last executing test programs: 5m12.578645671s ago: executing program 2 (id=3): r0 = openat$kvm(0xffffff9c, &(0x7f0000000100), 0x641, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000080)=@getqdisc={0x48, 0x26, 0x1, 0x70bd26, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x1, 0x4}, {0xa, 0xe}, {0xfff2}}, [{0x4}, {0x4}, {0x12}, {0x4}, {0x4}, {0x4}, {0x4}, {0x4}, {0x4}]}, 0x48}}, 0x4080) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r3, 0x2285, &(0x7f00000005c0)={0x53, 0xfffffffc, 0x6, 0x0, @scatter={0x18, 0xcc, &(0x7f00000006c0)=[{&(0x7f0000000380)=""/204, 0xcc}, {0x0}]}, &(0x7f0000000240)="008d7acda0b2", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) ioctl$KVM_CREATE_PIT2(r2, 0x4040ae77, &(0x7f0000000040)) ioctl$KVM_REINJECT_CONTROL(r2, 0xae71, &(0x7f0000000280)={0xfa}) 5m11.405102615s ago: executing program 2 (id=18): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000003c0)={'wlan0\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r1 = socket$packet(0x11, 0x2, 0x300) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='environ\x00') exit(0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000)={0x0, 0xa004}, 0x4) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x11a) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x11) mount(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f0000000100)='ocfs2_dlmfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000440)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) 5m10.32920892s ago: executing program 4 (id=21): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000180)=0x0) prlimit64(r0, 0xe, &(0x7f0000000040)={0xc, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x4e20, @local}]}, &(0x7f0000000100)=0x10) sched_setscheduler(r1, 0x0, &(0x7f0000000000)=0x8) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r4, 0x84, 0x10, &(0x7f0000000300)=@assoc_value={r5, 0x4}, 0x8) openat$sequencer(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) 5m10.281031069s ago: executing program 2 (id=23): r0 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000100), 0x129202, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000000)=0x1000) ppoll(&(0x7f0000000040)=[{r0, 0x9620}], 0x1, 0x0, 0x0, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r0, 0xc0045006, &(0x7f00000000c0)=0x6) mmap$dsp(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x100000f, 0x11, r0, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0x40045017, &(0x7f0000000000)=0x4000) 5m9.169324819s ago: executing program 4 (id=24): socket$inet_udp(0x2, 0x2, 0x0) r0 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @empty, 0xc7ec}, 0x1c) r1 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488) sendmsg(r0, &(0x7f00000000c0)={0x0, 0x9511, &(0x7f0000000100)=[{&(0x7f0000000000)="2c10", 0x90}], 0x20, 0x0, 0x0, 0x2c}, 0x44004) 5m8.825840481s ago: executing program 2 (id=28): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r0 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r0, 0x0, 0x0) 5m8.717020959s ago: executing program 4 (id=30): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x11) (async) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000100)={{0x100}, 'syz1\x00'}) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0x4) (async) ioctl$UI_DEV_CREATE(r0, 0x5501) ioctl$UI_DEV_DESTROY(r0, 0x5502) (async) getpid() 5m8.269400773s ago: executing program 32 (id=28): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r0 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r0, 0x0, 0x0) 5m8.18315596s ago: executing program 4 (id=33): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000003c0)={'wlan0\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r1 = socket$packet(0x11, 0x2, 0x300) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='environ\x00') exit(0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000)={0x0, 0xa004}, 0x4) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x11a) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x11) mount(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f0000000100)='ocfs2_dlmfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) 5m7.264624889s ago: executing program 3 (id=36): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x56a, 0x94, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0xffff, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x10, 0xc, 0xfd}}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000240)={0x2c, &(0x7f0000000080)={0x40, 0x23, 0x32, {0x32, 0x6, "e37557ab5b4bb4b3a0505be9c09528ef4945e148d14a69b1fe62a26a2f65e962697cf5d91ad9286cc7330062e1abf8b3"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 5m6.126757882s ago: executing program 4 (id=37): syz_usb_connect(0x5, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="120100000cb768405e0483020b9901e4020109021b000100000000090400fb015c291d00090509"], 0x0) syz_open_dev$sndpcmp(&(0x7f0000000080), 0x3, 0x800) r0 = syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) sched_setaffinity(0x0, 0xffffffffffffff1a, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) bind$bt_l2cap(r1, 0x0, 0x0) bind$bt_l2cap(r1, &(0x7f0000000000)={0x1f, 0x21, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback}], 0x1c) sendto$inet6(r3, &(0x7f0000000100)="b8", 0xffe0, 0x2000c851, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r3, 0x84, 0x17, &(0x7f0000000440)=ANY=[], 0x9) syz_emit_ethernet(0x58, 0x0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f00000002c0)='task\x00') lseek(r4, 0x0, 0x1) recvmsg(0xffffffffffffffff, 0x0, 0x0) fanotify_init(0x200, 0x0) r5 = syz_clone(0x22180, 0x0, 0xa42f, 0x0, 0x0, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000480)='task\x00') fchdir(r6) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) syz_open_procfs(r5, &(0x7f0000000040)='stat\x00') openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) 5m3.716479849s ago: executing program 3 (id=41): connect$inet(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x10000000004e20, 0x0, @dev={0xfe, 0x80, '\x00', 0x2f}, 0x6}, 0x1c) syz_open_dev$MSR(&(0x7f00000000c0), 0x5, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_HMAC_IDENT(r1, 0x84, 0x16, 0x0, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000001800)=0x8000, 0x4) r2 = socket$phonet_pipe(0x23, 0x5, 0x2) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'netdevsim0\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x3, &(0x7f0000000140)=ANY=[@ANYBLOB="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"/379], &(0x7f00000003c0)='syzkaller\x00', 0x3, 0x0, 0x0, 0x41000, 0x0, '\x00', r3, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1, @void, @value}, 0x94) setsockopt$inet6_udp_encap(r0, 0x11, 0x64, &(0x7f0000000080)=0x3, 0x4) r4 = syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') r5 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) sendfile(r5, r4, 0x0, 0x80008) syz_emit_ethernet(0x83, &(0x7f0000000040)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaf9ff030486dd601b8b97004d88c19e9ace5ffb2e9fc603dd282100000002ff02000000000000000000000000000104004e20004db0"], 0x0) 5m3.61315239s ago: executing program 1 (id=42): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet(0x2, 0x2, 0x1) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f00000000c0)=0x101, 0x4) bind$inet(r1, &(0x7f0000000000)={0x2, 0x0, @empty}, 0x10) syz_usb_connect(0x2, 0x2d, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000459bb2405804035000000000000109021b000111000000090400000195699b0009058b", @ANYRES8], 0x0) r2 = syz_usb_connect(0x5, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="31010000dccd5e08cb06030000e8160000010902240001000064000904340102"], 0x0) syz_usb_control_io$uac1(r2, 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000340)=ANY=[], 0x5c}, 0x1, 0x0, 0x0, 0x4}, 0x20000000) syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="12010003b9090020cd0cae10384a01020301090212000100008004090474544bedcddee757b71066147d0d9bcbe058fa1a45050300000001189ea8695c1f5ec0e1e7099f7a70b56bf037fb003f7e1370335627e64627a9783612f0edb4060cc2eebf08eaf809cb7ad9e8afc35eb2ce5be63cb50769a616e62f70c01af80ec2ba5d4a7f208c12b95ee3d78696973ae5d77293f09aa8a2565d32d11b9b266aef07374efd1bcf95e0cc58cd2f8ca94b764ad595100dc93fec38ee36dc50d7d866f3f69f631cc859462cb1c1603766b6"], &(0x7f0000000180)={0x27, 0x0, 0x24, 0x0, 0x0, [{0x0, &(0x7f0000000140)=@lang_id={0x0, 0x3, 0x422}}]}) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) fstat(r0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0}) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) socket$packet(0x11, 0xa, 0x300) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000160a03020000000000000000020000000900020073797a30000000000900010073797a30000000002c00038008000140000000000800024000000000180003801400010073797a5f74756e00000000000000000014000000110001"], 0x80}}, 0x0) syz_emit_ethernet(0x64, &(0x7f0000000140)=ANY=[], 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000002100), 0x280449c, &(0x7f0000002140)={{'fd', 0x3d, r5}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r5, &(0x7f00000093c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r5, &(0x7f0000004200)={0x50, 0x0, r7, {0x7, 0x1f, 0x0, 0x2066012}}, 0x50) syz_fuse_handle_req(r5, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000090c400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000542d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ea8286a2fba523440000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000633956a1000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007d6ab715107fa1820000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f6ffffffffffffff0000000000000e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e1ffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f4000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000286071480000000000b13bc1e6d970884f00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f3ffffffffffffff00", 0x2000, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r5, &(0x7f00000021c0)="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", 0x2000, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)={0x150, 0x0, 0x0, [{{0x1, 0x3, 0xa, 0x401, 0x7, 0x0, {0x1, 0x3655, 0x6, 0x800000e5, 0x5, 0x80000000000004, 0x8, 0x3, 0x81, 0x1000, 0xffffffff, r8, r9, 0x7, 0x5}}, {0x6, 0x1, 0x7, 0x2, '#:[\v\xe2`)'}}, {{0x1, 0x1, 0x7, 0x2000000000000000, 0xf, 0x6, {0x1, 0x9, 0xffff, 0x6b, 0x625, 0x1ff, 0x9, 0x6, 0x1, 0x2000, 0x4769cc35, 0x0, r9, 0x4, 0x8}}, {0x4, 0x0, 0x8, 0x7fff, 'group_id'}}]}, 0x0, 0x0, 0x0}) mount$fuse(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200), 0x210040, &(0x7f0000000500)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id', 0x3d, r4}, 0x2c, {'group_id', 0x3d, r9}, 0x2c, {[{@max_read={'max_read', 0x3d, 0xfffffffffffff032}}, {@blksize={'blksize', 0x3d, 0x1000}}, {@max_read={'max_read', 0x3d, 0x10}}, {@blksize={'blksize', 0x3d, 0x800}}, {}], [{@appraise_type}, {@dont_appraise}, {@seclabel}]}}) r10 = socket$inet(0xa, 0x801, 0x84) connect$inet(r10, &(0x7f0000000340)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r10, 0x8) r11 = accept4(r10, 0x0, 0x0, 0x0) sendmmsg$unix(r11, &(0x7f0000001840)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000140)="c7f257", 0x3}], 0x1, 0x0, 0x0, 0x8054}}], 0x1, 0x4000045) sendto$inet(r11, &(0x7f00000002c0)="cc", 0x1, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r11, 0x84, 0x22, &(0x7f0000000100)={0x3}, 0x10) 5m3.477202718s ago: executing program 3 (id=43): r0 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000100)=0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, &(0x7f0000000180)={r1}, &(0x7f00000001c0)=0x8) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(0xffffffffffffffff, 0xc01064c1, &(0x7f0000000180)={0x0, 0x0, 0xffffffffffffffff}) ioctl$INCFS_IOC_CREATE_FILE(r2, 0xc058671e, &(0x7f0000000100)={{'\x00', 0x2}, {0x9}, 0x0, 0x0, 0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='./file1\x00', &(0x7f0000000200)="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", 0x17c, 0x0, &(0x7f0000001a80)=ANY=[@ANYBLOB="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"], 0x1109}) r3 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) ioctl$IOCTL_VMCI_SET_NOTIFY(r3, 0x7cb, &(0x7f00000003c0)={0x7fffffffffffffff, 0x6, 0xd}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000080)=ANY=[], 0x24}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f00000000c0)=[{0x20, 0x0, 0x0, 0xfffff00c}, {0x20, 0x0, 0x1, 0x7}, {0x6, 0xff}]}, 0x10) sendmmsg(r4, &(0x7f0000000040), 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 5m3.310772307s ago: executing program 4 (id=45): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x50) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f000000a440)={0x2020}, 0x2020) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = syz_open_dev$sg(&(0x7f0000001600), 0x0, 0x22c01) ioctl$SCSI_IOCTL_SEND_COMMAND(r5, 0x1, &(0x7f00000000c0)=ANY=[@ANYRES64=r5]) socket$inet6_mptcp(0xa, 0x1, 0x106) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x8, 0x17, &(0x7f00000002c0)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x7}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@printk={@u, {0x3, 0x3, 0x3, 0x4, 0x9}}], {{0x7, 0x1, 0x7, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 5m3.310474082s ago: executing program 3 (id=46): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000003c0)={'wlan0\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r1 = socket$packet(0x11, 0x2, 0x300) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='environ\x00') exit(0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000)={0x0, 0xa004}, 0x4) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x11a) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x11) mount(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f0000000100)='ocfs2_dlmfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) 5m2.128462548s ago: executing program 33 (id=45): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x50) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f000000a440)={0x2020}, 0x2020) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = syz_open_dev$sg(&(0x7f0000001600), 0x0, 0x22c01) ioctl$SCSI_IOCTL_SEND_COMMAND(r5, 0x1, &(0x7f00000000c0)=ANY=[@ANYRES64=r5]) socket$inet6_mptcp(0xa, 0x1, 0x106) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x8, 0x17, &(0x7f00000002c0)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x7}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@printk={@u, {0x3, 0x3, 0x3, 0x4, 0x9}}], {{0x7, 0x1, 0x7, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 5m2.100803331s ago: executing program 3 (id=49): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5ac, 0x8241, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, &(0x7f0000000100)=ANY=[], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000580), 0x0, 0x0) ioctl$HIDIOCGUSAGE(r1, 0xc018480b, 0x0) 5m1.295113204s ago: executing program 3 (id=52): r0 = socket$inet(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000940)=ANY=[@ANYBLOB="180000000000000000000000000000008500000050000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x50) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0xa4, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r2, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x74, 0x2, [@TCA_TAPRIO_ATTR_FLAGS={0x8, 0xa, 0x2}, @TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], 0x0, [0x8, 0x4, 0x2, 0x80, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x46, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x4000000}]}]}]}}]}, 0xa4}}, 0x0) 5m0.726817622s ago: executing program 34 (id=52): r0 = socket$inet(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000940)=ANY=[@ANYBLOB="180000000000000000000000000000008500000050000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x50) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0xa4, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r2, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x74, 0x2, [@TCA_TAPRIO_ATTR_FLAGS={0x8, 0xa, 0x2}, @TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], 0x0, [0x8, 0x4, 0x2, 0x80, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x46, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x4000000}]}]}]}}]}, 0xa4}}, 0x0) 5m0.718662439s ago: executing program 1 (id=54): syz_open_dev$usbfs(&(0x7f0000000100), 0xffffffffffffffc2, 0x0) r0 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000000)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) openat$ttyprintk(0xffffffffffffff9c, &(0x7f00000000c0), 0x2000, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000005c0)={r1, r0, 0x0, 0x15, &(0x7f0000000580)='/dev/bus/usb/00#/00#\x00'}, 0x30) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x28af, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000280)={&(0x7f00000001c0)="c4b5b8dda5dbf34a40f10d1cba042d8a864336cfdf904698e2a831543b21a21dc3f3c22270293c98e2d5ca5f6fbbea65081d202eb191f1756e016a70db89b906bc8221103138db3026faf63f3dd1b0440b07dbcb961da83643710f87629a56eaae649bb138432b916b45b6b224689bd6eb5b0f036b9b194a493db417d0dccf5e904eae24816eea6229d7892e7d3474c5776da9cfe80ad45802fd1f1e0adb2c7baea05d441a512197824a42ea085fb87d79af8579921123b2b1da", &(0x7f0000000300)=""/186, &(0x7f00000003c0)="7d7784ef05252e28c06d81275cfd21bb885fac8c6da184630ee89695f00d2b152664279df99ac643fd61e67224bef234b7cb02b660d3bcf3714a7aa8bb5ad55f1f9a721c55d8a565d259499272b42f5818aa36d0b837a26ce33f951ebe0fb3c1ba64d077ef0cc588e76c5086523034b834e52727eff7ce2ea2d789a7071db99ee83e4833618a750a92013a6beabd1114fb2d0df8fd714e5b", &(0x7f00000004c0)="20a11a4cc9217d009d7ce88c2b3dab370445420149d7bb608a9906bec7bbb2163987cd088c9ca9232528fa5d9bda82e0140230dd564c071b669829eedcd3afffafb4f32ff4a0eceedf28c9b48f3b143794fdb7b216ec283219f533f0dce1b734d5d6614fcb2f92054ce999a948bc85088388ae91fb4dd113cb2e66d385b605eb2b6d2f3710ec712dbf31df4522e9301bff0ac5dc66ff88ce60664a7a3694a69b14da4420e930", 0x4, r4, 0x4}, 0x38) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000001800)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001500010300000000000000000b0000009a1bd76a56e76b2459e4237dc7a9f3524e52dcd6f4b3904378243ec16d242ea7811eb4f4f17d7ef2"], 0x14}}, 0x8096) sendmsg$NLBL_UNLABEL_C_STATICADD(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x8, 0x3000000000002}, 0x0) syz_open_dev$vim2m(0x0, 0x200000001003, 0x2) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000000)={'veth0_vlan\x00', @remote}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) socket$nl_netfilter(0x10, 0x3, 0xc) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_COMPAT_GET(r7, &(0x7f0000002840)={0x0, 0x0, &(0x7f0000002800)={&(0x7f0000002780)=ANY=[@ANYBLOB="34000000000b010400000000000100000200000a080002400000000008000340000000000d00010072f066696c74657200000000"], 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x4040010) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000000)={'veth0_vlan\x00', @random="0106002010ff"}) socket$nl_generic(0x10, 0x3, 0x10) 4m56.899273821s ago: executing program 1 (id=56): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x50) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_pressure(r2, &(0x7f0000000040)='io.pressure\x00', 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r6 = syz_open_dev$sg(&(0x7f0000001600), 0x0, 0x22c01) ioctl$SCSI_IOCTL_SEND_COMMAND(r6, 0x1, &(0x7f00000000c0)=ANY=[@ANYRES64=r6]) socket$inet6_mptcp(0xa, 0x1, 0x106) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x8, 0x17, &(0x7f00000002c0)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x7}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@printk={@u, {0x3, 0x3, 0x3, 0x4, 0x9}}], {{0x7, 0x1, 0x7, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 4m55.798054467s ago: executing program 1 (id=57): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000003c0)={'wlan0\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r1 = socket$packet(0x11, 0x2, 0x300) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='environ\x00') exit(0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000)={0x0, 0xa004}, 0x4) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x11a) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x11) mount(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f0000000100)='ocfs2_dlmfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) 4m54.8317651s ago: executing program 1 (id=60): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5ac, 0x8241, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, &(0x7f0000000100)=ANY=[], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000580), 0x0, 0x0) ioctl$HIDIOCGUSAGE(r1, 0xc018480b, 0x0) 4m54.361425688s ago: executing program 1 (id=61): unshare(0x28000600) socketpair$unix(0x1, 0x5, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x50, &(0x7f00000002c0)={0x0, 0x0}, 0x10) 4m54.087747566s ago: executing program 35 (id=61): unshare(0x28000600) socketpair$unix(0x1, 0x5, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x50, &(0x7f00000002c0)={0x0, 0x0}, 0x10) 4m53.083559558s ago: executing program 0 (id=64): bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000940)=ANY=[@ANYRES32, @ANYBLOB="1e0000"], 0x20) 4m52.913255876s ago: executing program 0 (id=65): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x50) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_pressure(r2, &(0x7f0000000040)='io.pressure\x00', 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r6 = syz_open_dev$sg(&(0x7f0000001600), 0x0, 0x22c01) ioctl$SCSI_IOCTL_SEND_COMMAND(r6, 0x1, &(0x7f00000000c0)=ANY=[@ANYRES64=r6]) socket$inet6_mptcp(0xa, 0x1, 0x106) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x8, 0x17, &(0x7f00000002c0)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x7}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@printk={@u, {0x3, 0x3, 0x3, 0x4, 0x9}}], {{0x7, 0x1, 0x7, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 4m51.900495927s ago: executing program 0 (id=66): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r1, &(0x7f0000000080), 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000500)={'vxcan1\x00', 0x0}) sendmsg$can_bcm(r1, &(0x7f0000000680)={&(0x7f0000000540)={0x1d, r2}, 0x10, &(0x7f0000000640)={&(0x7f0000000740)=ANY=[@ANYBLOB="0100000010000000a600000000000000", @ANYRES64=0x0, @ANYRES64, @ANYRES64, @ANYBLOB="0400000001000000010000c064"], 0x48}, 0x1, 0x0, 0x0, 0x20020080}, 0x4002) 4m51.817605165s ago: executing program 0 (id=67): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000003c0)={'wlan0\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r1 = socket$packet(0x11, 0x2, 0x300) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='environ\x00') exit(0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000)={0x0, 0xa004}, 0x4) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x11a) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x11) mount(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f0000000100)='ocfs2_dlmfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) 4m50.878939426s ago: executing program 0 (id=68): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="fc0000001900674c0000000000000000e0000001000000000000000000000000e000000200000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000400000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000044000500000000000000000000000000000000000000000033"], 0xfc}}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r1, &(0x7f0000000080)={0x10, 0x0, 0x0, 0xfffffffffffffffd}, 0xc) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x6e24, 0x27ffb, @private1, 0x2}, 0x1c) 4m50.557298059s ago: executing program 0 (id=69): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="fc0000001900674c0000000000000000e0000001000000000000000000000000e000000200000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000400000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000044000500000000000000000000000000000000000000000033"], 0xfc}}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r1, &(0x7f0000000080)={0x10, 0x0, 0x0, 0xfffffffffffffffd}, 0xc) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x800800, @mcast2={0xff, 0x3}, 0x2}, 0x1c) (fail_nth: 5) 4m50.212884338s ago: executing program 36 (id=69): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="fc0000001900674c0000000000000000e0000001000000000000000000000000e000000200000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000400000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000044000500000000000000000000000000000000000000000033"], 0xfc}}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r1, &(0x7f0000000080)={0x10, 0x0, 0x0, 0xfffffffffffffffd}, 0xc) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x800800, @mcast2={0xff, 0x3}, 0x2}, 0x1c) (fail_nth: 5) 3m21.188856678s ago: executing program 8 (id=250): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) close(0xffffffffffffffff) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r4, 0x84, 0x81, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r4, 0x84, 0x15, &(0x7f00000000c0), 0x1) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, 0x0, 0x0) sendto$inet6(r4, &(0x7f0000000080)="b1", 0x1, 0x400c0d4, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=ANY=[@ANYBLOB="200000003d0007012bbd7000fddbdf25047c00000400ea000800018004000600"], 0x20}}, 0x0) prlimit64(0x0, 0x3, &(0x7f0000000140)={0x928, 0x200000008b}, 0x0) r6 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) listen(r6, 0x0) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) 3m20.079949502s ago: executing program 8 (id=251): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)) gettid() r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r3, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_MCAST_MSFILTER(r3, 0x0, 0x30, &(0x7f0000000400)={0x2, {{0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0xd}}}, 0x0, 0x2, [{{0x2, 0x4e20, @multicast1}}, {{0x2, 0x4e22, @private=0xa010101}}]}, 0x190) timer_settime(0x0, 0x0, 0x0, 0x0) r4 = socket$can_j1939(0x1d, 0x2, 0x7) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@ipv6_delroute={0x24, 0x19, 0x1, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x2e00}, [@RTA_PRIORITY={0x8, 0x1e, 0x200}]}, 0x24}, 0x1, 0x0, 0x0, 0x880}, 0x4000050) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYBLOB="240000003e000701fcfffffffddbdf25027c0000044036800c0001"], 0x24}, 0x1, 0x0, 0x0, 0x488c0}, 0xc050) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f00000000c0)={'vxcan1\x00', 0x0}) bind$can_j1939(r4, &(0x7f0000000100)={0x1d, r6, 0x800000000, {}, 0xfd}, 0x18) r7 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) preadv(r7, &(0x7f0000000040)=[{&(0x7f0000000200)=""/153, 0x99}], 0x1, 0x8005, 0x0) ioctl$BLKZEROOUT(r7, 0x127f, &(0x7f0000000100)={0x0, 0xa00}) r8 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000680), 0xffffffffffffffff) socket$inet_udplite(0x2, 0x2, 0x88) sendmsg$L2TP_CMD_TUNNEL_CREATE(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000380)={0x0}}, 0x0) connect$can_j1939(r4, &(0x7f0000000080)={0x1d, r6, 0x0, {0x0, 0xf0}, 0x1}, 0x18) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) 3m18.994482508s ago: executing program 8 (id=252): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r1, &(0x7f0000000080), 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000500)={'vxcan1\x00', 0x0}) sendmsg$can_bcm(r1, &(0x7f0000000680)={&(0x7f0000000540)={0x1d, r2}, 0x10, &(0x7f0000000640)={&(0x7f0000000740)=ANY=[@ANYBLOB="0100000010000000a6000000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64, @ANYRES64, @ANYBLOB="0400000001000000010000c064"], 0x48}, 0x1, 0x0, 0x0, 0x20020080}, 0x4002) 3m18.62935315s ago: executing program 8 (id=253): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000003c0)={'wlan0\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) socket$packet(0x11, 0x2, 0x300) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='environ\x00') exit(0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x11a) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x11) mount(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f0000000100)='ocfs2_dlmfs\x00', 0x0, 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) 3m17.532840511s ago: executing program 8 (id=255): socket$nl_generic(0x10, 0x3, 0x10) socketpair$tipc(0x1e, 0x1, 0x0, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x0) sendmsg$tipc(0xffffffffffffffff, 0x0, 0x0) semctl$SETALL(0x0, 0x0, 0x11, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r2 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000040), 0x80000, 0x0) ioctl$DRM_IOCTL_GET_CAP(r2, 0xc010640c, &(0x7f0000000080)={0x7}) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) write$vhost_msg_v2(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000000c0)={'ip6_vti0\x00', 0x0}) r3 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFCONF(r0, 0x8912, &(0x7f0000000280)=@buf) setsockopt$inet_mreqn(r3, 0x0, 0x23, 0x0, 0x0) r4 = socket$inet(0x2, 0x2, 0x2) bind$inet(r4, 0x0, 0x0) 3m15.336804003s ago: executing program 8 (id=260): socket$inet_udp(0x2, 0x2, 0x0) r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) socket$inet6(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) syz_open_dev$vcsn(&(0x7f0000000b40), 0x1ff, 0x400) r3 = accept4(r0, 0x0, 0x0, 0x0) sendto$inet(r3, &(0x7f0000000540)="0bce", 0x2, 0x410, 0x0, 0x0) sendto$inet6(r3, &(0x7f0000000200)='x', 0x1, 0x0, 0x0, 0x0) prctl$PR_SET_TIMERSLACK(0x1d, 0xffffffffffffff63) 3m14.639625561s ago: executing program 37 (id=260): socket$inet_udp(0x2, 0x2, 0x0) r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) socket$inet6(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) syz_open_dev$vcsn(&(0x7f0000000b40), 0x1ff, 0x400) r3 = accept4(r0, 0x0, 0x0, 0x0) sendto$inet(r3, &(0x7f0000000540)="0bce", 0x2, 0x410, 0x0, 0x0) sendto$inet6(r3, &(0x7f0000000200)='x', 0x1, 0x0, 0x0, 0x0) prctl$PR_SET_TIMERSLACK(0x1d, 0xffffffffffffff63) 2m55.227607978s ago: executing program 5 (id=304): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc}, 0x10) r4 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) sendmmsg(r3, &(0x7f0000003240), 0x4000000000000e4, 0x18) 2m53.173271856s ago: executing program 5 (id=310): r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000540)=@bpf_lsm={0x1d, 0xf, &(0x7f0000000080)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200), 0x0, 0x10, 0x9, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x21, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x581, 0x20000000008c}, 0x0) syz_open_dev$sndmidi(0x0, 0x80, 0x200) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket$nl_generic(0x11, 0x3, 0x10) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r3, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f0000000180)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x6, 0x0, 0x6c}]}, 0x10) syz_emit_ethernet(0x22, &(0x7f0000000440)=ANY=[@ANYBLOB="aaaaaaaaaaaa429e82211cf80800450200140065000002069078ac1e0101ffffffff33ea428c137b460d3ba1db8b336422f5f29b432aa2ab2b3149ead28557c31add9a01200a8d7e8ce7f2b38604e4907694baf272d8ea07769e066497bb7a5eaa88e6deefd2aaa424552f440995030dc66cb5e13b696612aecb77661367204dac62343d2e6205102eb5cd6554756e9e60511783ec146adc8f2b848dc5abbb9ad338b3a98c710ba3ff159b1e2bfef7edba9ef0edebccfe7385ce5cf0e59ce4d642d9314e2fa74df7e9d01af3e076af246172f73686337a"], 0x0) sendmsg(r2, &(0x7f0000000640)={&(0x7f00000000c0)=@caif=@dgm={0x25, 0xd}, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000000)="4ba72c4cfd81685544f46c3f0800", 0xe}], 0x1, 0x0, 0x0, 0x11000000}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=@newtaction={0x74, 0x30, 0xb, 0xfffffffc, 0x0, {}, [{0x60, 0x1, [@m_skbmod={0x5c, 0x1, 0x0, 0x0, {{0xb}, {0x30, 0x2, 0x0, 0x1, [@TCA_SKBMOD_PARMS={0x24}, @TCA_SKBMOD_ETYPE={0x6, 0x5, 0x3}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x74}, 0x1, 0x0, 0x0, 0x4044800}, 0x0) r5 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) getsockopt$llc_int(r5, 0x10c, 0x1, &(0x7f0000000000), &(0x7f0000000200)=0x4) syz_open_procfs(0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, 0x0) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000640), 0x0, 0x0) mknod(&(0x7f0000000080)='./bus\x00', 0x1000, 0x0) r6 = open(&(0x7f0000000100)='./bus\x00', 0x143142, 0x0) open(&(0x7f0000000280)='.\x00', 0x0, 0x0) write$FUSE_NOTIFY_INVAL_ENTRY(r6, 0x0, 0x28) splice(r6, 0x0, 0xffffffffffffffff, 0x0, 0x8, 0x8) openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0) 2m50.552928719s ago: executing program 9 (id=313): socket(0x10, 0x803, 0x0) socket$nl_route(0x10, 0x3, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.current\x00', 0x275a, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, 0x0, 0x44090) syz_open_procfs(0x0, 0x0) syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) mount$9p_fd(0x0, &(0x7f0000000100)='.\x00', 0x0, 0x0, 0x0) openat$iommufd(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0xffffffffffffff1a, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = add_key$user(&(0x7f0000000200), &(0x7f0000000580)={'syz', 0x3}, &(0x7f0000000300)="f479c603eddef72d2c0695f7b5833a4cb1647c3340", 0x15, 0xfffffffffffffffe) r3 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000040)={r2, r3, r3}, &(0x7f0000000480)=""/250, 0xfa, &(0x7f00000001c0)={&(0x7f0000000080)={'poly1305-generic\x00'}}) 2m50.4175925s ago: executing program 5 (id=314): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00'}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) setitimer(0x1, &(0x7f0000000000)={{}, {0x20000000000000}}, 0x0) setitimer(0x1, 0x0, &(0x7f0000000100)) syz_emit_ethernet(0x4a, &(0x7f00000000c0)=ANY=[], 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000200)="d800000019008111e00212ba0d81050402610200ff0f040b067c55a1bc000900b8000699f3ffffff15001500fe808178a800150003000140020024f89a27c8d889cb591401ba86000901ac040000d67f6f94007100a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4b11602b2a10c11ce1b14d6d930dfe1d9d322fe04000000730d7a5025ccca262f3d40fad95667e04adcdf634c1f215ce3bb9ad809d5e1cace81ed0b7fece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92307f00000e9703000000000000", 0xd8}], 0x1}, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r3, &(0x7f0000001dc0)={0x0, 0x0, &(0x7f0000001d80)={&(0x7f0000000300)={0x28, 0x3, 0x8, 0x301, 0x0, 0x0, {0xa, 0x0, 0xa}, [@CTA_TIMEOUT_DATA={0xc, 0x4, 0x0, 0x1, @gre=[@CTA_TIMEOUT_GRE_REPLIED={0x8, 0x2, 0x1, 0x0, 0x2}]}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x88}]}, 0x28}, 0x1, 0x0, 0x0, 0x400804c}, 0x8014) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r5}, &(0x7f0000000000), &(0x7f00000005c0)=r6}, 0x20) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r7}, 0x10) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000000)={'ip6gre0\x00', &(0x7f00000009c0)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x1, 0x2, 0x0, @remote, @private1={0xfc, 0x1, '\x00', 0x1}}}) r8 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r8, &(0x7f0000000180)={0x2, 0x4e26, @empty}, 0xffffffffffffff9f) 2m49.179135079s ago: executing program 5 (id=316): syz_init_net_socket$llc(0x1a, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) gettid() setsockopt$XDP_TX_RING(0xffffffffffffffff, 0x11b, 0x3, &(0x7f00000000c0), 0x4) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000000140)={0x1, 0xf}, 0x8) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) r2 = gettid() timer_create(0x7, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000000040)) r3 = socket$inet6_sctp(0xa, 0x801, 0x84) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000003400010700000000000000000300000010929f9bf8243675450a5e28acaa554dca6e301d7da8491a55dfbe01703302c49c6916bc25fe4d4fe8c5072e7d7690ec33e3222ee445760857fafbd88fb0c76c7c29072a8651d79009c1e61f485a2b278281cca304ebf40cac49f4651263fe4ec4b0dccd36bcdb9ee882084000f41338f85c98a30fe12d392248942972b0ec27e4f3467177a3cd168594769a2d621dd55501b357c82aa6681c42aa1d6b0c3d758bce224d4a9874cacf0d792a94748852c0829fa1e3c2acd0dea28be9b2982c006b39b82c7a6f557af3bf31733e8652fe093b92ae0b8d005b1b66941993c29bb6ad3e383a8b505f6ad885f9ec79fbd123925147c84bd84061ffb02ef909"], 0x14}, 0x1, 0x0, 0x0, 0x4044840}, 0x0) sendmmsg$inet6(r3, &(0x7f0000000a00)=[{{&(0x7f0000000140)={0xa, 0xfffc, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x1c, &(0x7f0000001900)=[{&(0x7f0000000280)="ad", 0x1}], 0x1}}, {{&(0x7f00000001c0)={0xa, 0x4e20, 0x79, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x3}, 0x1c, &(0x7f0000000880)=[{&(0x7f0000000200)="ec", 0x1}], 0x1}}], 0x2, 0x8080) r4 = socket$netlink(0x10, 0x3, 0x4) writev(r4, &(0x7f0000000080)=[{&(0x7f0000000e40)="480000001400190d09004beafd0d36020a8447000b4e230f00000001a2bc5601", 0x20}], 0x1) timer_settime(0x0, 0x0, 0x0, 0x0) openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x40000) 2m47.270869299s ago: executing program 9 (id=318): r0 = socket$inet6(0x10, 0x2, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, 0x0, 0x0) r1 = socket$inet6(0x10, 0x2, 0x0) r2 = syz_io_uring_setup(0x49a, &(0x7f0000000400)={0x0, 0x79af, 0x3180, 0x8000, 0x40024e}, &(0x7f0000000080)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_TIMEOUT={0xb, 0x11, 0x0, 0x0, 0x0, &(0x7f0000000100), 0x1, 0x40, 0x1}) io_uring_enter(r2, 0x627, 0xc1040000, 0x43, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x16, 0x2, 0xff}]}, 0x10) sendto$inet6(r1, &(0x7f00000002c0)="1c0000001200050f0c1000000049b23e9b200a0008002ec000000001", 0x1c, 0x0, 0x0, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000100)) syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2) r5 = syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') r6 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r5, 0x0) epoll_ctl$EPOLL_CTL_MOD(r6, 0x3, r5, &(0x7f0000000c40)) r7 = accept4$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000080)=0x14, 0x800) connect$packet(r7, &(0x7f00000000c0)={0x11, 0x6, 0x0, 0x1, 0x2, 0x6, @remote}, 0x14) sendto$inet6(r0, &(0x7f00000002c0)="1c0000001200050f0c1000000049b23e9b200a00080001c000000001", 0xffffffffffffffc7, 0x0, 0x0, 0xffffffffffffffe3) r8 = socket$igmp6(0xa, 0x3, 0x2) ioctl$sock_SIOCGIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r8, 0x8982, &(0x7f0000000040)={0x9, 'vlan1\x00', {0x10080}, 0xe}) r9 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/ptype\x00') preadv(r9, &(0x7f00000003c0)=[{&(0x7f0000000180)=""/76, 0x4c}, {&(0x7f0000000100)=""/23, 0x17}], 0x2, 0x4c, 0x3ff) pipe(&(0x7f0000000080)={0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000840)={0xffffffffffffffff, 0xffffffffffffffff}) syz_open_dev$vim2m(&(0x7f0000000200), 0x3, 0x2) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r11, 0x0, r12, 0x0, 0xf3a, 0x0) vmsplice(r12, &(0x7f0000000380)=[{&(0x7f0000013580)="0dd2e7c8926dc6acd0ae6c178054e95986faff9544de5fc4c30adf404da41181a77466ac5075905ea5f50134fdd517a957fe2ee59b61f9fe8d7aabe595ea23de2723e437af0423a56686a4c2d957be1a0ab922fbbd3cb1d8c6ab0d58440a327c8eb05d445b4ac5f20abe449e4084f8b996268d0564f67980d3ed3479e0edfe5cec7b4f89bface391c9c4c58ad123b91c33173c72326d1df18804a9ea20f9ece48f784d8ca2318e3d2b316666b5dfb7295c4915989d5bcb120e8fedaa97b93a137c256ce4", 0x20013644}, {&(0x7f0000013680)="c578381bf5113dad8319d9ea5294285ae9a90384ce23866477bef9de4399237d8b3522c9c194e71edaf3332a2f169682f9d8fa271683d4d441b710409e506333e0c3b64e52e8720734b6787f4a84f5bebb046649c6c697d978affd349031b2cd874c7a8961a586a9f2d62f945e7a5bf2f5f7a31684c0503704881d2578a2a98ac3ef4e4a4b0dcdb70db735d5c1652eed3848b2dd4131bb0eb7cfadfaf5", 0x9d}], 0x2, 0x0) tee(r10, r12, 0x8f5, 0x100000000000000) ioctl$VIDIOC_QUERYBUF_DMABUF(r9, 0xc0585609, &(0x7f0000000140)={0xb096, 0x1, 0x4, 0x2, 0x4, {}, {0x5, 0xc, 0x5, 0xa, 0x6a, 0x9, "b8d744a5"}, 0x4, 0x4, {}, 0x1, 0x0, r12}) 2m47.252506972s ago: executing program 6 (id=319): r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000540)=@bpf_lsm={0x1d, 0xf, &(0x7f0000000080)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200), 0x0, 0x10, 0x9, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x21, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x581, 0x20000000008c}, 0x0) syz_open_dev$sndmidi(0x0, 0x80, 0x200) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket$nl_generic(0x11, 0x3, 0x10) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r3, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f0000000180)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x6, 0x0, 0x6c}]}, 0x10) syz_emit_ethernet(0x22, &(0x7f0000000440)=ANY=[@ANYBLOB="aaaaaaaaaaaa429e82211cf80800450200140065000002069078ac1e0101ffffffff33ea428c137b460d3ba1db8b336422f5f29b432aa2ab2b3149ead28557c31add9a01200a8d7e8ce7f2b38604e4907694baf272d8ea07769e066497bb7a5eaa88e6deefd2aaa424552f440995030dc66cb5e13b696612aecb77661367204dac62343d2e6205102eb5cd6554756e9e60511783ec146adc8f2b848dc5abbb9ad338b3a98c710ba3ff159b1e2bfef7edba9ef0edebccfe7385ce5cf0e59ce4d642d9314e2fa74df7e9d01af3e076af246172f73686337a"], 0x0) sendmsg(r2, &(0x7f0000000640)={&(0x7f00000000c0)=@caif=@dgm={0x25, 0xd}, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000000)="4ba72c4cfd81685544f46c3f0800", 0xe}], 0x1, 0x0, 0x0, 0x11000000}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=@newtaction={0x74, 0x30, 0xb, 0xfffffffc, 0x0, {}, [{0x60, 0x1, [@m_skbmod={0x5c, 0x1, 0x0, 0x0, {{0xb}, {0x30, 0x2, 0x0, 0x1, [@TCA_SKBMOD_PARMS={0x24}, @TCA_SKBMOD_ETYPE={0x6, 0x5, 0x3}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x74}, 0x1, 0x0, 0x0, 0x4044800}, 0x0) r5 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) getsockopt$llc_int(r5, 0x10c, 0x1, &(0x7f0000000000), &(0x7f0000000200)=0x4) syz_open_procfs(0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, 0x0) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000640), 0x0, 0x0) mknod(&(0x7f0000000080)='./bus\x00', 0x1000, 0x0) r6 = open(&(0x7f0000000100)='./bus\x00', 0x143142, 0x0) open(&(0x7f0000000280)='.\x00', 0x0, 0x0) write$FUSE_NOTIFY_INVAL_ENTRY(r6, 0x0, 0x28) splice(r6, 0x0, 0xffffffffffffffff, 0x0, 0x8, 0x8) openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0) 2m44.122399503s ago: executing program 5 (id=322): r0 = socket$kcm(0x2, 0x5, 0x84) sendmsg$inet(r0, &(0x7f0000002980)={&(0x7f0000000180)={0x2, 0x0, @dev}, 0x10, &(0x7f0000001400)=[{&(0x7f0000000100)}], 0x1}, 0x4000000) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'veth0_vlan\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x43d, 0x0, 0x0, {0x0, 0x0, 0x0, r2}}, 0x24}}, 0x0) 2m44.012158569s ago: executing program 6 (id=323): r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000540)=@bpf_lsm={0x1d, 0xf, &(0x7f0000000080)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200), 0x0, 0x10, 0x9, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x21, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x581, 0x20000000008c}, 0x0) syz_open_dev$sndmidi(0x0, 0x80, 0x200) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) socket$nl_generic(0x11, 0x3, 0x10) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r2, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f0000000180)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x6, 0x0, 0x6c}]}, 0x10) syz_emit_ethernet(0x22, &(0x7f0000000440)=ANY=[@ANYBLOB="aaaaaaaaaaaa429e82211cf80800450200140065000002069078ac1e0101ffffffff33ea428c137b460d3ba1db8b336422f5f29b432aa2ab2b3149ead28557c31add9a01200a8d7e8ce7f2b38604e4907694baf272d8ea07769e066497bb7a5eaa88e6deefd2aaa424552f440995030dc66cb5e13b696612aecb77661367204dac62343d2e6205102eb5cd6554756e9e60511783ec146adc8f2b848dc5abbb9ad338b3a98c710ba3ff159b1e2bfef7edba9ef0edebccfe7385ce5cf0e59ce4d642d9314e2fa74df7e9d01af3e076af246172f73686337a"], 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(0xffffffffffffffff, 0xc1105517, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=@newtaction={0x74, 0x30, 0xb, 0xfffffffc, 0x0, {}, [{0x60, 0x1, [@m_skbmod={0x5c, 0x1, 0x0, 0x0, {{0xb}, {0x30, 0x2, 0x0, 0x1, [@TCA_SKBMOD_PARMS={0x24}, @TCA_SKBMOD_ETYPE={0x6, 0x5, 0x3}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x74}, 0x1, 0x0, 0x0, 0x4044800}, 0x0) r4 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) getsockopt$llc_int(r4, 0x10c, 0x1, &(0x7f0000000000), &(0x7f0000000200)=0x4) syz_open_procfs(0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, 0x0) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000640), 0x0, 0x0) mknod(&(0x7f0000000080)='./bus\x00', 0x1000, 0x0) r5 = open(&(0x7f0000000100)='./bus\x00', 0x143142, 0x0) open(&(0x7f0000000280)='.\x00', 0x0, 0x0) write$FUSE_NOTIFY_INVAL_ENTRY(r5, 0x0, 0x28) splice(r5, 0x0, 0xffffffffffffffff, 0x0, 0x8, 0x8) openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0) 2m43.921196831s ago: executing program 7 (id=324): syz_usb_connect(0x0, 0x24, &(0x7f0000000280)=ANY=[@ANYBLOB="1201000046365608b40413868f95010201010902120001000000000904"], 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'sha1-avx2\x00'}, 0x58) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r1) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="9feb0100180000000000000024000000240000000a000000080000000200000f75ffff"], 0x0, 0x46, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r1, 0x9) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) sendmmsg(r3, &(0x7f0000002840)=[{{0x0, 0x0, 0x0}}], 0x1, 0x20044000) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000540)=ANY=[@ANYBLOB="14000000", @ANYRES16=r5, @ANYBLOB="861405b27000ffdbdf25040000048667d8f3ed7d2631d64ca54d7d56a74ac3a3d6c1c05177d32dca7b3f23810909372002469086acffc63a89b177471afe52e5a8abbbd8b856064abc0eeeb03126ac04"], 0x14}, 0x1, 0x0, 0x0, 0x20000800}, 0x800) r6 = io_uring_setup(0x39b7, &(0x7f00000003c0)={0x0, 0xede7, 0x2000, 0x0, 0x37a}) syz_io_uring_setup(0x67be, &(0x7f0000000440)={0x0, 0x537b, 0x1, 0x3, 0xa4, 0x0, r6}, &(0x7f00000001c0), &(0x7f0000000500)) r7 = accept$alg(r0, 0x0, 0x0) sendmmsg$alg(r7, &(0x7f0000000240)=[{0x0, 0x0, &(0x7f0000012500)=[{&(0x7f0000010140)="78c6", 0x2}, {&(0x7f0000000280)="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", 0x13e}], 0x2, 0x0, 0x0, 0x800}], 0x1, 0x4004881) openat$smackfs_cipso(0xffffffffffffff9c, &(0x7f0000000040)='/sys/fs/smackfs/cipso2\x00', 0x2, 0x0) 2m42.913035296s ago: executing program 5 (id=325): bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000180)={0xffffffffffffffff, 0x20, &(0x7f0000000140)={&(0x7f0000000040)=""/4, 0x4, 0x0, &(0x7f0000000080)=""/188, 0xbc}}, 0x10) r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000280)={{0x12, 0x1, 0x141, 0xf2, 0xc5, 0x96, 0x20, 0x16d0, 0x10b8, 0xde8e, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x0, 0x2, 0x2, 0x0, 0x83, 0xec, 0x0, [], [{{0x9, 0x5, 0x6, 0x2, 0x200, 0x2, 0x0, 0xa}}, {{0x9, 0x5, 0x82, 0x2, 0x200, 0x0, 0x1, 0x10}}]}}]}}]}}, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000780)={0x84, &(0x7f0000000000)={0x0, 0x30, 0xc, "00004700000040f400bec073"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000480)={0x24, &(0x7f0000000140)={0x0, 0x15, 0x28, "22abef037c578c78317b9730d42943a0f6e13c8b4610b8395ae6a4eefcf2b320ca1792535d21c3c9"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="5000000010"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x8, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}]}}}, @IFLA_MASTER={0x8, 0x3, r2}]}, 0x44}}, 0x4000000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x200, 0x70bd2e, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x0, 0xffe0}, {0xffff, 0xffff}, {0x1, 0x9}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x4000000) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000380)={0x34, &(0x7f0000000540)={0x40, 0x14, 0x4, "b6fabaa1"}, 0x0, 0x0, 0x0, 0x0, 0x0}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000480)={0xffffffffffffffff, 0xe0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2000009a, 0x9, &(0x7f0000000200), &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xe4, &(0x7f00000004c0)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], 0x40, 0x10, &(0x7f0000000000), &(0x7f0000000300), 0x8, 0xd7, 0x8, 0x8, &(0x7f0000000340)}}, 0x10) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000180)={0xffffffffffffffff, 0x20, &(0x7f0000000140)={&(0x7f0000000040)=""/4, 0x4, 0x0, &(0x7f0000000080)=""/188, 0xbc}}, 0x10) (async) syz_usb_connect(0x0, 0x36, &(0x7f0000000280)={{0x12, 0x1, 0x141, 0xf2, 0xc5, 0x96, 0x20, 0x16d0, 0x10b8, 0xde8e, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x0, 0x2, 0x2, 0x0, 0x83, 0xec, 0x0, [], [{{0x9, 0x5, 0x6, 0x2, 0x200, 0x2, 0x0, 0xa}}, {{0x9, 0x5, 0x82, 0x2, 0x200, 0x0, 0x1, 0x10}}]}}]}}]}}, 0x0) (async) syz_usb_control_io$uac1(r0, 0x0, 0x0) (async) syz_usb_control_io(r0, 0x0, &(0x7f0000000780)={0x84, &(0x7f0000000000)={0x0, 0x30, 0xc, "00004700000040f400bec073"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000480)={0x24, &(0x7f0000000140)={0x0, 0x15, 0x28, "22abef037c578c78317b9730d42943a0f6e13c8b4610b8395ae6a4eefcf2b320ca1792535d21c3c9"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="5000000010"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) (async) socket(0x1, 0x803, 0x0) (async) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x8, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}]}}}, @IFLA_MASTER={0x8, 0x3, r2}]}, 0x44}}, 0x4000000) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x200, 0x70bd2e, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x0, 0xffe0}, {0xffff, 0xffff}, {0x1, 0x9}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x4000000) (async) socket$netlink(0x10, 0x3, 0x0) (async) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) (async) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000380)={0x34, &(0x7f0000000540)={0x40, 0x14, 0x4, "b6fabaa1"}, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000480)={0xffffffffffffffff, 0xe0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2000009a, 0x9, &(0x7f0000000200), &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xe4, &(0x7f00000004c0)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], 0x40, 0x10, &(0x7f0000000000), &(0x7f0000000300), 0x8, 0xd7, 0x8, 0x8, &(0x7f0000000340)}}, 0x10) (async) 2m42.783058804s ago: executing program 6 (id=326): syz_usb_connect(0x0, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0xd5, 0xe5, 0x8d, 0x10, 0x545, 0x8080, 0x2, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xf2, 0xad, 0xf7}}]}}]}}, 0x0) r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x1, 0x0, 0x7ffc1ffb}]}) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1, 0x0, 0x2}) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000240)=@mmap={0x1, 0x2, 0x4, 0x40, 0x9, {}, {0x2, 0x2, 0x4, 0xc0, 0x0, 0xf0, "18a6fc23"}, 0x1, 0x1, {}, 0x1}) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000180)=@mmap={0x1, 0x2, 0x4, 0x1, 0x1, {}, {0x4, 0x8, 0x8, 0x5, 0x29, 0xd, "0adb3fb8"}, 0x5}) syz_io_uring_setup(0x35df, &(0x7f0000000000)={0x0, 0x7f18, 0x1000, 0x2, 0x233}, &(0x7f0000000200)=0x0, &(0x7f0000000100)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x10c, &(0x7f0000000140)=0x6, 0x0, 0x4) 2m42.704203156s ago: executing program 9 (id=327): r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000140)={0x1000200, 0x0, 0x80000000, 0xffff, 0x0, "4ae23ae17df2e98c69ba36c4095c911abad88f"}) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000480)=0x9) 2m42.496691808s ago: executing program 9 (id=328): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000080)=@nat={'nat\x00', 0x1b, 0x5, 0x3c8, 0x1d0, 0x288, 0xffffffff, 0x118, 0x288, 0x330, 0x330, 0xffffffff, 0x330, 0x330, 0x5, &(0x7f0000000000), {[{{@uncond, 0x0, 0xe0, 0x118, 0x0, {}, [@common=@inet=@set3={{0x50}, {{0x1, 0x2, 0x4}, {0x70, 0x3}, {0x81, 0x1}, 0x9}}, @common=@socket0={{0x20}}]}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0x8, @dev={0xac, 0x14, 0x14, 0x44}, @multicast1, @gre_key=0x4, @port=0x4e22}}}}, {{@ip={@multicast2, @remote, 0xff, 0xff000000, 'pimreg\x00', 'ip6_vti0\x00', {0xff}, {}, 0x1d, 0x0, 0x36}, 0x0, 0x70, 0xb8}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x3, @ipv4=@multicast1, @ipv6=@loopback, @gre_key=0x2, @port=0x4e20}}}, {{@uncond, 0x0, 0x70, 0xb8}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x8, @ipv6=@private2={0xfc, 0x2, '\x00', 0x1}, @ipv6=@dev={0xfe, 0x80, '\x00', 0x1e}, @icmp_id=0x65, @icmp_id=0x64}}}, {{@ip={@empty, @local, 0xffffffff, 0xffffff00, 'veth1_to_team\x00', 'nr0\x00', {0xff}, {}, 0x16, 0x3, 0x2}, 0x0, 0x70, 0xa8}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x8, @multicast2, @private=0xa010101, @icmp_id=0x66, @icmp_id=0x66}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x428) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETCHAIN(r1, &(0x7f0000000580)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x28, 0x4, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x1}, [@NFTA_CHAIN_TYPE={0x8, 0x7, 'nat\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000}, 0x4) r2 = syz_open_dev$swradio(&(0x7f00000005c0), 0x0, 0x2) ioctl$VIDIOC_S_FMT(r2, 0xc0d05605, &(0x7f0000000600)={0xe, @raw_data="842bbd3c8a8dbd79e0059e27a7c2c4bef8ab7987cac51f1963938f7c9aa42ea03347a758c370d884011b1a66a9c898419ed678966da6edfe51d621acaab09fa228fd63a054def83965d83ebd41a89523b7196a6222c7471fd5e80c298cc532d3dd387a8b6881b3961d6146e93ec3d07ecf718b45106838e12c4b2e937478246e4467c53b137b88dc1768f5a41e93a8c234f8ca216037839d0cc39b6ada4c011a08282998212d54e12cf43838cb1d2acd687e3ee5043dc1a5d51f85c89b27f9a07e0b099696d3f81e"}) openat$tun(0xffffffffffffff9c, &(0x7f0000000700), 0x4000, 0x0) socket$unix(0x1, 0x1, 0x0) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000780), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000dc0)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000d80)={&(0x7f00000007c0)={0x5ac, r3, 0x8, 0x70bd27, 0x25dfdbff, {}, [@ETHTOOL_A_LINKMODES_OURS={0x320, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x6}, @ETHTOOL_A_BITSET_BITS={0x19c, 0x3, 0x0, 0x1, [{0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x401}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '\x9d)/\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}]}, {0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}]}, {0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x12, 0x2, '/dev/swradio#\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xd, 0x2, 'REDIRECT\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '+\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xffff0000}]}, {0x60, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, 'syz2\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, 'nat\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x12, 0x2, '/dev/swradio#\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x11, 0x2, '/dev/net/tun\x00'}]}, {0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '.#\xf3\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x38f7150}, @ETHTOOL_A_BITSET_BIT_NAME={0x12, 0x2, '/dev/swradio#\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xb6e6}]}, {0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, 'SNAT\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5c}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '@\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xfffff800}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xd0e}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}]}]}, @ETHTOOL_A_BITSET_VALUE={0xa1, 0x4, "77d5691b5de5d14ccf59dd7f49783dd90c00f36ebca0f6f1567cdfc67b4be2c860ea4c0ae893e04b7bc4eaeecab201218caa36a831ce96ba22e2a5a5a2a2a078109ac1a70aba3ea18eb393108aff87295a415faddef28d0952fd8961adea1f310630faad6738cf2356fc373a600f20dc22d03af3b6806c70a0cb14b719d7ad47103d29f4f8b6b2b22da74309c49839faf7d0ca891a37e1b4ae176e0376"}, @ETHTOOL_A_BITSET_VALUE={0x31, 0x4, "a6aa99d2a883ffd5faeb8461a0b86279ca4c6eb42e081fb0ac80630ce8c5dc46b63502c50d67ae07c54468f5c0"}, @ETHTOOL_A_BITSET_VALUE={0x8d, 0x4, "ede177b4d943f0434af5fe016b8623486bf5fb092e42bbe87ed79948912e614168b889eae61077118ba555f860b4d62b6f27aeb088e0e3354cae2327d51412148c1f5153d1a9c53b8cbe40c1f2008fa51f41359c5c59e448145e35f9a6967bf8c1768121c406feba0599993fd7b6766caa96a6224f0baf78d2560c43eb7deb9158c5a1d48281e5e257"}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x7}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}, @ETHTOOL_A_LINKMODES_MASTER_SLAVE_CFG={0x5, 0x7, 0x4}, @ETHTOOL_A_LINKMODES_AUTONEG={0x5}, @ETHTOOL_A_LINKMODES_OURS={0x268, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0xae, 0x5, "fcf3ac79584d434b3d1507aa6fc09e982cb076854b055f11d49086721e6ad9f6b1a4e89edaa6f62e61b3574d84f4ae1237dfc3c317e107d5c46f13223fae0e66bd6d4fb8c3a47692cebcc408b8630bcbeb080de1056e545b0c9006360a12710834492e15cfa739ece690132585d12e9315188cae0b740f4c7cd63352fed64c185ebcab8db3c7ad67fd709b65a57658f04a0c6a653ca46f620f891ff1cecf9e7ac4a793fe74595737cf17"}, @ETHTOOL_A_BITSET_BITS={0x13c, 0x3, 0x0, 0x1, [{0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x200}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, 'syz2\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x12, 0x2, '/dev/swradio#\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, 'syz2\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '\x1e\x00'}]}, {0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xd, 0x2, 'ip6_vti0\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1000}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xc}]}, {0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6}, @ETHTOOL_A_BITSET_BIT_NAME={0xb, 0x2, 'pimreg\x00'}]}, {0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x11, 0x2, '*%-#\'-+y\\&-[\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xd}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, 'nr0\x00'}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, 'set\x00'}]}, {0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}]}, {0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x665}]}, {0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xd4b}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6}]}]}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_BITS={0x70, 0x3, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}, @ETHTOOL_A_BITSET_BIT_NAME={0xe, 0x2, ',,\xea!{$-*[\x00'}]}, {0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xd, 0x2, 'ip6_vti0\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x11, 0x2, '/dev/net/tun\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '+\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xb, 0x2, 'pimreg\x00'}]}]}, @ETHTOOL_A_BITSET_VALUE={0x4}]}]}, 0x5ac}, 0x1, 0x0, 0x0, 0xc1}, 0x40084) r4 = openat$smackfs_ipv6host(0xffffffffffffff9c, &(0x7f0000000e00), 0x2, 0x0) write$smackfs_ipv6host(r4, &(0x7f0000000e40)=@l2={{0x5, 0x3a, 0x8, 0x3a, 0xaf, 0x3a, 0x9, 0x3a, 0xaa53, 0x3a, 0x3, 0x3a, 0x2f, 0x3a, 0x6}, 0x2f, 0x9, 0x20, '):*'}, 0xb1) 2m42.35196711s ago: executing program 7 (id=329): r0 = syz_open_dev$vim2m(&(0x7f0000000680), 0x0, 0x2) socket$nl_xfrm(0x10, 0x3, 0x6) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'tunl0\x00'}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000000d40)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000880), 0xfffffffffffffddd, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={r4, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0xf) r6 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000000c0)={r5}, 0x4) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000840)={r6, 0x1, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x45, 0x8, 0x0, 0x0}}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000600)={0x6, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="61a000fe00000000050000000000000095"], &(0x7f0000000140)='syzkaller\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', r7, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000340)={0x0, 0x5, 0x4, {0x1, @sliced={0x2, [0x2, 0xf, 0x1, 0x9, 0x243, 0x2, 0x3, 0x401, 0x8, 0x1, 0x8, 0x37, 0x60, 0x401, 0x2, 0x5, 0x10, 0x4, 0x9000, 0x81e, 0x6, 0x6, 0x3, 0x7, 0x4, 0x7, 0xc9, 0xb, 0x1, 0x0, 0x890, 0xf811, 0x2, 0xc478, 0xfe00, 0x7, 0x8be, 0x5, 0x200, 0xc4, 0xa457, 0xff, 0xf795, 0x4, 0xffff, 0xff, 0x2, 0x6], 0x8}}, 0x10004}) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000240)={0x0, 0x6, 0x1, {0x1, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{0x1}]}}}) syz_emit_ethernet(0x86, &(0x7f0000000000)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x50, 0x6, 0x0, @private0, @local, {[], {{0x0, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x14, 0x2, 0x5, 0x0, 0x0, {[@generic={0xfe, 0xe, "2391bae83714975c15807b20"}, @sack_perm={0x4, 0x2}, @fastopen={0x22, 0xe, "31433359f0d2c51e93852e5f"}, @exp_smc={0xfe, 0x6}, @exp_fastopen={0xfe, 0x5, 0xf989, "ac"}, @generic={0xf4, 0x12, "03ff5d0cb11898059413263df0140b11"}]}}}}}}}}, 0x0) r8 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000140), 0x82084, 0x0) ioctl$TIOCSETD(r8, 0x5423, &(0x7f0000000040)=0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r9 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) ioctl$PPPIOCGFLAGS1(r9, 0x40047454, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) 2m42.207489218s ago: executing program 9 (id=330): bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x21, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x581, 0x20000000008c}, 0x0) syz_open_dev$sndmidi(0x0, 0x80, 0x200) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$nl_generic(0x11, 0x3, 0x10) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r2, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f0000000180)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x6, 0x0, 0x6c}]}, 0x10) syz_emit_ethernet(0x22, &(0x7f0000000440)=ANY=[@ANYBLOB="aaaaaaaaaaaa429e82211cf80800450200140065000002069078ac1e0101ffffffff33ea428c137b460d3ba1db8b336422f5f29b432aa2ab2b3149ead28557c31add9a01200a8d7e8ce7f2b38604e4907694baf272d8ea07769e066497bb7a5eaa88e6deefd2aaa424552f440995030dc66cb5e13b696612aecb77661367204dac62343d2e6205102eb5cd6554756e9e60511783ec146adc8f2b848dc5abbb9ad338b3a98c710ba3ff159b1e2bfef7edba9ef0edebccfe7385ce5cf0e59ce4d642d9314e2fa74df7e9d01af3e076af246172f73686337a"], 0x0) sendmsg(r1, &(0x7f0000000640)={&(0x7f00000000c0)=@caif=@dgm={0x25, 0xd}, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000000)="4ba72c4cfd81685544f46c3f0800", 0xe}], 0x1, 0x0, 0x0, 0x11000000}, 0x0) 2m41.028538419s ago: executing program 7 (id=331): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x10000000004e20, 0x0, @mcast2, 0x6}, 0x1c) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xb, &(0x7f0000000380)=ANY=[@ANYRES16=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGKBTYPE(r1, 0x4b52, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() syz_emit_ethernet(0x32, &(0x7f0000000200)=ANY=[@ANYBLOB="aaaaaaaa01aaaaaa0000aa00080045000024000000000021907800000000e000000100004ea004019078048f048b00b57037"], 0x0) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) add_key(&(0x7f0000000000)='pkcs7_test\x00', 0x0, &(0x7f00000021c0)="305c0607e182087051667557c7d7982b8f57fb20a3adc9e3baa292ce8f0a861e6417acfc8648ad1b86400393d502b0cd490635d54cdf5bd0461690982b236949ab5e000000808ce41d86b9b949004fd8fe45b91e8fe7ec7c49750a1b0ade", 0x5e, 0xfffffffffffffffe) setsockopt$sock_int(r5, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4) setsockopt$SO_TIMESTAMPING(r5, 0x1, 0x25, &(0x7f0000000080)=0x1f6, 0x4) sendmmsg$inet(r5, &(0x7f0000003240)=[{{&(0x7f0000000100)={0x2, 0x4e23, @empty}, 0x10, &(0x7f00000016c0)=[{&(0x7f0000001540)="94", 0xffe3}], 0x1}}], 0x1, 0x4000800) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/vmstat\x00', 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) r8 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x820000, 0x0) ioctl$IOMMU_VFIO_SET_IOMMU(r8, 0x3b66, 0x0) 2m40.601447795s ago: executing program 9 (id=332): openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r2 = socket(0x10, 0x803, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) mount$cgroup(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0), 0x10000, &(0x7f0000000400)={[{@subsystem='hugetlb'}, {@subsystem='memory'}, {@subsystem='cpuacct'}]}) mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./file0/file0\x00', 0x70) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0x7}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd26, 0x8000002, {0x0, 0x0, 0x0, r4, {0x0, 0x6}, {}, {0x7, 0xa}}, [@filter_kind_options=@f_basic={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x24008004}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newtfilter={0x24, 0x2c, 0x1, 0x830bd29, 0x25dfdbfb, {0x0, 0x0, 0x0, r1, {0xb, 0x6}, {}, {0x7, 0xa}}}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x0) 2m39.347353319s ago: executing program 6 (id=333): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x1, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x9, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800"/16], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000003c0)={[0x0, 0x0, 0x8000, 0x40, 0x0, 0x0, 0x2004cb, 0x0, 0xfffffffffffffffe, 0x3, 0x0, 0x4, 0x0, 0x2, 0x0, 0x7fffffff], 0x80a0000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2m39.259632617s ago: executing program 7 (id=334): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000840), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x5}, 0x4) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000280)={"6cdd4237dd245c8404721efdc9c8dc1964125fa96fa42b761c6ec25b2bec0ba4c81036c93a40c8a4d4412a763b00040000000000003c5ca206c047ecee377abaece6b88378e38e06c5fc191f361d264ffa8b46485f02baee1ab6b8154252066178868d1ef4b53606000000000000007c21a984c2b9ca4bbb7a87165c0c1dbc75d7ea4df1001000000000694525952f44500a1f0db509c32cc7ace842c28f37f06e4ea9f1e5f0c6c379f9cc58bf69fcde317fad4825aa1b6a832d4e48cc41bb5a6baa41d614f6c8941bee805954a62d196a4e8d4bf6b21224b57f530d0000c1ff53bf79a1f5c5dc34cf2645cbc11c4562d22db88d0edc5daee171cc04d96d9ec2db07478f347edbd6424923ad4a5672b1b285c7988c4ec0922c655ff600000000c00dc290d936d93236051fadfb4b95d02c0bda7ce38dabb7cd103fe4d0c90f000000000000008d46099b1f580968af6afbbc19db161c6df3e7c9c71bc08a282fc2c142856b5e4caff4c0a4f72445ef10dcd2c569319d6e9bb2058d023f669a64fc7d9684b45b00000000364673dcfa9235ea5a2ff23c4bb5c5acb290e8976dcac779ff0000f5620000003d4e185afe28a774b99d3890bd37428617de4cdd6f53c419ce31054182fd098af7b7f1b1152c691611f897558d4b755cb783978d9859b0537b05b623dcb5c4ca9317471a40fa4998cca80e961efffb4e1aa25d8a17deef0c8694c4395fc99be3c3fe7aeb8af4929ce7d346ca62b25d48fda5d10146702f78b233b5208752726ed9f0c340d494b92d19cc930bb8a5f8b4da8f4603ac0c3b698384e17a570dc8524823ed15af4ecfabb4b2541d3c114b7bba1c21a845c9cf0d1cc24aba47e30f558b2246ad95ccf7d2f80cc0ab26f08336ea1a33b79c76e17251e33519fc978f66df7df4557c91024a8dc130a28ef5f63ad07b39c8d23b85cf434e065e8a29a80047fe17dee6f6347b4951f97b5703dc78b1ca9d74ea6a9ae12ab367c0de2659cc38d2f33ddd86e0597d33361eada119b5132145fa4525c488c7fffd6ceda6e9a02ebd97ced6b0161f2cc84615ceb8b18883299c636e9e46724a9a0600a8bb02f3e489631d522019a35fe12a33caf9dd8768ddbc02a484c345c3eff254297b1dbb04989c3f9f3c7b3c985c39b1d313018068d3809bac8c657e39f4f692613e28387e955722908dd88b56163be8312ff47c5b6f280472935af74e97a5a8110a4d74496f4c8ec82ddb010100000000000001a047526865c888c9ff36056cc4ad258021e1581d43badaaec6cc5a2ef989de9801fed6d4be2bfcfe656c9c46bffbe9dd03970800000000000000d372bdd6d89dc1ecf63c23d506114d0fba2bd1c69e8f7e3fccdcda85ce975ec1381b1cec6ddaa76e186719d819164300"}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000000)=[{0x6}]}) ioctl$SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) getsockopt$sock_cred(r4, 0x1, 0x11, 0x0, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a010300000000000000000100fffd0900010073797a300000000040000000030a01020000000000000000010000000900030073797a3200000000140004800800024032658aeb08000140000000010900010073797a300000000044000000060a010400000000000001040100000008000b40000000000900010073797a30000000001c000480180001800d00010073796e70726f7879000000000400028014000000110001"], 0xcc}}, 0x0) r5 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r5, &(0x7f00000000c0)={0xa, 0x4e21, 0xb, @empty}, 0x1c) connect$inet6(r5, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x39}}}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty, 0xfffffffe}}, 0x80000, 0x0, 0x0, 0x0, 0xb3550aa4ba878396}, 0x9c) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r6, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)={0x14, 0x3, 0x1, 0x101}, 0x14}}, 0x0) 2m38.99674939s ago: executing program 6 (id=335): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_GUEST_MEMFD(r3, 0xc040aed4, &(0x7f00000001c0)={0x1fe0000}) fallocate(r4, 0x1, 0x100000000, 0x80000000) keyctl$get_keyring_id(0x0, r1, 0xefca115) socket$inet_udp(0x2, 0x2, 0x0) syz_open_dev$sg(0x0, 0x0, 0x8a902) syz_io_uring_setup(0xa94, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xfffffffffffffe54}) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'netdevsim0\x00'}) prlimit64(0x0, 0x3, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) msgrcv(0x0, 0x0, 0x0, 0x0, 0x86b1b18158a7cb82) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r6 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x1c3302) writev(r6, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) pselect6(0x40, &(0x7f0000000000)={0x0, 0x0, 0x8000000000000000, 0x0, 0x0, 0x0, 0x0, 0x10000000}, 0x0, 0x0, 0x0, 0x0) r7 = mq_open(&(0x7f00005a1ffb)='eth0\x00', 0x42, 0x0, 0x0) mq_notify(r7, 0x0) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0x0, @any, 0x4}, 0xe) 2m37.897155803s ago: executing program 6 (id=336): r0 = socket$inet6(0x10, 0x2, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, 0x0, 0x0) r1 = socket$inet6(0x10, 0x2, 0x0) r2 = syz_io_uring_setup(0x49a, &(0x7f0000000400)={0x0, 0x79af, 0x3180, 0x8000, 0x40024e}, &(0x7f0000000080)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_TIMEOUT={0xb, 0x11, 0x0, 0x0, 0x0, &(0x7f0000000100), 0x1, 0x40, 0x1}) io_uring_enter(r2, 0x627, 0xc1040000, 0x43, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x16, 0x2, 0xff}]}, 0x10) sendto$inet6(r1, &(0x7f00000002c0)="1c0000001200050f0c1000000049b23e9b200a0008002ec000000001", 0x1c, 0x0, 0x0, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000100)) syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2) r5 = syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') r6 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r5, 0x0) epoll_ctl$EPOLL_CTL_MOD(r6, 0x3, r5, &(0x7f0000000c40)) r7 = accept4$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000080)=0x14, 0x800) connect$packet(r7, &(0x7f00000000c0)={0x11, 0x6, 0x0, 0x1, 0x2, 0x6, @remote}, 0x14) sendto$inet6(r0, &(0x7f00000002c0)="1c0000001200050f0c1000000049b23e9b200a00080001c000000001", 0xffffffffffffffc7, 0x0, 0x0, 0xffffffffffffffe3) r8 = socket$igmp6(0xa, 0x3, 0x2) ioctl$sock_SIOCGIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r8, 0x8982, &(0x7f0000000040)={0x9, 'vlan1\x00', {0x10080}, 0xe}) r9 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/ptype\x00') preadv(r9, &(0x7f00000003c0)=[{&(0x7f0000000180)=""/76, 0x4c}, {&(0x7f0000000100)=""/23, 0x17}], 0x2, 0x4c, 0x3ff) pipe(&(0x7f0000000080)={0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000840)={0xffffffffffffffff, 0xffffffffffffffff}) syz_open_dev$vim2m(&(0x7f0000000200), 0x3, 0x2) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r11, 0x0, r12, 0x0, 0xf3a, 0x0) vmsplice(r12, &(0x7f0000000380)=[{&(0x7f0000013580)="0dd2e7c8926dc6acd0ae6c178054e95986faff9544de5fc4c30adf404da41181a77466ac5075905ea5f50134fdd517a957fe2ee59b61f9fe8d7aabe595ea23de2723e437af0423a56686a4c2d957be1a0ab922fbbd3cb1d8c6ab0d58440a327c8eb05d445b4ac5f20abe449e4084f8b996268d0564f67980d3ed3479e0edfe5cec7b4f89bface391c9c4c58ad123b91c33173c72326d1df18804a9ea20f9ece48f784d8ca2318e3d2b316666b5dfb7295c4915989d5bcb120e8fedaa97b93a137c256ce4", 0x20013644}, {&(0x7f0000013680)="c578381bf5113dad8319d9ea5294285ae9a90384ce23866477bef9de4399237d8b3522c9c194e71edaf3332a2f169682f9d8fa271683d4d441b710409e506333e0c3b64e52e8720734b6787f4a84f5bebb046649c6c697d978affd349031b2cd874c7a8961a586a9f2d62f945e7a5bf2f5f7a31684c0503704881d2578a2a98ac3ef4e4a4b0dcdb70db735d5c1652eed3848b2dd4131bb0eb7cfadfaf5", 0x9d}], 0x2, 0x0) tee(r10, r12, 0x8f5, 0x100000000000000) ioctl$VIDIOC_QUERYBUF_DMABUF(r9, 0xc0585609, &(0x7f0000000140)={0xb096, 0x1, 0x4, 0x2, 0x4, {}, {0x5, 0xc, 0x5, 0xa, 0x6a, 0x9, "b8d744a5"}, 0x4, 0x4, {}, 0x1, 0x0, r12}) 2m37.844220703s ago: executing program 7 (id=337): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000f2ffffff0000000000000000850000001700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x43, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x20000000, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r0, 0x12, 0x2000, 0xdc0, &(0x7f0000000040)="976d9023d56482cd284a63da539706d7009be646625bd75b025352ebe557df463106baeed6c2d75549b140f143fb8bb67bfe5b308b8d05758115c7ad", &(0x7f0000000500)=""/130, 0x0, 0x0, 0xdf, 0xc4, &(0x7f0000000840)="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", &(0x7f00000005c0)="bf049fd184f7b03c21d9bcddc4eef9ebb6a0da3eb91c56454e873dd7336ccf21a1eeb8da7adf80d6e06ef46c7f36222fadaed2103c286468b3f44adee51445bd1bedf8fcc1c0b9fdc8b3829b1bf0c9d2d409cdecb12ad033e299c029331993ae9760345bf7feb91ee96b0eee19454ad3dbce5019b68c114ff1921a9b4665744c7784ac6736101a70592d83c448a84c31ec60bb901d96ea99471d823ee523318878ee704a8d9502b566cad45587cb74ea8259c1c0a926fc09499395b2db5af40bb6f4c526", 0x1, 0x8000, 0x1}, 0x24) 2m37.763448858s ago: executing program 7 (id=338): syz_usb_connect(0x0, 0x24, &(0x7f0000000280)=ANY=[@ANYBLOB="1201000046365608b40413868f95010201010902120001000000000904"], 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'sha1-avx2\x00'}, 0x58) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r1) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="9feb0100180000000000000024000000240000000a000000080000000200000f75ffff"], 0x0, 0x46, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r1, 0x9) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) sendmmsg(r3, &(0x7f0000002840)=[{{0x0, 0x0, 0x0}}], 0x1, 0x20044000) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000540)=ANY=[@ANYBLOB="14000000", @ANYRES16=r5, @ANYBLOB="861405b27000ffdbdf25040000048667d8f3ed7d2631d64ca54d7d56a74ac3a3d6c1c05177d32dca7b3f23810909372002469086acffc63a89b177471afe52e5a8abbbd8b856064abc0eeeb03126ac04"], 0x14}, 0x1, 0x0, 0x0, 0x20000800}, 0x800) r6 = io_uring_setup(0x39b7, &(0x7f00000003c0)={0x0, 0xede7, 0x2000, 0x0, 0x37a}) syz_io_uring_setup(0x67be, &(0x7f0000000440)={0x0, 0x537b, 0x1, 0x3, 0xa4, 0x0, r6}, &(0x7f00000001c0), &(0x7f0000000500)) r7 = accept$alg(r0, 0x0, 0x0) sendmmsg$alg(r7, &(0x7f0000000240)=[{0x0, 0x0, &(0x7f0000012500)=[{&(0x7f0000010140)="78c6", 0x2}, {&(0x7f0000000280)="7d92db4b2cd1b79248ba57511eb6968edde85f374b6cc58fa4c30c4ad91b8518022445284452d16aa937472743e954dddcbef43fceddb7c15f6d60dda65fa6e3e1e73c2f4d46408bf372faf80ca83321ac52c9adc410dffb59e5eb9890f8f418d3105666af8b1ff5303d4a764d4f380fe0a6e15a81516d563d728cf525163ebde8d01e355a81e70cc06de0e1fdd4c2c4f37af1a9332c46d23149099774aa20dbfd9e627ffccd33cbeb00b51f8581928aca415a0a2ee41f47851322df1aa3bf7d8c6061f9e1b822695d4c953c5d2d8fb71ecaec91b08ffe1db59a34141c55bd0baa25bbc19765aba546a609dfc38443e7c1c1ac5b22f432ac757c764f547fac8ec7d5a718f078165d41d7bf66849dab1a25999973341565d8345962883b4ee413869ae5d9f7d260f18ad8a1b88c17d68f46077ca22cf078337057fc307b81", 0x13e}], 0x2, 0x0, 0x0, 0x800}], 0x1, 0x4004881) openat$smackfs_cipso(0xffffffffffffff9c, &(0x7f0000000040)='/sys/fs/smackfs/cipso2\x00', 0x2, 0x0) 2m9.609873884s ago: executing program 38 (id=332): openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r2 = socket(0x10, 0x803, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) mount$cgroup(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0), 0x10000, &(0x7f0000000400)={[{@subsystem='hugetlb'}, {@subsystem='memory'}, {@subsystem='cpuacct'}]}) mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./file0/file0\x00', 0x70) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0x7}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd26, 0x8000002, {0x0, 0x0, 0x0, r4, {0x0, 0x6}, {}, {0x7, 0xa}}, [@filter_kind_options=@f_basic={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x24008004}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newtfilter={0x24, 0x2c, 0x1, 0x830bd29, 0x25dfdbfb, {0x0, 0x0, 0x0, r1, {0xb, 0x6}, {}, {0x7, 0xa}}}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x0) 0s ago: executing program 39 (id=325): bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000180)={0xffffffffffffffff, 0x20, &(0x7f0000000140)={&(0x7f0000000040)=""/4, 0x4, 0x0, &(0x7f0000000080)=""/188, 0xbc}}, 0x10) r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000280)={{0x12, 0x1, 0x141, 0xf2, 0xc5, 0x96, 0x20, 0x16d0, 0x10b8, 0xde8e, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x0, 0x2, 0x2, 0x0, 0x83, 0xec, 0x0, [], [{{0x9, 0x5, 0x6, 0x2, 0x200, 0x2, 0x0, 0xa}}, {{0x9, 0x5, 0x82, 0x2, 0x200, 0x0, 0x1, 0x10}}]}}]}}]}}, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000780)={0x84, &(0x7f0000000000)={0x0, 0x30, 0xc, "00004700000040f400bec073"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000480)={0x24, &(0x7f0000000140)={0x0, 0x15, 0x28, "22abef037c578c78317b9730d42943a0f6e13c8b4610b8395ae6a4eefcf2b320ca1792535d21c3c9"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="5000000010"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x8, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}]}}}, @IFLA_MASTER={0x8, 0x3, r2}]}, 0x44}}, 0x4000000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x200, 0x70bd2e, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x0, 0xffe0}, {0xffff, 0xffff}, {0x1, 0x9}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x4000000) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000380)={0x34, &(0x7f0000000540)={0x40, 0x14, 0x4, "b6fabaa1"}, 0x0, 0x0, 0x0, 0x0, 0x0}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000480)={0xffffffffffffffff, 0xe0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2000009a, 0x9, &(0x7f0000000200), &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xe4, &(0x7f00000004c0)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], 0x40, 0x10, &(0x7f0000000000), &(0x7f0000000300), 0x8, 0xd7, 0x8, 0x8, &(0x7f0000000340)}}, 0x10) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000180)={0xffffffffffffffff, 0x20, &(0x7f0000000140)={&(0x7f0000000040)=""/4, 0x4, 0x0, &(0x7f0000000080)=""/188, 0xbc}}, 0x10) (async) syz_usb_connect(0x0, 0x36, &(0x7f0000000280)={{0x12, 0x1, 0x141, 0xf2, 0xc5, 0x96, 0x20, 0x16d0, 0x10b8, 0xde8e, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x0, 0x2, 0x2, 0x0, 0x83, 0xec, 0x0, [], [{{0x9, 0x5, 0x6, 0x2, 0x200, 0x2, 0x0, 0xa}}, {{0x9, 0x5, 0x82, 0x2, 0x200, 0x0, 0x1, 0x10}}]}}]}}]}}, 0x0) (async) syz_usb_control_io$uac1(r0, 0x0, 0x0) (async) syz_usb_control_io(r0, 0x0, &(0x7f0000000780)={0x84, &(0x7f0000000000)={0x0, 0x30, 0xc, "00004700000040f400bec073"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000480)={0x24, &(0x7f0000000140)={0x0, 0x15, 0x28, "22abef037c578c78317b9730d42943a0f6e13c8b4610b8395ae6a4eefcf2b320ca1792535d21c3c9"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="5000000010"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) (async) socket(0x1, 0x803, 0x0) (async) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x8, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}]}}}, @IFLA_MASTER={0x8, 0x3, r2}]}, 0x44}}, 0x4000000) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x200, 0x70bd2e, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x0, 0xffe0}, {0xffff, 0xffff}, {0x1, 0x9}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x4000000) (async) socket$netlink(0x10, 0x3, 0x0) (async) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) (async) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000380)={0x34, &(0x7f0000000540)={0x40, 0x14, 0x4, "b6fabaa1"}, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000480)={0xffffffffffffffff, 0xe0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2000009a, 0x9, &(0x7f0000000200), &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xe4, &(0x7f00000004c0)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], 0x40, 0x10, &(0x7f0000000000), &(0x7f0000000300), 0x8, 0xd7, 0x8, 0x8, &(0x7f0000000340)}}, 0x10) (async) kernel console output (not intermixed with test programs): .285740][ T5818] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.295998][ T5818] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 93.308911][ T5818] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.323847][ T5818] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 93.340328][ T5823] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.354673][ T5823] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.375596][ T5823] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.391740][ T5823] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.415913][ T5818] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.433287][ T5818] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.443744][ T5818] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.456360][ T5818] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.590416][ T5922] FAULT_INJECTION: forcing a failure. [ 93.590416][ T5922] name failslab, interval 1, probability 0, space 0, times 1 [ 93.603289][ T5922] CPU: 1 UID: 0 PID: 5922 Comm: syz.4.10 Not tainted 6.15.0-rc4-syzkaller-00189-g2bfcee565c3a #0 PREEMPT(full) [ 93.603316][ T5922] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 93.603336][ T5922] Call Trace: [ 93.603345][ T5922] [ 93.603356][ T5922] dump_stack_lvl+0x189/0x250 [ 93.603399][ T5922] ? __pfx_dump_stack_lvl+0x10/0x10 [ 93.603427][ T5922] ? __pfx__printk+0x10/0x10 [ 93.603463][ T5922] ? __pfx___might_resched+0x10/0x10 [ 93.603491][ T5922] ? fs_reclaim_acquire+0x7d/0x100 [ 93.603517][ T5922] should_fail_ex+0x414/0x560 [ 93.603554][ T5922] should_failslab+0xa8/0x100 [ 93.603586][ T5922] kmem_cache_alloc_lru_noprof+0x78/0x3d0 [ 93.603614][ T5922] ? __d_alloc+0x31/0x6f0 [ 93.603640][ T5922] __d_alloc+0x31/0x6f0 [ 93.603667][ T5922] d_alloc_pseudo+0x1f/0xb0 [ 93.603688][ T5922] alloc_file_pseudo+0xcc/0x210 [ 93.603713][ T5922] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 93.603731][ T5922] ? __local_bh_enable_ip+0x12d/0x1c0 [ 93.603775][ T5922] anon_inode_getfile+0xc5/0x1a0 [ 93.603808][ T5922] bpf_link_prime+0xfc/0x220 [ 93.603831][ T5922] bpf_raw_tp_link_attach+0x4a5/0x6b0 [ 93.603865][ T5922] ? __pfx_bpf_raw_tp_link_attach+0x10/0x10 [ 93.603905][ T5922] ? __fget_files+0x2a/0x420 [ 93.603944][ T5922] bpf_raw_tracepoint_open+0x178/0x1f0 [ 93.603973][ T5922] __sys_bpf+0x3cd/0x860 [ 93.603998][ T5922] ? __pfx___sys_bpf+0x10/0x10 [ 93.604034][ T5922] ? ksys_write+0x1f0/0x250 [ 93.604059][ T5922] ? rcu_is_watching+0x15/0xb0 [ 93.604099][ T5922] __x64_sys_bpf+0x7c/0x90 [ 93.604119][ T5922] do_syscall_64+0xf6/0x210 [ 93.604143][ T5922] ? clear_bhb_loop+0x45/0xa0 [ 93.604167][ T5922] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 93.604186][ T5922] RIP: 0033:0x7f7accf8e969 [ 93.604210][ T5922] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 93.604227][ T5922] RSP: 002b:00007f7acadf6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 93.604258][ T5922] RAX: ffffffffffffffda RBX: 00007f7acd1b5fa0 RCX: 00007f7accf8e969 [ 93.604273][ T5922] RDX: 0000000000000010 RSI: 0000200000000480 RDI: 0000000000000011 [ 93.604285][ T5922] RBP: 00007f7acadf6090 R08: 0000000000000000 R09: 0000000000000000 [ 93.604298][ T5922] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 93.604309][ T5922] R13: 0000000000000000 R14: 00007f7acd1b5fa0 R15: 00007fff405eacd8 [ 93.604340][ T5922] [ 93.854399][ T5828] Bluetooth: hci0: command tx timeout [ 93.876520][ T5828] Bluetooth: hci3: command tx timeout [ 93.882420][ T5828] Bluetooth: hci2: command tx timeout [ 93.888378][ T5828] Bluetooth: hci1: command tx timeout [ 93.957422][ T5131] Bluetooth: hci4: command tx timeout [ 94.056335][ T63] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.075543][ T63] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.136941][ T52] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.145982][ T52] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.170986][ T63] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.198086][ T63] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.303556][ T5929] xt_HMARK: spi-set and port-set can't be combined [ 94.317927][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.331991][ T63] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.349455][ T63] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.351275][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.480897][ T1000] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.518220][ T1000] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.788579][ T5861] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 94.930288][ T5946] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 94.978146][ T5861] usb 2-1: Using ep0 maxpacket: 16 [ 95.097806][ T5917] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 95.177767][ T5861] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 95.298606][ T5861] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 95.309004][ T5861] usb 2-1: New USB device found, idVendor=05ac, idProduct=8241, bcdDevice= 0.00 [ 95.331685][ T5917] usb 1-1: Using ep0 maxpacket: 32 [ 95.410032][ T5861] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 95.437296][ T5917] usb 1-1: config index 0 descriptor too short (expected 156, got 27) [ 95.448273][ T5917] usb 1-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 95.585285][ T5917] usb 1-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 95.592627][ T5861] usb 2-1: config 0 descriptor?? [ 95.651264][ T5917] usb 1-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 95.708103][ T5917] usb 1-1: config 0 interface 0 has no altsetting 0 [ 95.733512][ T5917] usb 1-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 95.746299][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 95.756777][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 95.812792][ T5917] usb 1-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 95.836793][ T0] NOHZ tick-stop error: local softirq work is pending, handler #300!!! [ 95.845599][ T0] NOHZ tick-stop error: local softirq work is pending, handler #300!!! [ 95.854660][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 95.858087][ T5917] usb 1-1: Product: syz [ 95.868273][ T5917] usb 1-1: Manufacturer: syz [ 95.882778][ T5917] usb 1-1: SerialNumber: syz [ 95.892341][ T5917] usb 1-1: config 0 descriptor?? [ 95.943752][ T5917] ldusb 1-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 96.031218][ T5917] ldusb 1-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 96.037488][ T5955] netlink: 44 bytes leftover after parsing attributes in process `syz.3.17'. [ 96.091343][ C0] raw-gadget.0 gadget.1: ignoring, device is not running [ 96.101351][ T5861] usbhid 2-1:0.0: can't add hid device: -71 [ 96.110173][ T5861] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 96.144922][ T5861] usb 2-1: USB disconnect, device number 2 [ 97.680474][ T5978] sctp: [Deprecated]: syz.4.21 (pid 5978) Use of struct sctp_assoc_value in delayed_ack socket option. [ 97.680474][ T5978] Use struct sctp_sack_info instead [ 97.876975][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 97.949388][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 98.262150][ T5871] usb 1-1: USB disconnect, device number 2 [ 98.292818][ T5977] syz.1.22 uses obsolete (PF_INET,SOCK_PACKET) [ 98.326959][ T5871] ldusb 1-1:0.0: LD USB Device #0 now disconnected [ 98.401596][ T5980] netlink: 'syz.1.22': attribute type 10 has an invalid length. [ 98.467588][ T5992] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 98.481197][ T5992] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 98.558590][ T5980] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 98.704196][ T5997] FAULT_INJECTION: forcing a failure. [ 98.704196][ T5997] name failslab, interval 1, probability 0, space 0, times 0 [ 98.734362][ T5997] CPU: 0 UID: 0 PID: 5997 Comm: syz.3.29 Not tainted 6.15.0-rc4-syzkaller-00189-g2bfcee565c3a #0 PREEMPT(full) [ 98.734391][ T5997] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 98.734403][ T5997] Call Trace: [ 98.734411][ T5997] [ 98.734419][ T5997] dump_stack_lvl+0x189/0x250 [ 98.734454][ T5997] ? __pfx_dump_stack_lvl+0x10/0x10 [ 98.734482][ T5997] ? __pfx__printk+0x10/0x10 [ 98.734514][ T5997] ? __pfx___might_resched+0x10/0x10 [ 98.734543][ T5997] ? fs_reclaim_acquire+0x7d/0x100 [ 98.734569][ T5997] should_fail_ex+0x414/0x560 [ 98.734606][ T5997] should_failslab+0xa8/0x100 [ 98.734638][ T5997] kmem_cache_alloc_noprof+0x73/0x3c0 [ 98.734664][ T5997] ? security_file_alloc+0x34/0x330 [ 98.734689][ T5997] security_file_alloc+0x34/0x330 [ 98.734711][ T5997] init_file+0x93/0x2f0 [ 98.734734][ T5997] alloc_empty_file+0x6e/0x1d0 [ 98.734756][ T5997] alloc_file_pseudo+0x13d/0x210 [ 98.734780][ T5997] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 98.734798][ T5997] ? evm_inode_alloc_security+0x40/0xb0 [ 98.734820][ T5997] ? security_inode_alloc+0xd5/0x330 [ 98.734858][ T5997] sock_alloc_file+0xb8/0x2e0 [ 98.734891][ T5997] do_accept+0x34b/0x680 [ 98.734917][ T5997] ? __pfx_do_accept+0x10/0x10 [ 98.734961][ T5997] io_accept+0x307/0x790 [ 98.734998][ T5997] ? __pfx_io_accept+0x10/0x10 [ 98.735028][ T5997] __io_issue_sqe+0x1d3/0x3b0 [ 98.735069][ T5997] io_issue_sqe+0x165/0x1040 [ 98.735107][ T5997] io_req_task_submit+0x10b/0x1c0 [ 98.735133][ T5997] io_poll_task_func+0xbdf/0x10d0 [ 98.735166][ T5997] ? __pfx_io_poll_task_func+0x10/0x10 [ 98.735193][ T5997] ? percpu_ref_get_many+0x18c/0x1e0 [ 98.735218][ T5997] ? __pfx_io_poll_task_func+0x10/0x10 [ 98.735241][ T5997] io_handle_tw_list+0x1f5/0x4c0 [ 98.735272][ T5997] tctx_task_work_run+0x99/0x370 [ 98.735301][ T5997] tctx_task_work+0x3f/0x90 [ 98.735327][ T5997] task_work_run+0x1d1/0x260 [ 98.735353][ T5997] ? __pfx_task_work_run+0x10/0x10 [ 98.735373][ T5997] ? __lock_acquire+0xaac/0xd20 [ 98.735409][ T5997] get_signal+0x11c5/0x1310 [ 98.735443][ T5997] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 98.735476][ T5997] ? lockdep_hardirqs_on+0x9c/0x150 [ 98.735497][ T5997] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 98.735535][ T5997] arch_do_signal_or_restart+0x95/0x780 [ 98.735570][ T5997] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 98.735615][ T5997] ? local_irq_enable_exit_to_user+0x5/0x10 [ 98.735647][ T5997] syscall_exit_to_user_mode+0x8b/0x120 [ 98.735671][ T5997] do_syscall_64+0x103/0x210 [ 98.735695][ T5997] ? clear_bhb_loop+0x45/0xa0 [ 98.735720][ T5997] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 98.735739][ T5997] RIP: 0033:0x7f030d98e969 [ 98.735758][ T5997] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 98.735774][ T5997] RSP: 002b:00007f030e71a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000030 [ 98.735796][ T5997] RAX: 0000000000000000 RBX: 00007f030dbb5fa0 RCX: 00007f030d98e969 [ 98.735809][ T5997] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 98.735820][ T5997] RBP: 00007f030e71a090 R08: 0000000000000000 R09: 0000000000000000 [ 98.735832][ T5997] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 98.735844][ T5997] R13: 0000000000000000 R14: 00007f030dbb5fa0 R15: 00007ffce901bd28 [ 98.735875][ T5997] [ 98.766467][ T5999] input: syz1 as /devices/virtual/input/input5 [ 98.826410][ T5871] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 99.103250][ T36] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 99.276279][ T5871] usb 1-1: Using ep0 maxpacket: 8 [ 99.297968][ T36] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 99.350395][ T5871] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x1 has invalid maxpacket 1024, setting to 64 [ 99.404904][ T5871] usb 1-1: config 0 interface 0 has no altsetting 0 [ 99.486272][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 99.792038][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 99.848278][ T5871] usb 1-1: New USB device found, idVendor=0e41, idProduct=4142, bcdDevice=d4.6e [ 99.860155][ T5871] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 99.896515][ T5871] usb 1-1: Product: syz [ 99.905809][ T5871] usb 1-1: Manufacturer: syz [ 99.918034][ T36] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 99.921285][ T5871] usb 1-1: SerialNumber: syz [ 99.982283][ T5871] usb 1-1: config 0 descriptor?? [ 100.004480][ T5871] snd_usb_toneport 1-1:0.0: Line 6 TonePort UX2 found [ 100.115728][ T36] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.722242][ T6017] evm: overlay not supported [ 101.175652][ T5873] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 101.315188][ T5828] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 101.324097][ T5828] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 101.333292][ T5828] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 101.356396][ T5873] usb 4-1: Using ep0 maxpacket: 8 [ 101.373131][ T5828] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 101.443805][ T36] bridge_slave_1: left allmulticast mode [ 101.510953][ T36] bridge_slave_1: left promiscuous mode [ 101.514701][ T5873] usb 4-1: New USB device found, idVendor=056a, idProduct=0094, bcdDevice= 0.00 [ 101.531747][ T5873] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 101.539061][ T5828] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 101.579087][ T36] bridge0: port 2(bridge_slave_1) entered disabled state [ 101.616110][ T5873] usb 4-1: config 0 descriptor?? [ 101.638389][ T36] bridge_slave_0: left allmulticast mode [ 101.651391][ T36] bridge_slave_0: left promiscuous mode [ 101.657449][ T36] bridge0: port 1(bridge_slave_0) entered disabled state [ 101.678806][ T5871] snd_usb_toneport 1-1:0.0: set_interface failed [ 101.713599][ T5871] snd_usb_toneport 1-1:0.0: Line 6 TonePort UX2 now disconnected [ 101.733585][ T5871] snd_usb_toneport 1-1:0.0: probe with driver snd_usb_toneport failed with error -71 [ 101.976609][ T5871] usb 1-1: USB disconnect, device number 3 [ 101.993211][ T6025] FAULT_INJECTION: forcing a failure. [ 101.993211][ T6025] name failslab, interval 1, probability 0, space 0, times 0 [ 102.006382][ T6025] CPU: 1 UID: 0 PID: 6025 Comm: syz.0.39 Not tainted 6.15.0-rc4-syzkaller-00189-g2bfcee565c3a #0 PREEMPT(full) [ 102.006410][ T6025] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 102.006422][ T6025] Call Trace: [ 102.006430][ T6025] [ 102.006439][ T6025] dump_stack_lvl+0x189/0x250 [ 102.006474][ T6025] ? __pfx_dump_stack_lvl+0x10/0x10 [ 102.006501][ T6025] ? __pfx__printk+0x10/0x10 [ 102.006536][ T6025] ? ref_tracker_alloc+0x318/0x460 [ 102.006558][ T6025] should_fail_ex+0x414/0x560 [ 102.006592][ T6025] should_failslab+0xa8/0x100 [ 102.006624][ T6025] kmem_cache_alloc_noprof+0x73/0x3c0 [ 102.006654][ T6025] ? skb_clone+0x212/0x3a0 [ 102.006685][ T6025] skb_clone+0x212/0x3a0 [ 102.006715][ T6025] __netlink_deliver_tap+0x404/0x850 [ 102.006748][ T6025] ? netlink_deliver_tap+0x2e/0x1b0 [ 102.006771][ T6025] netlink_deliver_tap+0x19c/0x1b0 [ 102.006791][ T6025] netlink_unicast+0x72f/0x8d0 [ 102.006831][ T6025] netlink_sendmsg+0x805/0xb30 [ 102.006861][ T6025] ? __pfx_netlink_sendmsg+0x10/0x10 [ 102.006898][ T6025] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 102.006920][ T6025] ? __pfx_netlink_sendmsg+0x10/0x10 [ 102.006940][ T6025] __sock_sendmsg+0x219/0x270 [ 102.006972][ T6025] ____sys_sendmsg+0x52d/0x830 [ 102.007003][ T6025] ? __pfx_____sys_sendmsg+0x10/0x10 [ 102.007038][ T6025] ? import_iovec+0x74/0xa0 [ 102.007068][ T6025] ___sys_sendmsg+0x21f/0x2a0 [ 102.007095][ T6025] ? __pfx____sys_sendmsg+0x10/0x10 [ 102.007158][ T6025] ? __fget_files+0x2a/0x420 [ 102.007187][ T6025] ? __fget_files+0x3a0/0x420 [ 102.007227][ T6025] __sys_sendmmsg+0x227/0x430 [ 102.007258][ T6025] ? __pfx___sys_sendmmsg+0x10/0x10 [ 102.007292][ T6025] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 102.007334][ T6025] ? ksys_write+0x1f0/0x250 [ 102.007372][ T6025] __x64_sys_sendmmsg+0xa0/0xc0 [ 102.007397][ T6025] do_syscall_64+0xf6/0x210 [ 102.007421][ T6025] ? clear_bhb_loop+0x45/0xa0 [ 102.007445][ T6025] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 102.007463][ T6025] RIP: 0033:0x7f408f78e969 [ 102.007481][ T6025] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 102.007497][ T6025] RSP: 002b:00007f409053b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 102.007517][ T6025] RAX: ffffffffffffffda RBX: 00007f408f9b6080 RCX: 00007f408f78e969 [ 102.007532][ T6025] RDX: 0492492492492627 RSI: 00002000000000c0 RDI: 0000000000000003 [ 102.007545][ T6025] RBP: 00007f409053b090 R08: 0000000000000000 R09: 0000000000000000 [ 102.007557][ T6025] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 102.007567][ T6025] R13: 0000000000000001 R14: 00007f408f9b6080 R15: 00007ffe6ea4d4d8 [ 102.007597][ T6025] [ 102.309469][ T30] audit: type=1326 audit(1746241157.468:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6020 comm="syz.1.38" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe97e78e969 code=0x7ffc0000 [ 102.331074][ T30] audit: type=1326 audit(1746241157.468:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6020 comm="syz.1.38" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe97e78e969 code=0x7ffc0000 [ 102.338892][ T5873] wacom 0003:056A:0094.0002: unknown main item tag 0x3 [ 102.358418][ T30] audit: type=1326 audit(1746241157.468:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6020 comm="syz.1.38" exe="/root/syz-executor" sig=0 arch=c000003e syscall=448 compat=0 ip=0x7fe97e78e969 code=0x7ffc0000 [ 102.370510][ T5873] wacom 0003:056A:0094.0002: Using device in hidraw-only mode [ 102.382420][ T30] audit: type=1326 audit(1746241157.468:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6020 comm="syz.1.38" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe97e78e969 code=0x7ffc0000 [ 102.410595][ T30] audit: type=1326 audit(1746241157.468:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6020 comm="syz.1.38" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe97e78e969 code=0x7ffc0000 [ 102.432095][ T30] audit: type=1326 audit(1746241157.468:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6020 comm="syz.1.38" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fe97e78e969 code=0x7ffc0000 [ 102.454223][ T30] audit: type=1326 audit(1746241157.478:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6020 comm="syz.1.38" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe97e78e969 code=0x7ffc0000 [ 102.476992][ T30] audit: type=1326 audit(1746241157.478:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6020 comm="syz.1.38" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe97e78e969 code=0x7ffc0000 [ 102.498372][ T30] audit: type=1326 audit(1746241157.478:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6020 comm="syz.1.38" exe="/root/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7fe97e78e969 code=0x7ffc0000 [ 102.519801][ T30] audit: type=1326 audit(1746241157.478:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6020 comm="syz.1.38" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe97e78e969 code=0x7ffc0000 [ 102.530708][ T5873] wacom 0003:056A:0094.0002: hidraw0: USB HID vff.ff Device [HID 056a:0094] on usb-dummy_hcd.3-1/input0 [ 102.569854][ T5873] usb 4-1: USB disconnect, device number 3 [ 102.965987][ T36] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 102.983146][ T36] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 103.051829][ T6029] netlink: 72 bytes leftover after parsing attributes in process `syz.1.40'. [ 103.680050][ T5828] Bluetooth: hci1: command tx timeout [ 103.700418][ T36] bond0 (unregistering): Released all slaves [ 103.777509][ T6031] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 103.841379][ T6023] IPv6: NLM_F_CREATE should be specified when creating new route [ 103.850755][ T6023] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 103.858288][ T6023] IPv6: NLM_F_CREATE should be set when creating new route [ 103.865537][ T6023] IPv6: NLM_F_CREATE should be set when creating new route [ 103.883035][ T6025] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 103.913124][ T6025] Zero length message leads to an empty skb [ 104.097067][ T5940] usb 2-1: new full-speed USB device number 3 using dummy_hcd [ 104.434850][ T5940] usb 2-1: config 17 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 104.661605][ T5940] usb 2-1: config 17 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 104.827002][ T5940] usb 2-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 105.096220][ T5940] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 105.441709][ T6033] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 105.489046][ T6033] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 105.519024][ T6033] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 105.572725][ T6033] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 105.654080][ T5940] aiptek 2-1:17.0: Aiptek using 400 ms programming speed [ 105.675799][ T6061] FAULT_INJECTION: forcing a failure. [ 105.675799][ T6061] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 105.689759][ T5940] input: Aiptek as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:17.0/input/input6 [ 105.699553][ T6018] chnl_net:caif_netlink_parms(): no params data found [ 105.717122][ T5828] Bluetooth: hci1: command tx timeout [ 105.732472][ T6061] CPU: 0 UID: 0 PID: 6061 Comm: syz.0.50 Not tainted 6.15.0-rc4-syzkaller-00189-g2bfcee565c3a #0 PREEMPT(full) [ 105.732501][ T6061] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 105.732513][ T6061] Call Trace: [ 105.732521][ T6061] [ 105.732530][ T6061] dump_stack_lvl+0x189/0x250 [ 105.732566][ T6061] ? __pfx_dump_stack_lvl+0x10/0x10 [ 105.732593][ T6061] ? __pfx__printk+0x10/0x10 [ 105.732637][ T6061] should_fail_ex+0x414/0x560 [ 105.732673][ T6061] _copy_to_user+0x31/0xb0 [ 105.732702][ T6061] simple_read_from_buffer+0xe1/0x170 [ 105.732736][ T6061] proc_fail_nth_read+0x1df/0x250 [ 105.732759][ T6061] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 105.732782][ T6061] ? rw_verify_area+0x258/0x650 [ 105.732806][ T6061] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 105.732828][ T6061] vfs_read+0x1fd/0x980 [ 105.732855][ T6061] ? tomoyo_socket_bind_permission+0x150/0x290 [ 105.732886][ T6061] ? __pfx_vfs_read+0x10/0x10 [ 105.732913][ T6061] ? bpf_lsm_socket_bind+0x9/0x20 [ 105.732932][ T6061] ? security_socket_bind+0x7a/0x2b0 [ 105.732963][ T6061] ? sock_no_bind+0x9/0x20 [ 105.732988][ T6061] ? __sys_bind+0x2e9/0x3e0 [ 105.733009][ T6061] ? __pfx___sys_bind+0x10/0x10 [ 105.733035][ T6061] ksys_read+0x145/0x250 [ 105.733063][ T6061] ? __pfx_ksys_read+0x10/0x10 [ 105.733092][ T6061] ? do_syscall_64+0xba/0x210 [ 105.733119][ T6061] do_syscall_64+0xf6/0x210 [ 105.733143][ T6061] ? clear_bhb_loop+0x45/0xa0 [ 105.733167][ T6061] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 105.733187][ T6061] RIP: 0033:0x7f408f78d37c [ 105.733205][ T6061] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 105.733221][ T6061] RSP: 002b:00007f409055c030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 105.733242][ T6061] RAX: ffffffffffffffda RBX: 00007f408f9b5fa0 RCX: 00007f408f78d37c [ 105.733257][ T6061] RDX: 000000000000000f RSI: 00007f409055c0a0 RDI: 0000000000000004 [ 105.733269][ T6061] RBP: 00007f409055c090 R08: 0000000000000000 R09: 0000000000000000 [ 105.733280][ T6061] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 105.733292][ T6061] R13: 0000000000000000 R14: 00007f408f9b5fa0 R15: 00007ffe6ea4d4d8 [ 105.733320][ T6061] [ 105.741050][ T5940] input: failed to attach handler kbd to device input6, error: -5 [ 106.148358][ T36] hsr_slave_0: left promiscuous mode [ 106.160523][ T36] hsr_slave_1: left promiscuous mode [ 106.179307][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 106.189134][ T5131] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 106.198082][ T36] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 106.206638][ T5131] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 106.215114][ T5131] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 106.227902][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 106.236237][ T5131] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 106.244205][ T36] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 106.252122][ T5131] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 106.326412][ T53] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 106.359611][ T5940] usb 2-1: USB disconnect, device number 3 [ 106.385186][ T36] veth1_macvtap: left promiscuous mode [ 106.393260][ T36] veth0_macvtap: left promiscuous mode [ 106.403676][ T36] veth1_vlan: left promiscuous mode [ 106.409460][ T36] veth0_vlan: left promiscuous mode [ 106.508235][ T53] usb 1-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 106.529170][ T53] usb 1-1: config 0 interface 0 has no altsetting 0 [ 106.551757][ T53] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 106.571872][ T53] usb 1-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 106.592136][ T53] usb 1-1: Product: syz [ 106.610213][ T53] usb 1-1: Manufacturer: syz [ 106.614959][ T53] usb 1-1: SerialNumber: syz [ 106.628482][ T53] usb 1-1: config 0 descriptor?? [ 106.645591][ T53] usb 1-1: selecting invalid altsetting 0 [ 107.165268][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 107.816332][ T5828] Bluetooth: hci1: command tx timeout [ 108.361483][ T5828] Bluetooth: hci2: command tx timeout [ 108.633138][ T5131] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 108.641428][ T5131] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 108.649401][ T5131] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 108.657779][ T5131] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 108.665487][ T5131] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 108.920780][ T36] team0 (unregistering): Port device team_slave_1 removed [ 108.976854][ T36] team0 (unregistering): Port device team_slave_0 removed [ 109.876304][ T5131] Bluetooth: hci1: command tx timeout [ 109.980444][ T5821] usb 1-1: USB disconnect, device number 4 [ 110.446233][ T5131] Bluetooth: hci2: command tx timeout [ 110.461363][ T6075] veth0_vlan: entered allmulticast mode [ 110.794454][ T5131] Bluetooth: hci3: command tx timeout [ 110.935406][ T6095] program syz.1.56 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 111.792601][ T6018] bridge0: port 1(bridge_slave_0) entered blocking state [ 111.806872][ T6018] bridge0: port 1(bridge_slave_0) entered disabled state [ 111.814235][ T6018] bridge_slave_0: entered allmulticast mode [ 111.836501][ T6018] bridge_slave_0: entered promiscuous mode [ 111.865784][ T6018] bridge0: port 2(bridge_slave_1) entered blocking state [ 111.907775][ T6018] bridge0: port 2(bridge_slave_1) entered disabled state [ 111.936485][ T6018] bridge_slave_1: entered allmulticast mode [ 111.944463][ T6018] bridge_slave_1: entered promiscuous mode [ 112.091817][ T6018] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 112.133586][ T6018] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 112.280046][ T6018] team0: Port device team_slave_0 added [ 112.290075][ T5887] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 112.305515][ T6018] team0: Port device team_slave_1 added [ 112.403167][ T6018] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 112.417278][ T6018] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 112.443547][ T6018] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 112.456564][ T5887] usb 1-1: Using ep0 maxpacket: 8 [ 112.473299][ T5887] usb 1-1: unable to get BOS descriptor or descriptor too short [ 112.500301][ T5887] usb 1-1: config 7 has an invalid interface number: 7 but max is 0 [ 112.514759][ T5887] usb 1-1: config 7 has no interface number 0 [ 112.521039][ T5131] Bluetooth: hci2: command tx timeout [ 112.534616][ T5887] usb 1-1: config 7 interface 7 altsetting 8 endpoint 0xC has invalid maxpacket 1023, setting to 64 [ 112.546338][ T5887] usb 1-1: config 7 interface 7 altsetting 8 bulk endpoint 0x6 has invalid maxpacket 8 [ 112.556086][ T5887] usb 1-1: config 7 interface 7 has no altsetting 0 [ 112.568712][ T5887] usb 1-1: New USB device found, idVendor=1199, idProduct=68aa, bcdDevice=f9.7e [ 112.578255][ T5887] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 112.586397][ T5887] usb 1-1: Product: syz [ 112.588793][ T36] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 112.590567][ T5887] usb 1-1: Manufacturer: syz [ 112.606750][ T5887] usb 1-1: SerialNumber: syz [ 112.622848][ T6113] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 112.631710][ T6018] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 112.639878][ T6018] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 112.667315][ T6018] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 112.725825][ T36] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 112.773839][ T6080] chnl_net:caif_netlink_parms(): no params data found [ 112.836372][ T5131] Bluetooth: hci3: command tx timeout [ 112.849276][ T5887] usb 1-1: Error in usbnet_get_endpoints (-22) [ 112.882842][ T5887] usb 1-1: USB disconnect, device number 5 [ 113.025707][ T6067] chnl_net:caif_netlink_parms(): no params data found [ 113.079206][ T36] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 113.271979][ T36] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 113.338619][ T6018] hsr_slave_0: entered promiscuous mode [ 113.347710][ T6018] hsr_slave_1: entered promiscuous mode [ 113.354096][ T6018] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 113.376292][ T6018] Cannot create hsr debugfs directory [ 114.154809][ T6080] bridge0: port 1(bridge_slave_0) entered blocking state [ 114.176712][ T6080] bridge0: port 1(bridge_slave_0) entered disabled state [ 114.191130][ T6080] bridge_slave_0: entered allmulticast mode [ 114.214311][ T6080] bridge_slave_0: entered promiscuous mode [ 114.328436][ T6080] bridge0: port 2(bridge_slave_1) entered blocking state [ 114.347270][ T6080] bridge0: port 2(bridge_slave_1) entered disabled state [ 114.366416][ T6080] bridge_slave_1: entered allmulticast mode [ 114.374302][ T6080] bridge_slave_1: entered promiscuous mode [ 114.406105][ T5828] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 114.416721][ T5828] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 114.425561][ T5828] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 114.441911][ T5828] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 114.449834][ T5828] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 114.613755][ T5131] Bluetooth: hci2: command tx timeout [ 114.623173][ T6067] bridge0: port 1(bridge_slave_0) entered blocking state [ 114.635707][ T6067] bridge0: port 1(bridge_slave_0) entered disabled state [ 114.644566][ T6067] bridge_slave_0: entered allmulticast mode [ 114.653082][ T6067] bridge_slave_0: entered promiscuous mode [ 114.662200][ T6067] bridge0: port 2(bridge_slave_1) entered blocking state [ 114.669487][ T6067] bridge0: port 2(bridge_slave_1) entered disabled state [ 114.677744][ T6067] bridge_slave_1: entered allmulticast mode [ 114.685556][ T6067] bridge_slave_1: entered promiscuous mode [ 114.805016][ T6067] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 114.867877][ T6156] program syz.0.65 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 114.917570][ T5131] Bluetooth: hci3: command tx timeout [ 115.361084][ T6067] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 115.435319][ T6080] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 115.451716][ T6080] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 115.555451][ T6080] team0: Port device team_slave_0 added [ 115.604063][ T6067] team0: Port device team_slave_0 added [ 115.620290][ T6067] team0: Port device team_slave_1 added [ 115.665467][ T6080] team0: Port device team_slave_1 added [ 115.769290][ T36] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 115.786545][ T6080] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 115.793625][ T6080] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 115.820711][ T6080] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 115.846810][ T6067] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 115.853809][ T6067] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 115.882119][ T6067] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 115.894946][ T6067] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 115.904782][ T6067] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 115.931265][ T6067] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 115.953631][ T6080] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 115.960946][ T6080] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 115.989333][ T6080] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 116.019725][ T36] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 116.087728][ T36] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 116.208872][ T6080] hsr_slave_0: entered promiscuous mode [ 116.215501][ T6080] hsr_slave_1: entered promiscuous mode [ 116.221904][ T6080] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 116.229540][ T6080] Cannot create hsr debugfs directory [ 116.268700][ T36] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 116.369176][ T6067] hsr_slave_0: entered promiscuous mode [ 116.375674][ T6067] hsr_slave_1: entered promiscuous mode [ 116.383653][ T6067] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 116.391571][ T6067] Cannot create hsr debugfs directory [ 116.516793][ T5131] Bluetooth: hci4: command tx timeout [ 116.782377][ T6018] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 116.996646][ T5131] Bluetooth: hci3: command tx timeout [ 117.020519][ T6018] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 117.078183][ T6018] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 117.180953][ T6018] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 117.300272][ T36] bridge_slave_1: left allmulticast mode [ 117.320766][ T36] bridge_slave_1: left promiscuous mode [ 117.327116][ T36] bridge0: port 2(bridge_slave_1) entered disabled state [ 117.339745][ T36] bridge_slave_0: left allmulticast mode [ 117.345439][ T36] bridge_slave_0: left promiscuous mode [ 117.366438][ T36] bridge0: port 1(bridge_slave_0) entered disabled state [ 117.391130][ T36] bridge_slave_1: left allmulticast mode [ 117.398371][ T36] bridge_slave_1: left promiscuous mode [ 117.404167][ T36] bridge0: port 2(bridge_slave_1) entered disabled state [ 117.423102][ T36] bridge_slave_0: left allmulticast mode [ 117.436334][ T36] bridge_slave_0: left promiscuous mode [ 117.442166][ T36] bridge0: port 1(bridge_slave_0) entered disabled state [ 117.672345][ T5828] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 117.686236][ T5828] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 117.696555][ T5828] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 117.721154][ T5828] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 117.735612][ T5828] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 118.066573][ T36] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 118.077702][ T36] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 118.091148][ T36] bond0 (unregistering): Released all slaves [ 118.177885][ T36] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 118.192155][ T36] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 118.203377][ T36] bond0 (unregistering): Released all slaves [ 118.219018][ T6148] chnl_net:caif_netlink_parms(): no params data found [ 118.596492][ T5131] Bluetooth: hci4: command tx timeout [ 118.617002][ T6148] bridge0: port 1(bridge_slave_0) entered blocking state [ 118.624288][ T6148] bridge0: port 1(bridge_slave_0) entered disabled state [ 118.636900][ T6148] bridge_slave_0: entered allmulticast mode [ 118.644269][ T6148] bridge_slave_0: entered promiscuous mode [ 118.652799][ T6080] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 118.664111][ T6080] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 118.687920][ T6080] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 118.724080][ T6148] bridge0: port 2(bridge_slave_1) entered blocking state [ 118.733168][ T6148] bridge0: port 2(bridge_slave_1) entered disabled state [ 118.740956][ T6148] bridge_slave_1: entered allmulticast mode [ 118.749175][ T6148] bridge_slave_1: entered promiscuous mode [ 118.787855][ T6080] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 118.854026][ T6148] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 118.868088][ T6148] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 119.092761][ T6148] team0: Port device team_slave_0 added [ 119.106086][ T6148] team0: Port device team_slave_1 added [ 119.140553][ T36] hsr_slave_0: left promiscuous mode [ 119.155161][ T36] hsr_slave_1: left promiscuous mode [ 119.163452][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 119.173974][ T36] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 119.184245][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 119.194897][ T36] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 119.214380][ T36] hsr_slave_0: left promiscuous mode [ 119.224715][ T36] hsr_slave_1: left promiscuous mode [ 119.234409][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 119.246083][ T36] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 119.266072][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 119.274935][ T36] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 119.331285][ T36] veth1_macvtap: left promiscuous mode [ 119.337316][ T36] veth0_macvtap: left promiscuous mode [ 119.343016][ T36] veth1_vlan: left promiscuous mode [ 119.348403][ T36] veth0_vlan: left promiscuous mode [ 119.356518][ T36] veth1_macvtap: left promiscuous mode [ 119.362102][ T36] veth0_macvtap: left promiscuous mode [ 119.370237][ T36] veth1_vlan: left promiscuous mode [ 119.375754][ T36] veth0_vlan: left promiscuous mode [ 119.798031][ T5131] Bluetooth: hci0: command tx timeout [ 119.897875][ T36] team0 (unregistering): Port device team_slave_1 removed [ 119.939355][ T36] team0 (unregistering): Port device team_slave_0 removed [ 120.544974][ T36] team0 (unregistering): Port device team_slave_1 removed [ 120.582565][ T36] team0 (unregistering): Port device team_slave_0 removed [ 120.681149][ T5131] Bluetooth: hci4: command tx timeout [ 120.945766][ T6067] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 120.961057][ T6067] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 121.041653][ T6067] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 121.081636][ T6148] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 121.088974][ T6148] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 121.116275][ T6148] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 121.142247][ T6067] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 121.164644][ T6148] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 121.171832][ T6148] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 121.199731][ T6148] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 121.357817][ T6148] hsr_slave_0: entered promiscuous mode [ 121.364317][ T6148] hsr_slave_1: entered promiscuous mode [ 121.371506][ T6148] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 121.381805][ T6148] Cannot create hsr debugfs directory [ 121.433807][ T6018] 8021q: adding VLAN 0 to HW filter on device bond0 [ 121.514989][ T6180] chnl_net:caif_netlink_parms(): no params data found [ 121.640482][ T6018] 8021q: adding VLAN 0 to HW filter on device team0 [ 121.744460][ T6080] 8021q: adding VLAN 0 to HW filter on device bond0 [ 121.773289][ T1000] bridge0: port 1(bridge_slave_0) entered blocking state [ 121.780478][ T1000] bridge0: port 1(bridge_slave_0) entered forwarding state [ 121.864710][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 121.871881][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 121.880604][ T5131] Bluetooth: hci0: command tx timeout [ 121.894815][ T6080] 8021q: adding VLAN 0 to HW filter on device team0 [ 121.904658][ T6180] bridge0: port 1(bridge_slave_0) entered blocking state [ 121.912309][ T6180] bridge0: port 1(bridge_slave_0) entered disabled state [ 121.920720][ T6180] bridge_slave_0: entered allmulticast mode [ 121.930219][ T6180] bridge_slave_0: entered promiscuous mode [ 121.939819][ T6180] bridge0: port 2(bridge_slave_1) entered blocking state [ 121.948645][ T6180] bridge0: port 2(bridge_slave_1) entered disabled state [ 121.955888][ T6180] bridge_slave_1: entered allmulticast mode [ 121.964893][ T6180] bridge_slave_1: entered promiscuous mode [ 122.032547][ T6180] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 122.075992][ T6180] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 122.108536][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 122.115729][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 122.210416][ T6180] team0: Port device team_slave_0 added [ 122.221730][ T6180] team0: Port device team_slave_1 added [ 122.235257][ T3446] bridge0: port 2(bridge_slave_1) entered blocking state [ 122.242429][ T3446] bridge0: port 2(bridge_slave_1) entered forwarding state [ 122.262172][ T6148] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 122.278863][ T6148] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 122.325000][ T6067] 8021q: adding VLAN 0 to HW filter on device bond0 [ 122.337553][ T6148] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 122.350580][ T6148] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 122.379635][ T6180] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 122.386920][ T6180] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 122.414640][ T6180] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 122.447524][ T36] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 122.521416][ T6180] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 122.536724][ T6180] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 122.569604][ T6180] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 122.659491][ T36] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 122.731628][ T6067] 8021q: adding VLAN 0 to HW filter on device team0 [ 122.758818][ T5131] Bluetooth: hci4: command tx timeout [ 122.802849][ T6180] hsr_slave_0: entered promiscuous mode [ 122.817472][ T6180] hsr_slave_1: entered promiscuous mode [ 122.825127][ T6180] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 122.850035][ T6180] Cannot create hsr debugfs directory [ 122.950001][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 122.957279][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 122.973808][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 122.981072][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 123.015556][ T36] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 123.182897][ T36] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 123.372518][ T6067] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 123.402569][ T6067] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 123.455766][ T6018] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 123.690807][ T6080] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 123.820425][ T6148] 8021q: adding VLAN 0 to HW filter on device bond0 [ 123.904806][ T36] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 123.959044][ T5131] Bluetooth: hci0: command tx timeout [ 123.979339][ T6180] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 124.020627][ T6180] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 124.080565][ T6180] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 124.105918][ T36] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 124.127740][ T6180] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 124.152559][ T6148] 8021q: adding VLAN 0 to HW filter on device team0 [ 124.169986][ T6067] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 124.272939][ T36] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 124.304947][ T63] bridge0: port 1(bridge_slave_0) entered blocking state [ 124.312155][ T63] bridge0: port 1(bridge_slave_0) entered forwarding state [ 124.413020][ T36] bond0: (slave netdevsim0): Releasing backup interface [ 124.447236][ T36] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 124.500519][ T3446] bridge0: port 2(bridge_slave_1) entered blocking state [ 124.507757][ T3446] bridge0: port 2(bridge_slave_1) entered forwarding state [ 124.664793][ T6018] veth0_vlan: entered promiscuous mode [ 124.754198][ T6018] veth1_vlan: entered promiscuous mode [ 124.954107][ T6080] veth0_vlan: entered promiscuous mode [ 124.999400][ T36] bridge_slave_1: left allmulticast mode [ 125.005217][ T36] bridge_slave_1: left promiscuous mode [ 125.016317][ T36] bridge0: port 2(bridge_slave_1) entered disabled state [ 125.026069][ T36] bridge_slave_0: left allmulticast mode [ 125.034058][ T36] bridge_slave_0: left promiscuous mode [ 125.040027][ T36] bridge0: port 1(bridge_slave_0) entered disabled state [ 125.055311][ T36] bridge_slave_1: left allmulticast mode [ 125.061259][ T36] bridge_slave_1: left promiscuous mode [ 125.067949][ T36] bridge0: port 2(bridge_slave_1) entered disabled state [ 125.079423][ T36] bridge_slave_0: left allmulticast mode [ 125.085514][ T36] bridge_slave_0: left promiscuous mode [ 125.091550][ T36] bridge0: port 1(bridge_slave_0) entered disabled state [ 125.585903][ T36] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 125.598548][ T36] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 125.610119][ T36] bond0 (unregistering): Released all slaves [ 125.694729][ T36] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 125.705767][ T36] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 125.715908][ T36] bond0 (unregistering): Released all slaves [ 125.753079][ T6067] veth0_vlan: entered promiscuous mode [ 125.771549][ T6080] veth1_vlan: entered promiscuous mode [ 125.838571][ T6018] veth0_macvtap: entered promiscuous mode [ 125.858603][ T6067] veth1_vlan: entered promiscuous mode [ 125.870564][ T6018] veth1_macvtap: entered promiscuous mode [ 125.924152][ T6180] 8021q: adding VLAN 0 to HW filter on device bond0 [ 126.030661][ T6180] 8021q: adding VLAN 0 to HW filter on device team0 [ 126.038542][ T5131] Bluetooth: hci0: command tx timeout [ 126.159033][ T6080] veth0_macvtap: entered promiscuous mode [ 126.175942][ T6018] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 126.192847][ T6018] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 126.208391][ T6018] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 126.220500][ T6018] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 126.233085][ T6018] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 126.289994][ T63] bridge0: port 1(bridge_slave_0) entered blocking state [ 126.297241][ T63] bridge0: port 1(bridge_slave_0) entered forwarding state [ 126.323787][ T6080] veth1_macvtap: entered promiscuous mode [ 126.351040][ T6018] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 126.362537][ T6018] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 126.375614][ T6018] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 126.386819][ T6018] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 126.398639][ T6018] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 126.415808][ T6067] veth0_macvtap: entered promiscuous mode [ 126.450868][ T63] bridge0: port 2(bridge_slave_1) entered blocking state [ 126.458116][ T63] bridge0: port 2(bridge_slave_1) entered forwarding state [ 126.502379][ T6018] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 126.520478][ T6018] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 126.530377][ T6018] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 126.539416][ T6018] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 126.584343][ T6080] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 126.595537][ T6080] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 126.614808][ T6080] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 126.625467][ T6080] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 126.640853][ T6080] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 126.651557][ T6080] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 126.670836][ T6080] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 126.692402][ T6067] veth1_macvtap: entered promiscuous mode [ 126.745200][ T36] hsr_slave_0: left promiscuous mode [ 126.754398][ T36] hsr_slave_1: left promiscuous mode [ 126.763824][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 126.780900][ T36] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 126.789564][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 126.799332][ T36] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 126.812799][ T36] hsr_slave_0: left promiscuous mode [ 126.821723][ T36] hsr_slave_1: left promiscuous mode [ 126.828284][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 126.835705][ T36] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 126.844221][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 126.851727][ T36] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 126.882090][ T36] veth1_macvtap: left promiscuous mode [ 126.891831][ T36] veth0_macvtap: left promiscuous mode [ 126.898452][ T36] veth1_vlan: left promiscuous mode [ 126.903772][ T36] veth0_vlan: left promiscuous mode [ 126.912182][ T36] veth1_macvtap: left promiscuous mode [ 126.917899][ T36] veth0_macvtap: left promiscuous mode [ 126.923488][ T36] veth1_vlan: left promiscuous mode [ 126.929263][ T36] veth0_vlan: left promiscuous mode [ 127.395537][ T36] team0 (unregistering): Port device team_slave_1 removed [ 127.437895][ T36] team0 (unregistering): Port device team_slave_0 removed [ 128.049814][ T36] team0 (unregistering): Port device team_slave_1 removed [ 128.084714][ T36] team0 (unregistering): Port device team_slave_0 removed [ 128.414984][ T6080] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 128.428670][ T6080] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 128.442232][ T6080] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 128.540782][ T6067] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 128.551507][ T6067] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 128.562843][ T6067] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 128.574508][ T6067] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 128.585937][ T6067] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 128.596951][ T6080] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 128.605688][ T6080] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 128.615103][ T6080] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 128.624418][ T6080] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 128.673754][ T6067] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 128.696910][ T6067] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 128.711922][ T6067] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 128.722552][ T6067] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 128.734064][ T6067] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 128.745630][ T6148] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 128.773962][ T6180] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 128.860047][ T6067] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 128.886351][ T6067] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 128.895112][ T6067] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 128.924512][ T6067] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 129.079936][ T63] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 129.109384][ T63] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 129.223210][ T1152] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 129.260054][ T1152] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 129.354322][ T63] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 129.373308][ T63] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 129.504000][ T1000] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 129.508124][ T6180] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 129.541915][ T1000] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 129.731675][ T6148] veth0_vlan: entered promiscuous mode [ 129.751137][ T3446] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 129.788936][ T3446] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 129.790765][ T6148] veth1_vlan: entered promiscuous mode [ 129.815120][ T63] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 129.852349][ T63] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 129.987154][ T6148] veth0_macvtap: entered promiscuous mode [ 130.003710][ T6148] veth1_macvtap: entered promiscuous mode [ 130.098780][ T6148] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 130.146545][ T6148] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 130.193629][ T6148] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 130.231816][ T6148] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 130.246901][ T6324] FAULT_INJECTION: forcing a failure. [ 130.246901][ T6324] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 130.257942][ T6148] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 130.288211][ T6148] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 130.297032][ T6324] CPU: 1 UID: 0 PID: 6324 Comm: syz.6.47 Not tainted 6.15.0-rc4-syzkaller-00189-g2bfcee565c3a #0 PREEMPT(full) [ 130.297065][ T6324] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 130.297078][ T6324] Call Trace: [ 130.297087][ T6324] [ 130.297096][ T6324] dump_stack_lvl+0x189/0x250 [ 130.297130][ T6324] ? __lock_acquire+0xaac/0xd20 [ 130.297161][ T6324] ? __pfx_dump_stack_lvl+0x10/0x10 [ 130.297188][ T6324] ? __pfx__printk+0x10/0x10 [ 130.297220][ T6324] ? __might_fault+0xb0/0x130 [ 130.297265][ T6324] should_fail_ex+0x414/0x560 [ 130.297304][ T6324] _copy_from_iter+0x1db/0x15a0 [ 130.297337][ T6324] ? trace_kmem_cache_alloc+0x1f/0xc0 [ 130.297365][ T6324] ? kmem_cache_alloc_node_noprof+0x217/0x3c0 [ 130.297398][ T6324] ? __pfx__copy_from_iter+0x10/0x10 [ 130.297423][ T6324] ? __build_skb_around+0x257/0x3e0 [ 130.297451][ T6324] ? netlink_sendmsg+0x642/0xb30 [ 130.297470][ T6324] ? skb_put+0x11b/0x210 [ 130.297498][ T6324] netlink_sendmsg+0x6b2/0xb30 [ 130.297517][ T6324] ? is_bpf_text_address+0x26/0x2b0 [ 130.297554][ T6324] ? __pfx_netlink_sendmsg+0x10/0x10 [ 130.297583][ T6324] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 130.297604][ T6324] ? __pfx_netlink_sendmsg+0x10/0x10 [ 130.297626][ T6324] __sock_sendmsg+0x219/0x270 [ 130.297662][ T6324] ____sys_sendmsg+0x505/0x830 [ 130.297694][ T6324] ? __pfx_____sys_sendmsg+0x10/0x10 [ 130.297729][ T6324] ? import_iovec+0x74/0xa0 [ 130.297759][ T6324] ___sys_sendmsg+0x21f/0x2a0 [ 130.297787][ T6324] ? __pfx____sys_sendmsg+0x10/0x10 [ 130.297858][ T6324] ? __fget_files+0x2a/0x420 [ 130.297889][ T6324] ? __fget_files+0x3a0/0x420 [ 130.297931][ T6324] __x64_sys_sendmsg+0x19b/0x260 [ 130.297960][ T6324] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 130.298004][ T6324] ? do_syscall_64+0xba/0x210 [ 130.298032][ T6324] do_syscall_64+0xf6/0x210 [ 130.298059][ T6324] ? clear_bhb_loop+0x45/0xa0 [ 130.298083][ T6324] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 130.298101][ T6324] RIP: 0033:0x7f25d3d8e969 [ 130.298130][ T6324] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 130.298146][ T6324] RSP: 002b:00007f25d4b5f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 130.298166][ T6324] RAX: ffffffffffffffda RBX: 00007f25d3fb5fa0 RCX: 00007f25d3d8e969 [ 130.298179][ T6324] RDX: 0000000000008050 RSI: 0000200000000140 RDI: 0000000000000003 [ 130.298191][ T6324] RBP: 00007f25d4b5f090 R08: 0000000000000000 R09: 0000000000000000 [ 130.298203][ T6324] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 130.298215][ T6324] R13: 0000000000000000 R14: 00007f25d3fb5fa0 R15: 00007fff44e22f68 [ 130.298245][ T6324] [ 130.509670][ T6332] FAULT_INJECTION: forcing a failure. [ 130.509670][ T6332] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 130.573641][ T6148] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 130.591845][ T6332] CPU: 0 UID: 0 PID: 6332 Comm: syz.5.72 Not tainted 6.15.0-rc4-syzkaller-00189-g2bfcee565c3a #0 PREEMPT(full) [ 130.591872][ T6332] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 130.591884][ T6332] Call Trace: [ 130.591891][ T6332] [ 130.591900][ T6332] dump_stack_lvl+0x189/0x250 [ 130.591928][ T6332] ? __lock_acquire+0xaac/0xd20 [ 130.591956][ T6332] ? __pfx_dump_stack_lvl+0x10/0x10 [ 130.591982][ T6332] ? __pfx__printk+0x10/0x10 [ 130.592008][ T6332] ? __might_fault+0xb0/0x130 [ 130.592048][ T6332] should_fail_ex+0x414/0x560 [ 130.592083][ T6332] _copy_from_user+0x2d/0xb0 [ 130.592110][ T6332] kstrtouint_from_user+0xc4/0x170 [ 130.592134][ T6332] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 130.592166][ T6332] proc_fail_nth_write+0x88/0x240 [ 130.592182][ T6332] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 130.592202][ T6332] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 130.592219][ T6332] vfs_write+0x27b/0xa90 [ 130.592248][ T6332] ? __pfx_vfs_write+0x10/0x10 [ 130.592270][ T6332] ? __fget_files+0x2a/0x420 [ 130.592298][ T6332] ? __fget_files+0x3a0/0x420 [ 130.592320][ T6332] ? __fget_files+0x2a/0x420 [ 130.592351][ T6332] ksys_write+0x145/0x250 [ 130.592374][ T6332] ? __pfx_ksys_write+0x10/0x10 [ 130.592398][ T6332] ? do_syscall_64+0xba/0x210 [ 130.592420][ T6332] do_syscall_64+0xf6/0x210 [ 130.592438][ T6332] ? clear_bhb_loop+0x45/0xa0 [ 130.592457][ T6332] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 130.592473][ T6332] RIP: 0033:0x7f52d918d41f [ 130.592487][ T6332] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 130.592500][ T6332] RSP: 002b:00007f52d9f99030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 130.592517][ T6332] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f52d918d41f [ 130.592528][ T6332] RDX: 0000000000000001 RSI: 00007f52d9f990a0 RDI: 0000000000000005 [ 130.592538][ T6332] RBP: 00007f52d9f99090 R08: 0000000000000000 R09: 0000000000000000 [ 130.592547][ T6332] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 130.592556][ T6332] R13: 0000000000000001 R14: 00007f52d93b6160 R15: 00007ffc5b1010d8 [ 130.592580][ T6332] [ 130.831223][ T6148] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 130.842097][ T6148] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 130.852016][ T6148] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 130.865878][ T6148] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 130.875996][ T6148] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 130.886491][ T6148] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 130.897846][ T6148] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 131.039287][ T6148] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 131.052642][ T6148] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 131.073146][ T6148] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 131.085596][ T6148] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 131.227794][ T5871] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 131.285197][ T6339] PKCS7: Unknown OID: [4] 5.25.264.112.81.102.117 [ 131.292120][ T6339] PKCS7: Only support pkcs7_signedData type [ 131.386359][ T5871] usb 7-1: device descriptor read/64, error -71 [ 131.509987][ T6180] veth0_vlan: entered promiscuous mode [ 131.696534][ T5871] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 131.928769][ T6180] veth1_vlan: entered promiscuous mode [ 131.966318][ T5871] usb 7-1: device descriptor read/64, error -71 [ 132.021859][ T6344] FAULT_INJECTION: forcing a failure. [ 132.021859][ T6344] name failslab, interval 1, probability 0, space 0, times 0 [ 132.034737][ T6344] CPU: 1 UID: 0 PID: 6344 Comm: syz.7.76 Not tainted 6.15.0-rc4-syzkaller-00189-g2bfcee565c3a #0 PREEMPT(full) [ 132.034765][ T6344] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 132.034776][ T6344] Call Trace: [ 132.034785][ T6344] [ 132.034794][ T6344] dump_stack_lvl+0x189/0x250 [ 132.034823][ T6344] ? do_raw_spin_unlock+0x122/0x240 [ 132.034849][ T6344] ? __pfx_dump_stack_lvl+0x10/0x10 [ 132.034883][ T6344] ? __pfx__printk+0x10/0x10 [ 132.034927][ T6344] should_fail_ex+0x414/0x560 [ 132.034964][ T6344] should_failslab+0xa8/0x100 [ 132.034997][ T6344] kmem_cache_alloc_noprof+0x73/0x3c0 [ 132.035026][ T6344] ? __nf_conntrack_alloc+0x99/0x380 [ 132.035054][ T6344] __nf_conntrack_alloc+0x99/0x380 [ 132.035083][ T6344] init_conntrack+0x155/0xef0 [ 132.035114][ T6344] ? __pfx_init_conntrack+0x10/0x10 [ 132.035149][ T6344] ? __pfx___nf_conntrack_find_get+0x10/0x10 [ 132.035173][ T6344] ? __siphash_unaligned+0x232/0x3b0 [ 132.035205][ T6344] nf_conntrack_in+0xbf2/0x1600 [ 132.035251][ T6344] ? __pfx_nf_conntrack_in+0x10/0x10 [ 132.035285][ T6344] ? ipt_do_table+0x2a3/0x1610 [ 132.035321][ T6344] ? NF_HOOK+0x9a/0x3a0 [ 132.035352][ T6344] ? NF_HOOK+0x9a/0x3a0 [ 132.035379][ T6344] ? ipv4_conntrack_defrag+0x2a0/0x5b0 [ 132.035402][ T6344] ? ip_sabotage_in+0x57/0x270 [ 132.035430][ T6344] ? __pfx_ipv4_conntrack_in+0x10/0x10 [ 132.035451][ T6344] nf_hook_slow+0xc2/0x220 [ 132.035495][ T6344] NF_HOOK+0x206/0x3a0 [ 132.035527][ T6344] ? __pfx_ip_rcv_finish+0x10/0x10 [ 132.035556][ T6344] ? NF_HOOK+0x9a/0x3a0 [ 132.035584][ T6344] ? __pfx_NF_HOOK+0x10/0x10 [ 132.035610][ T6344] ? ip_rcv_core+0x7f7/0xd00 [ 132.035641][ T6344] ? __pfx_ip_rcv_finish+0x10/0x10 [ 132.035682][ T6344] ? __pfx_ip_rcv+0x10/0x10 [ 132.035709][ T6344] __netif_receive_skb+0x143/0x380 [ 132.035745][ T6344] ? netif_receive_skb+0x115/0x790 [ 132.035773][ T6344] netif_receive_skb+0x1cb/0x790 [ 132.035802][ T6344] ? __pfx___local_bh_disable_ip+0x10/0x10 [ 132.035832][ T6344] ? __pfx_netif_receive_skb+0x10/0x10 [ 132.035868][ T6344] ? tun_rx_batched+0x160/0x730 [ 132.035896][ T6344] tun_rx_batched+0x1b9/0x730 [ 132.035929][ T6344] ? __pfx_tun_rx_batched+0x10/0x10 [ 132.035960][ T6344] ? tun_get_user+0x2444/0x3c20 [ 132.035995][ T6344] ? tun_get_user+0x2444/0x3c20 [ 132.036021][ T6344] ? tun_get_user+0x2444/0x3c20 [ 132.036046][ T6344] tun_get_user+0x2879/0x3c20 [ 132.036076][ T6344] ? tun_get_user+0x687/0x3c20 [ 132.036121][ T6344] ? __pfx_tun_get_user+0x10/0x10 [ 132.036163][ T6344] ? __lock_acquire+0xaac/0xd20 [ 132.036193][ T6344] ? ref_tracker_alloc+0x318/0x460 [ 132.036215][ T6344] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 132.036241][ T6344] ? tun_get+0x1c/0x2f0 [ 132.036269][ T6344] ? tun_get+0x1c/0x2f0 [ 132.036289][ T6344] ? tun_get+0x1c/0x2f0 [ 132.036317][ T6344] tun_chr_write_iter+0x113/0x200 [ 132.036346][ T6344] vfs_write+0x548/0xa90 [ 132.036376][ T6344] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 132.036402][ T6344] ? __pfx_vfs_write+0x10/0x10 [ 132.036439][ T6344] ? __fget_files+0x2a/0x420 [ 132.036479][ T6344] ksys_write+0x145/0x250 [ 132.036541][ T6344] ? rcu_is_watching+0x15/0xb0 [ 132.036571][ T6344] ? __pfx_ksys_write+0x10/0x10 [ 132.036599][ T6344] ? do_syscall_64+0xba/0x210 [ 132.036626][ T6344] do_syscall_64+0xf6/0x210 [ 132.036649][ T6344] ? clear_bhb_loop+0x45/0xa0 [ 132.036673][ T6344] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 132.036692][ T6344] RIP: 0033:0x7f5f6498d41f [ 132.036710][ T6344] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 132.036726][ T6344] RSP: 002b:00007f5f6584c000 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 132.036746][ T6344] RAX: ffffffffffffffda RBX: 00007f5f64bb5fa0 RCX: 00007f5f6498d41f [ 132.036760][ T6344] RDX: 0000000000000036 RSI: 00002000000005c0 RDI: 00000000000000c8 [ 132.036773][ T6344] RBP: 00007f5f6584c090 R08: 0000000000000000 R09: 0000000000000000 [ 132.036784][ T6344] R10: 0000000000000036 R11: 0000000000000293 R12: 0000000000000001 [ 132.036795][ T6344] R13: 0000000000000000 R14: 00007f5f64bb5fa0 R15: 00007ffd4c5d1248 [ 132.036825][ T6344] [ 132.116912][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 132.125832][ T5871] usb usb7-port1: attempt power cycle [ 132.153470][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 132.517365][ T5871] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 132.557316][ T5871] usb 7-1: device descriptor read/8, error -71 [ 132.620788][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 132.645408][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 132.668199][ T6180] veth0_macvtap: entered promiscuous mode [ 132.712649][ T6180] veth1_macvtap: entered promiscuous mode [ 132.883942][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.890591][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.086445][ T5871] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 133.108504][ T5871] usb 7-1: device descriptor read/8, error -71 [ 133.217850][ T5871] usb usb7-port1: unable to enumerate USB device [ 133.368896][ T6180] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 133.460938][ T6180] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 133.608551][ T6180] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 133.628298][ T6180] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 133.676177][ T6180] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 133.714100][ T6180] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 133.816537][ T6180] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 133.842651][ T6180] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 133.915729][ T6180] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 134.003693][ T6180] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 134.055240][ T6180] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 134.127965][ T6180] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 134.156176][ T6180] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 134.872009][ T6180] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 134.888665][ T6180] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 134.899957][ T6180] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 135.046569][ T6180] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 135.066071][ T6180] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 135.085688][ T6180] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 135.094927][ T6180] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 135.104227][ T6180] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 135.113336][ T6180] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 135.282414][ T6372] netlink: 'syz.6.83': attribute type 10 has an invalid length. [ 135.320312][ T6372] netlink: 40 bytes leftover after parsing attributes in process `syz.6.83'. [ 135.452016][ T6372] team0: Port device geneve0 added [ 135.943174][ T3503] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 135.951346][ T5821] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 136.166268][ T3503] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 136.285614][ T5821] usb 9-1: Using ep0 maxpacket: 32 [ 136.458778][ T5821] usb 9-1: config 32 has an invalid interface number: 127 but max is 1 [ 136.526758][ T6392] PKCS7: Unknown OID: [4] 5.25.264.112.81.102.117 [ 136.533286][ T6392] PKCS7: Only support pkcs7_signedData type [ 137.163903][ T5821] usb 9-1: config 32 has an invalid interface number: 37 but max is 1 [ 137.264782][ T5821] usb 9-1: config 32 has no interface number 0 [ 137.275176][ T5821] usb 9-1: config 32 has no interface number 1 [ 137.283514][ T5821] usb 9-1: config 32 interface 127 altsetting 5 endpoint 0x3 has invalid maxpacket 1023, setting to 64 [ 137.302771][ T5821] usb 9-1: config 32 interface 127 altsetting 5 endpoint 0x4 has invalid maxpacket 1024, setting to 64 [ 137.314009][ T5821] usb 9-1: config 32 interface 127 altsetting 5 has a duplicate endpoint with address 0x6, skipping [ 137.325728][ T5821] usb 9-1: config 32 interface 127 altsetting 5 endpoint 0xC has an invalid bInterval 162, changing to 7 [ 137.396057][ T63] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 137.423510][ T63] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 137.436203][ T5821] usb 9-1: config 32 interface 127 altsetting 5 has a duplicate endpoint with address 0x9, skipping [ 137.472938][ T5821] usb 9-1: config 32 interface 127 altsetting 5 has a duplicate endpoint with address 0x9, skipping [ 137.523893][ T5821] usb 9-1: config 32 interface 127 altsetting 5 has a duplicate endpoint with address 0x3, skipping [ 137.561207][ T5821] usb 9-1: config 32 interface 127 altsetting 5 endpoint 0x2 has invalid maxpacket 512, setting to 64 [ 137.625926][ T5821] usb 9-1: config 32 interface 127 altsetting 5 endpoint 0x1 has invalid maxpacket 1023, setting to 64 [ 137.659840][ T5821] usb 9-1: config 32 interface 127 altsetting 5 has a duplicate endpoint with address 0x1, skipping [ 137.688790][ T5821] usb 9-1: config 32 interface 37 altsetting 128 endpoint 0xD has an invalid bInterval 51, changing to 7 [ 137.909648][ T5821] usb 9-1: config 32 interface 37 altsetting 128 has a duplicate endpoint with address 0x9, skipping [ 137.921920][ T5821] usb 9-1: config 32 interface 37 altsetting 128 endpoint 0xE has invalid maxpacket 1024, setting to 64 [ 137.939020][ T5821] usb 9-1: config 32 interface 37 altsetting 128 has a duplicate endpoint with address 0x5, skipping [ 137.961151][ T5821] usb 9-1: config 32 interface 127 has no altsetting 0 [ 137.969471][ T5861] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 137.984472][ T5821] usb 9-1: config 32 interface 37 has no altsetting 0 [ 138.126866][ T5861] usb 7-1: device descriptor read/64, error -71 [ 139.170472][ T5861] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 139.285891][ T5821] usb 9-1: string descriptor 0 read error: -71 [ 139.306331][ T5821] usb 9-1: Dual-Role OTG device on HNP port [ 139.346094][ T5821] usb 9-1: can't set HNP mode: -71 [ 139.406267][ T5861] usb 7-1: device descriptor read/64, error -71 [ 139.516772][ T5861] usb usb7-port1: attempt power cycle [ 139.717476][ T6428] Bluetooth: MGMT ver 1.23 [ 140.152209][ T5861] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 140.273130][ T5861] usb 7-1: device descriptor read/8, error -71 [ 140.512555][ T6427] overlayfs: failed to resolve './file0': -2 [ 140.577190][ T5861] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 140.663588][ C0] raw-gadget.1 gadget.6: ignoring, device is not running [ 140.676792][ T5861] usb 7-1: device descriptor read/8, error -32 [ 140.796660][ T5861] usb usb7-port1: unable to enumerate USB device [ 140.909251][ T53] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 141.511015][ T53] usb 8-1: Using ep0 maxpacket: 16 [ 142.069329][ T53] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 142.113378][ T53] usb 8-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 142.131429][ T53] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 142.191142][ T53] usb 8-1: Product: syz [ 142.195593][ T53] usb 8-1: Manufacturer: syz [ 142.204800][ T53] usb 8-1: SerialNumber: syz [ 142.247026][ T53] usb 8-1: config 0 descriptor?? [ 142.486237][ T5821] usb 10-1: new full-speed USB device number 2 using dummy_hcd [ 142.678768][ T5821] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 142.698504][ T5821] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 142.739661][ T5821] usb 10-1: New USB device found, idVendor=0810, idProduct=0001, bcdDevice= 0.00 [ 142.766259][ T5821] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 142.788101][ T5821] usb 10-1: config 0 descriptor?? [ 142.808365][ T6469] mmap: syz.6.98 (6469) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 143.120398][ T6484] veth0_vlan: entered allmulticast mode [ 143.686432][ T5821] pantherlord 0003:0810:0001.0003: unknown main item tag 0x4 [ 143.735179][ T53] usb 8-1: USB disconnect, device number 2 [ 143.746265][ T5821] pantherlord 0003:0810:0001.0003: hidraw0: USB HID vff.fc Device [HID 0810:0001] on usb-dummy_hcd.9-1/input0 [ 143.804716][ T5821] pantherlord 0003:0810:0001.0003: no output reports found [ 143.891867][ T5821] usb 10-1: USB disconnect, device number 2 [ 144.727362][ T6493] overlayfs: failed to resolve './file0': -2 [ 145.461018][ T5821] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 145.836075][ T5821] usb 8-1: Using ep0 maxpacket: 8 [ 146.069591][ T5821] usb 8-1: New USB device found, idVendor=04b4, idProduct=8613, bcdDevice=95.8f [ 146.092928][ T5821] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=1 [ 146.127356][ T5821] usb 8-1: Product: syz [ 146.139813][ T5821] usb 8-1: Manufacturer: syz [ 146.156187][ T5821] usb 8-1: SerialNumber: syz [ 146.276741][ T6520] netlink: 112 bytes leftover after parsing attributes in process `syz.5.107'. [ 146.363479][ T5821] usb 8-1: config 0 descriptor?? [ 146.451353][ T6523] overlayfs: failed to resolve './file0': -2 [ 146.489970][ T5821] usbtest 8-1:0.0: FX2 device [ 146.494817][ T5821] usbtest 8-1:0.0: high-speed {control bulk-in bulk-out} tests (+alt) [ 146.878352][ T5821] usb 8-1: USB disconnect, device number 3 [ 147.046737][ T6530] PKCS7: Unknown OID: [4] 5.25.264.112.81.102.117 [ 147.053227][ T6530] PKCS7: Only support pkcs7_signedData type [ 147.345944][ T6540] FAULT_INJECTION: forcing a failure. [ 147.345944][ T6540] name failslab, interval 1, probability 0, space 0, times 0 [ 147.358918][ T6540] CPU: 1 UID: 0 PID: 6540 Comm: syz.5.115 Not tainted 6.15.0-rc4-syzkaller-00189-g2bfcee565c3a #0 PREEMPT(full) [ 147.358945][ T6540] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 147.358957][ T6540] Call Trace: [ 147.358965][ T6540] [ 147.358974][ T6540] dump_stack_lvl+0x189/0x250 [ 147.359006][ T6540] ? __lock_acquire+0xaac/0xd20 [ 147.359033][ T6540] ? __pfx_dump_stack_lvl+0x10/0x10 [ 147.359060][ T6540] ? __pfx__printk+0x10/0x10 [ 147.359096][ T6540] ? __lock_acquire+0xaac/0xd20 [ 147.359129][ T6540] should_fail_ex+0x414/0x560 [ 147.359165][ T6540] should_failslab+0xa8/0x100 [ 147.359198][ T6540] kmem_cache_alloc_noprof+0x73/0x3c0 [ 147.359227][ T6540] ? skb_clone+0x212/0x3a0 [ 147.359258][ T6540] skb_clone+0x212/0x3a0 [ 147.359282][ T6540] ? dev_queue_xmit_nit+0x25a/0xcc0 [ 147.359308][ T6540] dev_queue_xmit_nit+0x416/0xcc0 [ 147.359330][ T6540] ? dev_queue_xmit_nit+0x2d/0xcc0 [ 147.359365][ T6540] dev_hard_start_xmit+0x1d5/0x880 [ 147.359416][ T6540] __dev_queue_xmit+0x1adf/0x3a70 [ 147.359450][ T6540] ? kmem_cache_alloc_noprof+0x1c1/0x3c0 [ 147.359482][ T6540] ? __dev_queue_xmit+0x27e/0x3a70 [ 147.359509][ T6540] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 147.359545][ T6540] ? __pfx___dev_queue_xmit+0x10/0x10 [ 147.359589][ T6540] ? __copy_skb_header+0xa7/0x550 [ 147.359615][ T6540] ? __asan_memcpy+0x40/0x70 [ 147.359640][ T6540] ? __skb_clone+0x63/0x7a0 [ 147.359670][ T6540] ? __skb_clone+0x483/0x7a0 [ 147.359703][ T6540] ? skb_clone+0x246/0x3a0 [ 147.359733][ T6540] __netlink_deliver_tap+0x5ad/0x850 [ 147.359768][ T6540] ? netlink_deliver_tap+0x2e/0x1b0 [ 147.359790][ T6540] netlink_deliver_tap+0x19c/0x1b0 [ 147.359812][ T6540] netlink_unicast+0x72f/0x8d0 [ 147.359855][ T6540] netlink_sendmsg+0x805/0xb30 [ 147.359887][ T6540] ? __pfx_netlink_sendmsg+0x10/0x10 [ 147.359918][ T6540] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 147.359939][ T6540] ? __pfx_netlink_sendmsg+0x10/0x10 [ 147.359961][ T6540] __sock_sendmsg+0x219/0x270 [ 147.359994][ T6540] sock_write_iter+0x258/0x330 [ 147.360025][ T6540] ? __pfx_sock_write_iter+0x10/0x10 [ 147.360066][ T6540] ? bpf_lsm_file_permission+0x9/0x20 [ 147.360088][ T6540] ? security_file_permission+0x75/0x290 [ 147.360120][ T6540] vfs_write+0x548/0xa90 [ 147.360153][ T6540] ? __pfx_sock_write_iter+0x10/0x10 [ 147.360182][ T6540] ? __pfx_vfs_write+0x10/0x10 [ 147.360220][ T6540] ? __fget_files+0x2a/0x420 [ 147.360261][ T6540] ksys_write+0x145/0x250 [ 147.360286][ T6540] ? rcu_is_watching+0x15/0xb0 [ 147.360316][ T6540] ? __pfx_ksys_write+0x10/0x10 [ 147.360347][ T6540] ? do_syscall_64+0xba/0x210 [ 147.360375][ T6540] do_syscall_64+0xf6/0x210 [ 147.360406][ T6540] ? clear_bhb_loop+0x45/0xa0 [ 147.360431][ T6540] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 147.360450][ T6540] RIP: 0033:0x7f52d918e969 [ 147.360468][ T6540] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 147.360485][ T6540] RSP: 002b:00007f52d9fdb038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 147.360506][ T6540] RAX: ffffffffffffffda RBX: 00007f52d93b5fa0 RCX: 00007f52d918e969 [ 147.360521][ T6540] RDX: 0000000000000024 RSI: 0000200000000000 RDI: 0000000000000006 [ 147.360533][ T6540] RBP: 00007f52d9fdb090 R08: 0000000000000000 R09: 0000000000000000 [ 147.360545][ T6540] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 147.360557][ T6540] R13: 0000000000000000 R14: 00007f52d93b5fa0 R15: 00007ffc5b1010d8 [ 147.360589][ T6540] [ 148.617213][ T6552] netlink: 'syz.5.117': attribute type 10 has an invalid length. [ 148.653377][ T6552] 8021q: adding VLAN 0 to HW filter on device bond0 [ 148.670835][ T6552] team0: Port device bond0 added [ 148.782011][ T6552] netlink: 8 bytes leftover after parsing attributes in process `syz.5.117'. [ 148.797967][ T6552] netlink: 4 bytes leftover after parsing attributes in process `syz.5.117'. [ 149.361604][ T6552] team0 (unregistering): Port device team_slave_0 removed [ 149.373248][ T6552] team0 (unregistering): Port device team_slave_1 removed [ 149.384924][ T6552] team0 (unregistering): Port device bond0 removed [ 150.121835][ T6567] PKCS7: Unknown OID: [4] 5.25.264.112.81.102.117 [ 150.128464][ T6567] PKCS7: Only support pkcs7_signedData type [ 151.166373][ T5917] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 151.195814][ T6552] syz.5.117 (6552) used greatest stack depth: 19640 bytes left [ 151.768595][ T6582] overlayfs: missing 'workdir' [ 151.920564][ T5917] usb 10-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 152.072743][ T6587] overlayfs: failed to resolve './file0': -2 [ 152.247159][ T5917] usb 10-1: config 0 interface 0 has no altsetting 0 [ 152.408326][ T5917] usb 10-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 152.436431][ T5917] usb 10-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 152.466317][ T5917] usb 10-1: Product: syz [ 152.480866][ T5917] usb 10-1: Manufacturer: syz [ 152.500606][ T5917] usb 10-1: SerialNumber: syz [ 152.526481][ T5917] usb 10-1: config 0 descriptor?? [ 152.549132][ T5917] usb 10-1: selecting invalid altsetting 0 [ 152.678551][ T5861] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 152.862078][ T30] kauditd_printk_skb: 13 callbacks suppressed [ 152.862096][ T30] audit: type=1326 audit(1746241208.028:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6594 comm="syz.8.127" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f6f8c58e969 code=0x0 [ 152.934825][ T5861] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 153.099311][ T5861] usb 6-1: New USB device found, idVendor=2040, idProduct=1605, bcdDevice= a.94 [ 153.531268][ T5861] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 153.567501][ T5821] IPVS: starting estimator thread 0... [ 153.586487][ T6604] program syz.7.126 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 153.678696][ T5861] usb 6-1: config 0 descriptor?? [ 153.736338][ T6605] IPVS: using max 29 ests per chain, 69600 per kthread [ 153.904650][ T6582] netlink: 1347 bytes leftover after parsing attributes in process `syz.5.123'. [ 153.918021][ T5887] usb 6-1: USB disconnect, device number 2 [ 155.085202][ T5887] usb 10-1: USB disconnect, device number 3 [ 155.226680][ T6627] veth0_vlan: entered allmulticast mode [ 156.469519][ T6633] veth0_to_team: entered promiscuous mode [ 156.475343][ T6633] veth0_to_team: entered allmulticast mode [ 157.590870][ T6645] overlayfs: failed to resolve './file0': -2 [ 158.125897][ T6650] PKCS7: Unknown OID: [4] 5.25.264.112.81.102.117 [ 158.132557][ T6650] PKCS7: Only support pkcs7_signedData type [ 159.151571][ T6661] FAULT_INJECTION: forcing a failure. [ 159.151571][ T6661] name failslab, interval 1, probability 0, space 0, times 0 [ 159.186679][ T6667] capability: warning: `syz.8.141' uses deprecated v2 capabilities in a way that may be insecure [ 159.198419][ T6661] CPU: 1 UID: 0 PID: 6661 Comm: syz.7.140 Not tainted 6.15.0-rc4-syzkaller-00189-g2bfcee565c3a #0 PREEMPT(full) [ 159.198447][ T6661] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 159.198459][ T6661] Call Trace: [ 159.198467][ T6661] [ 159.198476][ T6661] dump_stack_lvl+0x189/0x250 [ 159.198513][ T6661] ? __pfx_dump_stack_lvl+0x10/0x10 [ 159.198541][ T6661] ? __pfx__printk+0x10/0x10 [ 159.198577][ T6661] ? __pfx___might_resched+0x10/0x10 [ 159.198606][ T6661] ? fs_reclaim_acquire+0x7d/0x100 [ 159.198630][ T6661] should_fail_ex+0x414/0x560 [ 159.198667][ T6661] should_failslab+0xa8/0x100 [ 159.198699][ T6661] __kmalloc_noprof+0xcb/0x4f0 [ 159.198728][ T6661] ? genl_family_rcv_msg_attrs_parse+0xa3/0x2a0 [ 159.198762][ T6661] genl_family_rcv_msg_attrs_parse+0xa3/0x2a0 [ 159.198822][ T6661] genl_start+0x180/0x6c0 [ 159.198847][ T6661] ? netlink_lookup+0x30/0x200 [ 159.198873][ T6661] __netlink_dump_start+0x466/0x7e0 [ 159.198902][ T6661] genl_family_rcv_msg_dumpit+0x1e7/0x2c0 [ 159.198934][ T6661] ? __pfx_genl_family_rcv_msg_dumpit+0x10/0x10 [ 159.198968][ T6661] ? genl_get_cmd+0x67f/0x910 [ 159.198996][ T6661] ? __pfx___mutex_lock+0x10/0x10 [ 159.199020][ T6661] ? __pfx_genl_start+0x10/0x10 [ 159.199042][ T6661] ? __pfx_genl_dumpit+0x10/0x10 [ 159.199065][ T6661] ? __pfx_genl_done+0x10/0x10 [ 159.199097][ T6661] ? stack_depot_save_flags+0x40/0x910 [ 159.199135][ T6661] genl_rcv_msg+0x5da/0x790 [ 159.199169][ T6661] ? __pfx_genl_rcv_msg+0x10/0x10 [ 159.199193][ T6661] ? __pfx_nl802154_list_associations+0x10/0x10 [ 159.199234][ T6661] netlink_rcv_skb+0x219/0x490 [ 159.199255][ T6661] ? __pfx_genl_rcv_msg+0x10/0x10 [ 159.199281][ T6661] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 159.199328][ T6661] ? down_read+0x1ad/0x2e0 [ 159.199355][ T6661] genl_rcv+0x28/0x40 [ 159.199379][ T6661] netlink_unicast+0x758/0x8d0 [ 159.199422][ T6661] netlink_sendmsg+0x805/0xb30 [ 159.199441][ T6661] ? is_bpf_text_address+0x26/0x2b0 [ 159.199477][ T6661] ? __pfx_netlink_sendmsg+0x10/0x10 [ 159.199508][ T6661] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 159.199528][ T6661] ? __pfx_netlink_sendmsg+0x10/0x10 [ 159.199550][ T6661] __sock_sendmsg+0x219/0x270 [ 159.199585][ T6661] ____sys_sendmsg+0x505/0x830 [ 159.199617][ T6661] ? __pfx_____sys_sendmsg+0x10/0x10 [ 159.199652][ T6661] ? import_iovec+0x74/0xa0 [ 159.199682][ T6661] ___sys_sendmsg+0x21f/0x2a0 [ 159.199710][ T6661] ? __pfx____sys_sendmsg+0x10/0x10 [ 159.199781][ T6661] ? __fget_files+0x2a/0x420 [ 159.199816][ T6661] ? __fget_files+0x3a0/0x420 [ 159.199857][ T6661] __x64_sys_sendmsg+0x19b/0x260 [ 159.199885][ T6661] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 159.199929][ T6661] ? do_syscall_64+0xba/0x210 [ 159.199969][ T6661] do_syscall_64+0xf6/0x210 [ 159.199992][ T6661] ? clear_bhb_loop+0x45/0xa0 [ 159.200017][ T6661] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 159.200035][ T6661] RIP: 0033:0x7f5f6498e969 [ 159.200054][ T6661] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 159.200069][ T6661] RSP: 002b:00007f5f6584c038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 159.200089][ T6661] RAX: ffffffffffffffda RBX: 00007f5f64bb5fa0 RCX: 00007f5f6498e969 [ 159.200102][ T6661] RDX: 0000000000000000 RSI: 0000200000000300 RDI: 0000000000000004 [ 159.200114][ T6661] RBP: 00007f5f6584c090 R08: 0000000000000000 R09: 0000000000000000 [ 159.200125][ T6661] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 159.200135][ T6661] R13: 0000000000000000 R14: 00007f5f64bb5fa0 R15: 00007ffd4c5d1248 [ 159.200164][ T6661] [ 159.575204][ T6669] random: crng reseeded on system resumption [ 160.627807][ T6684] overlayfs: missing 'workdir' [ 160.646304][ T5861] usb 8-1: new full-speed USB device number 4 using dummy_hcd [ 160.810722][ T5861] usb 8-1: config 150 has an invalid interface number: 204 but max is 1 [ 160.846921][ T5861] usb 8-1: config 150 has an invalid descriptor of length 0, skipping remainder of the config [ 160.886444][ T5887] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 160.908462][ T5861] usb 8-1: config 150 has 1 interface, different from the descriptor's value: 2 [ 160.960912][ T5861] usb 8-1: config 150 has no interface number 0 [ 160.994696][ T5861] usb 8-1: config 150 interface 204 has no altsetting 0 [ 161.052276][ T5861] usb 8-1: New USB device found, idVendor=04e2, idProduct=1424, bcdDevice=c7.eb [ 161.075820][ T5887] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 161.082209][ T5861] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 161.273976][ T5887] usb 6-1: New USB device found, idVendor=2040, idProduct=1605, bcdDevice= a.94 [ 161.298519][ T5887] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 161.310770][ T5887] usb 6-1: config 0 descriptor?? [ 161.352693][ T5861] usb 8-1: Product: syz [ 161.409700][ T5861] usb 8-1: Manufacturer: syz [ 161.436013][ T5861] usb 8-1: SerialNumber: syz [ 161.558319][ T6684] netlink: 1347 bytes leftover after parsing attributes in process `syz.5.144'. [ 161.590552][ T5887] usb 6-1: USB disconnect, device number 3 [ 161.785148][ T53] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 162.327640][ T5861] xr_serial 8-1:150.204: skipping garbage [ 162.364625][ T5861] usb 8-1: USB disconnect, device number 4 [ 162.536326][ T53] usb 9-1: Using ep0 maxpacket: 16 [ 162.565963][ T53] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 162.614754][ T53] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 162.676460][ T53] usb 9-1: New USB device found, idVendor=05ac, idProduct=8241, bcdDevice= 0.00 [ 162.721713][ T53] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 162.752532][ T53] usb 9-1: config 0 descriptor?? [ 163.066553][ T6715] PKCS7: Unknown OID: [4] 5.25.264.112.81.102.117 [ 163.073344][ T6715] PKCS7: Only support pkcs7_signedData type [ 163.763377][ T6713] overlayfs: failed to resolve './file0': -2 [ 164.075844][ T53] usbhid 9-1:0.0: can't add hid device: -71 [ 164.165936][ T53] usbhid 9-1:0.0: probe with driver usbhid failed with error -71 [ 164.297460][ T6722] veth0_to_team: entered promiscuous mode [ 164.368768][ T53] usb 9-1: USB disconnect, device number 4 [ 164.391733][ T6722] veth0_to_team: entered allmulticast mode [ 164.896438][ T53] usb 10-1: new high-speed USB device number 4 using dummy_hcd [ 165.174350][ T53] usb 10-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 165.251732][ T53] usb 10-1: config 0 interface 0 has no altsetting 0 [ 165.367080][ T53] usb 10-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 165.456272][ T53] usb 10-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 165.490236][ T53] usb 10-1: Product: syz [ 165.500389][ T53] usb 10-1: Manufacturer: syz [ 165.510518][ T53] usb 10-1: SerialNumber: syz [ 165.529453][ T53] usb 10-1: config 0 descriptor?? [ 165.572094][ T53] usb 10-1: selecting invalid altsetting 0 [ 167.420033][ T6777] overlayfs: failed to resolve './file0': -2 [ 168.007744][ T6788] FAULT_INJECTION: forcing a failure. [ 168.007744][ T6788] name failslab, interval 1, probability 0, space 0, times 0 [ 168.271478][ T6788] CPU: 0 UID: 0 PID: 6788 Comm: syz.9.164 Not tainted 6.15.0-rc4-syzkaller-00189-g2bfcee565c3a #0 PREEMPT(full) [ 168.271509][ T6788] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 168.271521][ T6788] Call Trace: [ 168.271529][ T6788] [ 168.271538][ T6788] dump_stack_lvl+0x189/0x250 [ 168.271575][ T6788] ? __pfx_dump_stack_lvl+0x10/0x10 [ 168.271602][ T6788] ? __pfx__printk+0x10/0x10 [ 168.271641][ T6788] ? __pfx___might_resched+0x10/0x10 [ 168.271669][ T6788] ? fs_reclaim_acquire+0x7d/0x100 [ 168.271695][ T6788] should_fail_ex+0x414/0x560 [ 168.271733][ T6788] should_failslab+0xa8/0x100 [ 168.271766][ T6788] __kmalloc_cache_noprof+0x70/0x3d0 [ 168.271795][ T6788] ? assoc_array_insert+0x43d/0x2f90 [ 168.271827][ T6788] assoc_array_insert+0x43d/0x2f90 [ 168.271857][ T6788] ? key_set_index_key+0x381/0x540 [ 168.271887][ T6788] ? __pfx___mutex_lock+0x10/0x10 [ 168.271918][ T6788] ? __pfx_down_write+0x10/0x10 [ 168.271953][ T6788] __key_link_begin+0xd6/0x1f0 [ 168.271986][ T6788] __key_create_or_update+0x41a/0xa30 [ 168.272026][ T6788] ? __pfx___key_create_or_update+0x10/0x10 [ 168.272076][ T6788] ? __pfx_lookup_user_key_possessed+0x10/0x10 [ 168.272103][ T6788] ? __pfx_keyring_search_iterator+0x10/0x10 [ 168.272139][ T6788] key_create_or_update+0x42/0x60 [ 168.272179][ T6788] __se_sys_add_key+0x329/0x400 [ 168.272204][ T6788] ? __pfx___se_sys_add_key+0x10/0x10 [ 168.272232][ T6788] ? do_syscall_64+0xba/0x210 [ 168.272254][ T6788] ? __x64_sys_add_key+0x20/0xc0 [ 168.272276][ T6788] do_syscall_64+0xf6/0x210 [ 168.272300][ T6788] ? clear_bhb_loop+0x45/0xa0 [ 168.272326][ T6788] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 168.272346][ T6788] RIP: 0033:0x7f7010b8e969 [ 168.272364][ T6788] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 168.272381][ T6788] RSP: 002b:00007f7011a8b038 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8 [ 168.272403][ T6788] RAX: ffffffffffffffda RBX: 00007f7010db5fa0 RCX: 00007f7010b8e969 [ 168.272417][ T6788] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 0000200000000140 [ 168.272431][ T6788] RBP: 00007f7011a8b090 R08: 000000003d0e4551 R09: 0000000000000000 [ 168.272444][ T6788] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 168.272456][ T6788] R13: 0000000000000000 R14: 00007f7010db5fa0 R15: 00007ffd0d057c88 [ 168.272501][ T6788] [ 168.602477][ T6793] PKCS7: Unknown OID: [4] 5.25.264.112.81.102.117 [ 168.609738][ T6793] PKCS7: Only support pkcs7_signedData type [ 169.048460][ T6796] PKCS7: Unknown OID: [4] 5.25.264.112.81.102.117 [ 169.055010][ T6796] PKCS7: Only support pkcs7_signedData type [ 170.877545][ T6803] netlink: 'syz.7.169': attribute type 10 has an invalid length. [ 170.885341][ T6803] netlink: 40 bytes leftover after parsing attributes in process `syz.7.169'. [ 171.021891][ T6803] team0: Port device geneve0 added [ 172.183782][ T6823] PKCS7: Unknown OID: [4] 5.25.264.112.81.102.117 [ 172.195062][ T6823] PKCS7: Only support pkcs7_signedData type [ 172.211528][ T6827] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 172.316636][ T6827] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 172.382115][ T6827] overlay: Unknown parameter 'fowner<00000000000000000000' [ 172.492971][ T6837] overlayfs: failed to resolve './file0': -2 [ 172.696445][ T53] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 173.238031][ T53] usb 9-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 173.403501][ T53] usb 9-1: config 0 interface 0 has no altsetting 0 [ 173.439441][ T6827] xt_CT: No such helper "snmp_trap" [ 173.600054][ T53] usb 9-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 173.840459][ T53] usb 9-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 173.916339][ T53] usb 9-1: Product: syz [ 173.920586][ T53] usb 9-1: Manufacturer: syz [ 173.925202][ T53] usb 9-1: SerialNumber: syz [ 174.044378][ T6827] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 174.064245][ T53] usb 9-1: config 0 descriptor?? [ 174.106770][ T6827] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 174.122653][ T53] usb 9-1: selecting invalid altsetting 0 [ 175.646805][ T6873] x_tables: duplicate underflow at hook 1 [ 177.539069][ T6890] x_tables: duplicate underflow at hook 1 [ 177.603612][ T6893] netlink: 68 bytes leftover after parsing attributes in process `syz.8.187'. [ 177.764172][ T6893] netlink: 8 bytes leftover after parsing attributes in process `syz.8.187'. [ 178.811134][ T6912] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 178.832268][ T6912] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 179.878743][ T5861] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 180.396760][ T5861] usb 8-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 180.433331][ T5861] usb 8-1: config 0 interface 0 has no altsetting 0 [ 180.476191][ T5861] usb 8-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 180.510920][ T5861] usb 8-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 180.541562][ T5861] usb 8-1: Product: syz [ 180.545784][ T5861] usb 8-1: Manufacturer: syz [ 180.590176][ T5861] usb 8-1: SerialNumber: syz [ 180.627270][ T5861] usb 8-1: config 0 descriptor?? [ 180.665140][ T5861] usb 8-1: selecting invalid altsetting 0 [ 180.926888][ T53] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 181.138126][ T53] usb 6-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 181.254033][ T53] usb 6-1: config 0 interface 0 has no altsetting 0 [ 181.433126][ T53] usb 6-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 181.459946][ T53] usb 6-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 181.485236][ T53] usb 6-1: Product: syz [ 181.496379][ T53] usb 6-1: Manufacturer: syz [ 181.516475][ T53] usb 6-1: SerialNumber: syz [ 181.578414][ T53] usb 6-1: config 0 descriptor?? [ 181.665758][ T53] usb 6-1: selecting invalid altsetting 0 [ 183.608809][ T5887] usb 8-1: USB disconnect, device number 5 [ 183.981751][ T5887] usb 6-1: USB disconnect, device number 4 [ 184.057386][ T53] usb 10-1: USB disconnect, device number 4 [ 184.190261][ T6958] program syz.9.199 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 184.207275][ T5821] IPVS: starting estimator thread 0... [ 184.336822][ T6959] IPVS: using max 27 ests per chain, 64800 per kthread [ 188.556147][ T1152] Bluetooth: hci5: Frame reassembly failed (-84) [ 188.768065][ T6986] Bluetooth: received HCILL_WAKE_UP_ACK in state 2 [ 189.026547][ T6994] netlink: 144 bytes leftover after parsing attributes in process `syz.6.209'. [ 189.408125][ T5821] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 189.616483][ T5821] usb 7-1: Using ep0 maxpacket: 16 [ 189.727138][ T5821] usb 7-1: config index 0 descriptor too short (expected 65320, got 95) [ 189.861888][ T5821] usb 7-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 189.926151][ T5821] usb 7-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 189.963846][ T24] usb 10-1: new high-speed USB device number 5 using dummy_hcd [ 189.996333][ T5821] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 190.322871][ T5821] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 190.332851][ T5821] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 190.341242][ T5821] usb 7-1: Product: syz [ 190.345448][ T5821] usb 7-1: Manufacturer: syz [ 190.350572][ T5821] usb 7-1: SerialNumber: syz [ 190.418016][ T24] usb 10-1: Using ep0 maxpacket: 16 [ 190.430228][ T24] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 190.493963][ T24] usb 10-1: New USB device found, idVendor=0b57, idProduct=2bbd, bcdDevice=e7.cc [ 190.539926][ T24] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 190.569303][ T24] usb 10-1: Product: syz [ 190.573639][ T24] usb 10-1: Manufacturer: syz [ 190.596228][ T5131] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 190.596820][ T5828] Bluetooth: hci5: command 0x1003 tx timeout [ 190.603137][ T24] usb 10-1: SerialNumber: syz [ 190.717616][ T24] usb 10-1: config 0 descriptor?? [ 190.804055][ T24] usbhid 10-1:0.0: couldn't find an input interrupt endpoint [ 190.893510][ T5821] usb 7-1: 0:2 : does not exist [ 191.078632][ T5131] Bluetooth: hci3: command tx timeout [ 191.276955][ T7018] ======================================================= [ 191.276955][ T7018] WARNING: The mand mount option has been deprecated and [ 191.276955][ T7018] and is ignored by this kernel. Remove the mand [ 191.276955][ T7018] option from the mount to silence this warning. [ 191.276955][ T7018] ======================================================= [ 191.510846][ T24] usb 10-1: USB disconnect, device number 5 [ 191.563369][ T7023] program syz.7.212 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 191.607478][ T5821] usb 7-1: USB disconnect, device number 10 [ 191.770788][ T5869] udevd[5869]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 191.793134][ T7015] 9pnet_fd: Insufficient options for proto=fd [ 193.460801][ T24] usb 9-1: USB disconnect, device number 5 [ 193.846565][ T7045] process 'syz.7.218' launched './file0' with NULL argv: empty string added [ 194.281298][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.336457][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 198.701766][ T7085] program syz.5.225 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 198.722600][ T978] IPVS: starting estimator thread 0... [ 198.843126][ T7086] IPVS: using max 39 ests per chain, 93600 per kthread [ 201.211569][ T7115] PKCS7: Unknown OID: [4] 5.25.264.112.81.102.117 [ 201.218165][ T7115] PKCS7: Only support pkcs7_signedData type [ 202.576513][ T5821] usb 10-1: new high-speed USB device number 6 using dummy_hcd [ 202.592769][ T7129] program syz.5.239 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 202.786812][ T5821] usb 10-1: Using ep0 maxpacket: 16 [ 202.814251][ T5821] usb 10-1: New USB device found, idVendor=0403, idProduct=fa78, bcdDevice= 0.03 [ 202.838155][ T5821] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 202.851657][ T5821] usb 10-1: SerialNumber: syz [ 202.871273][ T5821] usb 10-1: config 0 descriptor?? [ 203.212031][ T5821] ftdi_sio 10-1:0.0: FTDI USB Serial Device converter detected [ 203.291829][ T5821] usb 10-1: Detected SIO [ 203.637612][ T5821] usb 10-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 203.698332][ T5821] usb 10-1: USB disconnect, device number 6 [ 203.756709][ T5821] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 203.798144][ T5821] ftdi_sio 10-1:0.0: device disconnected [ 204.365345][ T7148] PKCS7: Unknown OID: [4] 5.25.264.112.81.102.117 [ 204.371893][ T7148] PKCS7: Only support pkcs7_signedData type [ 207.698689][ T7178] openvswitch: netlink: Key type 30 is not supported [ 207.775258][ T7178] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 209.585229][ T7083] syz.6.227 (7083): drop_caches: 3 [ 212.231460][ T1113] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 212.498096][ T1113] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 212.692656][ T1113] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 212.904027][ T7200] PKCS7: Unknown OID: [4] 5.25.264.112.81.102.117 [ 213.159579][ T7200] PKCS7: Only support pkcs7_signedData type [ 213.621225][ T1113] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 213.666203][ T10] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 214.179482][ T10] usb 8-1: Using ep0 maxpacket: 16 [ 214.231617][ T10] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 214.287250][ T10] usb 8-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 214.327866][ T10] usb 8-1: New USB device found, idVendor=1781, idProduct=0898, bcdDevice= 0.00 [ 214.361475][ T10] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 214.404496][ T10] usb 8-1: config 0 descriptor?? [ 215.533082][ T978] usb 8-1: USB disconnect, device number 6 [ 216.023350][ T1113] bridge_slave_1: left allmulticast mode [ 216.092319][ T1113] bridge_slave_1: left promiscuous mode [ 216.137688][ T1113] bridge0: port 2(bridge_slave_1) entered disabled state [ 216.233213][ T1113] bridge_slave_0: left allmulticast mode [ 216.257750][ T1113] bridge_slave_0: left promiscuous mode [ 216.280079][ T1113] bridge0: port 1(bridge_slave_0) entered disabled state [ 216.466274][ T978] usb 10-1: new high-speed USB device number 7 using dummy_hcd [ 216.676321][ T978] usb 10-1: Using ep0 maxpacket: 8 [ 217.118401][ T5828] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 217.129428][ T5828] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 217.134940][ T978] usb 10-1: New USB device found, idVendor=04b4, idProduct=8613, bcdDevice=95.8f [ 217.156603][ T5828] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 217.162858][ T978] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=1 [ 217.173950][ T5828] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 217.181781][ T5828] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 217.766306][ T978] usb 10-1: Product: syz [ 217.796894][ T978] usb 10-1: Manufacturer: syz [ 217.804904][ T978] usb 10-1: SerialNumber: syz [ 217.856945][ T978] usb 10-1: config 0 descriptor?? [ 217.882340][ T978] usbtest 10-1:0.0: FX2 device [ 217.891670][ T978] usbtest 10-1:0.0: high-speed {control bulk-in bulk-out} tests (+alt) [ 218.646288][ T7256] fuse: root generation should be zero [ 218.703237][ T978] usb 10-1: USB disconnect, device number 7 [ 218.791863][ T1113] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 218.803204][ T1113] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 218.817415][ T1113] bond0 (unregistering): Released all slaves [ 218.882875][ T7261] veth0_to_team: entered promiscuous mode [ 218.893740][ T7261] veth0_to_team: entered allmulticast mode [ 219.603527][ T7274] PKCS7: Unknown OID: [4] 5.25.264.112.81.102.117 [ 219.610141][ T7274] PKCS7: Only support pkcs7_signedData type [ 219.757304][ T5828] Bluetooth: hci4: command tx timeout [ 220.446584][ T24] usb 10-1: new high-speed USB device number 8 using dummy_hcd [ 220.465476][ T1113] hsr_slave_0: left promiscuous mode [ 220.474467][ T1113] hsr_slave_1: left promiscuous mode [ 220.481444][ T1113] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 220.493134][ T1113] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 220.493530][ T7280] loop8: detected capacity change from 0 to 8 [ 220.507963][ T1113] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 220.520683][ T7280] Dev loop8: unable to read RDB block 8 [ 220.545342][ T1113] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 220.556332][ T7280] loop8: unable to read partition table [ 220.562893][ T7280] loop8: partition table beyond EOD, truncated [ 220.586958][ T7280] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 220.611919][ T24] usb 10-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 220.617703][ T1113] veth1_macvtap: left promiscuous mode [ 220.622914][ T24] usb 10-1: config 0 interface 0 has no altsetting 0 [ 220.628732][ T1113] veth0_macvtap: left promiscuous mode [ 220.645194][ T1113] veth1_vlan: left promiscuous mode [ 220.648271][ T24] usb 10-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 220.664193][ T24] usb 10-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 220.665754][ T1113] veth0_vlan: left promiscuous mode [ 220.673097][ T24] usb 10-1: Product: syz [ 220.682726][ T24] usb 10-1: Manufacturer: syz [ 220.687805][ T24] usb 10-1: SerialNumber: syz [ 220.728586][ T24] usb 10-1: config 0 descriptor?? [ 220.758223][ T24] usb 10-1: selecting invalid altsetting 0 [ 221.819314][ T5828] Bluetooth: hci4: command tx timeout [ 223.539336][ T5940] usb 10-1: USB disconnect, device number 8 [ 223.580646][ T7300] netlink: 'syz.9.280': attribute type 10 has an invalid length. [ 223.628126][ T7300] netlink: 40 bytes leftover after parsing attributes in process `syz.9.280'. [ 223.832799][ T1113] team0 (unregistering): Port device team_slave_1 removed [ 223.874315][ T1113] team0 (unregistering): Port device team_slave_0 removed [ 223.883115][ T5131] Bluetooth: hci4: command tx timeout [ 224.299268][ T7300] team0: Port device geneve0 added [ 224.933582][ T7318] PKCS7: Unknown OID: [4] 5.25.264.112.81.102.117 [ 224.940226][ T7318] PKCS7: Only support pkcs7_signedData type [ 225.059091][ T7319] PKCS7: Unknown OID: [4] 5.25.264.112.81.102.117 [ 225.065586][ T7319] PKCS7: Only support pkcs7_signedData type [ 226.366372][ T5131] Bluetooth: hci4: command tx timeout [ 226.575759][ T7247] chnl_net:caif_netlink_parms(): no params data found [ 226.903963][ T7247] bridge0: port 1(bridge_slave_0) entered blocking state [ 226.919882][ T7247] bridge0: port 1(bridge_slave_0) entered disabled state [ 226.931254][ T7247] bridge_slave_0: entered allmulticast mode [ 226.940891][ T7247] bridge_slave_0: entered promiscuous mode [ 226.954244][ T7247] bridge0: port 2(bridge_slave_1) entered blocking state [ 226.965626][ T7247] bridge0: port 2(bridge_slave_1) entered disabled state [ 226.979485][ T7247] bridge_slave_1: entered allmulticast mode [ 226.988827][ T7247] bridge_slave_1: entered promiscuous mode [ 227.060398][ T7247] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 227.080628][ T7247] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 227.090072][ T10] usb 10-1: new full-speed USB device number 9 using dummy_hcd [ 227.150766][ T7247] team0: Port device team_slave_0 added [ 227.167853][ T7247] team0: Port device team_slave_1 added [ 227.227491][ T10] usb 10-1: device descriptor read/64, error -71 [ 227.234325][ T7247] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 227.249888][ T7247] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 227.282665][ T7247] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 227.295832][ T7247] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 227.307003][ T7247] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 227.344685][ T7247] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 227.445204][ T7352] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 227.453457][ T7352] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 227.469085][ T10] usb 10-1: new full-speed USB device number 10 using dummy_hcd [ 227.504485][ T7247] hsr_slave_0: entered promiscuous mode [ 227.536996][ T7247] hsr_slave_1: entered promiscuous mode [ 227.648379][ T5131] Bluetooth: hci1: command 0x0406 tx timeout [ 227.669778][ T10] usb 10-1: device descriptor read/64, error -71 [ 228.332173][ T10] usb usb10-port1: attempt power cycle [ 228.686371][ T10] usb 10-1: new full-speed USB device number 11 using dummy_hcd [ 228.852147][ T10] usb 10-1: device descriptor read/8, error -71 [ 229.297180][ T10] usb 10-1: new full-speed USB device number 12 using dummy_hcd [ 229.358480][ T10] usb 10-1: device descriptor read/8, error -71 [ 229.497766][ T10] usb usb10-port1: unable to enumerate USB device [ 230.237803][ T7394] PKCS7: Unknown OID: [4] 5.25.264.112.81.102.117 [ 230.244333][ T7394] PKCS7: Only support pkcs7_signedData type [ 231.067181][ T7407] netlink: 124 bytes leftover after parsing attributes in process `syz.6.300'. [ 232.198238][ T5834] Bluetooth: hci3: command 0x0406 tx timeout [ 232.199295][ T5830] Bluetooth: hci2: command 0x0406 tx timeout [ 234.361839][ T6346] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 234.417949][ T7446] PKCS7: Unknown OID: [4] 5.25.264.112.81.102.117 [ 234.424528][ T7446] PKCS7: Only support pkcs7_signedData type [ 234.964448][ T6346] usb 7-1: Using ep0 maxpacket: 8 [ 235.229182][ T6346] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 235.348818][ T6346] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 235.411721][ T6346] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 235.422008][ T6346] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 65535, setting to 1024 [ 236.066559][ T6346] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 236.117691][ T6346] usb 7-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 236.612023][ T6346] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 236.667020][ T6346] usb 7-1: config 0 descriptor?? [ 236.700244][ T7438] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 236.939902][ T5828] Bluetooth: hci5: Opcode 0x0c03 failed: -71 [ 236.999525][ T5940] usb 7-1: USB disconnect, device number 11 [ 237.512172][ T7479] syz.5.314 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 238.337586][ T7473] x_tables: duplicate underflow at hook 1 [ 238.668464][ T7247] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 238.769033][ T7247] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 240.918335][ T7490] netlink: 16 bytes leftover after parsing attributes in process `syz.7.317'. [ 241.593906][ T7247] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 241.681846][ T7247] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 242.436539][ T5830] Bluetooth: hci0: command 0x0406 tx timeout [ 242.495978][ T7508] PKCS7: Unknown OID: [4] 5.25.264.112.81.102.117 [ 242.502601][ T7508] PKCS7: Only support pkcs7_signedData type [ 243.285671][ T7247] 8021q: adding VLAN 0 to HW filter on device bond0 [ 243.393242][ T7516] netlink: 4 bytes leftover after parsing attributes in process `syz.5.322'. [ 243.404887][ T7247] 8021q: adding VLAN 0 to HW filter on device team0 [ 243.820617][ T5821] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 244.068229][ T5821] usb 8-1: Using ep0 maxpacket: 8 [ 244.148594][ T5821] usb 8-1: New USB device found, idVendor=04b4, idProduct=8613, bcdDevice=95.8f [ 244.160244][ T5821] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=1 [ 244.191537][ T5821] usb 8-1: Product: syz [ 244.201586][ T5821] usb 8-1: Manufacturer: syz [ 244.217337][ T5821] usb 8-1: SerialNumber: syz [ 244.229724][ T5821] usb 8-1: config 0 descriptor?? [ 244.248292][ T5821] usbtest 8-1:0.0: FX2 device [ 244.257929][ T5821] usbtest 8-1:0.0: high-speed {control bulk-in bulk-out} tests (+alt) [ 244.403661][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 244.410863][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 244.471188][ T5821] usb 8-1: USB disconnect, device number 7 [ 244.499320][ T63] bridge0: port 2(bridge_slave_1) entered blocking state [ 244.506563][ T63] bridge0: port 2(bridge_slave_1) entered forwarding state [ 244.787347][ T24] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 244.946179][ T5887] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 244.976279][ T24] usb 6-1: Using ep0 maxpacket: 32 [ 245.026926][ T24] usb 6-1: config 0 interface 0 has no altsetting 0 [ 245.033102][ T7546] x_tables: duplicate underflow at hook 1 [ 245.046615][ T24] usb 6-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 245.076575][ T24] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 245.084650][ T24] usb 6-1: Product: syz [ 245.135629][ T24] usb 6-1: Manufacturer: syz [ 245.143892][ T24] usb 6-1: SerialNumber: syz [ 245.148762][ T5887] usb 7-1: Using ep0 maxpacket: 16 [ 245.159267][ T5887] usb 7-1: New USB device found, idVendor=0545, idProduct=8080, bcdDevice= 0.02 [ 245.179498][ T5887] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 245.198997][ T24] usb 6-1: config 0 descriptor?? [ 245.237922][ T5887] usb 7-1: Product: syz [ 245.255997][ T5887] usb 7-1: Manufacturer: syz [ 245.264460][ T5887] usb 7-1: SerialNumber: syz [ 245.325367][ T5887] usb 7-1: config 0 descriptor?? [ 245.473293][ T7247] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 246.335896][ T24] gs_usb 6-1:0.0: Configuring for 1 interfaces [ 246.809543][ T30] audit: type=1326 audit(1746241301.978:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7535 comm="syz.6.326" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f25d3d8e969 code=0x7ffc0000 [ 246.880471][ T30] audit: type=1326 audit(1746241301.978:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7535 comm="syz.6.326" exe="/root/syz-executor" sig=0 arch=c000003e syscall=51 compat=0 ip=0x7f25d3d8e969 code=0x7ffc0000 [ 246.903157][ T30] audit: type=1326 audit(1746241301.978:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7535 comm="syz.6.326" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f25d3d8e969 code=0x7ffc0000 [ 246.966709][ T30] audit: type=1326 audit(1746241301.978:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7535 comm="syz.6.326" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f25d3d8e969 code=0x7ffc0000 [ 247.016281][ T7567] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 247.026213][ T53] usb 7-1: USB disconnect, device number 12 [ 247.077169][ T7567] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 247.107297][ T30] audit: type=1326 audit(1746241302.108:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7535 comm="syz.6.326" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f25d3d8e969 code=0x7ffc0000 [ 247.138205][ T30] audit: type=1326 audit(1746241302.108:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7535 comm="syz.6.326" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f25d3d8e969 code=0x7ffc0000 [ 247.238556][ T7576] PKCS7: Unknown OID: [4] 5.25.264.112.81.102.117 [ 247.245109][ T7576] PKCS7: Only support pkcs7_signedData type [ 247.401217][ T30] audit: type=1326 audit(1746241302.118:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7535 comm="syz.6.326" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f25d3d8e969 code=0x7ffc0000 [ 247.895001][ T30] audit: type=1326 audit(1746241302.118:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7535 comm="syz.6.326" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f25d3d8e969 code=0x7ffc0000 [ 248.304789][ T7585] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3435572954 (219876669056 ns) > initial count (59054907904 ns). Using initial count to start timer. [ 248.334704][ T30] audit: type=1326 audit(1746241303.498:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7584 comm="syz.7.334" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f5f6498e969 code=0x0 [ 249.927228][ T6268] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 250.086319][ T6268] usb 8-1: Using ep0 maxpacket: 8 [ 250.098843][ T6268] usb 8-1: New USB device found, idVendor=04b4, idProduct=8613, bcdDevice=95.8f [ 250.108354][ T6268] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=1 [ 250.120419][ T6268] usb 8-1: Product: syz [ 250.124659][ T6268] usb 8-1: Manufacturer: syz [ 250.130120][ T6268] usb 8-1: SerialNumber: syz [ 250.138724][ T6268] usb 8-1: config 0 descriptor?? [ 250.147282][ T6268] usbtest 8-1:0.0: FX2 device [ 250.152021][ T6268] usbtest 8-1:0.0: high-speed {control bulk-in bulk-out} tests (+alt) [ 256.317424][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.331980][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.485066][ C0] sched: DL replenish lagged too much [ 317.316113][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.331035][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 349.282576][ T5830] Bluetooth: hci4: command 0x0406 tx timeout [ 378.856863][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.871395][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 403.874167][ T9] usb 8-1: USB disconnect, device number 8 [ 441.730002][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 441.752740][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 502.333512][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 502.348761][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 555.833474][ T12] ------------[ cut here ]------------ [ 555.849319][ T12] WARNING: CPU: 1 PID: 12 at io_uring/io_uring.c:2924 io_ring_exit_work+0x43c/0x880 [ 555.869047][ T12] Modules linked in: [ 555.873338][ T12] CPU: 1 UID: 0 PID: 12 Comm: kworker/u8:0 Not tainted 6.15.0-rc4-syzkaller-00189-g2bfcee565c3a #0 PREEMPT(full) [ 555.896885][ T12] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 555.918166][ T12] Workqueue: iou_exit io_ring_exit_work [ 555.923893][ T12] RIP: 0010:io_ring_exit_work+0x43c/0x880 [ 555.941408][ T12] Code: 00 48 8b 7c 24 30 48 8b 74 24 38 e8 3e ee 24 0a 48 85 c0 48 8b 5c 24 08 75 3c e8 1f 98 94 00 e9 2b fd ff ff e8 15 98 94 00 90 <0f> 0b 90 b8 70 17 00 00 48 89 44 24 38 eb c8 89 d9 80 e1 07 80 c1 [ 555.972020][ T12] RSP: 0018:ffffc90000117980 EFLAGS: 00010293 [ 555.988719][ T12] RAX: ffffffff812b274b RBX: 000000010000633b RCX: ffff88801c6c5a00 [ 556.008000][ T12] RDX: 0000000000000000 RSI: fffffffffffffba7 RDI: 0000000000000000 [ 556.027163][ T12] RBP: ffffc90000117b10 R08: ffffc90000117907 R09: 1ffff92000022f20 [ 556.035191][ T12] R10: dffffc0000000000 R11: fffff52000022f21 R12: 0000000100005ee2 [ 556.053756][ T12] R13: ffff888062ccc310 R14: ffff888062ccc480 R15: dffffc0000000000 [ 556.072325][ T12] FS: 0000000000000000(0000) GS:ffff888126200000(0000) knlGS:0000000000000000 [ 556.092047][ T12] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 556.110013][ T12] CR2: 00007f508f8cf020 CR3: 000000000dd36000 CR4: 00000000003526f0 [ 556.129340][ T12] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 556.148047][ T12] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 556.166798][ T12] Call Trace: [ 556.170128][ T12] [ 556.173112][ T12] ? __pfx_io_ring_exit_work+0x10/0x10 [ 556.189640][ T12] ? _raw_spin_unlock_irq+0x23/0x50 [ 556.194898][ T12] ? process_scheduled_works+0x9ec/0x17a0 [ 556.211985][ T12] ? process_scheduled_works+0x9ec/0x17a0 [ 556.228989][ T12] process_scheduled_works+0xadb/0x17a0 [ 556.234646][ T12] ? __pfx_process_scheduled_works+0x10/0x10 [ 556.251225][ T12] worker_thread+0x8a0/0xda0 [ 556.255916][ T12] kthread+0x70e/0x8a0 [ 556.270314][ T12] ? __pfx_worker_thread+0x10/0x10 [ 556.275473][ T12] ? __pfx_kthread+0x10/0x10 [ 556.290628][ T12] ? __pfx_kthread+0x10/0x10 [ 556.307135][ T12] ? _raw_spin_unlock_irq+0x23/0x50 [ 556.312433][ T12] ? lockdep_hardirqs_on+0x9c/0x150 [ 556.328628][ T12] ? __pfx_kthread+0x10/0x10 [ 556.333285][ T12] ret_from_fork+0x4b/0x80 [ 556.348138][ T12] ? __pfx_kthread+0x10/0x10 [ 556.352781][ T12] ret_from_fork_asm+0x1a/0x30 [ 556.368075][ T12] [ 556.371156][ T12] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 556.378466][ T12] CPU: 1 UID: 0 PID: 12 Comm: kworker/u8:0 Not tainted 6.15.0-rc4-syzkaller-00189-g2bfcee565c3a #0 PREEMPT(full) [ 556.390552][ T12] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 556.400657][ T12] Workqueue: iou_exit io_ring_exit_work [ 556.406343][ T12] Call Trace: [ 556.409642][ T12] [ 556.412598][ T12] dump_stack_lvl+0x99/0x250 [ 556.417224][ T12] ? __asan_memcpy+0x40/0x70 [ 556.421847][ T12] ? __pfx_dump_stack_lvl+0x10/0x10 [ 556.427080][ T12] ? __pfx__printk+0x10/0x10 [ 556.431725][ T12] panic+0x2db/0x790 [ 556.435659][ T12] ? __pfx_panic+0x10/0x10 [ 556.440112][ T12] ? show_trace_log_lvl+0x4fb/0x550 [ 556.445354][ T12] ? ret_from_fork_asm+0x1a/0x30 [ 556.450336][ T12] __warn+0x31b/0x4b0 [ 556.454348][ T12] ? io_ring_exit_work+0x43c/0x880 [ 556.459501][ T12] ? io_ring_exit_work+0x43c/0x880 [ 556.464650][ T12] report_bug+0x2be/0x4f0 [ 556.469015][ T12] ? io_ring_exit_work+0x43c/0x880 [ 556.474163][ T12] ? io_ring_exit_work+0x43c/0x880 [ 556.479306][ T12] ? io_ring_exit_work+0x43e/0x880 [ 556.484473][ T12] handle_bug+0x84/0x160 [ 556.488749][ T12] exc_invalid_op+0x1a/0x50 [ 556.493278][ T12] asm_exc_invalid_op+0x1a/0x20 [ 556.498148][ T12] RIP: 0010:io_ring_exit_work+0x43c/0x880 [ 556.503901][ T12] Code: 00 48 8b 7c 24 30 48 8b 74 24 38 e8 3e ee 24 0a 48 85 c0 48 8b 5c 24 08 75 3c e8 1f 98 94 00 e9 2b fd ff ff e8 15 98 94 00 90 <0f> 0b 90 b8 70 17 00 00 48 89 44 24 38 eb c8 89 d9 80 e1 07 80 c1 [ 556.523545][ T12] RSP: 0018:ffffc90000117980 EFLAGS: 00010293 [ 556.529657][ T12] RAX: ffffffff812b274b RBX: 000000010000633b RCX: ffff88801c6c5a00 [ 556.537658][ T12] RDX: 0000000000000000 RSI: fffffffffffffba7 RDI: 0000000000000000 [ 556.545659][ T12] RBP: ffffc90000117b10 R08: ffffc90000117907 R09: 1ffff92000022f20 [ 556.553665][ T12] R10: dffffc0000000000 R11: fffff52000022f21 R12: 0000000100005ee2 [ 556.561674][ T12] R13: ffff888062ccc310 R14: ffff888062ccc480 R15: dffffc0000000000 [ 556.569691][ T12] ? io_ring_exit_work+0x43b/0x880 [ 556.574881][ T12] ? __pfx_io_ring_exit_work+0x10/0x10 [ 556.580389][ T12] ? _raw_spin_unlock_irq+0x23/0x50 [ 556.585613][ T12] ? process_scheduled_works+0x9ec/0x17a0 [ 556.591367][ T12] ? process_scheduled_works+0x9ec/0x17a0 [ 556.597126][ T12] process_scheduled_works+0xadb/0x17a0 [ 556.602739][ T12] ? __pfx_process_scheduled_works+0x10/0x10 [ 556.608862][ T12] worker_thread+0x8a0/0xda0 [ 556.613517][ T12] kthread+0x70e/0x8a0 [ 556.617616][ T12] ? __pfx_worker_thread+0x10/0x10 [ 556.622789][ T12] ? __pfx_kthread+0x10/0x10 [ 556.627418][ T12] ? __pfx_kthread+0x10/0x10 [ 556.632038][ T12] ? _raw_spin_unlock_irq+0x23/0x50 [ 556.637262][ T12] ? lockdep_hardirqs_on+0x9c/0x150 [ 556.642488][ T12] ? __pfx_kthread+0x10/0x10 [ 556.647118][ T12] ret_from_fork+0x4b/0x80 [ 556.651574][ T12] ? __pfx_kthread+0x10/0x10 [ 556.656208][ T12] ret_from_fork_asm+0x1a/0x30 [ 556.661029][ T12] [ 556.664449][ T12] Kernel Offset: disabled [ 556.668790][ T12] Rebooting in 86400 seconds..