xea\x8d\x05\x83aJ\xf0v\xc0q\x84\x93il\v\x03\b\xadT\a\x14\xd7\xd5u\x84\x82\xb2\xd4(\x1dC\xba2\xa6u\x14\x0ee\xef\x04\xf2\v\xe9\x8a\xdfU\xd1\x1f\x9b\x1d2mRQ\xea\x90\xa0m#\xa4\x1dy\x9d\xe9\xfa\x06\xa27\x9d;\xe4\xb4\x86\xa7&\xa9c6\x1b\x8d\xae\xa0\"(\x9a\x82\xc0o/\x8c\x97\xb9BJh\x9f\xb2\"\x95h\xd7PN\xf1\xe7\xe2\xb7\xe8Ac*v\xf7\x16\x8fe\xef\x84\xf5k\xa9\xeb\xebt\xc3\xf1f\xca\x04*\xec\xfa\xe5bP%Z\xad\x83\xda\xbe2\xa9\xf2\xdaH\xf2{\xf6~\x0f\xb9\xdd.\x06W\xd7\x1dG<\x1e\f2c\xf4\xa0d\x01\x88\xee\xcc\x18(\rap\x98?\xb1$\xe9\xe9+\xa6\xfb\xb1\xc61\xf1\xe7m\xfd\x05\xee\xa0L\xe4C\"\xba\xd5\x91]]\xb26\xbfA\x86\f\xda\xa1w,\xc7\x15oA\xc5m\xbb\x15\xd1\x1e\fi\xc8\xefl&*\"_^5\xd1 H\x17\xf0\xcc\a\x10dxb\xc2\x13m[P\xac]\xc2\xc1\xa8\x1df_\xcax\xbd\xf4moccU\xb5\\\xf5\x05\xec\xa7\x98\f1\x89\x99\xf0P\x8e\x1b\xe3\x9e\xb9\x0f\xf9\xb0\xacd\x9d=d\xae\xbf\xd7K\x9do)p\x00!3\xd7\x05\xf0Xk\xb7vo?1H\x86\x19f\xd3\t\xf8\x96\'\x8c{\a\xfer\x14\x0e\xd9=\x9f\xa1\xda@\xc7-\x93\xbc4\xc0\xfe\xf6\xf6\xc4\xc3ZT>R\x11\xba\xf9\x17\r\x98\a\x06\xe8\x80\xf3\xdf\x87\x1f\xfd\xb8\x99\x9c\x19\xb4\xac\xca\xc2-\xfc\xe8\xc3qAt\b\x94\xee\x9e4\x85\xd0\xfe+\xc0\x17\xbfE\x15\xfdZ\xce\x954v\x8a\x05\xde\xaal\xf4\x82\xe2?\xabS\xe4\xe2\xe1\xd83\x17\xfe\xf8~\x04\xb6\x11\xc4K3\x82\x127\xf7\xc7\x06\x177\x8bWF\xb21\xce\xc7\x19|\x9f\xe87\x80\xbc\xac\xb6;\xcc\xafr\xbd\x90\xde9\x0e\xda\x05\x86\xf0i\xf4{\xbf\x82#\xfd9\xdc\xa7\x01\x00\x12\xea1K\xc9\xe1\xfdv#0U\xd2\t\x14\x10\xe6\xfc\xba\xa1\xac=\xfd\xd7\xa8\xc8\x18\x00\x00\x00\xc4w', &(0x7f00000020c0)='gcB\xc6+\xbf\xcc_\x81 \xd5\xb9\x93L9\x87\x84K9\"\xf1@\a\xea\xbb\xfe\x9cY\xfc\x80\x99\xb9!\x0eX czg\x14\xec*\xed\xa6u\xc4\x14*\xdb_\xe8\\\x96\n\xa6)\v\xf9 \xddb|\xe7\x14\x82\xc3\x90\xf9\r?i\x86Lpw\xba\xe1\v\x1a9G\x04\fpfP\xcf\xee<:C\x1e\\\x1f&\xaf\xea?\x91\a\xea\x8d\x05\x83aJ\xf0v\xc0q\x84\x93il\v\x03\b\xadT\a\x14\xd7\xd5u\xdfU\xd1\x1f\x9b\x1d2mRQ\xea\x90\xa0m#\xa4\x1dy\x9d\xe9\xfa\x06\xa27\x9d;\xe4\xb4\x86\xa7&\xa9c6\x1b\x8d\xa6$\x82\x1b\x9a\x82\xc0o/\x8c\x97\xb9BJh\x9f\xb2\"\x95j\xd7PN\x89\x7f\xc8AB\xc7}T\xbe\xf1\xe7\xe2\xad\xdd\xc2\xb7\xe8Ac*v\xf7\x16\x8fe\xef\x84\xf5k\xa9\xeb\xebt\xc3\xf1f\xca\x04*\xec\xfa\xe5b\xeb\xb4\x99\xefSv\x82\xe2\xe3\x02)sP%Z\xad\x83\xda\xbe2\xa9\xf2\x04\xda\nU\x84\xc2\xe3E\xc1\xd8L\xb1r\xb0\xdaH\xf2{\xf6~\x0f\xb9\xdd.\x06W\xd7\x1dG<\x1e\f2c\xf4\xa0d\x11\x88\xee\xcc\x18(\rap\x98?\xb1$\xe9\xe9+\xa6\xfb\xb1\xc61\xf1\xe7\xf7\xff]]\xb26\xbfA\x86\f\xda\fi\xc8\xefl&*\"_^5\xd1 H\x17\xf0\xa7\x83}\x92W\xeb\xe5\xa3\xcc\a\x10dxb\xc2\x13mNP\xac]\xc2\xc1\xa8\x1df_\xcax\xbd\xf4m\x1e\x18occU\xb6\\\xf5\xf3\xeb\xa3\x98\f1\x8b\x99\xf0P\x8e\x1b\xe3\x9e\xb9\x0f\xf9\xb0\xadd\x9d=d\x94\xec\xceQx\xdb\xf6zG!3\xd7\x05\xf0=k\xb7vo?1H\x86\x192\xb2&\xa5\x9d\xd7\xbc\x85\a\xfer\x14\x0e\xd9=\xa6\xa1\x03cz>R\x11\xba\xf9\x17\r\x98\ap\xda-\xb0R\t\x93.r/\xce\xa4\rK\xcb\x1aO\x03z$\xbeYvYn\xddI\xe7\x13\x8f\x15\xefL\xba`\x9d\xea\xed\xf0)s\x12r\x9b\xf2&\xf2-\xc6\xec\x96\x19\xc9\xd7\xda\x06\xba\x87\x18\xef+\xcdp\x95\xef\xd9\xb9s\x8b\xf3\x8b\x88<\xa0\xa3\xad\x8c\xaf&iMM\xc5>\xa7v\x17\xdf \xca\x86#\xa7*\xecl\xbfp\xc3x\xc3\xc1r\xbe7\xb5\xa3\xf11[`\xcb7z\xa0P\xd5p\xe9\xddC\xc0\x80=\xd9y\x01\x1c\xe7\x1cdN\xd5x\x89\xc9\xc0\xc4{\x01\xa6o\x9ceZ\xe1\xfa0?\x94\x1f\x9aQ\xf0Lf\x1e\x17A@\x06\x89\xadg+$/V\r\xc9oQ=k\xa0\xa6\\\x00\x99\x94\x10dy\x7f\xd1\xd2\xd04\x96\b\x80/\x9a\xfc\a\'\x83\xb8\xcd\xb1\xf5#\tr\xb4\xc4\x929\x01\xee\xe6\n\x8ba\xde\xdbsAzG\xe86\xfe\x83\x1d\xb3K2\xf0\x8f\xde\x85\x00M&\x00\x00O\x86\xec2/\xea\xe6$(L\x85\xf8Y\xcf,\xa3\x87^\xe1\xd8F\xe4AJ\xaa\x1f\xe9\xff?\x9aF\x97M\x80\xe9LR\xdc\x9f~\xce\xb5\xef\x14M\f#>O\xb44LB\xc6a\x82\xc5\x107\xae\xdb\v\xf7\xc4k\xab\xf8:\x1fj\xa2vf)\xee\xab\xb3C\x92\x8e\x80\xb1\x01\x85\xb1v\xae*\xa7])n)+\xd9\xcf\xe9\x9ag\x8a*u\xe4e?\xf9\x93\x93u\xd2M\xfd\xa1\xc5\xff\xd9\x15-\xabH\x90\x04\xea\x88\"\xfe\v\x1d\xa5}H\xee\xc7\x94\xdb\x02\xf7\t5\x1e\xd6~R\x9e\xb5NV)\xa6\x1ff\xde\xbf\x97V\x87\v\x94\xb4\xb0\x7f3\xa3\x85c=\xb0\x8ab\x06\xfa\xe9\xb3\x1d\x0e0\xfe\xc7\xf9\xde\xd6\xe6\x14O\xc8\xff7\xd8\xed\xc6\xdf\x01\xb3\n8\xbf\xbe\x1e\v\x18\xd9\xb3+X4\xb5S\xe7\xf6oO;\xc5\xc8-\x9e\xb5\xbe\x97\xb4k\xd2n\xfa\xd1\x82\x16\xea\x93\xc7\xb3?\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb7\xf2K\xe9\xcf\xc6y\xb00\xe0\xa0\f\xef\x02\xd5 (S\xffhY\"\x83\x05M\x0f\v\xec0B\x1f\xd7\x80\xdaL\xa2Q\x8c\xde\x17* \xf5)tk\xb6\xb9\x86?\x1a\xff\xdc\xecP\xd1w1\xf4a\x00r\x06,\x86S\x11)\xf4\x16W\xd6\x86\x10\x02\x15mod\x854\xd4\'^\xb6\xe9f\xd6:\xfc5%\x16\xc5\xa5\xf1\x11k\xdd{\xaai\x8a\xde\xa6\x18,H\xd8\xe5\xf5g\xe7U\\(\x01\xc5\xde\x1d\x8acHf\x86`9qV|=\xbb\xd1\x95\x0f\x86\xffa\xb1\xdb\x82l\xc3\xcf\x88\xeeJ\xda\x8b0f\xac\xc2n\xd1\')\xf2\xaf\xc0\x06\x01\xb4b\xef\xa8!\xf9\n\xf7{C\xdc`h\b6>\x171\x16\x89\xa8\xe9OC\x7f\xb1\x1c\xd4\xd5\xa7\x7f\xfd\xa8Y\xf0s_\xfb\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00.\xeb\x1a\x18\xf1h\x04\xa8\xe8\x92\xe6\xbc\xe1O\xcf', &(0x7f0000001e80)='gcB\xc6+[;\x88\xfe\x97B*[\a\x03\x96l\x1e\b\xd9\xbf\xcc_\x81 \xd5\xb9\x93L9\x87\x84K\xb9!\x0eX c\x03\x00\x00\x00\x00\x00\x00\x00\t\x00\x00\x00\x00\x00\x00\x00\n\xa6)\xd9\x10#\xf5b|i\x86Lpw\xba\xe1\v\x1a9G\x04\fpfP\xcf\xee<:C\x1e\\\x1f&\xaf\xea?\x91\a\xea\x8d\x05\x83aJ\xf0v\xc0q\x84\x93il\v\x03\b\xadT\a\x14\xd7\xd5u\x84\x82\xb2\xd4(\x1d\x04\xf2\v\xe9\x8a\xdfE\xd1\x1f\x9b\x1d2mRQ\xea\x90\xa0m#\xa4\x1dy\x9d\xe9\xfa\x06\xa27\x9d;\xe4\xb4\x86\xa7&\xa9c6\x1b\x8d\xa6$\x82\x1b\x9a\x82\xc0o/\x8c\x97\x00\x00Jh\x9f\xb2\"\x95j\xd7PN\x89\x7f\xc8AB\xc7\x8d\xf1\xe7\xe2\xad\xdd\xc2\xb7\xe8Ac*v\xf7\x16\x8f_\xda8l\xc8\xa2\xb0\xd1\fg\x00\x00\x00\x00\x00\x00\xfa\xe5b\xeb\xb4\x99\xefSv\x82\xe2\xe3\x02)sP%Z\xad\x83\xda\xbe2\xa9\xf2\xdaH\xf2{\xf6~\x0f\xb9\xdd.\x06W\xd7\x1dG<\x1e\f2c1\xf1\xe7m\xfd\x00\x00\x00\x00\xe4C\"\xba\xd5\x91]]\xb26\xbfA\x86\f\xda\fi\xc8\xefl&\x9c\xbd\xbb\x90\x17$\x9e\\\xee\xc6\x88?)\r@e*\"_^xb\xc2\x13m[P\xac]\xc2\xc1\xa8\x1df_\xcax\xbd\xf4m\x1e\x18occU\xb5\\\xf5\x05\xec\xa3\x98\f1\x89\x99\xf0P\x8e\x1b\xe3\x9e\xb9\x0f\xf9\xb0\xadd\x9d=d\x94\xec\xceQx\xdb\xf6zG!3\xd7\x05\xf0Xk\xb7vo?1H\x86\x192\xb2&\xa5\x9d\xd7\xbc\x85\a\xfer\x14\x0e\xd9=\x9f\xa1\xda@\xc7-\x93\xbc4\xc0\xfe\xf6\xf6\xc4\xc3ZT>R\x11\xba\xf9\x17\xfd\x98\x06\x06\xe8\x80\xef\xdf\x87\x1f\xfd\xb8\x99\x9c\x19\xb4\xac\xb0\x11i\xcc\xb9BG\x1ac\xbc\xd9&\xb6\xd9\x04\x03\xc6\xebf\x84\xe5\xfe[\xe7\xe6\xb3\xe9\xca\xe7\xc1\xa7\x9aO\xc1\t\x1c\xeb\xfbl\xa4\x80KQG\x80\xcd\xdd\t\x91\xdb}\xb1\xde\xf9\xbe=\x8b\xde\xf2G\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf7\xa9\x99t\x87 \x9f\x03}\x8d\x1b\x14\x1eU.r\xe1\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000d00)='gcB\xc6+\xbf\xcc_\x81 \xd5\xb9\x93L9\x87\x84K\xb9!3\xf2\x84\xa9H\x92\x1e4\"u\xc4\x14*\xdb_\xe8\\\x96\n\xa6)\v\xf9 \xddb|\xe7\x14\x82\xc3\x90\xf9\r?i\x86Lpw\xba\xe1\v\x1a9G\x04\fpfP\xcf\xee<:C\x1e\\\x1f&\xaf\xea?\x91\a\xea\x8d\x05\x83aJ\xf0v\xc0q\x84\x93il\v\x03\b\xadT\a\x14\xd7\xd5u\x84\x82\xb2\xd4(\x1d\x04\xf2\v\xe9\x8a\xdfU\xd1\x1f\x9b\x1d2mRQ\xea\x90\xa0m#\xa4\x1dy\x9d\xe9\xfa\x06\xa27\x9d;\xe4\xb4\x86\xa7&\xa9c6\x1b\x8d\xa6 \x82\x1b\x9a\x82\xc0o/\x8c\x97\xb9BJ9\x13V\x1e\b\x16\xf6/\xc3{h\x9f\xb2\"\x95j\xd7PN\x89\x7f\xc8AB\xc7}T\xbe\x8aO\x9d\x94\x8d\xf1\xe7\xe2\xad\xdd\xc2\xb7\xe8Ac*v\xf7\x16\x8fe\xef\x84\xf5k\xa9\xeb\xebt\xc3\xf1f\xca\x04*\xec\xfa\xe5b\xeb\xb4\x99\xefSv\x82\xe2\x1f\x02)sP%Z\xad\x83\xda\xbe2r\xb0\xdaH\xf2{\xf6~\x0f\xb9\xdd.\x06W\xd7\x1dG<\x1e\f2c\xf4\xafd\x01\x88\xee\xcc\x18(\rap\x98?\xb1$\xe9\xe9+\xa6\xfb\xb1\xc61\xf1\xe7m\xfd\x05\xee\xa0L\xe4C\"\xba\xd5\x91_]\xb26\xbf\x9cA\x86\f\xda\fi\xc8\xefl&*\"_^5\xd1 H\x17\xf0\xcc\a\x10`xb\xc2\x13m[P\xac]\xc2\xc1\xa8\x1df_\xcax\xbd\xf4m\x1e\x18occU\xb5\\\xf5\x05\xec\xa3\x98\f1\x8b\x99\xf0P\x8e\x1b\xe3\x9e\xb9\x0f\xf9\xb0\xadd\x9d=d\x94\xec\xceQx\xdb\xf6zG!3\xd7\x05\xf0\xd8k\xb7vo?1H\x86\x032\xb2&\xa5\x9d\xd7\xbc\x85\a\xfer\x14\x0e\xd9=\x9f\xa1\xda@\xc7-\x93\xbc4\xc0\xfe\xf6\xf6\xc4\xc3ZT>R\x11\xba\xf9\x17\xf2\a\x00\x00\x00\x00\x00\x00\x00\x00\x13\x9eX$\xe1\x00\x00\x00\x00\x00\x00\x003\xe0\xe3\x0e\xaa\x8e\x9a\x1f\x12\fRw\x11B\x17xO0x0}) ioctl$IOMMU_HWPT_SET_DIRTY_TRACKING(r1, 0x3b8b, &(0x7f00000012c0)={0x10, 0x1, r2}) (async) io_setup(0x5, &(0x7f0000001300)=0x0) (async, rerun: 64) r4 = eventfd2(0x4, 0x80801) (rerun: 64) io_cancel(r3, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x6, 0x5, r1, &(0x7f0000001340)="b764cb6e1238d60906ce42d1927e61ba6f8868ac1aa733eca80c4f9195ff736a9531a9fdb39a199efbfdfe1a142bcead616220ab46224fbf60d8d9daa07a7f1f736e3b272903980ba2e80b843afffb5e05dc30a0db650a405007f60c7bd95d862a32c02d0c6e5efc4c77159d548b4f9a86", 0x71, 0x5, 0x0, 0x1, r4}, &(0x7f0000001400)) (async) r5 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000001440), 0x2, 0x0) (async) r6 = syz_open_dev$dri(&(0x7f0000001480), 0x5, 0x80000) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, &(0x7f00000014c0)={0x0, 0x0, r6}) (async) fcntl$getownex(r6, 0x10, &(0x7f0000001500)={0x0, 0x0}) sched_setscheduler(r7, 0x6, &(0x7f0000001540)=0x8) (async) r8 = accept(0xffffffffffffffff, &(0x7f0000001580)=@ethernet={0x0, @broadcast}, &(0x7f0000001600)=0x80) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r8, 0x84, 0x9, &(0x7f0000001640)={0x0, @in6={{0xa, 0x4e22, 0x0, @dev={0xfe, 0x80, '\x00', 0x34}}}, 0xffff8001, 0x9a, 0x1, 0x1, 0x4, 0x6, 0xff}, 0x9c) (async) io_setup(0x7fffffff, &(0x7f0000001700)=0x0) io_submit(r9, 0x6, &(0x7f0000001b00)=[&(0x7f0000001780)={0x0, 0x0, 0x0, 0x8, 0x4, r1, &(0x7f0000001740)="01b95619e0fe73d5efc5853ec14e55cbe579b5fc3463191bf349a45492ffa8cd21f1b988baf7b29ff1f6a4", 0x2b, 0x80000001, 0x0, 0x2, r4}, &(0x7f0000001800)={0x0, 0x0, 0x0, 0x5d5de0b3b0fed75f, 0x7, r5, &(0x7f00000017c0)="036da8bf4f5473ca8842a68ffc64520f292f1235d3890c3021ec32d0ae6ee7befa442b4d80e32d03c97808081ffecebf13efc88b87", 0x35, 0x0, 0x0, 0x1, r4}, &(0x7f0000001900)={0x0, 0x0, 0x0, 0x3, 0x8000, r1, &(0x7f0000001840)="4fec385752667bc10176c02d4e984ac18d047e6d6bcff616df24167eebd7deb7f4a3dd129dca422485b713db93be3c068c178c7fccab5ac3b78edf58123ea3d8631c77c52621c394509d5f1962c8d5ea59e8f1245e66b2279632b0d9ccfea42c27cee928955dbddf41fe9b3cd94c837979372260f62260511f1f3d4f6b07ba23a6", 0x81, 0x3, 0x0, 0x2, r4}, &(0x7f00000019c0)={0x0, 0x0, 0x0, 0x6, 0x1, r8, &(0x7f0000001940)="04a908b882152a9ce784f63046bca948fbb531e863bc6e985422610fcfdc2a966711d8d3b4376d6d7f6bc2c79e3f14648437292491d04a019c4a3b2c55012e03910f71670d9e60fcb735f0fbc19f5524", 0x50, 0x8001, 0x0, 0x2, r4}, &(0x7f0000001a40)={0x0, 0x0, 0x0, 0x1, 0x7, r5, &(0x7f0000001a00)="7edd89b715b9a1734f1c3a26730ab113d426432e3ccdbd76126eb4", 0x1b, 0x3, 0x0, 0x1, r4}, &(0x7f0000001ac0)={0x0, 0x0, 0x0, 0x8, 0x3, r4, &(0x7f0000001a80)="a11bdef1315d1e502396097479bf56faa7c2739644e62f81639cf30febf10d07c0512a9e91f206f64c839049d7e603862a2fed", 0x33, 0x6, 0x0, 0x2, r4}]) fcntl$getown(r8, 0x9) (async) connect$pppl2tp(r1, &(0x7f0000001b40)=@pppol2tpv3in6={0x18, 0x1, {0x0, r8, 0x1, 0x3, 0x4, 0x1, {0xa, 0x4e24, 0x1, @mcast1, 0x1}}}, 0x3a) (async) r10 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000001b80), 0x111902, 0x0) r11 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000001d40)=0xffffffffffffffff, 0x4) (async) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000001e00)={0xc24, 0x0}, 0x8) (async) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000001e40)={0x1, 0xffffffffffffffff}, 0x4) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001f00)=@bpf_lsm={0x1d, 0x14, &(0x7f0000001bc0)=@raw=[@printk={@lli, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x2}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r10}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xa}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @call={0x85, 0x0, 0x0, 0x4d}, @alu={0x4, 0x0, 0x5, 0x9, 0x7, 0x4, 0xfffffffffffffff0}, @func], &(0x7f0000001c80)='syzkaller\x00', 0xad88, 0x4c, &(0x7f0000001cc0)=""/76, 0x41100, 0x1a, '\x00', 0x0, 0x1b, r11, 0x8, &(0x7f0000001d80)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000001dc0)={0x0, 0x5, 0x9, 0x2}, 0x10, r12, 0x0, 0x1, &(0x7f0000001e80)=[r13], &(0x7f0000001ec0)=[{0x4, 0x1, 0x10, 0x5}], 0x10, 0x3}, 0x90) memfd_create(&(0x7f0000001fc0)='\xf5)-%\'\x00', 0x4) (async) openat$ptp0(0xffffffffffffff9c, &(0x7f0000002000), 0x800, 0x0) fanotify_init(0x10, 0x8000) (async) ioctl$DRM_IOCTL_MODE_GETCRTC(r6, 0xc06864a1, &(0x7f0000002080)={&(0x7f0000002040)=[0x0, 0x0, 0x0, 0x0], 0x4}) (async, rerun: 32) ioctl$HIDIOCSFEATURE(r10, 0xc0404806, &(0x7f0000002100)="e4203a2fa98e99bcada0ac374078fe5610424f7369f8d3d4995fb61fff81ae1774233bc58ea659bcb2db05ff956e0cf849767c5af854") (rerun: 32) 2.785141955s ago: executing program 0 (id=2735): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) prlimit64(0x0, 0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, 0x0) rt_sigprocmask(0x0, &(0x7f000078b000)={[0xfffffffffffffffd]}, 0x0, 0x8) r1 = gettid() r2 = getpid() rt_tgsigqueueinfo(r2, r1, 0x1d, &(0x7f0000000180)={0x0, 0x0, 0x9}) r3 = signalfd(0xffffffffffffffff, &(0x7f00007aeff8)={[0xfffffffffffffffc]}, 0x8) read(r3, &(0x7f0000000740)=""/384, 0x200008c0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) 1.677256072s ago: executing program 4 (id=2736): r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) getsockopt$llc_int(r0, 0x10c, 0x6, &(0x7f00000018c0), &(0x7f00000079c0)=0x4) r1 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000), 0x4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000380)={r1, 0x0, 0xf7, 0xe1, &(0x7f0000000040)="07f57bc7975fcd4880a93354853fbedaf1757143f1c9cd63ff99c53ba2028316b96cdf622cd9cc81899139f9c876ebafc090356611d907d358e03ea3b954df38e545d5811992274b86099b28a3246f90103c64185cbc3819cdd9dcf084ed4ebce1c1707529ffa9e55eddc8a68aca4d18be560ba78d4c8a5c38f79ed67d70a88c55b1633259760a14dec96ff48e9f463b658e7b0f05df4e51369f48cddba10e49b0234ea4dadf2b5a60064f220f9f39cec9bc0bd658b77c95d82833dd1d778ca26711ca60d283bf1d9154f6691e19b80bc3a3f8330b5640b2594d0c8f4ddf708e217bf2e713f36a1ccc0d7c2f033f39ee383fbce11d1d76", &(0x7f0000000140)=""/225, 0x5, 0x0, 0xe4, 0x11, &(0x7f0000000240)="87cae406fe16197abb5ab25a4d8e3a6ac470b3ffe4aa4afe4fa228da89c6ee90ed4ad4990d4979ddcfb957c811a0a7609cd062a67fbc245f73ea27a15f653862523c749cd622a5a6da3b50a52ef4495ea1805f788cd0c1553e1d66331c0730caa22864d06fa73831983ac2d1ce29bead470cb4ae04200b6655b582819bbb06026529b74e14ff7ff5a3a9b34aa7d1ea1f2d1e282f2b18eff475151434f4820ec69e0ee1aab021a24aa0ab7848d8ff73873c21db6e07fc1fdbd01e5193c2a6f91788afb9ca0789272d6869ad83def8cfec7264dc9f17c6112ff6a6b2cd3bcd11a42624b254", &(0x7f0000000340)="62b8e02e25412711d2c82a88c43f4b49ac", 0x0, 0x0, 0x7fff}, 0x50) 1.502204244s ago: executing program 0 (id=2737): r0 = io_uring_setup(0x30d5, &(0x7f00000000c0)={0x0, 0x3709, 0x0, 0x0, 0x2c5}) clock_gettime(0x0, &(0x7f0000000140)) mount$bpf(0x0, &(0x7f0000000400)='./bus\x00', &(0x7f0000000500), 0x2800000, 0x0) chdir(&(0x7f0000000040)='./bus\x00') openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000001c0)=0x5) preadv(r1, &(0x7f0000001880)=[{&(0x7f0000001a80)=""/102400, 0x19000}], 0x1, 0x0, 0x0) r2 = gettid() timer_settime(0x0, 0x0, 0x0, 0x0) close(0xffffffffffffffff) socket$inet(0x2, 0x2, 0x1) syz_open_procfs$userns(r2, 0x0) mount_setattr(0xffffffffffffffff, 0x0, 0x1800, &(0x7f00000001c0)={0x100003, 0x8a, 0x60000, {r1}}, 0x20) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) quotactl$Q_GETINFO(0xffffffff80000500, 0x0, 0x0, &(0x7f0000000200)) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000240)='memory.numa_stat\x00', 0x100002, 0x0) ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f00000000c0)={0xc}) close_range(r0, 0xffffffffffffffff, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x4b0}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x60}}, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r5, &(0x7f00000001c0)=ANY=[@ANYBLOB=')'], 0x118) 1.500536324s ago: executing program 1 (id=2738): bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000002c7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x7c8) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r3, 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000ab4000000060a01040000000000000000020000280900010073797a30000000000900020073797a320000000088000480100001800c000100636f756e7465720014000180090001006d6173710000000004000280600001800a0001006c696d6974000000500002800c000140000000000000000808000440000000010c00014000000000000080010c00024000000000000000090800034000000fba0c00024000000000000000000c000140000000000000000714000000110001"], 0xdc}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x11, 0x4, 0x4, 0xff}, 0x48) sendmsg$NFT_MSG_GETRULE(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="14000000190a01"], 0x14}}, 0x0) syz_open_dev$sg(&(0x7f0000001940), 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xe, 0x5, &(0x7f0000000400)=ANY=[@ANYBLOB="250a00000000000061113c00000000001800000000000000000000000000000095"], &(0x7f0000000000)='GPL\x00'}, 0x90) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)) 1.427959349s ago: executing program 3 (id=2739): mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x0, 0x6031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) munmap(&(0x7f0000ba0000/0x2000)=nil, 0x2000) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) mremap(&(0x7f0000dde000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f0000bb3000/0x1000)=nil) write$P9_RSTATu(0xffffffffffffffff, 0x0, 0x58) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r0, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_clone(0x4021400, 0x0, 0x9000, 0x0, 0x0, 0x0) syz_clone(0x4010e000, 0x0, 0x0, 0x0, 0x0, 0x0) 1.150094042s ago: executing program 2 (id=2740): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000011000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000300)='sys_enter\x00', r1}, 0x10) migrate_pages(0x0, 0x400, 0x0, 0x0) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x7, 0x10, 0xffffffffffffffff, 0xc71de000) r2 = creat(0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$UI_SET_LEDBIT(r4, 0x40045569, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r5 = getpid() sched_setscheduler(r5, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@file={0x1, './cgroup.cpu/cpuset.cpus\x00'}, 0x6e) sendmmsg$unix(r7, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f00000000c0)=ANY=[@ANYRES32=r2], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, r2}, 0xa6) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000380)='sched_switch\x00', r8}, 0x10) open(&(0x7f0000000040)='./cgroup.cpu/cpuset.cpus\x00', 0x121342, 0x0) ioctl$UI_SET_EVBIT(r4, 0x40045564, 0x11) ioctl$UI_DEV_SETUP(r4, 0x405c5503, &(0x7f0000000280)={{0x0, 0x2, 0x0, 0x6}, 'syz0\x00', 0xd}) ioctl$UI_DEV_CREATE(r4, 0x5501) ioctl$UI_DEV_DESTROY(r4, 0x5502) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) 467.273659ms ago: executing program 4 (id=2741): r0 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @desc1}, &(0x7f0000000080)={0x0, "49895e352e98e254ccd4361c3978212238c1c88f5818c3e1c1df6c8d8c6d41c923421a49090642a2014f2f5f3b40eecdc9fcf2d2def39b7e4c501e1d69f85507", 0x3d}, 0x48, r0) (async) r1 = add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @desc1}, &(0x7f0000000080)={0x0, "49895e352e98e254ccd4361c3978212238c1c88f5818c3e1c1df6c8d8c6d41c923421a49090642a2014f2f5f3b40eecdc9fcf2d2def39b7e4c501e1d69f85507", 0x3d}, 0x48, r0) r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000180), 0xc00, 0x0) sendmsg$AUDIT_GET(r2, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x62042218}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x10, 0x3e8, 0x10, 0x70bd2a, 0x25dfdbff, "", ["", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x4000051}, 0x80) keyctl$search(0xa, r0, &(0x7f00000002c0)='dns_resolver\x00', &(0x7f0000000300)={'syz', 0x3}, r0) r3 = add_key$keyring(&(0x7f0000000340), &(0x7f0000000380)={'syz', 0x0}, 0x0, 0x0, r1) bind$inet6(r2, &(0x7f00000003c0)={0xa, 0x4e22, 0x4, @mcast2, 0x5}, 0x1c) (async) bind$inet6(r2, &(0x7f00000003c0)={0xa, 0x4e22, 0x4, @mcast2, 0x5}, 0x1c) r4 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000400), 0x101002, 0x0) flock(r4, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000440)={'vxcan1\x00', 0x0}) add_key$fscrypt_provisioning(&(0x7f0000000480), &(0x7f00000004c0)={'syz', 0x1}, &(0x7f0000000500)={0x4, 0x0, @auto=[0x15, 0x1f]}, 0xa, r0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000580), r2) (async) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000580), r2) sendmsg$MPTCP_PM_CMD_SUBFLOW_DESTROY(r4, &(0x7f00000006c0)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000680)={&(0x7f00000005c0)={0xbc, r6, 0x1, 0x70bd27, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_ADDR_REMOTE={0x4c, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x7}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x80}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @remote}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @initdev={0xac, 0x1e, 0x0, 0x0}}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}, @MPTCP_PM_ATTR_ADDR={0x30, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x6}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @loopback}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @empty}]}, @MPTCP_PM_ATTR_ADDR_REMOTE={0xc, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}]}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x14, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r5}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1c}]}, @MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @initdev={0xac, 0x1e, 0x1, 0x0}}]}]}, 0xbc}, 0x1, 0x0, 0x0, 0x80}, 0x4008000) bind$phonet(r4, &(0x7f0000000700)={0x23, 0xd, 0x0, 0xc}, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000740), r4) (async) syz_genetlink_get_family_id$devlink(&(0x7f0000000740), r4) add_key(&(0x7f0000000780)='ceph\x00', &(0x7f00000007c0)={'syz', 0x0}, &(0x7f0000000800)="3002c04bdfae44e248e8bd909e30185088de221c7affb13fb2b540a4d269b7500ac3114e53dffe7f33b11f6ff16e4f631e2f519d5ab6f7ffdb60f392270c4727efbc14c27a1048d2d31643e2e0a7f63e60cee2", 0x53, 0xffffffffffffffff) (async) add_key(&(0x7f0000000780)='ceph\x00', &(0x7f00000007c0)={'syz', 0x0}, &(0x7f0000000800)="3002c04bdfae44e248e8bd909e30185088de221c7affb13fb2b540a4d269b7500ac3114e53dffe7f33b11f6ff16e4f631e2f519d5ab6f7ffdb60f392270c4727efbc14c27a1048d2d31643e2e0a7f63e60cee2", 0x53, 0xffffffffffffffff) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r2, 0xc0502100, &(0x7f0000000880)) (async) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r2, 0xc0502100, &(0x7f0000000880)={0x0, 0x0}) capset(&(0x7f0000000900)={0x20080522, r7}, &(0x7f0000000940)={0x1f0, 0xb9e, 0x9, 0xb8, 0x3, 0xd9}) r8 = syz_genetlink_get_family_id$l2tp(&(0x7f00000009c0), r2) sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000a80)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)={0x30, r8, 0x109ab3738252a31e, 0x70bd2c, 0x25dfdbfe, {}, [@L2TP_ATTR_PEER_SESSION_ID={0x8}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0xb2}, @L2TP_ATTR_DEBUG={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x10}, 0x48800) (async) sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000a80)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)={0x30, r8, 0x109ab3738252a31e, 0x70bd2c, 0x25dfdbfe, {}, [@L2TP_ATTR_PEER_SESSION_ID={0x8}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0xb2}, @L2TP_ATTR_DEBUG={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x10}, 0x48800) keyctl$KEYCTL_PKEY_DECRYPT(0x1a, &(0x7f0000000ac0)={r3, 0x0, 0x3e}, &(0x7f0000000b00)={'enc=', 'pkcs1', ' hash=', {'cryptd(sha512-ssse3)\x00'}}, &(0x7f0000000b80), &(0x7f0000000bc0)=""/62) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000f00)=@bpf_tracing={0x1a, 0x23, &(0x7f0000000c00)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [@map_val={0x18, 0xb, 0x2, 0x0, r4, 0x0, 0x0, 0x0, 0x8}, @map_idx_val={0x18, 0xa, 0x6, 0x0, 0x10, 0x0, 0x0, 0x0, 0x2}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r2}}, @ldst={0x1, 0x0, 0x2, 0x5, 0xf, 0xfffffffffffffffe}, @alu={0x4, 0x1, 0x2, 0x6, 0xa, 0xffffffffffffffff, 0x8}, @alu={0x4, 0x1, 0x8, 0x3, 0x3, 0x2, 0x10}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000d40)='GPL\x00', 0xfffffffe, 0x4b, &(0x7f0000000d80)=""/75, 0x41000, 0x35, '\x00', r5, 0x1c, 0xffffffffffffffff, 0x8, &(0x7f0000000e00)={0x2, 0x3}, 0x8, 0x10, &(0x7f0000000e40)={0x4, 0x1, 0xcb, 0x177}, 0x10, 0x2f357, 0xffffffffffffffff, 0x2, &(0x7f0000000e80)=[r2], &(0x7f0000000ec0)=[{0x0, 0x3, 0x4, 0x9}, {0x2, 0x1, 0x2, 0x8}], 0x10, 0xcb}, 0x90) close(r4) keyctl$search(0xa, r0, &(0x7f0000000fc0)='rxrpc_s\x00', &(0x7f0000001000)={'syz', 0x2}, r0) setsockopt$XDP_RX_RING(r2, 0x11b, 0x2, &(0x7f0000001040)=0x20, 0x4) (async) setsockopt$XDP_RX_RING(r2, 0x11b, 0x2, &(0x7f0000001040)=0x20, 0x4) ioctl$TUNSETDEBUG(r2, 0x400454c9, &(0x7f0000001080)=0xfffff8e8) request_key(&(0x7f00000010c0)='encrypted\x00', &(0x7f0000001100)={'syz', 0x2}, &(0x7f0000001140)='GPL\x00', r1) (async) request_key(&(0x7f00000010c0)='encrypted\x00', &(0x7f0000001100)={'syz', 0x2}, &(0x7f0000001140)='GPL\x00', r1) ioctl$AUTOFS_IOC_CATATONIC(r4, 0x9362, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000001180)={0x50, 0x3, 0x7, 0x0, 0x3c, 0x2, 0x86, 0x81, 0x4, 0x6, 0x50, 0x9, 0x0, 0x3, 0x3, 0x2, 0x2, 0x5, 0xb3, '\x00', 0x81, 0x10001}) sendmsg$TIPC_NL_MON_GET(r4, &(0x7f0000001a00)={&(0x7f00000011c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000019c0)={&(0x7f0000001240)={0x780, 0x0, 0x10, 0x70bd2d, 0x25dfdbfd, {}, [@TIPC_NLA_MEDIA={0x84, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xea}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}]}, @TIPC_NLA_MEDIA_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9bc5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xff800000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8001}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x4}]}, @TIPC_NLA_MEDIA={0x18, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}]}]}, @TIPC_NLA_NODE={0x10c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x47, 0x4, {'gcm(aes)\x00', 0x1f, "7ca7af86915067cea3c9dbcea6df731b594788b6517a771d2e4a5a6ece2ee0"}}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY={0x4a, 0x4, {'gcm(aes)\x00', 0x22, "191a8858129242c0dc630cbbe8de961709264fb3008ad880eec0b60ea4c6b5a3faa5"}}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x1}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x9d30}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x1}, @TIPC_NLA_NODE_ID={0x50, 0x3, "3f62ef69de96602701aa2ad74226f5823f8ad9d3ddf29e6ee811322a21c5d041b3bb45c93f60830324893d2f63285131e06b6bb3066d5abda1182b63ff2c20b15678fab63bc9cbcb27a202ca"}]}, @TIPC_NLA_NODE={0x374, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x9}, @TIPC_NLA_NODE_ID={0xda, 0x3, "88b97dea1cd2e08f5a62b6d8d0af81f91bff9bf1eac9c295d714fd193f173f2674c97023df23ceb0d3171d83ab4263b11c62a459342dc4df64903fd31e15fb6f7a81eaca97a2f6b7b7ab426079e16c663dc8b35e119347fd885fe88fc95ce6bc044509cc3b264727115425f798a2489039de93833444f2f1230e171a7b130cb593e671e35279f1d6d1101df881ce9e78a47439f769b15e9c0a0ccf9ae33b7b2f7306e599ca3e4ca789475b6ef11d5b88127280d4e97885030d3b3df46102caa68159e4583abac52e0dd90131580bba3d3a130453a312"}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x1ff}, @TIPC_NLA_NODE_ID={0xf7, 0x3, "adbc0f73ef6f103c946597cac7060efe9f519b2619650db9b7ff3071a4afce3f989776be496c0bf01ef6eb0b884dd0d6a9dd089f40cede2f348e4fc2a8b6324ef32d54ae220c505977d58e0a3ac7fdd6bbf2cf872b6c3a0fb6d47ce12ec5a9d0109ce8c6072849c844e4478119dded101a618042d07cbec404daa28f5ac9e6ab208d40e511391ac611a2b73b81619989c9657e0d86fc53cb88830ce08d1a1485acc194ede9e5c05b86270fdb6e2734cdf10f051c6a8bc6b0af400865884b27918884871d53a093f1e08ae99d02909bc9379e2fbeedac880ba6b39aa4b541b14c8440ebecd254fe88527da60c326547fb70d3d2"}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x94}, @TIPC_NLA_NODE_ID={0xc0, 0x3, "c75106548f600d4a8fbe3ce944cb04c0a8589aec7555e1a5faba31e4a45fc6524550f1a734af3a3ebb4a788dc0de068087f0738dd0c05faaa651518c3159ad0291dc6f310781656ebb2e5bbc9fa9b0cf6cda860c7c7a282c0605f102c6a2861a728af67775a302715135b97b9bcb4cce5090c83f5a9ecc9dc56c36b0cda074c4371aa12c3fbe1fd93e814593a941f8a13eff515159ed856c285f6084683a9c7c9b91323fb77da5e5b13ac248d8651051d4c008fbbcca00a9faa506c9"}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_ID={0xc0, 0x3, "c399de6f8e11e36fac1cfc79aee4d0f36a3eb7e2f148f354b5854ed19be0922e27ea85a33da74f02064e680a3de66418ef84df38d142e3f0cc1173ca76245831b9c986bb6e64c38c623542cfbed3132f29897b36eb554b1b1749b847fd675426cfa3a96aa86c029039b1f472da31942213853352eeece081b9497f480efa73aefaf56363b43bb5b943d3bb7567c518b657304f695bb823bedceac3a1e212f3f30d13f0a2183dac34d797b02f74d473160103f91433410a17bd9bb85d"}]}, @TIPC_NLA_NODE={0x188, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_REKEYING={0x8}, @TIPC_NLA_NODE_ID={0xe6, 0x3, "81f4b49386d696a6c44b4fabc82f7c90a6ef5c37405b0a24a808cb42f68bf9861476e49259754ed659fd09d040a01282c3d79217e48c05eb8ac43aa8710eb97c6386aa45fefccff6f5a8c7e30d1c661f525404c880486f5579510951d754a8c11f483c703264d29439e8c7a9ee324dc1d2402451d147d75e4e7c93c1230a7e89e07ce05b0e3ff682162cf527225aa77116bfc453b2d51a1339c89f545ffb980b0a6780ef2dab9459d5e4373947ef813dc6875a80a326c1c07026e647fe2b06bcd38356c7be1a700307c098621c83b255d7f341751b6e1c607b59c85f1883870cad25"}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x6}, @TIPC_NLA_NODE_KEY={0x49, 0x4, {'gcm(aes)\x00', 0x21, "8ec4d81bb4c9fb8b4a6c78bdfb302a789e6d6507ad3af074370052c53dc911ddb1"}}, @TIPC_NLA_NODE_KEY={0x40, 0x4, {'gcm(aes)\x00', 0x18, "cb25f15b839598f223d9c6757cae9e7f41e6f8fc4bbbcef1"}}]}, @TIPC_NLA_SOCK={0xc8, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x4}, @TIPC_NLA_SOCK_CON={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x5a}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xfffffff8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x7}, @TIPC_NLA_CON_FLAG={0x8}]}, @TIPC_NLA_SOCK_CON={0x54, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x2}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xfffffffd}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x9}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xf}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7fff}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x5}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x400}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x9}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x800}]}, @TIPC_NLA_SOCK_CON={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0xfffff801}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x5}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x10}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xf}]}]}]}, 0x780}, 0x1, 0x0, 0x0, 0x8000}, 0x240080d1) (async) sendmsg$TIPC_NL_MON_GET(r4, &(0x7f0000001a00)={&(0x7f00000011c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000019c0)={&(0x7f0000001240)={0x780, 0x0, 0x10, 0x70bd2d, 0x25dfdbfd, {}, [@TIPC_NLA_MEDIA={0x84, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xea}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}]}, @TIPC_NLA_MEDIA_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9bc5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xff800000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8001}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x4}]}, @TIPC_NLA_MEDIA={0x18, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}]}]}, @TIPC_NLA_NODE={0x10c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x47, 0x4, {'gcm(aes)\x00', 0x1f, "7ca7af86915067cea3c9dbcea6df731b594788b6517a771d2e4a5a6ece2ee0"}}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY={0x4a, 0x4, {'gcm(aes)\x00', 0x22, "191a8858129242c0dc630cbbe8de961709264fb3008ad880eec0b60ea4c6b5a3faa5"}}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x1}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x9d30}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x1}, @TIPC_NLA_NODE_ID={0x50, 0x3, "3f62ef69de96602701aa2ad74226f5823f8ad9d3ddf29e6ee811322a21c5d041b3bb45c93f60830324893d2f63285131e06b6bb3066d5abda1182b63ff2c20b15678fab63bc9cbcb27a202ca"}]}, @TIPC_NLA_NODE={0x374, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x9}, @TIPC_NLA_NODE_ID={0xda, 0x3, "88b97dea1cd2e08f5a62b6d8d0af81f91bff9bf1eac9c295d714fd193f173f2674c97023df23ceb0d3171d83ab4263b11c62a459342dc4df64903fd31e15fb6f7a81eaca97a2f6b7b7ab426079e16c663dc8b35e119347fd885fe88fc95ce6bc044509cc3b264727115425f798a2489039de93833444f2f1230e171a7b130cb593e671e35279f1d6d1101df881ce9e78a47439f769b15e9c0a0ccf9ae33b7b2f7306e599ca3e4ca789475b6ef11d5b88127280d4e97885030d3b3df46102caa68159e4583abac52e0dd90131580bba3d3a130453a312"}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x1ff}, @TIPC_NLA_NODE_ID={0xf7, 0x3, "adbc0f73ef6f103c946597cac7060efe9f519b2619650db9b7ff3071a4afce3f989776be496c0bf01ef6eb0b884dd0d6a9dd089f40cede2f348e4fc2a8b6324ef32d54ae220c505977d58e0a3ac7fdd6bbf2cf872b6c3a0fb6d47ce12ec5a9d0109ce8c6072849c844e4478119dded101a618042d07cbec404daa28f5ac9e6ab208d40e511391ac611a2b73b81619989c9657e0d86fc53cb88830ce08d1a1485acc194ede9e5c05b86270fdb6e2734cdf10f051c6a8bc6b0af400865884b27918884871d53a093f1e08ae99d02909bc9379e2fbeedac880ba6b39aa4b541b14c8440ebecd254fe88527da60c326547fb70d3d2"}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x94}, @TIPC_NLA_NODE_ID={0xc0, 0x3, "c75106548f600d4a8fbe3ce944cb04c0a8589aec7555e1a5faba31e4a45fc6524550f1a734af3a3ebb4a788dc0de068087f0738dd0c05faaa651518c3159ad0291dc6f310781656ebb2e5bbc9fa9b0cf6cda860c7c7a282c0605f102c6a2861a728af67775a302715135b97b9bcb4cce5090c83f5a9ecc9dc56c36b0cda074c4371aa12c3fbe1fd93e814593a941f8a13eff515159ed856c285f6084683a9c7c9b91323fb77da5e5b13ac248d8651051d4c008fbbcca00a9faa506c9"}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_ID={0xc0, 0x3, "c399de6f8e11e36fac1cfc79aee4d0f36a3eb7e2f148f354b5854ed19be0922e27ea85a33da74f02064e680a3de66418ef84df38d142e3f0cc1173ca76245831b9c986bb6e64c38c623542cfbed3132f29897b36eb554b1b1749b847fd675426cfa3a96aa86c029039b1f472da31942213853352eeece081b9497f480efa73aefaf56363b43bb5b943d3bb7567c518b657304f695bb823bedceac3a1e212f3f30d13f0a2183dac34d797b02f74d473160103f91433410a17bd9bb85d"}]}, @TIPC_NLA_NODE={0x188, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_REKEYING={0x8}, @TIPC_NLA_NODE_ID={0xe6, 0x3, "81f4b49386d696a6c44b4fabc82f7c90a6ef5c37405b0a24a808cb42f68bf9861476e49259754ed659fd09d040a01282c3d79217e48c05eb8ac43aa8710eb97c6386aa45fefccff6f5a8c7e30d1c661f525404c880486f5579510951d754a8c11f483c703264d29439e8c7a9ee324dc1d2402451d147d75e4e7c93c1230a7e89e07ce05b0e3ff682162cf527225aa77116bfc453b2d51a1339c89f545ffb980b0a6780ef2dab9459d5e4373947ef813dc6875a80a326c1c07026e647fe2b06bcd38356c7be1a700307c098621c83b255d7f341751b6e1c607b59c85f1883870cad25"}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x6}, @TIPC_NLA_NODE_KEY={0x49, 0x4, {'gcm(aes)\x00', 0x21, "8ec4d81bb4c9fb8b4a6c78bdfb302a789e6d6507ad3af074370052c53dc911ddb1"}}, @TIPC_NLA_NODE_KEY={0x40, 0x4, {'gcm(aes)\x00', 0x18, "cb25f15b839598f223d9c6757cae9e7f41e6f8fc4bbbcef1"}}]}, @TIPC_NLA_SOCK={0xc8, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x4}, @TIPC_NLA_SOCK_CON={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x5a}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xfffffff8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x7}, @TIPC_NLA_CON_FLAG={0x8}]}, @TIPC_NLA_SOCK_CON={0x54, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x2}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xfffffffd}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x9}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xf}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7fff}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x5}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x400}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x9}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x800}]}, @TIPC_NLA_SOCK_CON={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0xfffff801}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x5}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x10}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xf}]}]}]}, 0x780}, 0x1, 0x0, 0x0, 0x8000}, 0x240080d1) 352.125071ms ago: executing program 1 (id=2742): mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x0, 0x6031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) mremap(&(0x7f0000a4c000/0xf000)=nil, 0xf000, 0x2000, 0x0, &(0x7f0000ffd000/0x2000)=nil) munmap(&(0x7f0000ba0000/0x2000)=nil, 0x2000) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) munmap(&(0x7f000045e000/0x1000)=nil, 0x1000) mremap(&(0x7f0000dde000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f0000bb3000/0x1000)=nil) ioctl$VT_DISALLOCATE(0xffffffffffffffff, 0x5608) write$P9_RSTATu(0xffffffffffffffff, &(0x7f0000000400)=ANY=[@ANYRESHEX, @ANYBLOB="1e628f"], 0x58) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, 0x0, 0x108) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_clone(0x4021400, 0x0, 0x9000, 0x0, 0x0, 0x0) syz_clone(0x4010e000, 0x0, 0x0, 0x0, 0x0, 0x0) 0s ago: executing program 0 (id=2743): bind$tipc(0xffffffffffffffff, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43}}, 0x10) mmap$KVM_VCPU(&(0x7f0000ffe000/0x2000)=nil, 0x930, 0x0, 0x11, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000003900)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd120000000000008500000006000000b70000000000000095000000000000003faf4f1e7f2aa3d9b18ed81c0c869b51ec6c0af4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f13905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64f751a0f241b07080008002d75593a286cecc93e64c227c95aa0b784625704f07a72c234664c0af9360a1f7a5e6b607130c89f18c0c1089d8b853289e01aa27ae8b09e00e79ab20b0b8e1148f49faf2ad0000000000000006fa03c6468972089b302d7bf6023cdcedb5e0125ebbc08dee510cb2364149215108333719acd97cfa107d40224edc5465a932b77e74e802a0d42bc6099ad2300000080006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f4ab87b1bfeda7be586602d985430cea0162ab3fcf4591c926abfb0767192302000000b0eea24492a660583eecb42cbcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c95c25a573dc2edcaea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b5b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142ba11de6c5d50b83bae613402216b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0eb97fca585ec6bf5af51d564beb6d952aab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a326eea31ae4e0f7505ebf6c9d13330ca005ace1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57000000009700cf0b4b8bc2294133000000000000000000030000000000000000000000000010008bc0d9559711e6e8861c46495ba585a4b2d02edc3e28dd271c896249ed85b980680b00002b435ac15fc0288d9b2a169cdcacc413038dafb7a2c8cb482bac0ac502d9ba96ffffff7f0000100000000000007d5ad897ef3b7cda42013d53046da21b40216e14ba2d6ad5656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff729433282830689da6b53b263339863297771429d120000003341bf4abacac95900fca0493cf29b33dcc9ffffffffffffffd39fec2271ff01589646efd1cf870cd7bb2366fde41f94290c2a5ff870ce41fd3467decb05cfd9fcb32c8ed1dbd9d10a64c1083d5e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78100788f11f76161d46ea3abe0fa4d30dc94ef241875f3b4ce0232fcea69c271d7fa29822aea68a660e717a04becff0f719197724f4fce1093b62d7e8c7123d8ec571be54c72d978cf906df0042e36acd37d7f9e119f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2ae582786105c7df8be5877050c91301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c4d75cf2458e3546c1c776da64fb5abee0acfd235f2f4632c9062ece84c99a061887a20639b41c8c12ee86c50804042b3fb5aac518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad05573af40326993947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457acf37331766e472391e358c3b377327ac9ecc34f24c9ae153ec60ac0694dc55bff9f5f45f90400000000000000d6b2c5ea1393fdf24285bf16b99c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e66964ae09bb6d163118e4cbe024fd4500f8ff0700000000cc9d8046c216c1f895778cb25122a2a9f9b444aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99b355b72d538ba4958ea8e4aa37094191e10096e7e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250ddc8674152f94e3a409e2a3bce109b60000000000000000d6d5210d7503000000a87a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137abf9a404abde7750898b1bd627e873f8703be8672d70d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e6c257a45319f18101288d139bd3da20fed05a8fe64680b0a3fc22dd70400000000946912d6c98cd1a9fbe1e7d58c08acaf30235b918a31d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69993e9960ff5f76015e6009556237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff854352cb4900000000000000000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66418d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a53f1c96e0d4b3bc19faa5449209b083dbd334b47f067bbab40743b2a42010082008df75cf43f8ecc8d3726602111b40e761fd21081920382f14d12ca3c3431ee97471c7868dcda7eaa69eb7f7f80572fdd11bb1d0d1280fbc22bf73468788df51710d7d31c632fc5ed1762eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331945ecefa26b8471d42645288d7226bbd9ccd628ab84875f2c50ba891cea592b0430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71f96756ea5cce7daac4be290159f6bcd75f0dda9de5532e71ae9e48b0ed0254a83100000000f6fbb869604d51a36a54c832e45b2569dc0d90b075225fde44c4e0973171ad47d6b0fdf9743af932cd6db49a47613808bad959710300000000000000832d0a45fa4242e24c7e800003c9e8095e02985f28e678f66422436f949e2ab8f162d7e3f855e378f4a1f40b0c6fb2d4b205a800b6d713acebc5b014e61a543a5a194f9ac18d76b5440e3b1a569e7397f6cafa86966d7ba19e720413267a6ccea9c439671d2c680f2753ca184eeeb843450368acb4383a01d25eb3d1e23e0f2645d1cdfa9fa410632f95a5f622f851c66ee7e30393cd7a4d67ff2a49c4f93c0984b5c2d4523497e4d64f95f08493564a1df87111c9bf3194fef97dcecc467ace45feeb685c5870d05f88a0f463db88d377442e1349acaf766218b54a9d624778e1c4e064c98e494198276eb2df7766411bef0ebb5000000000006065d635b0b7a00ee767221d8af9753387e0cd8d718f54a29df6eba3bd4c440e6e2172e3fcc01b8babb757b5c59217b80d0db3ba582814a604e4ef7a803e9ca7c85b35c9b93a9e0885e238b44ae1c2e64cce3b27083b8246829e64056000302bffff15405bd5f2eba20000000000000000000000000000000000009a9823fd8fbc5aa16509945ed032b48ea12d8e0588dc52702e4084913a06d468d0928bad76d697e1f85ab030e788d38788ee5b5428d4a971cc97db9fd231088e570735ce129e7e77fc2777692664a1488fd8d6dff4dad618fd54f529d4555c6507009ee69dd1bc55258789b24052137e9637f3efbab71720f88c3c44b3b7486f979e8a3174b531f573fe0e5239c000be2733c49546f6e8a9175ec6f14dbf72cac91643b2fd99c29eca28a3c2e60d5e5b8795fae16a7c3ea57e728eca35eaf0155a39f97580e079175426c088a0208040982a0000000000000000000000000051ceaaf0159fe61f2eade7603d0a7a56fb09cd119ac06adb6597155ae47846892bb423c024d8cbe9240b71ec6dc2124d3a19e2d714b273d95d1d3aa737cb04a33615ff2a730e51067d5d675d7122361c37c61a43b5afd865b60d4cae891b73220f17d25985a7f76834995e53a93a1c7b9eef267df691ca983a0b15bda7f6c5c1ca7aa50261a3089a1ebf0734c9b07e8951ff023263ad5aed8cfb49b49e128c697724c057d22c5df5aef27ce3db11d5ad5527d149d076e1a87e2df27c0cb8a67ad026bf953e88f10447e125c2c0f1aebee1f3390a9e3ddad4e2a6e0f6e4569fdefa19e870e04acf9493b963f98e23cfc665e4f465fa3f801e1957c399e45f61d3459b1c606204368bb931345af2823c487d2fd99db6ea6e008e7ffa06ca861551189d155bd077a79fe2c7e961352e56824f727d21d41eae78bfec4a2d7a7edbc8ef958c5ea599f7c25bf71c2340558aa12fdd24a88aaad5921aee7dae6a2f3009d9cb43ab4898d0f0aa565431b6abe585d75db04d1c9ba0b9de4ae8b0d3132bc6810cc9a693979f55174a72e1df9fdef35bc470f9e6e591982757f45c52c645d891bf63bb21fb66926ebe1a8525611fc3e8bb8795c36dc2a86b5ab46ff33cc74f61751b2dae92676db85c8d0c721b7ea4544bf51c95c86fcac1f434d09d1ee4928aafe23de66fed972e0dddfb33f64e48701b049239e7f552d816441d11c4c2647c014462344359198d97c4b6e9ed31ca18987b64de079b2bed641e8a92f13ca70844c65cb423d01950b0ebf44bd28e09c05d9ae5dd689fb880fb18d042219f5ac60c3a03b085abf3e8e3efc842a8d328733461f04c99607061c65ed14c61322a5ac2d371a95b8ad867ec92d13a4fa4ae033a09673866cd77f4bcdaaa05207166b19a8758d8855400d8c6a7242dc207251e8797eca24ea4f487663e60f2f5e1f1424958fd148f846830e88a42d93e1fe9c0b4a4a268921738938aa9f3cb3811ac87c54c8ebc8bcfb4613cc3a997ff1579edbd4ade8020e3ad001b072b1a751b588ac4639f35a58e00a50c0270608c7a7f10132b1c25b9ea81232fbef665f6212f875b2a0000000000000000000000000000cf7b6c4ba9bec153d6834bfef080df374703a8ff56a63ec1fe5f2e05a79e3cace7283dd68d41e94420c325fe4dae144fde5ec25a87d625cab20753a77b323fa3783c8b675859b9012647885a242adfee2fe812ecbe5191e0a15142f7349e7627cc39d724e2e34e7a24154f26ae3125b36d0504965295d0453902ac7079b11a3a1e655e482331e3dc35b2e7e4e3ea99064fe5b9c8ae0ca3e5fd653f3286a99d81ce4eba765c38d097391ad4babac38ce5b4344e24a361cd54"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0, r0}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x5, 0x1, 0x1, 0x40}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000005c0)="13a9e9f658458227d5110800000051280224819373369ae403f5014060a4221a352495d95dcf183a1f047dcfdbfe9daa0155f9af12253033c2c5756f86bfd4255929f4138c15661dea39436a24af3269e82653d93fc4e62ae384daba7eb706374966b45f957101d8abafbd013a5eb3e39c107e0273a1b45b4456f3c275a609438fb4d3a1c1a4548a072bdc2ccdd2eb6a14059e75f68e510c0ad05c79b68e9909943e748aef1fd3235c71472887735e3a9b211c929b07ee0a545ef0e577f74d1b41efa1d00045f8ae3e49e571adab256156c13210fea441aee86a57ec1f458d364c59eb897cb7ceea45f54d03acc67e57c90bdcaa43dc35f7", &(0x7f0000000d00), 0x1013, r4}, 0x38) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) openat$sw_sync(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) openat$sw_sync(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r5 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000580), 0x0, 0x0) read$FUSE(r5, &(0x7f0000000a00)={0x2020}, 0x2020) r6 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000007940)={0x0, 0x0, &(0x7f0000007900)={&(0x7f00000000c0)=@newtaction={0x90, 0x30, 0x216822a75a8bdd29, 0x0, 0x0, {}, [{0x7c, 0x1, [@m_ct={0x44, 0x1, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18}]}, {0x4}, {0xc}, {0xc}}}, @m_connmark={0x34, 0x2, 0x0, 0x0, {{0xd}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x90}}, 0x0) symlinkat(&(0x7f00000004c0)='./file1\x00', r6, &(0x7f0000000100)='./bus\x00') r8 = syz_open_dev$usbfs(&(0x7f0000003f00), 0x1ff, 0xa401) ioctl$USBDEVFS_DISCONNECT_CLAIM(r8, 0x8108551b, &(0x7f0000000000)={0x0, 0x0, "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"}) kernel console output (not intermixed with test programs): : The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1398.066945][T16705] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1398.077037][T16705] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1398.089081][T16705] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1398.105405][T16705] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1398.113168][T16911] bridge0: port 1(bridge_slave_0) entered blocking state [ 1398.121454][T16911] bridge0: port 1(bridge_slave_0) entered disabled state [ 1398.130166][T16911] bridge_slave_0: entered allmulticast mode [ 1398.172482][T16911] bridge_slave_0: entered promiscuous mode [ 1398.250788][ T5278] usb 2-1: new high-speed USB device number 62 using dummy_hcd [ 1398.288073][ T5278] usb 2-1: device descriptor read/8, error -71 [ 1398.316636][T17024] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1398.372914][T16911] bridge0: port 2(bridge_slave_1) entered blocking state [ 1398.418850][ T5278] usb usb2-port1: unable to enumerate USB device [ 1398.433581][T16911] bridge0: port 2(bridge_slave_1) entered disabled state [ 1398.471692][T16911] bridge_slave_1: entered allmulticast mode [ 1398.505505][T16911] bridge_slave_1: entered promiscuous mode [ 1398.560668][T16705] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1398.587780][T16705] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1398.612878][T16705] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1398.632210][T16705] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1399.260015][T17031] pim6reg: entered allmulticast mode [ 1399.476472][T16911] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1399.524455][T16911] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1401.233510][T16911] team0: Port device team_slave_0 added [ 1401.313334][T16911] team0: Port device team_slave_1 added [ 1401.513041][T16911] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1401.553154][T16911] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1401.657696][T16911] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1401.738569][T16911] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1401.748532][ T52] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1401.773669][ T52] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1401.776724][T16911] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1401.887398][T16911] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1401.934047][T17027] pim6reg: left allmulticast mode [ 1403.273921][ T2961] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1403.291391][ T2961] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1403.548026][T17058] xt_addrtype: output interface limitation not valid in PREROUTING and INPUT [ 1404.041222][T16911] hsr_slave_0: entered promiscuous mode [ 1404.411879][T16911] hsr_slave_1: entered promiscuous mode [ 1404.473347][T16911] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1404.493670][T16911] Cannot create hsr debugfs directory [ 1404.545025][T17070] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2567'. [ 1407.065009][T17082] sctp: [Deprecated]: syz.0.2569 (pid 17082) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1407.065009][T17082] Use struct sctp_sack_info instead [ 1407.348817][T17091] FAULT_INJECTION: forcing a failure. [ 1407.348817][T17091] name failslab, interval 1, probability 0, space 0, times 0 [ 1407.392496][T17091] CPU: 1 UID: 0 PID: 17091 Comm: syz.4.2571 Not tainted 6.11.0-rc5-syzkaller-00219-g1934261d8974 #0 [ 1407.403313][T17091] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 1407.413389][T17091] Call Trace: [ 1407.416684][T17091] [ 1407.419631][T17091] dump_stack_lvl+0x241/0x360 [ 1407.424328][T17091] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1407.429538][T17091] ? __pfx__printk+0x10/0x10 [ 1407.434313][T17091] ? fs_reclaim_acquire+0x93/0x140 [ 1407.439438][T17091] ? __pfx___might_resched+0x10/0x10 [ 1407.444732][T17091] ? dynamic_dname+0x141/0x1b0 [ 1407.449512][T17091] should_fail_ex+0x3b0/0x4e0 [ 1407.454203][T17091] ? tomoyo_encode+0x26f/0x540 [ 1407.458981][T17091] should_failslab+0xac/0x100 [ 1407.463673][T17091] ? tomoyo_encode+0x26f/0x540 [ 1407.468449][T17091] __kmalloc_noprof+0xd8/0x400 [ 1407.473231][T17091] tomoyo_encode+0x26f/0x540 [ 1407.477836][T17091] ? __pfx_anon_inodefs_dname+0x10/0x10 [ 1407.483401][T17091] tomoyo_realpath_from_path+0x59e/0x5e0 [ 1407.489063][T17091] tomoyo_path_number_perm+0x23a/0x880 [ 1407.494540][T17091] ? tomoyo_path_number_perm+0x208/0x880 [ 1407.500188][T17091] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1407.506211][T17091] ? __fget_files+0x29/0x470 [ 1407.510814][T17091] ? __fget_files+0x3f6/0x470 [ 1407.515497][T17091] ? __fget_files+0x29/0x470 [ 1407.520103][T17091] security_file_ioctl+0x75/0xb0 [ 1407.525057][T17091] __se_sys_ioctl+0x47/0x170 [ 1407.529663][T17091] do_syscall_64+0xf3/0x230 [ 1407.534175][T17091] ? clear_bhb_loop+0x35/0x90 [ 1407.538867][T17091] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1407.544773][T17091] RIP: 0033:0x7fb15f779eb9 [ 1407.549194][T17091] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1407.568811][T17091] RSP: 002b:00007fb1605f5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1407.577241][T17091] RAX: ffffffffffffffda RBX: 00007fb15f915f80 RCX: 00007fb15f779eb9 [ 1407.585225][T17091] RDX: 0000000000000000 RSI: 000000000000541b RDI: 0000000000000003 [ 1407.593203][T17091] RBP: 00007fb1605f5090 R08: 0000000000000000 R09: 0000000000000000 [ 1407.601177][T17091] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1407.609160][T17091] R13: 0000000000000000 R14: 00007fb15f915f80 R15: 00007ffeabc4fd28 [ 1407.617159][T17091] [ 1407.620280][ C1] vkms_vblank_simulate: vblank timer overrun [ 1407.667505][T17091] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1409.193236][T17109] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2574'. [ 1410.950991][T16911] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1411.004088][T16911] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1411.032921][T16911] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1411.084410][T16911] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1411.147365][ T5278] usb 2-1: new high-speed USB device number 63 using dummy_hcd [ 1411.691388][T16911] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1411.743319][T16911] 8021q: adding VLAN 0 to HW filter on device team0 [ 1411.856927][T16911] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1412.447369][ T5278] usb 2-1: Using ep0 maxpacket: 16 [ 1412.447932][T16911] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1412.462010][ T5278] usb 2-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice=10.00 [ 1412.478247][ T5278] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1412.486738][ T5278] usb 2-1: Product: syz [ 1412.491068][ T5278] usb 2-1: Manufacturer: syz [ 1412.495693][ T5278] usb 2-1: SerialNumber: syz [ 1412.523555][ T5278] usb 2-1: config 0 descriptor?? [ 1412.551802][ T2961] bridge0: port 1(bridge_slave_0) entered blocking state [ 1412.559067][ T2961] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1412.568748][ T5278] ftdi_sio 2-1:0.0: FTDI USB Serial Device converter detected [ 1412.587574][ T5278] usb 2-1: Detected FT-X [ 1412.594873][ T2961] bridge0: port 2(bridge_slave_1) entered blocking state [ 1412.602199][ T2961] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1412.684765][T17141] team0: Device vcan1 is of different type [ 1412.742808][T17142] netlink: 332 bytes leftover after parsing attributes in process `syz.4.2581'. [ 1412.805993][T17142] netlink: 'syz.4.2581': attribute type 9 has an invalid length. [ 1412.814231][ T5278] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 1412.944804][T17142] netlink: 108 bytes leftover after parsing attributes in process `syz.4.2581'. [ 1413.055347][T17142] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2581'. [ 1413.131961][T17144] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1413.210216][ T5278] ftdi_sio 2-1:0.0: GPIO initialisation failed: -71 [ 1413.268445][ T5278] usb 2-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 1413.332976][ T5278] usb 2-1: USB disconnect, device number 63 [ 1413.411152][ T5278] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 1413.439094][T17138] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2581'. [ 1413.508602][ T5278] ftdi_sio 2-1:0.0: device disconnected [ 1413.996167][T16911] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1415.148937][T17177] netlink: 224 bytes leftover after parsing attributes in process `syz.3.2585'. [ 1415.434740][T17177] workqueue: Failed to create a rescuer kthread for wq "phy32": -EINTR [ 1416.470367][T16911] veth0_vlan: entered promiscuous mode [ 1416.523372][T16911] veth1_vlan: entered promiscuous mode [ 1416.702460][T16911] veth0_macvtap: entered promiscuous mode [ 1416.959698][T16911] veth1_macvtap: entered promiscuous mode [ 1417.547796][T12993] usb 4-1: new high-speed USB device number 48 using dummy_hcd [ 1417.649567][T16911] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1417.987690][T16911] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1418.027724][T16911] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1418.084629][T16911] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1418.284313][T16911] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1418.294950][T16911] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1418.305486][T16911] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1418.316193][T12993] usb 4-1: Using ep0 maxpacket: 32 [ 1418.321486][T16911] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1418.331632][T16911] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1419.048878][T16911] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1419.059503][T16911] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1419.452581][T12993] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1419.498284][T16911] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1419.512658][T17214] netlink: 332 bytes leftover after parsing attributes in process `syz.0.2592'. [ 1419.517306][T12993] usb 4-1: config 0 has no interfaces? [ 1419.557372][T16911] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1419.579037][T12993] usb 4-1: string descriptor 0 read error: -71 [ 1419.585554][T16911] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1419.586037][T17214] netlink: 'syz.0.2592': attribute type 9 has an invalid length. [ 1419.611789][T12993] usb 4-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c [ 1419.622760][T16911] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1419.647328][T12993] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1419.658785][T16911] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1419.669761][T17214] netlink: 108 bytes leftover after parsing attributes in process `syz.0.2592'. [ 1419.679746][T16911] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1419.688498][T12993] usb 4-1: config 0 descriptor?? [ 1419.690608][T17214] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2592'. [ 1419.702129][T12993] usb 4-1: can't set config #0, error -71 [ 1419.740252][T12993] usb 4-1: USB disconnect, device number 48 [ 1419.747005][T16911] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1419.776558][T16911] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1419.907555][T17211] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2592'. [ 1420.079169][T17211] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 1421.194909][T16911] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1421.513361][T16911] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1421.614204][T16911] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1421.683078][T14738] usb 5-1: new high-speed USB device number 60 using dummy_hcd [ 1421.723191][T16911] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1421.831915][T16911] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1421.955083][T16911] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1421.965902][T14738] usb 5-1: Using ep0 maxpacket: 16 [ 1422.063275][T14738] usb 5-1: config 0 has an invalid interface number: 134 but max is 3 [ 1422.107909][T16911] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1422.152364][T14738] usb 5-1: config 0 has an invalid interface number: 9 but max is 3 [ 1422.224092][T16911] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1422.248949][T14738] usb 5-1: config 0 has an invalid interface number: 155 but max is 3 [ 1422.325409][T16911] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1422.340857][T14738] usb 5-1: config 0 contains an unexpected descriptor of type 0x2, skipping [ 1422.435381][T14738] usb 5-1: config 0 has an invalid interface number: 65 but max is 3 [ 1422.451117][T16911] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1422.508912][T14738] usb 5-1: config 0 contains an unexpected descriptor of type 0x2, skipping [ 1422.534059][T16911] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1422.582612][T14738] usb 5-1: config 0 contains an unexpected descriptor of type 0x1, skipping [ 1422.616104][T16911] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1422.653395][T14738] usb 5-1: config 0 has no interface number 0 [ 1422.690914][T14738] usb 5-1: config 0 has no interface number 1 [ 1422.703938][T16911] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1422.735217][T14738] usb 5-1: config 0 has no interface number 2 [ 1422.745358][T16911] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1422.761995][T14738] usb 5-1: config 0 has no interface number 3 [ 1422.775531][T16911] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1422.787044][T16911] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1422.791842][T14738] usb 5-1: config 0 interface 9 altsetting 253 endpoint 0xC has invalid maxpacket 592, setting to 64 [ 1422.797251][T16911] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1422.820715][T16911] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1422.839242][T16911] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1422.843650][T14738] usb 5-1: config 0 interface 9 altsetting 253 has a duplicate endpoint with address 0xC, skipping [ 1422.921907][T16911] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1422.938518][T16911] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1422.957857][T14738] usb 5-1: config 0 interface 9 altsetting 253 endpoint 0xE has invalid maxpacket 1023, setting to 64 [ 1422.987298][T14738] usb 5-1: config 0 interface 9 altsetting 253 has a duplicate endpoint with address 0xA, skipping [ 1422.998180][T16911] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1423.007293][T14738] usb 5-1: config 0 interface 9 altsetting 253 endpoint 0x9 has invalid maxpacket 512, setting to 64 [ 1423.027305][T14738] usb 5-1: config 0 interface 9 altsetting 253 has a duplicate endpoint with address 0xC, skipping [ 1423.038083][T16911] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1423.588104][ T1270] ieee802154 phy1 wpan1: encryption failed: -22 [ 1423.693047][T14738] usb 5-1: config 0 interface 155 altsetting 3 has a duplicate endpoint with address 0xA, skipping [ 1423.944541][T14738] usb 5-1: config 0 interface 155 altsetting 3 has a duplicate endpoint with address 0xE, skipping [ 1424.008905][T14738] usb 5-1: config 0 interface 155 altsetting 3 has a duplicate endpoint with address 0xC, skipping [ 1424.100165][T14738] usb 5-1: config 0 interface 155 altsetting 3 has a duplicate endpoint with address 0xD, skipping [ 1424.142160][T14738] usb 5-1: config 0 interface 155 altsetting 3 endpoint 0xB has invalid maxpacket 512, setting to 64 [ 1424.239727][T14738] usb 5-1: config 0 interface 155 altsetting 3 has a duplicate endpoint with address 0xB, skipping [ 1424.323203][T14738] usb 5-1: config 0 interface 155 altsetting 3 has a duplicate endpoint with address 0xD, skipping [ 1425.205788][T17254] netlink: 224 bytes leftover after parsing attributes in process `syz.3.2598'. [ 1425.264137][ T2961] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1425.291178][T14738] usb 5-1: config 0 interface 155 altsetting 3 endpoint 0x2 has invalid maxpacket 1023, setting to 64 [ 1425.336028][ T2961] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1425.353089][T14738] usb 5-1: config 0 interface 155 altsetting 3 has a duplicate endpoint with address 0x4, skipping [ 1425.440705][T14738] usb 5-1: config 0 interface 155 altsetting 3 has a duplicate endpoint with address 0xA, skipping [ 1425.497662][T14738] usb 5-1: config 0 interface 65 altsetting 129 bulk endpoint 0x7 has invalid maxpacket 1024 [ 1425.549828][ T2961] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1425.567542][T14738] usb 5-1: config 0 interface 65 altsetting 129 has an invalid descriptor for endpoint zero, skipping [ 1425.587384][ T2961] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1425.615226][T14738] usb 5-1: config 0 interface 65 altsetting 129 endpoint 0x1 has invalid maxpacket 1024, setting to 64 [ 1425.667432][T14738] usb 5-1: config 0 interface 65 altsetting 129 has a duplicate endpoint with address 0x4, skipping [ 1425.717637][T14738] usb 5-1: config 0 interface 65 altsetting 129 has an invalid descriptor for endpoint zero, skipping [ 1425.776950][T14738] usb 5-1: config 0 interface 65 altsetting 129 has an endpoint descriptor with address 0xA7, changing to 0x87 [ 1425.830015][T14738] usb 5-1: config 0 interface 65 altsetting 129 endpoint 0x87 has invalid maxpacket 58749, setting to 1024 [ 1425.886016][T14738] usb 5-1: config 0 interface 65 altsetting 129 has an invalid descriptor for endpoint zero, skipping [ 1425.970712][T14738] usb 5-1: config 0 interface 65 altsetting 129 has 10 endpoint descriptors, different from the interface descriptor's value: 9 [ 1430.099777][T14738] usb 5-1: config 0 interface 134 has no altsetting 0 [ 1430.099871][T14738] usb 5-1: config 0 interface 9 has no altsetting 0 [ 1430.099897][T14738] usb 5-1: config 0 interface 155 has no altsetting 0 [ 1430.099980][T14738] usb 5-1: config 0 interface 65 has no altsetting 0 [ 1430.100925][T14738] usb 5-1: string descriptor 0 read error: -71 [ 1430.101082][T14738] usb 5-1: New USB device found, idVendor=13d2, idProduct=0400, bcdDevice=55.54 [ 1430.101111][T14738] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1430.298589][T14738] usb 5-1: config 0 descriptor?? [ 1430.349292][T14738] usb 5-1: can't set config #0, error -71 [ 1430.400700][T14738] usb 5-1: USB disconnect, device number 60 [ 1432.391753][T17310] netlink: 'syz.2.2606': attribute type 9 has an invalid length. [ 1432.399680][T17310] netlink: 335 bytes leftover after parsing attributes in process `syz.2.2606'. [ 1434.907419][T12993] usb 5-1: new high-speed USB device number 61 using dummy_hcd [ 1435.108016][T17329] kernel read not supported for file /  (pid: 17329 comm: syz.2.2609) [ 1435.185020][ T30] audit: type=1800 audit(1725134034.450:1025): pid=17329 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.2.2609" name=2001 dev="mqueue" ino=67701 res=0 errno=0 [ 1435.813644][T12993] usb 5-1: device descriptor read/64, error -71 [ 1436.344102][T12993] usb 5-1: new high-speed USB device number 62 using dummy_hcd [ 1436.627999][T12993] usb 5-1: Using ep0 maxpacket: 16 [ 1436.679556][T12993] usb 5-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice=10.00 [ 1436.734053][T12993] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1436.779399][T12993] usb 5-1: Product: syz [ 1436.783626][T12993] usb 5-1: Manufacturer: syz [ 1436.817539][T12993] usb 5-1: SerialNumber: syz [ 1436.855930][T12993] usb 5-1: config 0 descriptor?? [ 1437.032609][T12993] ftdi_sio 5-1:0.0: FTDI USB Serial Device converter detected [ 1437.078870][T12993] usb 5-1: Detected FT-X [ 1437.251088][T12993] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 1437.335794][T17354] pim6reg: entered allmulticast mode [ 1437.387719][T17359] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2610'. [ 1437.447445][ T25] usb 3-1: new high-speed USB device number 43 using dummy_hcd [ 1437.486061][T17354] pim6reg: left allmulticast mode [ 1437.504565][T17361] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1437.678233][T14387] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1437.693664][T14387] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1437.704121][T14387] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1437.713234][T14387] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1437.729295][T14387] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 1437.740928][T14387] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1437.917496][T12993] ftdi_sio 5-1:0.0: GPIO initialisation failed: -71 [ 1437.928316][T12993] usb 5-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 1437.939939][T12993] usb 5-1: USB disconnect, device number 62 [ 1437.958138][T12993] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 1437.983345][T12993] ftdi_sio 5-1:0.0: device disconnected [ 1438.127314][ T25] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1438.157411][ T25] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1438.174031][ T25] usb 3-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00 [ 1438.210976][ T25] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1438.325350][ T25] usb 3-1: config 0 descriptor?? [ 1438.902435][T17350] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1439.031453][T17350] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1439.278927][T17379] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1439.298068][T17379] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1439.327467][ T5278] usb 4-1: new high-speed USB device number 49 using dummy_hcd [ 1439.909571][T14387] Bluetooth: hci4: command tx timeout [ 1440.271301][T17350] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2613'. [ 1440.283766][T17350] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2613'. [ 1440.508747][ T5278] usb 4-1: device descriptor read/all, error -71 [ 1440.530880][ T25] usbhid 3-1:0.0: can't add hid device: -71 [ 1440.536962][ T25] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 1440.629444][ T25] usb 3-1: USB disconnect, device number 43 [ 1440.653723][T11842] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1441.988294][T14387] Bluetooth: hci4: command tx timeout [ 1444.062857][T14387] Bluetooth: hci4: command tx timeout [ 1446.799767][T14387] Bluetooth: hci4: command tx timeout [ 1447.825647][T11842] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1447.949719][T17413] netlink: 'syz.1.2621': attribute type 1 has an invalid length. [ 1449.101387][T17413] netlink: 168 bytes leftover after parsing attributes in process `syz.1.2621'. [ 1449.173159][T11842] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1449.404084][ T5239] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1449.419053][ T5239] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1449.427522][ T5239] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1449.454342][ T5239] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1449.475153][ T5239] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 1449.482315][ T5229] usb 2-1: new high-speed USB device number 64 using dummy_hcd [ 1449.492865][ T5239] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1449.530277][T11842] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1449.717468][ T5229] usb 2-1: Using ep0 maxpacket: 8 [ 1449.740333][ T5229] usb 2-1: New USB device found, idVendor=0ccd, idProduct=0099, bcdDevice=95.0d [ 1449.758024][ T5229] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1449.799883][ T5229] usb 2-1: Product: syz [ 1449.819526][ T5229] usb 2-1: Manufacturer: syz [ 1449.831588][ T5229] usb 2-1: SerialNumber: syz [ 1449.876141][ T5229] usb 2-1: config 0 descriptor?? [ 1450.347531][ T5229] usb 2-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 1451.481411][ T5229] dvb_usb_af9015 2-1:0.0: probe with driver dvb_usb_af9015 failed with error -22 [ 1451.495329][ T5229] usb 2-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 1451.502815][ T5229] dvb_usb_af9035 2-1:0.0: probe with driver dvb_usb_af9035 failed with error -22 [ 1451.562605][ T5229] usb 2-1: USB disconnect, device number 64 [ 1451.576275][T17365] chnl_net:caif_netlink_parms(): no params data found [ 1451.583352][T14387] Bluetooth: hci5: command tx timeout [ 1451.917739][T11842] bridge_slave_1: left allmulticast mode [ 1451.924169][T11842] bridge_slave_1: left promiscuous mode [ 1451.955883][T11842] bridge0: port 2(bridge_slave_1) entered disabled state [ 1452.604943][ T25] usb 5-1: new high-speed USB device number 63 using dummy_hcd [ 1452.719419][T11842] bridge_slave_0: left allmulticast mode [ 1452.725129][T11842] bridge_slave_0: left promiscuous mode [ 1452.796027][T11842] bridge0: port 1(bridge_slave_0) entered disabled state [ 1452.847500][ T25] usb 5-1: Using ep0 maxpacket: 16 [ 1452.859478][ T25] usb 5-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice=10.00 [ 1452.890459][ T25] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1452.923685][ T25] usb 5-1: Product: syz [ 1452.943977][ T25] usb 5-1: Manufacturer: syz [ 1452.964190][ T25] usb 5-1: SerialNumber: syz [ 1453.018701][ T25] usb 5-1: config 0 descriptor?? [ 1453.050250][ T25] ftdi_sio 5-1:0.0: FTDI USB Serial Device converter detected [ 1453.105514][ T25] usb 5-1: Detected FT-X [ 1453.410001][ T25] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 1453.667735][T14387] Bluetooth: hci5: command tx timeout [ 1454.231552][T17459] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2627'. [ 1454.252968][T17461] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1454.543612][T11842] dvmrp0 (unregistering): left allmulticast mode [ 1454.767444][ T5281] usb 4-1: new high-speed USB device number 51 using dummy_hcd [ 1454.965994][T11842] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1454.989010][T11842] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1455.006316][T11842] bond0 (unregistering): Released all slaves [ 1455.018284][ T5281] usb 4-1: Using ep0 maxpacket: 32 [ 1455.041940][ T5281] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1455.087453][ T5281] usb 4-1: config 0 has no interfaces? [ 1455.127478][ T5281] usb 4-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c [ 1455.288470][ T5281] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1455.296532][ T5281] usb 4-1: Product: syz [ 1455.301751][ T5281] usb 4-1: Manufacturer: syz [ 1455.306398][ T5281] usb 4-1: SerialNumber: syz [ 1455.316621][ T5281] usb 4-1: config 0 descriptor?? [ 1455.331524][ T25] ftdi_sio 5-1:0.0: GPIO initialisation failed: -71 [ 1455.373415][T11842] tipc: Left network mode [ 1455.379881][ T25] usb 5-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 1455.392276][ T25] usb 5-1: USB disconnect, device number 63 [ 1455.407755][ T25] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 1455.417901][ T25] ftdi_sio 5-1:0.0: device disconnected [ 1455.624074][T17365] bridge0: port 1(bridge_slave_0) entered blocking state [ 1455.632848][T17365] bridge0: port 1(bridge_slave_0) entered disabled state [ 1455.649832][T17365] bridge_slave_0: entered allmulticast mode [ 1455.665679][T17365] bridge_slave_0: entered promiscuous mode [ 1455.693437][T17365] bridge0: port 2(bridge_slave_1) entered blocking state [ 1455.718624][T17365] bridge0: port 2(bridge_slave_1) entered disabled state [ 1455.726041][T17365] bridge_slave_1: entered allmulticast mode [ 1455.751765][T14387] Bluetooth: hci5: command tx timeout [ 1455.783721][T17365] bridge_slave_1: entered promiscuous mode [ 1458.690556][T14387] Bluetooth: hci5: command tx timeout [ 1461.946553][T17365] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1462.042260][T17365] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1462.076385][ T25] usb 4-1: USB disconnect, device number 51 [ 1462.247583][T11842] hsr_slave_0: left promiscuous mode [ 1462.293734][T11842] hsr_slave_1: left promiscuous mode [ 1462.309514][T11842] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1462.331361][T11842] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1462.357550][T11842] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1462.399932][T11842] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1462.505089][T11842] veth1_macvtap: left promiscuous mode [ 1462.541125][T11842] veth0_macvtap: left promiscuous mode [ 1462.546874][T11842] veth1_vlan: left promiscuous mode [ 1462.571014][T11842] veth0_vlan: left promiscuous mode [ 1462.633113][T17502] program syz.4.2635 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1464.419666][T17513] FAULT_INJECTION: forcing a failure. [ 1464.419666][T17513] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1464.494275][T17513] CPU: 1 UID: 0 PID: 17513 Comm: syz.1.2638 Not tainted 6.11.0-rc5-syzkaller-00219-g1934261d8974 #0 [ 1464.505118][T17513] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 1464.515217][T17513] Call Trace: [ 1464.518528][T17513] [ 1464.521488][T17513] dump_stack_lvl+0x241/0x360 [ 1464.526290][T17513] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1464.531525][T17513] ? __pfx__printk+0x10/0x10 [ 1464.536155][T17513] ? __pfx_lock_release+0x10/0x10 [ 1464.541343][T17513] ? tomoyo_path_number_perm+0x71a/0x880 [ 1464.547036][T17513] should_fail_ex+0x3b0/0x4e0 [ 1464.551781][T17513] _copy_from_user+0x2f/0xe0 [ 1464.556504][T17513] wext_handle_ioctl+0xf2/0x270 [ 1464.561403][T17513] ? __pfx_wext_handle_ioctl+0x10/0x10 [ 1464.566927][T17513] ? __asan_memset+0x23/0x50 [ 1464.571569][T17513] ? smack_file_ioctl+0x2a1/0x3a0 [ 1464.576636][T17513] sock_ioctl+0x17f/0x8e0 [ 1464.581025][T17513] ? __pfx_sock_ioctl+0x10/0x10 [ 1464.585926][T17513] ? __fget_files+0x3f6/0x470 [ 1464.590640][T17513] ? __fget_files+0x29/0x470 [ 1464.595273][T17513] ? bpf_lsm_file_ioctl+0x9/0x10 [ 1464.600273][T17513] ? security_file_ioctl+0x87/0xb0 [ 1464.605427][T17513] ? __pfx_sock_ioctl+0x10/0x10 [ 1464.610416][T17513] __se_sys_ioctl+0xfc/0x170 [ 1464.615056][T17513] do_syscall_64+0xf3/0x230 [ 1464.619607][T17513] ? clear_bhb_loop+0x35/0x90 [ 1464.624332][T17513] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1464.630281][T17513] RIP: 0033:0x7f0856f79eb9 [ 1464.634748][T17513] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1464.654396][T17513] RSP: 002b:00007f0857e21038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1464.662870][T17513] RAX: ffffffffffffffda RBX: 00007f0857115f80 RCX: 00007f0856f79eb9 [ 1464.670883][T17513] RDX: 0000000020000040 RSI: 0000000000008b35 RDI: 0000000000000004 [ 1464.678894][T17513] RBP: 00007f0857e21090 R08: 0000000000000000 R09: 0000000000000000 [ 1464.686918][T17513] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1464.694928][T17513] R13: 0000000000000000 R14: 00007f0857115f80 R15: 00007ffc30cf6d58 [ 1464.702962][T17513] [ 1465.105548][ T5239] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1465.135488][ T5239] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1465.145046][ T5239] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1465.174280][ T5239] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1465.182412][ T5239] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 1465.192344][ T5239] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1465.632059][T11842] team0 (unregistering): Port device team_slave_1 removed [ 1465.714213][T11842] team0 (unregistering): Port device team_slave_0 removed [ 1466.638470][T17365] team0: Port device team_slave_0 added [ 1466.663826][T17365] team0: Port device team_slave_1 added [ 1466.731406][T17428] chnl_net:caif_netlink_parms(): no params data found [ 1467.342635][ T5239] Bluetooth: hci1: command tx timeout [ 1472.857357][ T5239] Bluetooth: hci1: command tx timeout [ 1472.913748][T17365] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1472.948975][T17365] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1472.979174][T17365] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1473.059926][T17365] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1473.066998][T17365] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1473.097899][T17365] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1473.604492][T17365] hsr_slave_0: entered promiscuous mode [ 1473.618898][T17365] hsr_slave_1: entered promiscuous mode [ 1473.634779][T17365] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1473.663761][T17365] Cannot create hsr debugfs directory [ 1473.679835][T17428] bridge0: port 1(bridge_slave_0) entered blocking state [ 1473.690111][T17428] bridge0: port 1(bridge_slave_0) entered disabled state [ 1473.699253][T17428] bridge_slave_0: entered allmulticast mode [ 1473.712449][T17428] bridge_slave_0: entered promiscuous mode [ 1473.968965][T17428] bridge0: port 2(bridge_slave_1) entered blocking state [ 1473.976157][T17428] bridge0: port 2(bridge_slave_1) entered disabled state [ 1474.668523][T17428] bridge_slave_1: entered allmulticast mode [ 1474.696702][T17428] bridge_slave_1: entered promiscuous mode [ 1475.050407][ T5239] Bluetooth: hci1: command tx timeout [ 1476.236747][T17428] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1476.314117][T17428] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1476.552407][T11842] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1477.005808][T17575] bond_slave_0: entered promiscuous mode [ 1477.012174][T17575] bond_slave_1: entered promiscuous mode [ 1477.031294][T17575] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 1477.049878][T17575] team0: Port device macvlan2 added [ 1477.056894][T17571] netlink: 'syz.4.2648': attribute type 4 has an invalid length. [ 1477.067348][T17571] netlink: 152 bytes leftover after parsing attributes in process `syz.4.2648'. [ 1477.101472][ T5239] Bluetooth: hci1: command tx timeout [ 1480.169502][T17571] bond_slave_0: left promiscuous mode [ 1480.186838][T17571] bond_slave_1: left promiscuous mode [ 1480.353566][T11842] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1482.531608][T17428] team0: Port device team_slave_0 added [ 1482.578359][T17428] team0: Port device team_slave_1 added [ 1482.642038][T11842] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1482.707331][T14738] usb 5-1: new high-speed USB device number 64 using dummy_hcd [ 1482.869816][T11842] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1482.927386][T14738] usb 5-1: Using ep0 maxpacket: 16 [ 1482.955322][T14738] usb 5-1: config 0 has an invalid interface number: 134 but max is 3 [ 1482.977836][T14738] usb 5-1: config 0 has an invalid interface number: 9 but max is 3 [ 1482.997604][T14738] usb 5-1: config 0 has an invalid interface number: 155 but max is 3 [ 1483.006173][T14738] usb 5-1: config 0 contains an unexpected descriptor of type 0x2, skipping [ 1483.012606][T17428] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1483.025279][T14738] usb 5-1: config 0 has an invalid interface number: 65 but max is 3 [ 1483.047698][T14738] usb 5-1: config 0 contains an unexpected descriptor of type 0x2, skipping [ 1483.052517][T17428] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1483.067227][T14738] usb 5-1: config 0 contains an unexpected descriptor of type 0x1, skipping [ 1483.094433][T17428] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1483.158477][T14738] usb 5-1: config 0 has no interface number 0 [ 1483.164118][T17522] chnl_net:caif_netlink_parms(): no params data found [ 1483.164591][T14738] usb 5-1: config 0 has no interface number 1 [ 1483.164617][T14738] usb 5-1: config 0 has no interface number 2 [ 1483.164639][T14738] usb 5-1: config 0 has no interface number 3 [ 1483.240402][T17428] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1483.248268][T14738] usb 5-1: config 0 interface 9 altsetting 253 endpoint 0xC has invalid maxpacket 592, setting to 64 [ 1483.259589][T17428] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1483.267270][T14738] usb 5-1: config 0 interface 9 altsetting 253 has a duplicate endpoint with address 0xC, skipping [ 1483.301412][T17428] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1483.327305][T14738] usb 5-1: config 0 interface 9 altsetting 253 endpoint 0xE has invalid maxpacket 1023, setting to 64 [ 1483.407476][ T5313] usb 2-1: new high-speed USB device number 65 using dummy_hcd [ 1483.428519][T14738] usb 5-1: config 0 interface 9 altsetting 253 has a duplicate endpoint with address 0xA, skipping [ 1483.572583][T14738] usb 5-1: config 0 interface 9 altsetting 253 endpoint 0x9 has invalid maxpacket 512, setting to 64 [ 1483.627691][ T5313] usb 2-1: Using ep0 maxpacket: 32 [ 1483.643063][ T5313] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1483.657318][T14738] usb 5-1: config 0 interface 9 altsetting 253 has a duplicate endpoint with address 0xC, skipping [ 1483.663879][ T5313] usb 2-1: config 0 has no interfaces? [ 1483.691014][ T5313] usb 2-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c [ 1483.708133][ T5313] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1483.718316][T14738] usb 5-1: config 0 interface 155 altsetting 3 has a duplicate endpoint with address 0xA, skipping [ 1483.727503][ T5313] usb 2-1: Product: syz [ 1483.734096][ T5313] usb 2-1: Manufacturer: syz [ 1483.754042][ T5313] usb 2-1: SerialNumber: syz [ 1483.765215][T14738] usb 5-1: config 0 interface 155 altsetting 3 has a duplicate endpoint with address 0xE, skipping [ 1483.790710][ T5313] usb 2-1: config 0 descriptor?? [ 1483.807872][T14738] usb 5-1: config 0 interface 155 altsetting 3 has a duplicate endpoint with address 0xC, skipping [ 1483.847805][T14738] usb 5-1: config 0 interface 155 altsetting 3 has a duplicate endpoint with address 0xD, skipping [ 1483.883595][T14738] usb 5-1: config 0 interface 155 altsetting 3 endpoint 0xB has invalid maxpacket 512, setting to 64 [ 1483.911084][T17428] hsr_slave_0: entered promiscuous mode [ 1483.925145][T14738] usb 5-1: config 0 interface 155 altsetting 3 has a duplicate endpoint with address 0xB, skipping [ 1483.926875][T17428] hsr_slave_1: entered promiscuous mode [ 1483.945388][T17428] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1483.953270][T17428] Cannot create hsr debugfs directory [ 1483.957143][T14738] usb 5-1: config 0 interface 155 altsetting 3 has a duplicate endpoint with address 0xD, skipping [ 1484.004188][T14738] usb 5-1: config 0 interface 155 altsetting 3 endpoint 0x2 has invalid maxpacket 1023, setting to 64 [ 1484.036304][T14738] usb 5-1: config 0 interface 155 altsetting 3 has a duplicate endpoint with address 0x4, skipping [ 1484.057032][T14738] usb 5-1: config 0 interface 155 altsetting 3 has a duplicate endpoint with address 0xA, skipping [ 1484.117720][T14738] usb 5-1: config 0 interface 65 altsetting 129 bulk endpoint 0x7 has invalid maxpacket 1024 [ 1484.150384][T14738] usb 5-1: config 0 interface 65 altsetting 129 has an invalid descriptor for endpoint zero, skipping [ 1484.163018][T14738] usb 5-1: config 0 interface 65 altsetting 129 endpoint 0x1 has invalid maxpacket 1024, setting to 64 [ 1484.175475][T14738] usb 5-1: config 0 interface 65 altsetting 129 has a duplicate endpoint with address 0x4, skipping [ 1484.187571][T14738] usb 5-1: config 0 interface 65 altsetting 129 has an invalid descriptor for endpoint zero, skipping [ 1484.199927][T14738] usb 5-1: config 0 interface 65 altsetting 129 has an endpoint descriptor with address 0xA7, changing to 0x87 [ 1484.215105][T14738] usb 5-1: config 0 interface 65 altsetting 129 endpoint 0x87 has invalid maxpacket 58749, setting to 1024 [ 1484.229926][T14738] usb 5-1: config 0 interface 65 altsetting 129 has an invalid descriptor for endpoint zero, skipping [ 1484.245231][T14738] usb 5-1: config 0 interface 65 altsetting 129 has 10 endpoint descriptors, different from the interface descriptor's value: 9 [ 1484.259281][T14738] usb 5-1: config 0 interface 134 has no altsetting 0 [ 1484.266902][T14738] usb 5-1: config 0 interface 9 has no altsetting 0 [ 1484.274281][T14738] usb 5-1: config 0 interface 155 has no altsetting 0 [ 1484.282399][T14738] usb 5-1: config 0 interface 65 has no altsetting 0 [ 1484.302406][T14738] usb 5-1: string descriptor 0 read error: -71 [ 1484.321213][T14738] usb 5-1: New USB device found, idVendor=13d2, idProduct=0400, bcdDevice=55.54 [ 1484.331945][T14738] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1484.363968][T14738] usb 5-1: config 0 descriptor?? [ 1484.377980][T14738] usb 5-1: can't set config #0, error -71 [ 1484.400242][T14738] usb 5-1: USB disconnect, device number 64 [ 1484.765032][T11842] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1484.782687][ T1270] ieee802154 phy1 wpan1: encryption failed: -22 [ 1484.797499][T14738] usb 5-1: new high-speed USB device number 65 using dummy_hcd [ 1484.962966][T17522] bridge0: port 1(bridge_slave_0) entered blocking state [ 1484.982021][T17522] bridge0: port 1(bridge_slave_0) entered disabled state [ 1484.997842][T17522] bridge_slave_0: entered allmulticast mode [ 1485.017598][T14738] usb 5-1: Using ep0 maxpacket: 8 [ 1485.020311][T17522] bridge_slave_0: entered promiscuous mode [ 1485.034493][T17522] bridge0: port 2(bridge_slave_1) entered blocking state [ 1485.039777][T14738] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1485.059601][T14738] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1485.070012][T14738] usb 5-1: New USB device found, idVendor=0810, idProduct=0001, bcdDevice= 0.00 [ 1485.080925][T14738] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1485.122030][T17522] bridge0: port 2(bridge_slave_1) entered disabled state [ 1485.138416][T14738] usb 5-1: config 0 descriptor?? [ 1485.144670][T17522] bridge_slave_1: entered allmulticast mode [ 1485.172936][T17522] bridge_slave_1: entered promiscuous mode [ 1485.333776][T11842] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1485.589186][T11842] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1485.687038][T17522] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1485.729473][T17522] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1485.769815][T14738] pantherlord 0003:0810:0001.0013: unknown main item tag 0x0 [ 1485.820191][T11842] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1485.839924][T14738] pantherlord 0003:0810:0001.0013: hidraw0: USB HID v0.00 Device [HID 0810:0001] on usb-dummy_hcd.4-1/input0 [ 1485.855620][T14738] pantherlord 0003:0810:0001.0013: Force feedback for PantherLord/GreenAsia devices by Anssi Hannula [ 1485.919032][T14738] usb 2-1: USB disconnect, device number 65 [ 1485.972146][T17522] team0: Port device team_slave_0 added [ 1486.039684][ T5281] usb 5-1: USB disconnect, device number 65 [ 1486.076440][T17522] team0: Port device team_slave_1 added [ 1486.204370][T17522] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1486.227361][T17522] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1486.255482][T17522] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1486.276682][T17522] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1486.284090][T17522] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1486.317280][T17522] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1487.811768][T17365] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1487.891550][T11842] bridge_slave_1: left allmulticast mode [ 1487.911833][T11842] bridge_slave_1: left promiscuous mode [ 1487.928509][T11842] bridge0: port 2(bridge_slave_1) entered disabled state [ 1487.963312][T11842] bridge_slave_0: left allmulticast mode [ 1487.979885][T11842] bridge_slave_0: left promiscuous mode [ 1487.998856][T11842] bridge0: port 1(bridge_slave_0) entered disabled state [ 1488.044132][T11842] bridge_slave_1: left allmulticast mode [ 1488.057360][T11842] bridge_slave_1: left promiscuous mode [ 1488.063180][T11842] bridge0: port 2(bridge_slave_1) entered disabled state [ 1488.083506][T11842] bridge_slave_0: left allmulticast mode [ 1488.093031][T11842] bridge_slave_0: left promiscuous mode [ 1488.110585][T11842] bridge0: port 1(bridge_slave_0) entered disabled state [ 1488.840055][ T9590] usb 2-1: new high-speed USB device number 66 using dummy_hcd [ 1489.095730][ T9590] usb 2-1: config 0 has an invalid descriptor of length 1, skipping remainder of the config [ 1489.117563][ T9590] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1489.161190][ T9590] usb 2-1: New USB device found, idVendor=1020, idProduct=0006, bcdDevice= 0.00 [ 1489.170463][ T9590] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1489.209913][ T9590] usb 2-1: config 0 descriptor?? [ 1489.633785][T11842] dvmrp0 (unregistering): left allmulticast mode [ 1490.249305][T17652] fuse: Bad value for 'fd' [ 1491.310322][T11842] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1491.336156][T11842] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1491.368064][T11842] bond0 (unregistering): Released all slaves [ 1491.626299][T11842] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1491.641120][T11842] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1491.655626][T11842] bond0 (unregistering): Released all slaves [ 1491.689037][T17522] hsr_slave_0: entered promiscuous mode [ 1491.701069][T17522] hsr_slave_1: entered promiscuous mode [ 1491.711224][T17522] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1491.720218][T17522] Cannot create hsr debugfs directory [ 1491.731345][T17365] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1491.834560][T17643] pim6reg: entered allmulticast mode [ 1491.900503][T17365] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1491.953050][ T9590] usb 2-1: string descriptor 0 read error: -71 [ 1491.969926][ T9590] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 1491.980395][T14387] Bluetooth: hci3: command 0x0406 tx timeout [ 1491.999206][ T9590] usb 2-1: USB disconnect, device number 66 [ 1491.999770][T17365] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1492.332074][T17643] pim6reg: left allmulticast mode [ 1492.857723][ T9590] usb 5-1: new high-speed USB device number 66 using dummy_hcd [ 1493.067379][ T9590] usb 5-1: Using ep0 maxpacket: 16 [ 1493.120305][ T9590] usb 5-1: config 0 has an invalid interface number: 134 but max is 3 [ 1493.152263][ T9590] usb 5-1: config 0 has an invalid interface number: 9 but max is 3 [ 1493.168003][ T9590] usb 5-1: config 0 has an invalid interface number: 155 but max is 3 [ 1493.176487][ T9590] usb 5-1: config 0 contains an unexpected descriptor of type 0x2, skipping [ 1493.657096][ T9590] usb 5-1: config 0 has an invalid interface number: 65 but max is 3 [ 1493.682551][ T9590] usb 5-1: config 0 contains an unexpected descriptor of type 0x2, skipping [ 1493.917504][ T9590] usb 5-1: config 0 contains an unexpected descriptor of type 0x1, skipping [ 1493.926320][ T9590] usb 5-1: config 0 has no interface number 0 [ 1493.934070][ T9590] usb 5-1: config 0 has no interface number 1 [ 1493.940345][ T9590] usb 5-1: config 0 has no interface number 2 [ 1493.946511][ T9590] usb 5-1: config 0 has no interface number 3 [ 1493.952972][ T9590] usb 5-1: config 0 interface 9 altsetting 253 endpoint 0xC has invalid maxpacket 592, setting to 64 [ 1493.963998][ T9590] usb 5-1: config 0 interface 9 altsetting 253 has a duplicate endpoint with address 0xC, skipping [ 1494.272977][ T9590] usb 5-1: config 0 interface 9 altsetting 253 endpoint 0xE has invalid maxpacket 1023, setting to 64 [ 1494.537730][ T9590] usb 5-1: config 0 interface 9 altsetting 253 has a duplicate endpoint with address 0xA, skipping [ 1494.584457][ T9590] usb 5-1: config 0 interface 9 altsetting 253 endpoint 0x9 has invalid maxpacket 512, setting to 64 [ 1494.601160][ T9590] usb 5-1: config 0 interface 9 altsetting 253 has a duplicate endpoint with address 0xC, skipping [ 1494.616445][ T9590] usb 5-1: config 0 interface 155 altsetting 3 has a duplicate endpoint with address 0xA, skipping [ 1494.659448][ T9590] usb 5-1: config 0 interface 155 altsetting 3 has a duplicate endpoint with address 0xE, skipping [ 1494.717560][ T9590] usb 5-1: config 0 interface 155 altsetting 3 has a duplicate endpoint with address 0xC, skipping [ 1494.737783][ T9590] usb 5-1: config 0 interface 155 altsetting 3 has a duplicate endpoint with address 0xD, skipping [ 1494.776420][ T9590] usb 5-1: config 0 interface 155 altsetting 3 endpoint 0xB has invalid maxpacket 512, setting to 64 [ 1494.810369][ T9590] usb 5-1: config 0 interface 155 altsetting 3 has a duplicate endpoint with address 0xB, skipping [ 1494.842327][ T9590] usb 5-1: config 0 interface 155 altsetting 3 has a duplicate endpoint with address 0xD, skipping [ 1494.893564][ T9590] usb 5-1: config 0 interface 155 altsetting 3 endpoint 0x2 has invalid maxpacket 1023, setting to 64 [ 1494.943342][ T9590] usb 5-1: config 0 interface 155 altsetting 3 has a duplicate endpoint with address 0x4, skipping [ 1494.988367][ T9590] usb 5-1: config 0 interface 155 altsetting 3 has a duplicate endpoint with address 0xA, skipping [ 1495.034393][ T9590] usb 5-1: config 0 interface 65 altsetting 129 bulk endpoint 0x7 has invalid maxpacket 1024 [ 1495.052604][ T9590] usb 5-1: config 0 interface 65 altsetting 129 has an invalid descriptor for endpoint zero, skipping [ 1495.074148][ T9590] usb 5-1: config 0 interface 65 altsetting 129 endpoint 0x1 has invalid maxpacket 1024, setting to 64 [ 1495.088601][ T9590] usb 5-1: config 0 interface 65 altsetting 129 has a duplicate endpoint with address 0x4, skipping [ 1495.221947][ T9590] usb 5-1: config 0 interface 65 altsetting 129 has an invalid descriptor for endpoint zero, skipping [ 1495.239193][ T9590] usb 5-1: config 0 interface 65 altsetting 129 has an endpoint descriptor with address 0xA7, changing to 0x87 [ 1495.255642][ T9590] usb 5-1: config 0 interface 65 altsetting 129 endpoint 0x87 has invalid maxpacket 58749, setting to 1024 [ 1495.271325][ T9590] usb 5-1: config 0 interface 65 altsetting 129 has an invalid descriptor for endpoint zero, skipping [ 1495.277451][T12993] usb 2-1: new high-speed USB device number 67 using dummy_hcd [ 1495.283299][ T9590] usb 5-1: config 0 interface 65 altsetting 129 has 10 endpoint descriptors, different from the interface descriptor's value: 9 [ 1495.306643][ T9590] usb 5-1: config 0 interface 134 has no altsetting 0 [ 1495.349144][ T9590] usb 5-1: config 0 interface 9 has no altsetting 0 [ 1495.379012][ T9590] usb 5-1: config 0 interface 155 has no altsetting 0 [ 1495.621940][T17688] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1496.517360][T12993] usb 2-1: Using ep0 maxpacket: 32 [ 1496.529800][ T9590] usb 5-1: config 0 interface 65 has no altsetting 0 [ 1496.611578][T12993] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1496.632249][T12993] usb 2-1: config 0 has no interfaces? [ 1496.650122][ T9590] usb 5-1: string descriptor 0 read error: -71 [ 1496.692361][T12993] usb 2-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c [ 1496.704718][ T9590] usb 5-1: New USB device found, idVendor=13d2, idProduct=0400, bcdDevice=55.54 [ 1496.736693][ T9590] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1496.743289][T12993] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1496.776692][T12993] usb 2-1: Product: syz [ 1496.802145][T12993] usb 2-1: Manufacturer: syz [ 1496.803224][ T9590] usb 5-1: config 0 descriptor?? [ 1496.831833][T12993] usb 2-1: SerialNumber: syz [ 1496.901706][T12993] usb 2-1: config 0 descriptor?? [ 1496.980683][ T9590] usb 5-1: can't set config #0, error -71 [ 1497.037790][ T9590] usb 5-1: USB disconnect, device number 66 [ 1497.554207][T17699] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1500.322692][ T25] usb 2-1: USB disconnect, device number 67 [ 1500.347974][T11842] hsr_slave_0: left promiscuous mode [ 1500.388570][T11842] hsr_slave_1: left promiscuous mode [ 1500.398371][T11842] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1500.418512][T11842] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1500.428361][T14387] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1500.443010][T14387] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1500.450910][T11842] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1500.468020][T11842] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1500.468513][T14387] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1500.494013][T14387] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1500.497396][T11842] hsr_slave_0: left promiscuous mode [ 1500.507694][T14387] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 1500.515249][T14387] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1500.524402][T11842] hsr_slave_1: left promiscuous mode [ 1500.533658][T11842] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1500.558076][T11842] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1500.570583][T11842] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1500.587514][T11842] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1500.690266][T11842] veth1_macvtap: left promiscuous mode [ 1500.707735][T11842] veth0_macvtap: left promiscuous mode [ 1500.713469][T11842] veth1_vlan: left promiscuous mode [ 1500.727428][T11842] veth0_vlan: left promiscuous mode [ 1500.749999][T11842] veth1_macvtap: left promiscuous mode [ 1500.755629][T11842] veth0_macvtap: left promiscuous mode [ 1500.777610][T11842] veth1_vlan: left promiscuous mode [ 1500.783086][T11842] veth0_vlan: left promiscuous mode [ 1501.855611][T11842] team0 (unregistering): Port device team_slave_1 removed [ 1501.924666][T11842] team0 (unregistering): Port device team_slave_0 removed [ 1502.537838][T14387] Bluetooth: hci2: command tx timeout [ 1503.190555][T11842] team0 (unregistering): Port device team_slave_1 removed [ 1503.256333][T11842] team0 (unregistering): Port device team_slave_0 removed [ 1503.990365][T17428] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1504.122620][ T30] audit: type=1400 audit(1725134103.390:1026): lsm=SMACK fn=smack_socket_sock_rcv_skb action=denied subject="*" object="_" requested=w pid=17727 comm="syz.1.2667" saddr=172.30.0.2 daddr=172.20.20.170 [ 1504.251251][T17428] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1504.304994][T17428] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1504.368107][T17428] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1504.424459][ T30] audit: type=1326 audit(1725134103.690:1027): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17727 comm="syz.1.2667" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f0856f79eb9 code=0x0 [ 1504.516484][T17734] bridge1: entered promiscuous mode [ 1504.547087][T17734] bridge1: entered allmulticast mode [ 1504.619804][T14387] Bluetooth: hci2: command tx timeout [ 1504.822431][T17733] dvmrp0: entered allmulticast mode [ 1505.108073][ T9590] usb 2-1: new high-speed USB device number 68 using dummy_hcd [ 1505.348679][ T9590] usb 2-1: Using ep0 maxpacket: 16 [ 1505.356409][ T9590] usb 2-1: config 0 has an invalid interface number: 2 but max is 0 [ 1505.365835][ T9590] usb 2-1: config 0 has no interface number 0 [ 1505.372434][ T9590] usb 2-1: config 0 interface 2 altsetting 172 has 0 endpoint descriptors, different from the interface descriptor's value: 20 [ 1505.401086][ T9590] usb 2-1: config 0 interface 2 has no altsetting 0 [ 1505.412805][ T9590] usb 2-1: New USB device found, idVendor=046d, idProduct=08b2, bcdDevice=80.59 [ 1505.435572][ T9590] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1505.447418][ T9590] usb 2-1: Product: syz [ 1505.451639][ T9590] usb 2-1: Manufacturer: syz [ 1505.456263][ T9590] usb 2-1: SerialNumber: syz [ 1505.463766][ T9590] usb 2-1: config 0 descriptor?? [ 1505.519144][T17742] pim6reg: entered allmulticast mode [ 1505.525403][T17522] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1505.592327][T17522] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1505.930947][T17522] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1506.151478][T17733] dvmrp0: left allmulticast mode [ 1506.226416][T17522] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1506.260331][T17702] chnl_net:caif_netlink_parms(): no params data found [ 1506.375917][T17428] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1506.417405][ T5278] usb 5-1: new high-speed USB device number 67 using dummy_hcd [ 1506.529349][T17428] 8021q: adding VLAN 0 to HW filter on device team0 [ 1506.601504][T17702] bridge0: port 1(bridge_slave_0) entered blocking state [ 1506.610599][T17702] bridge0: port 1(bridge_slave_0) entered disabled state [ 1506.620166][ T5278] usb 5-1: config 0 has an invalid descriptor of length 1, skipping remainder of the config [ 1506.620308][T17702] bridge_slave_0: entered allmulticast mode [ 1506.632648][ T5278] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1506.651071][ T5278] usb 5-1: New USB device found, idVendor=1020, idProduct=0006, bcdDevice= 0.00 [ 1506.656894][T17702] bridge_slave_0: entered promiscuous mode [ 1506.661783][ T5278] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1506.678552][ T5278] usb 5-1: config 0 descriptor?? [ 1506.697441][T14387] Bluetooth: hci2: command tx timeout [ 1506.780654][T17702] bridge0: port 2(bridge_slave_1) entered blocking state [ 1506.799202][T17702] bridge0: port 2(bridge_slave_1) entered disabled state [ 1506.807519][T17702] bridge_slave_1: entered allmulticast mode [ 1506.825392][T17702] bridge_slave_1: entered promiscuous mode [ 1506.897461][ T5278] usb 5-1: string descriptor 0 read error: -71 [ 1506.912387][ T5278] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 1506.923599][ T5278] usb 5-1: USB disconnect, device number 67 [ 1506.929971][ T2909] bridge0: port 1(bridge_slave_0) entered blocking state [ 1506.937151][ T2909] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1507.001263][T17739] pim6reg: left allmulticast mode [ 1507.060442][T17702] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1507.126594][T17702] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1507.145025][ T2909] bridge0: port 2(bridge_slave_1) entered blocking state [ 1507.152284][ T2909] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1507.326146][T17702] team0: Port device team_slave_0 added [ 1507.400066][T17702] team0: Port device team_slave_1 added [ 1507.459557][ T9590] usb 2-1: USB disconnect, device number 68 [ 1507.464494][T17522] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1507.548477][T17702] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1507.556149][T17702] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1507.744506][T17702] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1507.794499][ T2961] bridge_slave_1: left allmulticast mode [ 1507.800627][ T2961] bridge_slave_1: left promiscuous mode [ 1507.806443][ T2961] bridge0: port 2(bridge_slave_1) entered disabled state [ 1508.777466][T14387] Bluetooth: hci2: command tx timeout [ 1510.937617][T14738] usb 2-1: new high-speed USB device number 69 using dummy_hcd [ 1510.958632][ T2961] bridge_slave_0: left allmulticast mode [ 1510.964347][ T2961] bridge_slave_0: left promiscuous mode [ 1511.019881][ T2961] bridge0: port 1(bridge_slave_0) entered disabled state [ 1511.834501][ T2961] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1512.088174][ T2961] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1512.157740][ T2961] bond0 (unregistering): Released all slaves [ 1512.174547][ T30] audit: type=1400 audit(1725134111.440:1028): lsm=SMACK fn=smack_socket_sock_rcv_skb action=denied subject="*" object="_" requested=w pid=17763 comm="syz.4.2673" saddr=172.30.0.5 daddr=172.20.20.170 [ 1512.218814][T17702] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1512.225805][T17702] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1512.251882][ C1] vkms_vblank_simulate: vblank timer overrun [ 1512.327314][T17702] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1512.424955][T17761] netlink: 'syz.1.2671': attribute type 10 has an invalid length. [ 1512.439185][ T5239] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1512.462382][ T5239] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1512.475356][ T5239] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1512.487091][ T5239] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1512.497975][ T5239] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 1512.527999][ T5239] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1512.875228][ T2961] hsr_slave_0: left promiscuous mode [ 1512.938165][ T2961] hsr_slave_1: left promiscuous mode [ 1512.943700][T14738] usb 5-1: new high-speed USB device number 68 using dummy_hcd [ 1512.956070][ T2961] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1513.047979][ T2961] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1513.147620][T17772] sctp: [Deprecated]: syz.1.2675 (pid 17772) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1513.147620][T17772] Use struct sctp_sack_info instead [ 1513.217354][T14738] usb 5-1: Using ep0 maxpacket: 32 [ 1513.224972][T14738] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1513.252392][T14738] usb 5-1: config 0 has no interfaces? [ 1513.283934][T14738] usb 5-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c [ 1513.307281][T14738] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1513.335035][T14738] usb 5-1: Product: syz [ 1513.344452][T14738] usb 5-1: Manufacturer: syz [ 1513.364038][T14738] usb 5-1: SerialNumber: syz [ 1513.382774][T14738] usb 5-1: config 0 descriptor?? [ 1513.684772][ T2961] team0 (unregistering): Port device team_slave_1 removed [ 1513.773266][ T2961] team0 (unregistering): Port device team_slave_0 removed [ 1514.044276][ T30] audit: type=1400 audit(1725134113.310:1029): lsm=SMACK fn=smack_socket_sock_rcv_skb action=denied subject="*" object="_" requested=w pid=17776 comm="syz.1.2677" saddr=172.30.0.2 daddr=172.20.20.170 [ 1514.495595][ T30] audit: type=1326 audit(1725134113.760:1030): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17776 comm="syz.1.2677" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f0856f79eb9 code=0x0 [ 1514.618440][T14387] Bluetooth: hci4: command tx timeout [ 1514.653405][T17702] hsr_slave_0: entered promiscuous mode [ 1514.702894][T17702] hsr_slave_1: entered promiscuous mode [ 1514.715890][T17702] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1514.724811][T17702] Cannot create hsr debugfs directory [ 1514.735479][T17522] 8021q: adding VLAN 0 to HW filter on device team0 [ 1514.776154][T17777] dvmrp0: entered allmulticast mode [ 1514.972021][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 1514.979311][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1515.037517][ T25] usb 2-1: new high-speed USB device number 70 using dummy_hcd [ 1515.054783][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 1515.062165][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1515.258030][ T25] usb 2-1: Using ep0 maxpacket: 16 [ 1515.268011][ T25] usb 2-1: config 0 has an invalid interface number: 2 but max is 0 [ 1515.278255][ T25] usb 2-1: config 0 has no interface number 0 [ 1515.287266][ T25] usb 2-1: config 0 interface 2 altsetting 172 has 0 endpoint descriptors, different from the interface descriptor's value: 20 [ 1515.311889][ T25] usb 2-1: config 0 interface 2 has no altsetting 0 [ 1515.327442][ T25] usb 2-1: New USB device found, idVendor=046d, idProduct=08b2, bcdDevice=80.59 [ 1515.344992][ T25] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1515.360582][ T25] usb 2-1: Product: syz [ 1515.364848][ T25] usb 2-1: Manufacturer: syz [ 1515.377280][ T25] usb 2-1: SerialNumber: syz [ 1515.395670][ T25] usb 2-1: config 0 descriptor?? [ 1515.433616][ T9590] usb 5-1: USB disconnect, device number 68 [ 1516.705634][T14387] Bluetooth: hci4: command tx timeout [ 1516.740222][T17777] dvmrp0: left allmulticast mode [ 1517.245940][T17522] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1517.309167][T17522] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1517.419695][T17766] chnl_net:caif_netlink_parms(): no params data found [ 1517.657540][T14738] usb 5-1: new high-speed USB device number 69 using dummy_hcd [ 1517.899724][T14738] usb 5-1: Using ep0 maxpacket: 16 [ 1517.977824][T14738] usb 5-1: config 0 has an invalid interface number: 134 but max is 3 [ 1517.986228][T14738] usb 5-1: config 0 has an invalid interface number: 9 but max is 3 [ 1518.026313][T14738] usb 5-1: config 0 has an invalid interface number: 155 but max is 3 [ 1518.058565][T14738] usb 5-1: config 0 contains an unexpected descriptor of type 0x2, skipping [ 1518.069115][T14738] usb 5-1: config 0 has an invalid interface number: 65 but max is 3 [ 1518.451784][T14738] usb 5-1: config 0 contains an unexpected descriptor of type 0x2, skipping [ 1518.489444][ T25] usb 2-1: USB disconnect, device number 70 [ 1518.777328][T14387] Bluetooth: hci4: command tx timeout [ 1519.763223][T14738] usb 5-1: config 0 contains an unexpected descriptor of type 0x1, skipping [ 1519.772177][T14738] usb 5-1: config 0 has no interface number 0 [ 1519.782814][T14738] usb 5-1: config 0 has no interface number 1 [ 1519.800679][T14738] usb 5-1: config 0 has no interface number 2 [ 1520.498356][T14738] usb 5-1: config 0 has no interface number 3 [ 1520.504588][T14738] usb 5-1: config 0 interface 9 altsetting 253 endpoint 0xC has invalid maxpacket 592, setting to 64 [ 1520.525972][T14738] usb 5-1: config 0 interface 9 altsetting 253 has a duplicate endpoint with address 0xC, skipping [ 1520.598863][T14738] usb 5-1: config 0 interface 9 altsetting 253 endpoint 0xE has invalid maxpacket 1023, setting to 64 [ 1520.610532][T14738] usb 5-1: config 0 interface 9 altsetting 253 has a duplicate endpoint with address 0xA, skipping [ 1520.624739][T14738] usb 5-1: config 0 interface 9 altsetting 253 endpoint 0x9 has invalid maxpacket 512, setting to 64 [ 1520.635843][T14738] usb 5-1: config 0 interface 9 altsetting 253 has a duplicate endpoint with address 0xC, skipping [ 1520.646710][T14738] usb 5-1: config 0 interface 155 altsetting 3 has a duplicate endpoint with address 0xA, skipping [ 1520.677293][T14738] usb 5-1: config 0 interface 155 altsetting 3 has a duplicate endpoint with address 0xE, skipping [ 1520.698810][T14738] usb 5-1: config 0 interface 155 altsetting 3 has a duplicate endpoint with address 0xC, skipping [ 1520.724699][T14738] usb 5-1: config 0 interface 155 altsetting 3 has a duplicate endpoint with address 0xD, skipping [ 1520.736714][T14738] usb 5-1: config 0 interface 155 altsetting 3 endpoint 0xB has invalid maxpacket 512, setting to 64 [ 1520.748114][T14738] usb 5-1: config 0 interface 155 altsetting 3 has a duplicate endpoint with address 0xB, skipping [ 1520.759162][T14738] usb 5-1: config 0 interface 155 altsetting 3 has a duplicate endpoint with address 0xD, skipping [ 1520.771576][T14738] usb 5-1: config 0 interface 155 altsetting 3 endpoint 0x2 has invalid maxpacket 1023, setting to 64 [ 1520.788507][T14738] usb 5-1: config 0 interface 155 altsetting 3 has a duplicate endpoint with address 0x4, skipping [ 1520.811187][ T30] audit: type=1400 audit(1725134120.080:1031): lsm=SMACK fn=smack_socket_sock_rcv_skb action=denied subject="*" object="_" requested=w pid=17802 comm="syz.4.2681" saddr=172.30.0.5 daddr=172.20.20.170 [ 1520.837423][T14738] usb 5-1: config 0 interface 155 altsetting 3 has a duplicate endpoint with address 0xA, skipping [ 1520.850588][T14738] usb 5-1: config 0 interface 65 altsetting 129 bulk endpoint 0x7 has invalid maxpacket 1024 [ 1520.861310][T14387] Bluetooth: hci4: command tx timeout [ 1520.876387][T14738] usb 5-1: config 0 interface 65 altsetting 129 has an invalid descriptor for endpoint zero, skipping [ 1520.927672][T14738] usb 5-1: config 0 interface 65 altsetting 129 endpoint 0x1 has invalid maxpacket 1024, setting to 64 [ 1520.974111][T14738] usb 5-1: config 0 interface 65 altsetting 129 has a duplicate endpoint with address 0x4, skipping [ 1521.019673][T14738] usb 5-1: config 0 interface 65 altsetting 129 has an invalid descriptor for endpoint zero, skipping [ 1521.077313][T14738] usb 5-1: config 0 interface 65 altsetting 129 has an endpoint descriptor with address 0xA7, changing to 0x87 [ 1521.111514][T14738] usb 5-1: config 0 interface 65 altsetting 129 endpoint 0x87 has invalid maxpacket 58749, setting to 1024 [ 1521.135771][T14738] usb 5-1: config 0 interface 65 altsetting 129 has an invalid descriptor for endpoint zero, skipping [ 1521.172608][T14738] usb 5-1: config 0 interface 65 altsetting 129 has 10 endpoint descriptors, different from the interface descriptor's value: 9 [ 1521.234553][T14738] usb 5-1: config 0 interface 134 has no altsetting 0 [ 1521.274535][T14738] usb 5-1: config 0 interface 9 has no altsetting 0 [ 1521.357930][T14738] usb 5-1: config 0 interface 155 has no altsetting 0 [ 1521.371474][T14738] usb 5-1: config 0 interface 65 has no altsetting 0 [ 1521.404715][T14738] usb 5-1: string descriptor 0 read error: -71 [ 1521.416980][T14738] usb 5-1: New USB device found, idVendor=13d2, idProduct=0400, bcdDevice=55.54 [ 1521.426898][T14738] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1521.441123][T17814] sctp: [Deprecated]: syz.1.2683 (pid 17814) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1521.441123][T17814] Use struct sctp_sack_info instead [ 1521.461475][T17806] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 1521.473185][T14738] usb 5-1: config 0 descriptor?? [ 1521.518054][T14738] usb 5-1: can't set config #0, error -71 [ 1521.524940][T17806] kvm: pic: non byte read [ 1521.554317][T14738] usb 5-1: USB disconnect, device number 69 [ 1521.589183][T17766] bridge0: port 1(bridge_slave_0) entered blocking state [ 1521.597523][T17766] bridge0: port 1(bridge_slave_0) entered disabled state [ 1521.604835][T17766] bridge_slave_0: entered allmulticast mode [ 1521.640694][T17766] bridge_slave_0: entered promiscuous mode [ 1521.693942][T17766] bridge0: port 2(bridge_slave_1) entered blocking state [ 1521.704868][T17766] bridge0: port 2(bridge_slave_1) entered disabled state [ 1521.713395][T17766] bridge_slave_1: entered allmulticast mode [ 1521.721494][T17766] bridge_slave_1: entered promiscuous mode [ 1521.790853][T17522] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1521.848857][T17766] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1521.890561][T17702] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1521.914604][T17766] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1521.941844][T17702] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1521.999187][T17702] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1522.140045][T17702] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1522.190022][T17766] team0: Port device team_slave_0 added [ 1522.218020][ T2961] bridge_slave_1: left allmulticast mode [ 1522.223722][ T2961] bridge_slave_1: left promiscuous mode [ 1522.248911][ T2961] bridge0: port 2(bridge_slave_1) entered disabled state [ 1522.278801][ T2961] bridge_slave_0: left allmulticast mode [ 1522.287619][ T2961] bridge_slave_0: left promiscuous mode [ 1522.293535][ T2961] bridge0: port 1(bridge_slave_0) entered disabled state [ 1528.064186][ T5239] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1528.074064][ T30] audit: type=1400 audit(1725134127.340:1032): lsm=SMACK fn=smack_socket_sock_rcv_skb action=denied subject="*" object="_" requested=w pid=17832 comm="syz.4.2687" saddr=172.30.0.5 daddr=172.20.20.170 [ 1528.112158][ T5239] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1528.134019][ T5239] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1528.176822][ T5239] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1528.198140][ T5239] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 1528.217627][ T5239] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1528.304539][ T30] audit: type=1326 audit(1725134127.570:1033): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17832 comm="syz.4.2687" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb15f779eb9 code=0x0 [ 1528.453661][ T2961] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1528.465426][ T2961] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1528.481242][ T2961] bond0 (unregistering): Released all slaves [ 1528.518351][T17766] team0: Port device team_slave_1 added [ 1528.607058][T17838] dvmrp0: entered allmulticast mode [ 1528.770096][ T9] usb 5-1: new high-speed USB device number 70 using dummy_hcd [ 1529.040753][ T2961] hsr_slave_0: left promiscuous mode [ 1529.051714][ T2961] hsr_slave_1: left promiscuous mode [ 1529.059248][ T2961] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1529.073458][ T2961] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1529.127518][ T9] usb 5-1: Using ep0 maxpacket: 16 [ 1529.584893][ T25] usb 2-1: new high-speed USB device number 71 using dummy_hcd [ 1529.797538][ T25] usb 2-1: Using ep0 maxpacket: 16 [ 1529.810438][ T25] usb 2-1: config 0 has an invalid interface number: 134 but max is 3 [ 1529.839805][ T25] usb 2-1: config 0 has an invalid interface number: 9 but max is 3 [ 1529.885907][ T25] usb 2-1: config 0 has an invalid interface number: 155 but max is 3 [ 1529.923676][ T25] usb 2-1: config 0 contains an unexpected descriptor of type 0x2, skipping [ 1529.969204][ T25] usb 2-1: config 0 has an invalid interface number: 65 but max is 3 [ 1530.009774][ T25] usb 2-1: config 0 contains an unexpected descriptor of type 0x2, skipping [ 1530.049036][ T25] usb 2-1: config 0 contains an unexpected descriptor of type 0x1, skipping [ 1530.098764][ T25] usb 2-1: config 0 has no interface number 0 [ 1530.129266][ T25] usb 2-1: config 0 has no interface number 1 [ 1530.135679][ T25] usb 2-1: config 0 has no interface number 2 [ 1530.165348][ T25] usb 2-1: config 0 has no interface number 3 [ 1530.200993][ T25] usb 2-1: config 0 interface 9 altsetting 253 endpoint 0xC has invalid maxpacket 592, setting to 64 [ 1530.250966][ T25] usb 2-1: config 0 interface 9 altsetting 253 has a duplicate endpoint with address 0xC, skipping [ 1530.303709][T14387] Bluetooth: hci5: command tx timeout [ 1530.325769][ T25] usb 2-1: config 0 interface 9 altsetting 253 endpoint 0xE has invalid maxpacket 1023, setting to 64 [ 1530.349245][ T25] usb 2-1: config 0 interface 9 altsetting 253 has a duplicate endpoint with address 0xA, skipping [ 1530.360352][ T25] usb 2-1: config 0 interface 9 altsetting 253 endpoint 0x9 has invalid maxpacket 512, setting to 64 [ 1530.371551][ T25] usb 2-1: config 0 interface 9 altsetting 253 has a duplicate endpoint with address 0xC, skipping [ 1530.382713][ T25] usb 2-1: config 0 interface 155 altsetting 3 has a duplicate endpoint with address 0xA, skipping [ 1530.394279][ T25] usb 2-1: config 0 interface 155 altsetting 3 has a duplicate endpoint with address 0xE, skipping [ 1530.405172][ T25] usb 2-1: config 0 interface 155 altsetting 3 has a duplicate endpoint with address 0xC, skipping [ 1530.422522][ T25] usb 2-1: config 0 interface 155 altsetting 3 has a duplicate endpoint with address 0xD, skipping [ 1530.448119][ T25] usb 2-1: config 0 interface 155 altsetting 3 endpoint 0xB has invalid maxpacket 512, setting to 64 [ 1530.448518][ T9] usb 5-1: config 0 has an invalid interface number: 5 but max is 0 [ 1530.460271][ T25] usb 2-1: config 0 interface 155 altsetting 3 has a duplicate endpoint with address 0xB, skipping [ 1530.478458][ T9] usb 5-1: config 0 has no interface number 0 [ 1530.487902][ T9] usb 5-1: config 0 interface 5 altsetting 172 has 0 endpoint descriptors, different from the interface descriptor's value: 20 [ 1530.503757][ T25] usb 2-1: config 0 interface 155 altsetting 3 has a duplicate endpoint with address 0xD, skipping [ 1530.516096][ T9] usb 5-1: config 0 interface 5 has no altsetting 0 [ 1530.518229][ T25] usb 2-1: config 0 interface 155 altsetting 3 endpoint 0x2 has invalid maxpacket 1023, setting to 64 [ 1530.553997][ T25] usb 2-1: config 0 interface 155 altsetting 3 has a duplicate endpoint with address 0x4, skipping [ 1530.567570][ T9] usb 5-1: New USB device found, idVendor=046d, idProduct=08b2, bcdDevice=80.59 [ 1530.583544][ T25] usb 2-1: config 0 interface 155 altsetting 3 has a duplicate endpoint with address 0xA, skipping [ 1530.586963][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1530.604013][ T25] usb 2-1: config 0 interface 65 altsetting 129 bulk endpoint 0x7 has invalid maxpacket 1024 [ 1530.629117][ T9] usb 5-1: Product: syz [ 1530.633357][ T9] usb 5-1: Manufacturer: syz [ 1530.636202][ T25] usb 2-1: config 0 interface 65 altsetting 129 has an invalid descriptor for endpoint zero, skipping [ 1530.655651][ T25] usb 2-1: config 0 interface 65 altsetting 129 endpoint 0x1 has invalid maxpacket 1024, setting to 64 [ 1530.655675][ T9] usb 5-1: SerialNumber: syz [ 1530.671701][ T25] usb 2-1: config 0 interface 65 altsetting 129 has a duplicate endpoint with address 0x4, skipping [ 1530.683162][ T25] usb 2-1: config 0 interface 65 altsetting 129 has an invalid descriptor for endpoint zero, skipping [ 1530.686317][ T9] usb 5-1: config 0 descriptor?? [ 1530.704872][ T2961] team0 (unregistering): Port device team_slave_1 removed [ 1530.735214][ T25] usb 2-1: config 0 interface 65 altsetting 129 has an endpoint descriptor with address 0xA7, changing to 0x87 [ 1530.747397][ T25] usb 2-1: config 0 interface 65 altsetting 129 endpoint 0x87 has invalid maxpacket 58749, setting to 1024 [ 1530.763524][ T25] usb 2-1: config 0 interface 65 altsetting 129 has an invalid descriptor for endpoint zero, skipping [ 1530.776053][ T25] usb 2-1: config 0 interface 65 altsetting 129 has 10 endpoint descriptors, different from the interface descriptor's value: 9 [ 1530.791469][ T2961] team0 (unregistering): Port device team_slave_0 removed [ 1530.791643][ T25] usb 2-1: config 0 interface 134 has no altsetting 0 [ 1530.806139][ T25] usb 2-1: config 0 interface 9 has no altsetting 0 [ 1530.813279][ T25] usb 2-1: config 0 interface 155 has no altsetting 0 [ 1530.820580][ T25] usb 2-1: config 0 interface 65 has no altsetting 0 [ 1530.842113][ T25] usb 2-1: New USB device found, idVendor=13d2, idProduct=0400, bcdDevice=55.54 [ 1530.851520][ T25] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1530.871701][ T25] usb 2-1: Product: syz [ 1530.875925][ T25] usb 2-1: Manufacturer: syz [ 1530.881152][ T25] usb 2-1: SerialNumber: syz [ 1530.918611][ T25] usb 2-1: config 0 descriptor?? [ 1531.673917][T17766] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1531.684130][T17766] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1531.716703][T17766] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1531.732227][T17766] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1531.747315][T17766] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1531.782688][T17766] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1531.867664][T17833] dvmrp0: left allmulticast mode [ 1532.170905][ T9] usb 5-1: USB disconnect, device number 70 [ 1532.316600][ T25] kaweth 2-1:0.134: Firmware present in device. [ 1532.323448][ T25] kaweth 2-1:0.134: Error reading configuration (-71), no net device created [ 1532.333503][ T25] kaweth 2-1:0.134: probe with driver kaweth failed with error -5 [ 1532.334919][T17766] hsr_slave_0: entered promiscuous mode [ 1532.356813][ T25] kaweth 2-1:0.9: Firmware present in device. [ 1532.377608][T14387] Bluetooth: hci5: command tx timeout [ 1532.388823][T17766] hsr_slave_1: entered promiscuous mode [ 1532.398076][ T25] kaweth 2-1:0.9: Error reading configuration (-71), no net device created [ 1532.421783][ T25] kaweth 2-1:0.9: probe with driver kaweth failed with error -5 [ 1532.433915][T17766] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1532.447701][ T25] kaweth 2-1:0.155: Firmware present in device. [ 1532.454653][ T25] kaweth 2-1:0.155: Error reading configuration (-71), no net device created [ 1532.464933][T17766] Cannot create hsr debugfs directory [ 1532.465570][ T25] kaweth 2-1:0.155: probe with driver kaweth failed with error -5 [ 1532.498068][ T25] kaweth 2-1:0.65: Firmware present in device. [ 1532.499284][ T25] kaweth 2-1:0.65: Error reading configuration (-71), no net device created [ 1532.499474][ T25] kaweth 2-1:0.65: probe with driver kaweth failed with error -5 [ 1532.508484][ T25] usb 2-1: USB disconnect, device number 71 [ 1532.997892][T17860] sctp: [Deprecated]: syz.1.2692 (pid 17860) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1532.997892][T17860] Use struct sctp_sack_info instead [ 1533.681505][T17835] chnl_net:caif_netlink_parms(): no params data found [ 1534.497362][T14387] Bluetooth: hci5: command tx timeout [ 1536.261003][T17702] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1536.336189][ T30] audit: type=1400 audit(1725134135.600:1034): lsm=SMACK fn=smack_socket_sock_rcv_skb action=denied subject="*" object="_" requested=w pid=17877 comm="syz.4.2696" saddr=172.30.0.5 daddr=172.20.20.170 [ 1536.537603][T14387] Bluetooth: hci5: command tx timeout [ 1536.638422][T17835] bridge0: port 1(bridge_slave_0) entered blocking state [ 1536.651406][T17835] bridge0: port 1(bridge_slave_0) entered disabled state [ 1536.667927][T17835] bridge_slave_0: entered allmulticast mode [ 1536.858389][T17835] bridge_slave_0: entered promiscuous mode [ 1537.186441][ T30] audit: type=1326 audit(1725134136.450:1035): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17877 comm="syz.4.2696" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb15f779eb9 code=0x0 [ 1537.307535][ T5280] usb 2-1: new high-speed USB device number 72 using dummy_hcd [ 1537.420830][T17879] dvmrp0: entered allmulticast mode [ 1537.481374][T17835] bridge0: port 2(bridge_slave_1) entered blocking state [ 1537.517499][ T5280] usb 2-1: Using ep0 maxpacket: 16 [ 1537.529348][T17835] bridge0: port 2(bridge_slave_1) entered disabled state [ 1537.553498][ T5280] usb 2-1: config 0 has an invalid interface number: 134 but max is 3 [ 1537.605761][ T5280] usb 2-1: config 0 has an invalid interface number: 9 but max is 3 [ 1537.660413][ T5280] usb 2-1: config 0 has an invalid interface number: 155 but max is 3 [ 1537.678501][T17835] bridge_slave_1: entered allmulticast mode [ 1537.720113][T17835] bridge_slave_1: entered promiscuous mode [ 1537.726106][ T5280] usb 2-1: config 0 contains an unexpected descriptor of type 0x2, skipping [ 1537.791726][ T5280] usb 2-1: config 0 has an invalid interface number: 65 but max is 3 [ 1537.851796][ T5280] usb 2-1: config 0 contains an unexpected descriptor of type 0x2, skipping [ 1537.898944][ T5280] usb 2-1: config 0 contains an unexpected descriptor of type 0x1, skipping [ 1537.938820][T17702] 8021q: adding VLAN 0 to HW filter on device team0 [ 1537.949409][ T5280] usb 2-1: config 0 has no interface number 0 [ 1537.955597][ T5280] usb 2-1: config 0 has no interface number 1 [ 1537.981323][ T5280] usb 2-1: config 0 has no interface number 2 [ 1538.008863][ T5280] usb 2-1: config 0 has no interface number 3 [ 1538.036762][ T5280] usb 2-1: config 0 interface 9 altsetting 253 endpoint 0xC has invalid maxpacket 592, setting to 64 [ 1538.093504][ T5280] usb 2-1: config 0 interface 9 altsetting 253 has a duplicate endpoint with address 0xC, skipping [ 1538.142330][ T5280] usb 2-1: config 0 interface 9 altsetting 253 endpoint 0xE has invalid maxpacket 1023, setting to 64 [ 1538.190261][ T2909] bridge0: port 1(bridge_slave_0) entered blocking state [ 1538.197541][ T2909] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1538.216134][ T5280] usb 2-1: config 0 interface 9 altsetting 253 has a duplicate endpoint with address 0xA, skipping [ 1538.260349][ T5280] usb 2-1: config 0 interface 9 altsetting 253 endpoint 0x9 has invalid maxpacket 512, setting to 64 [ 1538.291652][ T2909] bridge0: port 2(bridge_slave_1) entered blocking state [ 1538.298896][ T2909] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1538.331253][ T5280] usb 2-1: config 0 interface 9 altsetting 253 has a duplicate endpoint with address 0xC, skipping [ 1538.371725][ T5280] usb 2-1: config 0 interface 155 altsetting 3 has a duplicate endpoint with address 0xA, skipping [ 1538.384867][ T5280] usb 2-1: config 0 interface 155 altsetting 3 has a duplicate endpoint with address 0xE, skipping [ 1538.415476][ T5280] usb 2-1: config 0 interface 155 altsetting 3 has a duplicate endpoint with address 0xC, skipping [ 1538.461120][ T5280] usb 2-1: config 0 interface 155 altsetting 3 has a duplicate endpoint with address 0xD, skipping [ 1538.468873][T17702] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1538.489789][ T5280] usb 2-1: config 0 interface 155 altsetting 3 endpoint 0xB has invalid maxpacket 512, setting to 64 [ 1538.503675][ T5280] usb 2-1: config 0 interface 155 altsetting 3 has a duplicate endpoint with address 0xB, skipping [ 1538.506031][ T2961] bridge_slave_1: left allmulticast mode [ 1538.516393][ T5280] usb 2-1: config 0 interface 155 altsetting 3 has a duplicate endpoint with address 0xD, skipping [ 1538.534207][ T5280] usb 2-1: config 0 interface 155 altsetting 3 endpoint 0x2 has invalid maxpacket 1023, setting to 64 [ 1538.537925][ T2961] bridge_slave_1: left promiscuous mode [ 1538.547084][ T5280] usb 2-1: config 0 interface 155 altsetting 3 has a duplicate endpoint with address 0x4, skipping [ 1538.562743][ T5280] usb 2-1: config 0 interface 155 altsetting 3 has a duplicate endpoint with address 0xA, skipping [ 1538.574190][ T5280] usb 2-1: config 0 interface 65 altsetting 129 bulk endpoint 0x7 has invalid maxpacket 1024 [ 1538.580261][ T2961] bridge0: port 2(bridge_slave_1) entered disabled state [ 1538.585932][ T5280] usb 2-1: config 0 interface 65 altsetting 129 has an invalid descriptor for endpoint zero, skipping [ 1538.602981][T12993] usb 5-1: new high-speed USB device number 71 using dummy_hcd [ 1538.613277][ T2961] bridge_slave_0: left allmulticast mode [ 1538.614370][ T5280] usb 2-1: config 0 interface 65 altsetting 129 endpoint 0x1 has invalid maxpacket 1024, setting to 64 [ 1538.627767][ T2961] bridge_slave_0: left promiscuous mode [ 1538.631964][ T5280] usb 2-1: config 0 interface 65 altsetting 129 has a duplicate endpoint with address 0x4, skipping [ 1538.636295][ T2961] bridge0: port 1(bridge_slave_0) entered disabled state [ 1538.647051][ T5280] usb 2-1: config 0 interface 65 altsetting 129 has an invalid descriptor for endpoint zero, skipping [ 1538.665501][ T5280] usb 2-1: config 0 interface 65 altsetting 129 has an endpoint descriptor with address 0xA7, changing to 0x87 [ 1538.677523][ T5280] usb 2-1: config 0 interface 65 altsetting 129 endpoint 0x87 has invalid maxpacket 58749, setting to 1024 [ 1538.691091][ T5280] usb 2-1: config 0 interface 65 altsetting 129 has an invalid descriptor for endpoint zero, skipping [ 1538.702648][ T5280] usb 2-1: config 0 interface 65 altsetting 129 has 10 endpoint descriptors, different from the interface descriptor's value: 9 [ 1538.716383][ T5280] usb 2-1: config 0 interface 134 has no altsetting 0 [ 1538.726386][ T5280] usb 2-1: config 0 interface 9 has no altsetting 0 [ 1538.733388][ T5280] usb 2-1: config 0 interface 155 has no altsetting 0 [ 1538.741868][ T5280] usb 2-1: config 0 interface 65 has no altsetting 0 [ 1538.754065][ T5280] usb 2-1: New USB device found, idVendor=13d2, idProduct=0400, bcdDevice=55.54 [ 1538.773491][ T5280] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1538.782100][ T5280] usb 2-1: Product: syz [ 1538.786825][ T5280] usb 2-1: Manufacturer: syz [ 1538.791768][T12993] usb 5-1: Using ep0 maxpacket: 16 [ 1538.799264][T12993] usb 5-1: config 0 has an invalid interface number: 5 but max is 0 [ 1538.807560][T12993] usb 5-1: config 0 has no interface number 0 [ 1538.813742][T12993] usb 5-1: config 0 interface 5 altsetting 172 has 0 endpoint descriptors, different from the interface descriptor's value: 20 [ 1538.829775][ T5280] usb 2-1: SerialNumber: syz [ 1538.838208][ T5280] usb 2-1: config 0 descriptor?? [ 1538.843643][T12993] usb 5-1: config 0 interface 5 has no altsetting 0 [ 1538.856962][T12993] usb 5-1: New USB device found, idVendor=046d, idProduct=08b2, bcdDevice=80.59 [ 1538.866752][T12993] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1538.875309][T12993] usb 5-1: Product: syz [ 1538.880203][T12993] usb 5-1: Manufacturer: syz [ 1538.884861][T12993] usb 5-1: SerialNumber: syz [ 1538.905940][T12993] usb 5-1: config 0 descriptor?? [ 1539.335788][ T2961] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1539.353357][ T2961] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1539.368912][ T2961] bond0 (unregistering): Released all slaves [ 1539.390503][T17835] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1539.405595][T17835] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1539.464895][T17879] dvmrp0: left allmulticast mode [ 1539.644686][ T2961] hsr_slave_0: left promiscuous mode [ 1539.662734][ T2961] hsr_slave_1: left promiscuous mode [ 1539.682032][ T2961] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1539.708402][ T2961] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1540.245648][ T5280] kaweth 2-1:0.134: Firmware present in device. [ 1540.258220][ T5280] kaweth 2-1:0.134: Error reading configuration (-71), no net device created [ 1540.271191][ T5280] kaweth 2-1:0.134: probe with driver kaweth failed with error -5 [ 1540.295182][ T5280] kaweth 2-1:0.9: Firmware present in device. [ 1540.301882][ T5280] kaweth 2-1:0.9: Error reading configuration (-71), no net device created [ 1540.311135][ T5280] kaweth 2-1:0.9: probe with driver kaweth failed with error -5 [ 1540.364985][ T5280] kaweth 2-1:0.155: Firmware present in device. [ 1540.372339][ T5280] kaweth 2-1:0.155: Error reading configuration (-71), no net device created [ 1540.387749][ T5280] kaweth 2-1:0.155: probe with driver kaweth failed with error -5 [ 1540.437437][ T5280] kaweth 2-1:0.65: Firmware present in device. [ 1540.453873][ T5280] kaweth 2-1:0.65: Error reading configuration (-71), no net device created [ 1540.487683][ T5280] kaweth 2-1:0.65: probe with driver kaweth failed with error -5 [ 1540.505746][ T5280] usb 2-1: USB disconnect, device number 72 [ 1540.671531][ T2961] team0 (unregistering): Port device team_slave_1 removed [ 1540.763937][T12993] usb 5-1: USB disconnect, device number 71 [ 1540.811914][ T2961] team0 (unregistering): Port device team_slave_0 removed [ 1541.824802][T17904] ufs: Invalid option: "ü" or missing value [ 1541.832243][T17904] ufs: wrong mount options [ 1542.639055][T17910] ebt_limit: overflow, try lower: 0/0 [ 1543.492691][T17835] team0: Port device team_slave_0 added [ 1543.601690][T17835] team0: Port device team_slave_1 added [ 1543.735041][T17835] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1543.745434][T17835] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1543.771476][ C1] vkms_vblank_simulate: vblank timer overrun [ 1543.947847][T17835] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1543.964396][T17835] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1543.972123][T17835] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1544.065634][T17835] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1544.184517][T17766] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1544.339125][T17766] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1544.376113][T17766] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1544.426182][T17766] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1544.591427][ T9590] usb 2-1: new high-speed USB device number 73 using dummy_hcd [ 1544.897528][ T9590] usb 2-1: Using ep0 maxpacket: 16 [ 1544.985475][ T9590] usb 2-1: config 0 has an invalid interface number: 134 but max is 3 [ 1545.072130][ T9590] usb 2-1: config 0 has an invalid interface number: 9 but max is 3 [ 1545.144756][ T9590] usb 2-1: config 0 has an invalid interface number: 155 but max is 3 [ 1545.232267][ T9590] usb 2-1: config 0 contains an unexpected descriptor of type 0x2, skipping [ 1545.291080][ T9590] usb 2-1: config 0 has an invalid interface number: 65 but max is 3 [ 1545.358701][ T9590] usb 2-1: config 0 contains an unexpected descriptor of type 0x2, skipping [ 1545.411641][T17835] hsr_slave_0: entered promiscuous mode [ 1545.425537][ T9590] usb 2-1: config 0 contains an unexpected descriptor of type 0x1, skipping [ 1545.459175][T17835] hsr_slave_1: entered promiscuous mode [ 1545.472648][T17835] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1545.485456][ T9590] usb 2-1: config 0 has no interface number 0 [ 1545.512807][ T9590] usb 2-1: config 0 has no interface number 1 [ 1545.521401][T17835] Cannot create hsr debugfs directory [ 1545.543798][ T9590] usb 2-1: config 0 has no interface number 2 [ 1545.556290][ T9590] usb 2-1: config 0 has no interface number 3 [ 1545.563898][ T30] audit: type=1400 audit(1725134144.830:1036): lsm=SMACK fn=smack_socket_sock_rcv_skb action=denied subject="*" object="_" requested=w pid=17934 comm="syz.4.2707" saddr=172.30.0.5 daddr=172.20.20.170 [ 1545.580944][T17702] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1545.583506][ C1] vkms_vblank_simulate: vblank timer overrun [ 1545.596724][ T9590] usb 2-1: config 0 interface 9 altsetting 253 endpoint 0xC has invalid maxpacket 592, setting to 64 [ 1545.618256][ T9590] usb 2-1: config 0 interface 9 altsetting 253 has a duplicate endpoint with address 0xC, skipping [ 1545.647130][ T9590] usb 2-1: config 0 interface 9 altsetting 253 endpoint 0xE has invalid maxpacket 1023, setting to 64 [ 1545.672489][ T9590] usb 2-1: config 0 interface 9 altsetting 253 has a duplicate endpoint with address 0xA, skipping [ 1545.703234][ T9590] usb 2-1: config 0 interface 9 altsetting 253 endpoint 0x9 has invalid maxpacket 512, setting to 64 [ 1545.727036][ T9590] usb 2-1: config 0 interface 9 altsetting 253 has a duplicate endpoint with address 0xC, skipping [ 1545.757398][ T9590] usb 2-1: config 0 interface 155 altsetting 3 has a duplicate endpoint with address 0xA, skipping [ 1545.780449][ T9590] usb 2-1: config 0 interface 155 altsetting 3 has a duplicate endpoint with address 0xE, skipping [ 1545.803694][ T9590] usb 2-1: config 0 interface 155 altsetting 3 has a duplicate endpoint with address 0xC, skipping [ 1545.824909][T17702] veth0_vlan: entered promiscuous mode [ 1545.827577][ T9590] usb 2-1: config 0 interface 155 altsetting 3 has a duplicate endpoint with address 0xD, skipping [ 1545.854353][ T9590] usb 2-1: config 0 interface 155 altsetting 3 endpoint 0xB has invalid maxpacket 512, setting to 64 [ 1545.872575][ T9590] usb 2-1: config 0 interface 155 altsetting 3 has a duplicate endpoint with address 0xB, skipping [ 1545.895933][ T9590] usb 2-1: config 0 interface 155 altsetting 3 has a duplicate endpoint with address 0xD, skipping [ 1545.922256][ T9590] usb 2-1: config 0 interface 155 altsetting 3 endpoint 0x2 has invalid maxpacket 1023, setting to 64 [ 1545.945829][ T9590] usb 2-1: config 0 interface 155 altsetting 3 has a duplicate endpoint with address 0x4, skipping [ 1545.961137][ T9590] usb 2-1: config 0 interface 155 altsetting 3 has a duplicate endpoint with address 0xA, skipping [ 1545.983845][ T9590] usb 2-1: config 0 interface 65 altsetting 129 bulk endpoint 0x7 has invalid maxpacket 1024 [ 1545.989594][T17702] veth1_vlan: entered promiscuous mode [ 1546.004302][ T9590] usb 2-1: config 0 interface 65 altsetting 129 has an invalid descriptor for endpoint zero, skipping [ 1546.032011][ T9590] usb 2-1: config 0 interface 65 altsetting 129 endpoint 0x1 has invalid maxpacket 1024, setting to 64 [ 1546.065710][ T9590] usb 2-1: config 0 interface 65 altsetting 129 has a duplicate endpoint with address 0x4, skipping [ 1546.090024][ T9590] usb 2-1: config 0 interface 65 altsetting 129 has an invalid descriptor for endpoint zero, skipping [ 1546.113625][ T9590] usb 2-1: config 0 interface 65 altsetting 129 has an endpoint descriptor with address 0xA7, changing to 0x87 [ 1546.139689][ T9590] usb 2-1: config 0 interface 65 altsetting 129 endpoint 0x87 has invalid maxpacket 58749, setting to 1024 [ 1546.164353][ T9590] usb 2-1: config 0 interface 65 altsetting 129 has an invalid descriptor for endpoint zero, skipping [ 1546.180819][ T9590] usb 2-1: config 0 interface 65 altsetting 129 has 10 endpoint descriptors, different from the interface descriptor's value: 9 [ 1546.201677][ T9590] usb 2-1: config 0 interface 134 has no altsetting 0 [ 1546.216139][ T9590] usb 2-1: config 0 interface 9 has no altsetting 0 [ 1546.236888][ T1270] ieee802154 phy1 wpan1: encryption failed: -22 [ 1546.245423][ T30] audit: type=1326 audit(1725134145.510:1037): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17934 comm="syz.4.2707" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb15f779eb9 code=0x0 [ 1546.256901][T17766] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1546.289776][ T9590] usb 2-1: config 0 interface 155 has no altsetting 0 [ 1546.296694][ T9590] usb 2-1: config 0 interface 65 has no altsetting 0 [ 1546.308679][ T9590] usb 2-1: New USB device found, idVendor=13d2, idProduct=0400, bcdDevice=55.54 [ 1546.315205][T17702] veth0_macvtap: entered promiscuous mode [ 1546.337513][ T9590] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1546.342804][T17935] dvmrp0: entered allmulticast mode [ 1546.345546][ T9590] usb 2-1: Product: syz [ 1546.365377][T17766] 8021q: adding VLAN 0 to HW filter on device team0 [ 1546.372290][ T9590] usb 2-1: Manufacturer: syz [ 1546.376968][ T9590] usb 2-1: SerialNumber: syz [ 1546.387817][ T9590] usb 2-1: config 0 descriptor?? [ 1546.403099][T17702] veth1_macvtap: entered promiscuous mode [ 1546.430209][ T6486] bridge0: port 1(bridge_slave_0) entered blocking state [ 1546.437534][ T6486] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1546.457857][ T2961] bridge0: port 2(bridge_slave_1) entered blocking state [ 1546.465130][ T2961] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1546.503603][T17702] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1546.514852][T17702] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1546.526254][T17702] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1546.540396][T17702] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1546.550714][T17702] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1546.562133][T17702] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1546.573852][T17702] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1546.584522][T17702] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1546.594580][T17702] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1546.605576][T17702] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1546.615967][T17702] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1546.626865][T17702] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1546.637015][T17702] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1546.647753][T17702] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1546.649631][ T25] usb 5-1: new high-speed USB device number 72 using dummy_hcd [ 1546.660441][T17702] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1546.700547][T17702] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1546.711933][T17702] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1546.724751][T17702] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1546.737756][T17702] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1546.748200][T17702] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1546.759217][T17702] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1546.769409][T17702] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1546.783677][T17702] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1546.793852][T17702] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1546.804510][T17702] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1546.814427][T17702] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1546.825069][T17702] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1546.835054][T17702] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1546.845691][T17702] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1546.847491][ T25] usb 5-1: Using ep0 maxpacket: 16 [ 1546.858675][T17702] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1546.882558][ T25] usb 5-1: config 0 has an invalid interface number: 5 but max is 0 [ 1546.896302][ T25] usb 5-1: config 0 has no interface number 0 [ 1546.903598][ T25] usb 5-1: config 0 interface 5 altsetting 172 has 0 endpoint descriptors, different from the interface descriptor's value: 20 [ 1546.917560][ T25] usb 5-1: config 0 interface 5 has no altsetting 0 [ 1546.927858][T17702] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1546.928703][ T25] usb 5-1: New USB device found, idVendor=046d, idProduct=08b2, bcdDevice=80.59 [ 1546.936956][T17702] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1546.947042][ T25] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1546.964844][ T25] usb 5-1: Product: syz [ 1546.969380][ T25] usb 5-1: Manufacturer: syz [ 1546.974098][ T25] usb 5-1: SerialNumber: syz [ 1546.983100][ T25] usb 5-1: config 0 descriptor?? [ 1546.989925][T17702] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1547.007404][T17702] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1547.238856][T17935] dvmrp0: left allmulticast mode [ 1547.347469][ T25] usb 5-1: USB disconnect, device number 72 [ 1547.486603][T17835] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1547.503005][T11842] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1547.512762][T11842] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1547.535190][T17835] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1547.571908][T17835] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1547.589501][T17835] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1547.630267][T11842] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1547.719591][T11842] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1547.810611][ T9590] kaweth 2-1:0.134: Firmware present in device. [ 1547.818480][ T9590] kaweth 2-1:0.134: Error reading configuration (-71), no net device created [ 1547.833871][T17835] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1547.841209][ T9590] kaweth 2-1:0.134: probe with driver kaweth failed with error -5 [ 1547.872902][T17835] 8021q: adding VLAN 0 to HW filter on device team0 [ 1547.902783][ T9590] kaweth 2-1:0.9: Firmware present in device. [ 1547.947698][ T9590] kaweth 2-1:0.9: Error reading configuration (-71), no net device created [ 1547.966880][ T6486] bridge0: port 1(bridge_slave_0) entered blocking state [ 1547.967390][ T9590] kaweth 2-1:0.9: probe with driver kaweth failed with error -5 [ 1547.974132][ T6486] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1548.041624][ T6486] bridge0: port 2(bridge_slave_1) entered blocking state [ 1548.048866][ T6486] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1548.101476][ T9590] kaweth 2-1:0.155: Firmware present in device. [ 1548.128326][ T9590] kaweth 2-1:0.155: Error reading configuration (-71), no net device created [ 1548.144364][ T9590] kaweth 2-1:0.155: probe with driver kaweth failed with error -5 [ 1550.770585][T17953] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2709'. [ 1551.397279][ T9590] kaweth 2-1:0.65: Firmware present in device. [ 1551.404968][ T9590] kaweth 2-1:0.65: Error reading configuration (-71), no net device created [ 1551.416236][ T9590] kaweth 2-1:0.65: probe with driver kaweth failed with error -5 [ 1551.503641][ T9590] usb 2-1: USB disconnect, device number 73 [ 1551.532363][T17766] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1553.915109][T17766] veth0_vlan: entered promiscuous mode [ 1553.936808][T17766] veth1_vlan: entered promiscuous mode [ 1555.031373][T17766] veth0_macvtap: entered promiscuous mode [ 1555.091204][T17766] veth1_macvtap: entered promiscuous mode [ 1555.133629][T17835] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1555.191513][T17766] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1555.203750][T17766] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1555.317266][T17766] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1555.337605][T17766] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1555.357630][T17766] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1555.368627][T17766] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1555.413750][T17766] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1555.508754][T17766] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1555.542608][T17766] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1555.582491][T17766] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1556.291234][T17766] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1556.303689][T17766] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1556.314228][T17766] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1556.326416][T17766] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1556.337833][T17766] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1556.349123][T17766] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1556.370958][T17766] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1556.699047][T17766] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1556.727027][T17766] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1557.093256][T17766] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1557.718140][T17766] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1557.767867][T17766] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1559.227020][T17766] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1559.238532][T17766] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1559.249531][T17766] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1559.259758][T17766] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1559.271869][T17766] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1559.281793][T17766] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1559.292816][T17766] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1559.303726][T17766] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1559.337258][T17766] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1559.347392][T17766] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1559.367585][T17766] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1559.386805][T17766] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1559.477455][T18004] netlink: 224 bytes leftover after parsing attributes in process `syz.1.2717'. [ 1559.512073][T17766] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1559.614408][T17766] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1559.627345][T17766] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1559.647699][T17766] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1559.765788][ T30] audit: type=1400 audit(1725134159.030:1038): lsm=SMACK fn=smack_socket_sock_rcv_skb action=denied subject="*" object="_" requested=w pid=18008 comm="syz.0.2718" saddr=172.30.0.1 daddr=172.20.20.170 [ 1559.860837][T17835] veth0_vlan: entered promiscuous mode [ 1559.994438][T18013] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2719'. [ 1560.748924][T17835] veth1_vlan: entered promiscuous mode [ 1560.825858][ T6894] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1560.845899][ T6894] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1561.025841][T17835] veth0_macvtap: entered promiscuous mode [ 1561.086085][T17835] veth1_macvtap: entered promiscuous mode [ 1561.137438][ T30] audit: type=1326 audit(1725134160.380:1039): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18008 comm="syz.0.2718" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8e3b579eb9 code=0x0 [ 1561.215430][T18020] FAULT_INJECTION: forcing a failure. [ 1561.215430][T18020] name failslab, interval 1, probability 0, space 0, times 0 [ 1561.219978][ T6486] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1561.228286][T18020] CPU: 0 UID: 0 PID: 18020 Comm: syz.4.2720 Not tainted 6.11.0-rc5-syzkaller-00219-g1934261d8974 #0 [ 1561.245490][T17835] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1561.247826][T18020] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 1561.247845][T18020] Call Trace: [ 1561.247855][T18020] [ 1561.247867][T18020] dump_stack_lvl+0x241/0x360 [ 1561.247904][T18020] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1561.247931][T18020] ? __pfx__printk+0x10/0x10 [ 1561.247960][T18020] ? __kmalloc_cache_noprof+0x44/0x2c0 [ 1561.275131][ T6486] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1561.275529][T18020] ? __pfx___might_resched+0x10/0x10 [ 1561.308259][T18020] should_fail_ex+0x3b0/0x4e0 [ 1561.312986][T18020] should_failslab+0xac/0x100 [ 1561.317712][T18020] ? __se_sys_mount+0x15a/0x3c0 [ 1561.322609][T18020] __kmalloc_cache_noprof+0x6c/0x2c0 [ 1561.327952][T18020] ? memdup_user+0x9f/0xc0 [ 1561.328469][T17835] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1561.332388][T18020] __se_sys_mount+0x15a/0x3c0 [ 1561.346925][T18020] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 1561.353040][T18020] ? __pfx___se_sys_mount+0x10/0x10 [ 1561.358307][T18020] ? do_syscall_64+0x100/0x230 [ 1561.363118][T18020] ? __x64_sys_mount+0x20/0xc0 [ 1561.367938][T18020] do_syscall_64+0xf3/0x230 [ 1561.372488][T18020] ? clear_bhb_loop+0x35/0x90 [ 1561.377217][T18020] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1561.383156][T18020] RIP: 0033:0x7fb15f779eb9 [ 1561.387603][T18020] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1561.390212][T17835] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1561.407309][T18020] RSP: 002b:00007fb1605d4038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1561.407346][T18020] RAX: ffffffffffffffda RBX: 00007fb15f916058 RCX: 00007fb15f779eb9 [ 1561.407365][T18020] RDX: 00000000200000c0 RSI: 0000000020000240 RDI: 0000000000000000 [ 1561.407381][T18020] RBP: 00007fb1605d4090 R08: 0000000020000000 R09: 0000000000000000 [ 1561.407397][T18020] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1561.407413][T18020] R13: 0000000000000000 R14: 00007fb15f916058 R15: 00007ffeabc4fd28 [ 1561.407447][T18020] [ 1561.598423][T17835] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1561.647625][T17835] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1561.658382][T17835] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1561.668268][T17835] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1561.678925][T17835] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1561.688802][T17835] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1561.708906][T17835] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1561.725331][T17835] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1561.735878][T17835] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1561.746484][T17835] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1561.757624][T17835] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1561.768047][T17835] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1561.795953][T17835] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1561.811971][T17835] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1561.829736][T17835] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1561.843689][T17835] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1561.873378][T18023] dvmrp0: entered allmulticast mode [ 1561.932440][T17835] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1561.964193][T17835] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1561.991981][T17835] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1562.020923][T17835] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1562.042860][T17835] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1562.059191][T17835] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1562.286787][T17835] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1562.748745][T17835] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1562.803723][T17835] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1563.197329][T17835] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1563.239984][T17835] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1563.297327][T17835] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1563.507700][T17835] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1563.518624][T17835] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1563.529070][T17835] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1563.937021][T17835] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1564.177176][T17835] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1564.198543][T17835] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1564.247286][T17835] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1564.370975][T17835] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1564.433286][T17835] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1564.459641][T17835] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1564.479204][T17835] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1565.554543][T18054] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2725'. [ 1565.573799][ T30] audit: type=1326 audit(1725134164.840:1040): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18047 comm="syz.0.2725" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e3b579eb9 code=0x7ffc0000 [ 1567.635601][ T30] audit: type=1326 audit(1725134164.840:1041): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18047 comm="syz.0.2725" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7f8e3b579eb9 code=0x7ffc0000 [ 1567.988880][T17938] usb 3-1: new high-speed USB device number 44 using dummy_hcd [ 1568.386916][ T30] audit: type=1326 audit(1725134165.580:1042): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18047 comm="syz.0.2725" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e3b579eb9 code=0x7ffc0000 [ 1568.428503][ T30] audit: type=1326 audit(1725134165.580:1043): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18061 comm="syz.0.2725" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f8e3b5abfa5 code=0x7ffc0000 [ 1568.498089][T17938] usb 3-1: Using ep0 maxpacket: 16 [ 1568.501403][ T30] audit: type=1326 audit(1725134165.580:1044): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18047 comm="syz.0.2725" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e3b579eb9 code=0x7ffc0000 [ 1568.576970][T17938] usb 3-1: device descriptor read/all, error -71 [ 1568.620059][ T30] audit: type=1326 audit(1725134166.760:1045): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18061 comm="syz.0.2725" exe="/root/syz-executor" sig=0 arch=c000003e syscall=60 compat=0 ip=0x7f8e3b579eb9 code=0x7ffc0000 [ 1569.236380][T18069] pim6reg: entered allmulticast mode [ 1570.220217][T18083] netlink: 224 bytes leftover after parsing attributes in process `syz.2.2731'. [ 1570.342511][ T6486] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1570.363895][ T6486] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1570.591337][ T6488] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1570.618480][ T6488] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1570.721877][T12993] usb 5-1: new high-speed USB device number 73 using dummy_hcd [ 1570.920293][T12993] usb 5-1: config 0 has an invalid descriptor of length 1, skipping remainder of the config [ 1570.964953][T12993] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1571.005531][T12993] usb 5-1: New USB device found, idVendor=1020, idProduct=0006, bcdDevice= 0.00 [ 1571.197856][T12993] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1571.213536][T18088] 9pnet_fd: Insufficient options for proto=fd [ 1571.218434][T12993] usb 5-1: config 0 descriptor?? [ 1572.670210][T12993] usb 5-1: string descriptor 0 read error: -71 [ 1572.709419][T12993] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 1572.767628][T12993] usb 5-1: USB disconnect, device number 73 [ 1572.787895][T18081] pim6reg: left allmulticast mode [ 1607.662012][ T1270] ieee802154 phy1 wpan1: encryption failed: -22 [ 1626.567339][ T5239] Bluetooth: hci2: command 0x0406 tx timeout [ 1635.687410][ T5239] Bluetooth: hci4: command 0x0406 tx timeout [ 1655.557235][T16912] Bluetooth: hci5: command 0x0406 tx timeout [ 1672.557785][ T1270] ieee802154 phy1 wpan1: encryption failed: -22 [ 1733.565746][ T1270] ieee802154 phy1 wpan1: encryption failed: -22 [ 1792.567075][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 1792.574092][ C0] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P18123/1:b..l [ 1792.582839][ C0] rcu: (detected by 0, t=10503 jiffies, g=117537, q=440 ncpus=2) [ 1792.590683][ C0] task:syz.3.2739 state:R running task stack:25696 pid:18123 tgid:18120 ppid:17835 flags:0x00004000 [ 1792.604206][ C0] Call Trace: [ 1792.607524][ C0] [ 1792.610490][ C0] __schedule+0x17ae/0x4a10 [ 1792.615056][ C0] ? 0xffffffffa0001fb4 [ 1792.619243][ C0] ? __pfx___schedule+0x10/0x10 [ 1792.624139][ C0] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 1792.630175][ C0] ? preempt_schedule_irq+0xf0/0x1c0 [ 1792.635516][ C0] preempt_schedule_irq+0xfb/0x1c0 [ 1792.640711][ C0] ? __pfx_preempt_schedule_irq+0x10/0x10 [ 1792.646494][ C0] irqentry_exit+0x5e/0x90 [ 1792.650946][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1792.656967][ C0] RIP: 0010:lock_acquire+0x264/0x550 [ 1792.662293][ C0] Code: 2b 00 74 08 4c 89 f7 e8 7a e0 87 00 f6 44 24 61 02 0f 85 85 01 00 00 41 f7 c7 00 02 00 00 74 01 fb 48 c7 44 24 40 0e 36 e0 45 <4b> c7 44 25 00 00 00 00 00 43 c7 44 25 09 00 00 00 00 43 c7 44 25 [ 1792.681943][ C0] RSP: 0018:ffffc900042af720 EFLAGS: 00000206 [ 1792.688057][ C0] RAX: 0000000000000001 RBX: 1ffff92000855ef0 RCX: 6b41231266c7de00 [ 1792.696059][ C0] RDX: dffffc0000000000 RSI: ffffffff8beae6e0 RDI: ffffffff8c3fb980 [ 1792.704060][ C0] RBP: ffffc900042af868 R08: ffffffff93fa6847 R09: 1ffffffff27f4d08 [ 1792.712064][ C0] R10: dffffc0000000000 R11: fffffbfff27f4d09 R12: 1ffff92000855eec [ 1792.720069][ C0] R13: dffffc0000000000 R14: ffffc900042af780 R15: 0000000000000246 [ 1792.728096][ C0] ? task_work_run+0x24f/0x310 [ 1792.732895][ C0] ? syscall_exit_to_user_mode+0x168/0x370 [ 1792.738739][ C0] ? do_syscall_64+0x100/0x230 [ 1792.743549][ C0] ? __pfx_lock_acquire+0x10/0x10 [ 1792.748638][ C0] ? mark_lock+0x9a/0x350 [ 1792.753016][ C0] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 1792.759037][ C0] ? page_ext_get+0x20/0x2a0 [ 1792.763662][ C0] page_ext_get+0x3d/0x2a0 [ 1792.768112][ C0] ? page_ext_get+0x20/0x2a0 [ 1792.772745][ C0] __reset_page_owner+0x30/0x430 [ 1792.777717][ C0] ? kasan_quarantine_put+0xdc/0x230 [ 1792.783036][ C0] ? lockdep_hardirqs_on+0x99/0x150 [ 1792.788277][ C0] free_unref_page+0xd19/0xea0 [ 1792.793093][ C0] __put_partials+0xeb/0x130 [ 1792.797718][ C0] put_cpu_partial+0x17c/0x250 [ 1792.802514][ C0] ? put_cpu_partial+0x70/0x250 [ 1792.807402][ C0] __slab_free+0x2ea/0x3d0 [ 1792.811856][ C0] ? __phys_addr+0xba/0x170 [ 1792.816395][ C0] qlist_free_all+0x9e/0x140 [ 1792.821025][ C0] kasan_quarantine_reduce+0x14f/0x170 [ 1792.826529][ C0] __kasan_kmalloc+0x23/0xb0 [ 1792.831164][ C0] ? task_numa_work+0x854/0x13f0 [ 1792.836133][ C0] __kmalloc_cache_noprof+0x19c/0x2c0 [ 1792.841588][ C0] task_numa_work+0x854/0x13f0 [ 1792.846427][ C0] ? __pfx_task_numa_work+0x10/0x10 [ 1792.851664][ C0] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 1792.857707][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 1792.862948][ C0] ? lockdep_hardirqs_on+0x99/0x150 [ 1792.868184][ C0] task_work_run+0x24f/0x310 [ 1792.872816][ C0] ? __pfx_task_work_run+0x10/0x10 [ 1792.877968][ C0] ? syscall_exit_to_user_mode+0xa3/0x370 [ 1792.883724][ C0] syscall_exit_to_user_mode+0x168/0x370 [ 1792.889423][ C0] do_syscall_64+0x100/0x230 [ 1792.894154][ C0] ? clear_bhb_loop+0x35/0x90 [ 1792.898872][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1792.904799][ C0] RIP: 0033:0x7efeae03a830 [ 1792.909243][ C0] RSP: 002b:00007efeaef2db38 EFLAGS: 00000246 [ 1792.915430][ C0] RAX: 0000000000000000 RBX: 00007efeae316060 RCX: 00007efeae179eb9 [ 1792.923430][ C0] RDX: 00007efeaef2db40 RSI: 00007efeaef2dc70 RDI: 0000000000000011 [ 1792.931520][ C0] RBP: 00007efeae316058 R08: 0000000000000000 R09: 0000000000000000 [ 1792.939524][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 00007efeae316064 [ 1792.947534][ C0] R13: 0000000000000000 R14: 00007ffd7c5f0750 R15: 00007ffd7c5f0838 [ 1792.955559][ C0] [ 1800.567760][ T1270] ieee802154 phy1 wpan1: encryption failed: -22