last executing test programs: 6m56.451323107s ago: executing program 3 (id=333): setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000080)=@raw={'raw\x00', 0x3c1, 0x3, 0x270, 0x130, 0x4c, 0x1a, 0x130, 0x73, 0x208, 0x258, 0x258, 0x208, 0x258, 0x3, 0x0, {[{{@ipv6={@private0, @local, [], [], 'veth0_to_team\x00', 'macvlan1\x00'}, 0x0, 0xa8, 0xc8}, @unspec=@NOTRACK={0x20}}, {{@uncond, 0x0, 0xa8, 0xd8}, @common=@inet=@SET2={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x2d0) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000080)=0x474c, 0x4) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) r1 = io_uring_setup(0x1558, &(0x7f0000000080)) io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x13, 0x20000000, 0x2) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000400)=ANY=[@ANYBLOB="54020000170001000000000000000000200100000000000000000000000000010000000000000000ac141400000000000000000000000000fc020000000000000003000000000000e000000200001000000000000000000000000000000000080a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="1242ffff040000000000000000000037660b6aff00000000000000000000000000000000000000000200002000000000", @ANYRES32, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000000000000000000000e0270300000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000000000000000000000000000000000650d000000000000e1000000000000000007000000ff0f0000000000000000000008000b000000000008001600000000000c001500000000005d000000040105"], 0x254}}, 0x0) io_uring_enter(0xffffffffffffffff, 0xa3d, 0x0, 0x0, 0x0, 0xff39) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) setsockopt$inet_int(r0, 0x0, 0x14, &(0x7f0000000180)=0x40000000, 0x4) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) bind$inet6(r3, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x12, 0x2, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="18000000000000000000d3ee85bbb44b5a733d02f0000000debbcaa0", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000fdffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) listen(r3, 0xfff) syz_emit_ethernet(0x4a, &(0x7f0000000580)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd60ddab9a881df80fd0801cc429f1952ca6fab87d27cd6b96b3f1479b9e090a843500140600fe8000000000000000000000000000bbfe80000000000000000000de000000aa00004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5002000090780000"], 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=@delpolicy={0x50, 0x27, 0x1, 0x0, 0x0, {{@in=@private=0xa010100, @in6=@remote}}}, 0x50}}, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000280)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb86dd600a843500140600fe8000000000000000000000000000bbfe8000000000000000000000000000aa00004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="1c40e399493a69e5"], 0x0) iopl(0x3) futex(0x0, 0x10b, 0x2, &(0x7f0000000300), &(0x7f0000000380), 0x0) recvmmsg(r0, &(0x7f0000000040), 0x291962b, 0x45833af92e4b39ff, 0x0) 6m56.099754439s ago: executing program 3 (id=337): iopl(0x3) mkdir(&(0x7f0000000200)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) r0 = syz_init_net_socket$ax25(0x3, 0x0, 0x0) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000040)={0xc, {"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", 0x1000}}, 0x1006) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r1) sendmsg$NLBL_CIPSOV4_C_ADD(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="a0010000", @ANYRES16=r2, @ANYBLOB="0100000000000000000001000000040004800800020001000000080001000000000060010880540007800800050000000000080005000000000008000600000000000800050000000000080005000000000008000500000000000800050000000000080005000000000008000600000000000800050000000000240007800800050000000000080006000000000008000600000000000800050000000000440007800800060000000000080006000000000008000600000000000800060000000000080005000000000008000600000000000800060000000000080005000000000034000780080006000000000008000500"], 0x1a0}}, 0x0) r3 = syz_open_dev$video(&(0x7f0000000040), 0x33be, 0x0) ioctl$VIDIOC_S_FMT(r3, 0xc0d05605, &(0x7f00000002c0)={0x1, @pix={0x0, 0x0, 0x42474752, 0x0, 0x0, 0x0, 0x6, 0xfeedcafe, 0x0, 0x0, 0x0, 0x5}}) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000180)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@volatile}]}) chdir(&(0x7f0000000140)='./bus\x00') r4 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) fsync(r4) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) r5 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000462000/0x18000)=nil, 0x0, 0x0, 0x2e, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r5, 0x4048ae9b, 0x0) kexec_load(0x0, 0x0, 0x0, 0x0) r6 = openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x208400, 0x0) dup(r0) getsockopt$bt_BT_VOICE(r6, 0x112, 0xb, 0x0, 0x0) prctl$PR_MCE_KILL(0x21, 0x1, 0x3) 6m53.711393393s ago: executing program 4 (id=342): r0 = socket$inet6(0xa, 0x802, 0x0) setsockopt$inet6_buf(r0, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0xf, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x6}, 0x1c) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000003c0)='kvm_dirty_ring_push\x00', r1, 0x0, 0x7}, 0x18) socket$kcm(0x2, 0x3, 0x2) sync() sync() sync() sync() sync() syz_open_dev$ndb(0x0, 0x0, 0x0) keyctl$KEYCTL_PKEY_ENCRYPT(0x19, 0x0, 0x0, 0x0, 0x0) sync() sync() prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r2 = socket(0x200000000000011, 0x2, 0x1) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) bind$packet(r2, &(0x7f00000004c0)={0x11, 0x1, r3, 0x1, 0x0, 0x6, @random="f20a0900"}, 0x14) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000280)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) close_range(r4, 0xffffffffffffffff, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) r5 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) lgetxattr(&(0x7f0000000140)='./bus\x00', &(0x7f0000000180)=@known='security.selinux\x00', &(0x7f0000000340)=""/125, 0x7d) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x13, r5, 0x0) 6m53.701706186s ago: executing program 3 (id=343): r0 = socket$inet_udplite(0x2, 0x2, 0x88) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x1, &(0x7f00000003c0)=0x6) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000390000000000000000000000850000004100000085000000a0"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3, @void, @value}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r4, r3, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0xfdef, &(0x7f0000000340)=ANY=[], 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r7 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101b01) r8 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) ioctl$USBDEVFS_DISCONNECT_CLAIM(r8, 0x5522, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='contention_begin\x00'}, 0x10) ioctl$USBDEVFS_DISCSIGNAL(r8, 0x8010550e, &(0x7f0000000540)={0x80, &(0x7f0000000440)="63038050de6f5cf77e5ff9321eb3f355fe00ee0f06ba6efe220ad521b95bbdfc23c9fa94bcf993c9a64ec92bebde4ac30a4b503abc627a2d282d274734bbc4c68046b3cc5edb8b76edfbd645668104e70852d87d2d9c82191f62946db7724f19f01b7b095b30a746d566764b581f5b84b739608b176cb049968b0a77337115cb5e534ae803e71246f423229019cd0a4c30767456f86dba221625a099049e4b3b794f467613cbf14916367d1769f7308b573ebb93d67ab2fbf196aea78464cb1578"}) ioctl$USBDEVFS_DISCONNECT_CLAIM(r7, 0x8108551b, &(0x7f0000002600)={0x0, 0x0, "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"}) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x0, 0x8, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socket$inet(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000040)=@raw={'raw\x00', 0x4001, 0x3, 0x2b8, 0x180, 0x0, 0x148, 0x180, 0x148, 0x220, 0x240, 0x240, 0x220, 0x240, 0x7fffffe, 0x0, {[{{@ip={@rand_addr, @local, 0x0, 0x0, 'ip6gretap0\x00', 'veth1_to_batadv\x00', {}, {}, 0x11}, 0x0, 0x118, 0x180, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'vlan0\x00', {0x0, 0x0, 0x1ff, 0x0, 0x0, 0xed, 0x7}}}, @common=@inet=@multiport={{0x50}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0x70, 0xa0}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x318) r9 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) poll(&(0x7f0000000380)=[{0xffffffffffffffff, 0x62a8}, {0xffffffffffffffff, 0x3401}, {r6, 0x42a2}, {r6, 0x20}], 0x4, 0xca) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00000001c0)=0x1b) socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$VHOST_SET_VRING_BASE(r9, 0xaf01, 0x0) 6m52.344686437s ago: executing program 3 (id=344): unshare(0x68040200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) ioctl$VIDIOC_SUBDEV_S_FMT(0xffffffffffffffff, 0xc0585605, 0x0) r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000080)={0x80008001, 0x8, 0x2, 0x0, 0x2}) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x3, 0x0, @loopback}, 0x1c) 6m51.838998671s ago: executing program 4 (id=348): r0 = socket$kcm(0xa, 0x5, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@bloom_filter={0x1e, 0x0, 0x400005, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0xfffffffd, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x890b, &(0x7f0000000000)) r1 = socket$kcm(0xa, 0x922000000003, 0x11) sendmsg$kcm(r1, &(0x7f0000000100)={&(0x7f00000002c0)=@l2tp6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @private}, 0x4}, 0x80, 0x0}, 0x0) (fail_nth: 5) 6m51.632249008s ago: executing program 4 (id=350): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000023c0)={0x26, 'hash\x00', 0x0, 0x0, 'wp256-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$kcm(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="cc", 0x1}], 0x1}, 0xc001) sendmmsg$alg(r1, &(0x7f0000000400)=[{0x0, 0xfffffff0, 0x0, 0xf0ff}], 0x1, 0x0) 6m51.566206829s ago: executing program 4 (id=352): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'veth1_to_bridge\x00', 0x0}) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_inet6_SIOCADDRT(r2, 0x890b, 0x0) write$char_usb(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000540)={@rand_addr=' \x01\x00', @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private1, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffdfd, 0x4400046, r1}) 6m51.474094854s ago: executing program 4 (id=353): socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="4400000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="81ffffff000000001c0012800b00010067726574617000000c000280080001"], 0x44}}, 0x0) writev(0xffffffffffffffff, &(0x7f0000000400)=[{&(0x7f00000000c0)="390000001000111867090707a640400f0021ff3f30000000170a00170000000004003700090003", 0x27}], 0x1) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000002f80)={0x0, 0x0, &(0x7f0000002f40)={&(0x7f0000000080)=@newtaction={0x60, 0x30, 0x0, 0x0, 0x0, {}, [{0x4c, 0x1, [@m_skbedit={0x48, 0x1, 0x0, 0x0, {{0xc}, {0x1c, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18}]}, {0x4}, {0xc}, {0xc, 0x9}}}]}]}, 0x60}}, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e02003c000b05d25a806f8c6394f90324fc602f00001550000100053582c137153e370248018088a817008848", 0x33fe0}], 0x1}, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0x1) ioctl$TCFLSH(r1, 0x89f1, 0x1000000000000) openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000080)='/proc/asound/card2/oss_mixer\x00', 0x100, 0x0) 6m51.003161732s ago: executing program 4 (id=354): clock_adjtime(0x0, &(0x7f00000004c0)={0xff, 0xff64cd1d00000000, 0x0, 0x0, 0x9, 0x9, 0x400009, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x3}) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000140)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f0000000000)=[{0x30, 0x0, 0x0, 0xfffff00c}, {0x6}]}, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket(0x2, 0x6, 0x0) connect$rxrpc(r1, &(0x7f0000000480)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @multicast2}}, 0x24) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0xfffffd66, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101804bc9555e1affd5020000000900010001797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a300000000009000300737975320000000014000000110001"], 0x7c}}, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r3, 0x84, 0xb, &(0x7f0000000280)={0x7, 0x4, 0x0, 0x0, 0x0, 0x0, 0x2b, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xff}, 0x6b) shutdown(r3, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000240)=0x10) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r3, 0x84, 0x75, &(0x7f0000000040)={r4, 0x0, 0x0, 0x0, 0x1}, &(0x7f0000000080)=0x18) sendmsg$NFT_MSG_GETRULE(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="14000400070a0101000000000000000005000000"], 0x14}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r6 = socket$rds(0x15, 0x5, 0x0) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r6, 0x114, 0x6, 0x0, 0x0) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000a00)=ANY=[@ANYBLOB="68010000100013070000030000000000ac1414bb000000000000000000000000ac1414aa00000000000000000000000000000000000000000000000000000000a8c95e370a9a424d0bae70216a4958b3d147782ae1bc117f6b02f60480eb4e", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="7f00000100000000000000000000000000000000330000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000480002006374722d63616d656c6c69612d6165736e69000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000014000e00fe8800000000000000000000000000011c0004000000000000000000fc00"/288], 0x168}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r9, @ANYBLOB="3c00330080000000080211000001080211000000505050505050000000000002aba519ed06dd895d00000100040600000000000025030000002a0100"], 0x58}}, 0x0) r10 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r10, 0x0, 0x40, &(0x7f0000000480)=@mangle={'mangle\x00', 0x44, 0x6, 0x418, 0x2b0, 0x210, 0x2b0, 0x2b0, 0x98, 0x380, 0x380, 0x380, 0x380, 0x380, 0x6, 0x0, {[{{@ip={@broadcast, @multicast1=0xe0007600, 0x0, 0x0, 'geneve1\x00', 'ip6gre0\x00'}, 0x0, 0x70, 0x98}, @inet=@DSCP={0x28}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @local, 0x0, 0x0, 'batadv_slave_1\x00', 'veth1_virt_wifi\x00'}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @local}}}, {{@ip={@broadcast, @multicast2, 0x0, 0x0, 'vlan1\x00', 'nr0\x00'}, 0x0, 0xb0, 0xd8, 0x0, {}, [@common=@unspec=@connlimit={{0x40}}]}, @ECN={0x28}}, {{@ip={@loopback, @multicast2, 0x0, 0x0, 'syzkaller0\x00', 'veth1_to_team\x00'}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @empty}}}, {{@ip={@broadcast, @multicast2, 0x0, 0x0, 'lo\x00', 'batadv_slave_1\x00'}, 0x0, 0xa0, 0xd0, 0x0, {}, [@common=@unspec=@mac={{0x30}, {@multicast}}]}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @loopback}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x478) ioctl$sock_inet_SIOCSARP(r10, 0x8955, &(0x7f00000000c0)={{0x2, 0x4e22, @empty}, {0x1, @multicast}, 0x8, {0x2, 0x4e21, @empty}, 'syzkaller0\x00'}) socket$inet_udp(0x2, 0x2, 0x0) 6m51.002107991s ago: executing program 3 (id=355): r0 = socket$inet_udplite(0x2, 0x2, 0x88) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x1, &(0x7f00000003c0)=0x6) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000390000000000000000000000850000004100000085000000a0"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3, @void, @value}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r4, r3, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0xfdef, &(0x7f0000000340)=ANY=[], 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r7 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101b01) r8 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) ioctl$USBDEVFS_DISCONNECT_CLAIM(r8, 0x5522, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='contention_begin\x00'}, 0x10) ioctl$USBDEVFS_DISCSIGNAL(r8, 0x8010550e, &(0x7f0000000540)={0x80, &(0x7f0000000440)="63038050de6f5cf77e5ff9321eb3f355fe00ee0f06ba6efe220ad521b95bbdfc23c9fa94bcf993c9a64ec92bebde4ac30a4b503abc627a2d282d274734bbc4c68046b3cc5edb8b76edfbd645668104e70852d87d2d9c82191f62946db7724f19f01b7b095b30a746d566764b581f5b84b739608b176cb049968b0a77337115cb5e534ae803e71246f423229019cd0a4c30767456f86dba221625a099049e4b3b794f467613cbf14916367d1769f7308b573ebb93d67ab2fbf196aea78464cb1578"}) ioctl$USBDEVFS_DISCONNECT_CLAIM(r7, 0x8108551b, &(0x7f0000002600)={0x0, 0x0, "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"}) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x0, 0x8, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socket$inet(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000040)=@raw={'raw\x00', 0x4001, 0x3, 0x2b8, 0x180, 0x0, 0x148, 0x180, 0x148, 0x220, 0x240, 0x240, 0x220, 0x240, 0x7fffffe, 0x0, {[{{@ip={@rand_addr, @local, 0x0, 0x0, 'ip6gretap0\x00', 'veth1_to_batadv\x00', {}, {}, 0x11}, 0x0, 0x118, 0x180, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'vlan0\x00', {0x0, 0x0, 0x1ff, 0x0, 0x0, 0xed, 0x7}}}, @common=@inet=@multiport={{0x50}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0x70, 0xa0}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x318) r9 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) poll(&(0x7f0000000380)=[{0xffffffffffffffff, 0x62a8}, {0xffffffffffffffff, 0x3401}, {r6, 0x42a2}, {r6, 0x20}], 0x4, 0xca) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00000001c0)=0x1b) socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$VHOST_SET_VRING_BASE(r9, 0xaf01, 0x0) 6m50.682792238s ago: executing program 32 (id=354): clock_adjtime(0x0, &(0x7f00000004c0)={0xff, 0xff64cd1d00000000, 0x0, 0x0, 0x9, 0x9, 0x400009, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x3}) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000140)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f0000000000)=[{0x30, 0x0, 0x0, 0xfffff00c}, {0x6}]}, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket(0x2, 0x6, 0x0) connect$rxrpc(r1, &(0x7f0000000480)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @multicast2}}, 0x24) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0xfffffd66, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101804bc9555e1affd5020000000900010001797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a300000000009000300737975320000000014000000110001"], 0x7c}}, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r3, 0x84, 0xb, &(0x7f0000000280)={0x7, 0x4, 0x0, 0x0, 0x0, 0x0, 0x2b, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xff}, 0x6b) shutdown(r3, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000240)=0x10) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r3, 0x84, 0x75, &(0x7f0000000040)={r4, 0x0, 0x0, 0x0, 0x1}, &(0x7f0000000080)=0x18) sendmsg$NFT_MSG_GETRULE(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="14000400070a0101000000000000000005000000"], 0x14}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r6 = socket$rds(0x15, 0x5, 0x0) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r6, 0x114, 0x6, 0x0, 0x0) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000a00)=ANY=[@ANYBLOB="68010000100013070000030000000000ac1414bb000000000000000000000000ac1414aa00000000000000000000000000000000000000000000000000000000a8c95e370a9a424d0bae70216a4958b3d147782ae1bc117f6b02f60480eb4e", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="7f00000100000000000000000000000000000000330000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000480002006374722d63616d656c6c69612d6165736e69000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000014000e00fe8800000000000000000000000000011c0004000000000000000000fc00"/288], 0x168}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r9, @ANYBLOB="3c00330080000000080211000001080211000000505050505050000000000002aba519ed06dd895d00000100040600000000000025030000002a0100"], 0x58}}, 0x0) r10 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r10, 0x0, 0x40, &(0x7f0000000480)=@mangle={'mangle\x00', 0x44, 0x6, 0x418, 0x2b0, 0x210, 0x2b0, 0x2b0, 0x98, 0x380, 0x380, 0x380, 0x380, 0x380, 0x6, 0x0, {[{{@ip={@broadcast, @multicast1=0xe0007600, 0x0, 0x0, 'geneve1\x00', 'ip6gre0\x00'}, 0x0, 0x70, 0x98}, @inet=@DSCP={0x28}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @local, 0x0, 0x0, 'batadv_slave_1\x00', 'veth1_virt_wifi\x00'}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @local}}}, {{@ip={@broadcast, @multicast2, 0x0, 0x0, 'vlan1\x00', 'nr0\x00'}, 0x0, 0xb0, 0xd8, 0x0, {}, [@common=@unspec=@connlimit={{0x40}}]}, @ECN={0x28}}, {{@ip={@loopback, @multicast2, 0x0, 0x0, 'syzkaller0\x00', 'veth1_to_team\x00'}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @empty}}}, {{@ip={@broadcast, @multicast2, 0x0, 0x0, 'lo\x00', 'batadv_slave_1\x00'}, 0x0, 0xa0, 0xd0, 0x0, {}, [@common=@unspec=@mac={{0x30}, {@multicast}}]}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @loopback}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x478) ioctl$sock_inet_SIOCSARP(r10, 0x8955, &(0x7f00000000c0)={{0x2, 0x4e22, @empty}, {0x1, @multicast}, 0x8, {0x2, 0x4e21, @empty}, 'syzkaller0\x00'}) socket$inet_udp(0x2, 0x2, 0x0) 6m50.670392664s ago: executing program 3 (id=357): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a300000001f0900030073797a320000000014000000110001"], 0x7c}}, 0x0) setresuid(0x0, 0x0, 0x0) mount$9p_tcp(&(0x7f0000000300), &(0x7f0000000480)='./file1\x00', &(0x7f0000000580), 0x20040, &(0x7f0000000900)={'trans=tcp,', {'port', 0x3d, 0x4e20}, 0x2c, {[{@uname={'uname', 0x3d, '!'}}], [{@seclabel}, {@fowner_gt}]}}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x9, 0x1c, &(0x7f0000000640)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x90}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9, 0xfe00}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x8}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x6, 0x1, 0xb, 0x8, 0x9}, {0x4, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x8, 0x2, 0x0, r2}, {}, {0x46, 0x0, 0x0, 0x76}}], {{}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000980)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @cgroup_sock, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x1) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) setxattr$security_ima(0x0, &(0x7f0000000100), &(0x7f0000000180)=ANY=[], 0x8, 0x3) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x9) socket$packet(0x11, 0x2, 0x300) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x4, &(0x7f00000004c0)=ANY=[@ANYBLOB="1802000000000000000000000000000085000000170000009500000000"], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40088a01, &(0x7f0000000000)=0x100) sendmsg$NFT_BATCH(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c000000050a09000000000000000000020000000900010073797a30000000000900030073797a3200000000140000001100010000000000000000000100000a"], 0x54}}, 0x0) fcntl$getownex(r3, 0x10, &(0x7f00000000c0)={0x0, 0x0}) ioctl$BINDER_GET_FROZEN_INFO(r4, 0xc00c620f, &(0x7f00000002c0)={r5}) 6m50.507875955s ago: executing program 33 (id=357): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a300000001f0900030073797a320000000014000000110001"], 0x7c}}, 0x0) setresuid(0x0, 0x0, 0x0) mount$9p_tcp(&(0x7f0000000300), &(0x7f0000000480)='./file1\x00', &(0x7f0000000580), 0x20040, &(0x7f0000000900)={'trans=tcp,', {'port', 0x3d, 0x4e20}, 0x2c, {[{@uname={'uname', 0x3d, '!'}}], [{@seclabel}, {@fowner_gt}]}}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x9, 0x1c, &(0x7f0000000640)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x90}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9, 0xfe00}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x8}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x6, 0x1, 0xb, 0x8, 0x9}, {0x4, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x8, 0x2, 0x0, r2}, {}, {0x46, 0x0, 0x0, 0x76}}], {{}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000980)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @cgroup_sock, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x1) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) setxattr$security_ima(0x0, &(0x7f0000000100), &(0x7f0000000180)=ANY=[], 0x8, 0x3) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x9) socket$packet(0x11, 0x2, 0x300) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x4, &(0x7f00000004c0)=ANY=[@ANYBLOB="1802000000000000000000000000000085000000170000009500000000"], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40088a01, &(0x7f0000000000)=0x100) sendmsg$NFT_BATCH(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c000000050a09000000000000000000020000000900010073797a30000000000900030073797a3200000000140000001100010000000000000000000100000a"], 0x54}}, 0x0) fcntl$getownex(r3, 0x10, &(0x7f00000000c0)={0x0, 0x0}) ioctl$BINDER_GET_FROZEN_INFO(r4, 0xc00c620f, &(0x7f00000002c0)={r5}) 1m16.155481069s ago: executing program 5 (id=1543): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) r1 = dup2(0xffffffffffffffff, r0) close_range(r1, 0xffffffffffffffff, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000200)=@framed, &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000140)='contention_end\x00', r2}, 0x10) r3 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0xc0442) ioctl$EVIOCGABS20(r3, 0x40044591, 0x0) ioctl$BTRFS_IOC_LOGICAL_INO(r3, 0xc0389424, 0x0) 1m15.653301496s ago: executing program 5 (id=1547): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) getpriority(0x1, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() r1 = syz_open_dev$vim2m(&(0x7f0000000040), 0x40000000e, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r1, 0xc0405602, &(0x7f0000000080)={0x1, 0x2, 0x0, "444900e1b0faa9b0071c937f7f00002e0c0000ff070000ff0f0000c39b00", 0x2036315a}) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x7151, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x6, 0x10001, 0xd, 0x1, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000280)={0xffffffffffffffff, 0x0, 0x25, 0x1, @void}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x15, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r4, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x80065c9}, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000840)=@newlink={0x74, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_AF_SPEC={0x14, 0x1a, 0x0, 0x1, [@AF_INET={0x7b, 0x2, 0x0, 0x1, {0xc, 0x1, 0x0, 0x1, [{0x8}]}}]}, @IFLA_IFNAME={0x14, 0x3, 'ipvlan1\x00'}, @IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_IPVLAN_FLAGS={0x6}, @IFLA_IPVLAN_FLAGS={0x6}, @IFLA_IPVLAN_MODE={0x6}]}}}]}, 0x74}}, 0x0) 1m12.917603274s ago: executing program 5 (id=1554): r0 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x7) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000080)=0xe9) getpid() pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RGETLOCK(r2, &(0x7f0000001440)=ANY=[], 0xffffff6a) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x6) pipe2(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x84000) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) mremap(&(0x7f0000a01000/0x4000)=nil, 0x4000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) munmap(&(0x7f0000ba0000/0x2000)=nil, 0x2000) mremap(&(0x7f000075e000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f00006a3000/0x1000)=nil) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) tee(r1, r3, 0xfffffffffffffc01, 0x0) dup(r0) 1m11.234184217s ago: executing program 5 (id=1562): r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @mcast1, 0x4}, 0x1c) r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e20, 0x6, @empty}, 0x1c) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000000085000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000004c0)=0x200000000000000) r3 = getpid() sched_setscheduler(r3, 0x1, &(0x7f0000000100)=0x5) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='bcache_alloc_fail\x00', r2}, 0x18) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbeec, 0x20010, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000480)={'syztnl2\x00', &(0x7f0000000600)={'gretap0\x00', 0x0, 0x10, 0x0, 0x7, 0xda2, {{0x3b, 0x4, 0x1, 0x2b, 0xec, 0x65, 0x0, 0xd, 0x29, 0x0, @remote, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@cipso={0x86, 0x5d, 0x2, [{0x7, 0xc, "332a2710a803662da47d"}, {0x6, 0x12, "a9ae4f3ba5df3df0c24ea5488f9476c5"}, {0x1, 0xf, "d005f9d73111639ab7743fc6ec"}, {0x2, 0x9, "3e6b511bd625df"}, {0x6, 0x12, "c371f63e05f9c3e5dfac3067ac42b2bf"}, {0x0, 0x5, "3af685"}, {0x5, 0xa, "943897b341b5f1e7"}]}, @ssrr={0x89, 0xf, 0x83, [@initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, @broadcast]}, @cipso={0x86, 0x67, 0x2, [{0x7, 0xe, "ff2473a9098812215b1d3db2"}, {0x7, 0x4, "5615"}, {0x2, 0xd, "15bf9f63848e3eb1a6b929"}, {0x0, 0xa, "33df7d2a36c4c86e"}, {0x3, 0x8, "bf689fbed81e"}, {0x7, 0xf, "85fe9d35ca8d0c9d53b5ba7578"}, {0x2, 0x6, "88f41e97"}, {0x2, 0xb, "9c72da2387c73c82e7"}, {0x1, 0x9, "e98cfa9c202d6a"}, {0x1, 0x7, "41fb0ab96c"}]}, @ra={0x94, 0x4}]}}}}}) r4 = socket$inet(0x2, 0x6, 0x8d) setsockopt$inet_msfilter(r4, 0x0, 0x8, &(0x7f0000000100)=ANY=[@ANYBLOB="be"], 0x1) getsockopt$inet_pktinfo(r4, 0x0, 0x8, &(0x7f00000000c0)={0x0, @local, @local}, &(0x7f0000000140)=0xc) socket$inet6_udplite(0xa, 0x2, 0x88) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(0x0, &(0x7f0000000540)='./file0/../file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000240)='./file0\x00', &(0x7f0000000500)='./file0\x00', 0x0, 0x9b747e, 0x0) mount$bind(&(0x7f0000000280)='./file0\x00', &(0x7f0000002100)='./file0/file0\x00', 0x0, 0x2187017, 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000080)='devpts\x00', 0x0, 0x0) mount$binder(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x1026864, &(0x7f0000000300)=ANY=[@ANYRESHEX=0x0]) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='map_files\x00') 1m10.592372356s ago: executing program 5 (id=1564): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) getpriority(0x1, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() r1 = syz_open_dev$vim2m(&(0x7f0000000040), 0x40000000e, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r1, 0xc0405602, &(0x7f0000000080)={0x1, 0x2, 0x0, "444900e1b0faa9b0071c937f7f00002e0c0000ff070000ff0f0000c39b00", 0x2036315a}) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x7151, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x6, 0x10001, 0xd, 0x1, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000280)={0xffffffffffffffff, 0x0, 0x25, 0x1, @void}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x15, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r4, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x80065c9}, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000840)=@newlink={0x74, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_AF_SPEC={0x14, 0x1a, 0x0, 0x1, [@AF_INET={0x7b, 0x2, 0x0, 0x1, {0xc, 0x1, 0x0, 0x1, [{0x8}]}}]}, @IFLA_IFNAME={0x14, 0x3, 'ipvlan1\x00'}, @IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_IPVLAN_FLAGS={0x6}, @IFLA_IPVLAN_FLAGS={0x6}, @IFLA_IPVLAN_MODE={0x6}]}}}]}, 0x74}}, 0x0) 1m8.231045077s ago: executing program 5 (id=1572): r0 = socket(0xa, 0x3, 0x6) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0xb}, 0x1c) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2}, 0x1c) syz_emit_ethernet(0x4a, &(0x7f0000000380)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "101040", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x2, 0x5, 0xc2, 0xb00}}}}}}}, 0x0) 1m8.1199217s ago: executing program 34 (id=1572): r0 = socket(0xa, 0x3, 0x6) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0xb}, 0x1c) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2}, 0x1c) syz_emit_ethernet(0x4a, &(0x7f0000000380)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "101040", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x2, 0x5, 0xc2, 0xb00}}}}}}}, 0x0) 18.289958169s ago: executing program 6 (id=1769): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bond0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1200}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x44}}, 0x0) 18.01693611s ago: executing program 6 (id=1772): socket$inet_udplite(0x2, 0x2, 0x88) r0 = epoll_create1(0x0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000080)) shutdown(r1, 0x0) r2 = syz_io_uring_setup(0x3751, &(0x7f0000000480)={0x0, 0xfffffff9, 0x0, 0x0, 0x2ed}, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x2, 0x0, 0x0, 0x12}) io_uring_enter(r2, 0x47ba, 0x0, 0x0, 0x0, 0xeffd) 15.451464152s ago: executing program 6 (id=1781): io_uring_setup(0x7bda, &(0x7f0000000080)) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00'}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f0000000040)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r3, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, r4, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_VFIO_IOAS$GET(r3, 0x3b88, &(0x7f00000002c0)={0xc, 0x0}) ioctl$IOMMU_HWPT_ALLOC$NONE(r3, 0x3b89, &(0x7f00000001c0)={0x24, 0x1, r6, r7, 0x0, 0x0, 0x0, 0x0, 0x0}) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f00000006c0)={0x0, 0x3f00, &(0x7f00000000c0)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x609, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ALL_SLAVES_ACTIVE={0x5, 0x11, 0x1}]}}}]}, 0x3c}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f0000000180)={0xc, 0x0, 0x0}) r10 = socket$inet6_udp(0xa, 0x2, 0x0) r11 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r11, 0x0, 0x0) r12 = dup2(r11, r10) write$cgroup_int(r12, 0x0, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_REPLACE(r3, 0x3ba0, &(0x7f0000000240)={0x48, 0xa, r5, 0x0, r9}) 15.400220393s ago: executing program 2 (id=1783): socket$nl_route(0x10, 0x3, 0x0) r0 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_GET(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000200)='sched_switch\x00'}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0xffffffffffffff92) openat$tun(0xffffffffffffff9c, 0x0, 0x95d170392aa6fb53, 0x0) ioctl$KVM_CHECK_EXTENSION(0xffffffffffffffff, 0xae03, 0x15) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000340)={@map, 0xffffffffffffffff, 0x3, 0x0, 0xffffffffffffffff, @void, @value}, 0x20) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0xca02}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000a85"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r5 = syz_open_dev$usbfs(&(0x7f0000000100), 0x75, 0x121301) ioctl$USBDEVFS_FREE_STREAMS(r5, 0x802c550a, &(0x7f0000000000)=ANY=[@ANYBLOB="020023031c00260065ecff0002000020"]) socket$netlink(0x10, 0x3, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r6 = socket$rds(0x15, 0x5, 0x0) bind$rds(r6, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r6, &(0x7f00000009c0)={0x0, 0x0, 0x0}, 0x0) 13.263735807s ago: executing program 6 (id=1784): socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_route(0x10, 0x3, 0x0) socket$packet(0x11, 0x3, 0x300) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x20, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x0, {}, [@NHA_OIF={0x8}]}, 0x20}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r3 = socket$inet6(0xa, 0x1, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) syz_open_procfs(0x0, &(0x7f00000001c0)='net/fib_trie\x00') r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x11, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000ffffffff000000000000000085000000a8000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0", @ANYBLOB], &(0x7f0000000b00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) bind$inet6(r3, &(0x7f0000f65000)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) getsockopt$inet6_buf(r3, 0x29, 0x6, 0x0, &(0x7f0000000080)) 13.249036748s ago: executing program 2 (id=1785): syz_open_dev$dri(0x0, 0xf2ef, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='jbd2_end_commit\x00', 0xffffffffffffffff, 0x0, 0x3}, 0x18) socket$inet(0x2, 0x6, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) write$binfmt_script(r0, 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000276000/0x18000)=nil, &(0x7f0000000300)=[@text16={0x10, 0x0}], 0x1, 0x12, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f00003e1000/0x18000)=nil, &(0x7f00000001c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000000], 0x0, 0x200394}) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r3, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 12.963672966s ago: executing program 0 (id=1787): bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b7040000000000008500000001"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = memfd_create(0x0, 0x0) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, r0) ioctl$LOOP_SET_STATUS(0xffffffffffffffff, 0x4c02, &(0x7f0000000480)={0x0, {}, 0x0, {}, 0x0, 0x0, 0x0, 0xd, "4b8b3ea40100dfed0b3d34380d30bba0c61a5b9a58ce71dd5a94a9fe9549918ae7fd1f5f5d3ab91375b108403362cfe0f400001800000000004d4df15d017a3f", "2363f18d9acc6c25af21ca2af6d2e80e4caadd6d126cfb80c92dc817d44dcdec", [0x1, 0x7]}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) gettid() socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x22, 0x0, 0x0) r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000140), 0xb82484faba920071, 0x0) io_setup(0x81, &(0x7f0000000180)=0x0) r5 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r5, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty, 0x0, 0x1}, 0x20) socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r5, &(0x7f0000000200)={0xa, 0x0, 0x0, @remote}, 0x20) connect$l2tp6(r5, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0xb}, 0x20) syz_emit_ethernet(0x8e, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaa1acd1f78800d86dd608a37f200587300fe8002000000000000000000000000bbfe8000000000000000000000000000aa00000000", @ANYRES8], 0x0) r6 = syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') io_submit(r4, 0x1, &(0x7f0000002340)=[&(0x7f00000000c0)={0x0, 0x300, 0x0, 0x5, 0x0, r6, 0x0}]) write$vga_arbiter(r3, &(0x7f0000000000)=ANY=[@ANYBLOB="6c6f63a448847200"], 0x8) close(r3) syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') 12.311046815s ago: executing program 6 (id=1788): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000140)={0x26, 'hash\x00', 0x0, 0x0, 'cbcmac(des-generic)\x00'}, 0x58) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x8031, 0xffffffffffffffff, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000040)="4dc07f947163300c", 0x8) mount$cgroup(0x0, &(0x7f0000000980)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000a40)={[{@none}, {@name={'name', 0x3d, 'cgroup\x00'}}]}) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$UI_DEV_SETUP(r1, 0x405c5503, &(0x7f0000000180)={{0x0, 0x0, 0x0, 0xd65}, 'syz1\x00', 0x51}) ioctl$UI_DEV_CREATE(r1, 0x5501) readv(r1, &(0x7f0000000100)=[{&(0x7f0000001500)=""/255, 0xff}], 0x1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getpeername$packet(r5, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)) sendmsg$BATADV_CMD_GET_NEIGHBORS(r2, &(0x7f0000004340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)={0x24, r3, 0x331, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r4}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r6}]}, 0x24}}, 0x0) write$input_event(r1, &(0x7f0000000000)={{0x77359400}, 0x15}, 0xfe4f) r7 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TCXONC(r7, 0x540a, 0x0) r8 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r8, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) ioctl$SNDCTL_DSP_SPEED(r8, 0xc0045002, &(0x7f00000000c0)=0x7) r9 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) ioctl$UI_GET_SYSNAME(r9, 0x8040552c, &(0x7f0000000280)) r10 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r10, &(0x7f0000000600)={0x0, 0x6c00, &(0x7f0000000040)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73f72cc9f0ba1f848140000005e140602000000000e000a0010000000028000001294", 0x2e}], 0x1}, 0x0) 12.191293858s ago: executing program 0 (id=1789): bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000002380)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0xfffffd30, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x56) r0 = fsopen(&(0x7f0000000400)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000540)='\xd0\x9e^\xa0\xee\xc8\x17T\xb1GI\x90\xe2Q1\xb0\x8f\xe1\xa8\x95\xa0\xcd\fL\xf1\xf9\x9c\x83@\x1e\x99\xcah\x85\xb8\xbeSAk\xf4\xb6 \xdf\xa0P\x18\x19\xae\x8c\x9a\x19mm\r<|\xe8\x9e\xa0x\x84p2\xf9\xe2\xed\xb0\f\x7f;\xf6J18G\x84c\x88\x9d{\xf4~\xdby\xe1\xdf\x1a\xae\xd6ez\xe5\xa8\xe1\'', 0x0, r0) fsconfig$FSCONFIG_SET_BINARY(r0, 0x2, &(0x7f0000000840)='\x00\x9b~\xd7\xde\x91d\r\xa3e\xec=Z\xce\xb0\xdfr\xbfQ\x85n4\xf5T\xc2\x86;\x03K\x80pF\xeaK\xb4t\xef\'\n\x05\xc9\xcfc\x92\bE\xf9\xf9\xcf\x96\x99\xde\x1e3\xcdA\xf9\x1bj\xc3\x8b\xbe\xee\xb3e\xd8Mk\xf1+\xbf\xd5\x98\x8c\x13\xdc\x85\x17\xcd\xf8\xf5\a\xde9\xd1\x8b\xf0&P\x92\x99u8\xb6,#\x0f\x89\xd9ic\xb5\xba\xe7\x03\x8d-\v\xd3S\x98\x89@\x8aWLU\xb1\xc4i6\xa5\xb7\x1d\xf3s\xaf\x7f\xb16\xa2\xbe\xfa\xfa~2\x1d\xeb\xd0G\xdc\a\xa3\x93n\x82\xa7h\xd7\x83N\x8aW\xaa\xc1\xc7\xec\xea\x13\xbe\xf3fQ\xfa\x8cP\xa7\xc1O,\x83\xec\xa9\xeb\xb2 u\x15A\xde\f8T\x81\xccces\xfa\xef\xf4 =z\xfc\xef]~tY \xef8\r,x~\xa0,\xc7@\xc0\xef\xc1`\xec}\xa2\x8d\x95\xff0c\xcd\x02~\xb7\x1a\x93\xff\xcd\xadB7\x13\x84BPC\xa4\xa2O\xf0\xdd\xde\xc5H.y\xfc\xe9$\xf6\xa6t\xa3\xdbr\x00+\x01{\xfb-\x1f\x1b\xeb\xd9b\xf0\n\x99\x0f4\xfa_\x10\xd0%\xe7o\xc9\bO\xfe\xfb\xca\xf8\x9d]\xa1\x98(Nw\x87\xd15', &(0x7f0000000100)="8d", 0x1) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000a40)='\xcfD\xbc\xbf\xff\xdc\x83\xc5$\xb3\xecr\xe4G:\x93\xdfj\x96\x7f\x03\xe5\x94\xec\xe6\x04T\xcbn\xa5\xc3\x04[\x02\xa9[=\xf9\x8b\xf7\xc1\x9c\x83@\x1e\x99\xca\xc3\x85\xb8\xbeSAk\xf4\xb6 \xdf\xa0P\x18\x19\xae\x8c\x9a\x19mm\r<|\xe8\x9e\xa0x\x84p2\xf9\xe2\xed\xb0\f\x7f;\xf6J18G\x84c\x88\x9d{\xf4~\xdby:\xd8\xc5\xccrun4\xe0\xca\xc1\x0f\xc3\x03D\xe1\f\xb3O\xa4\x1c\x04]8)}\x83:\x9e\xc0X\xdb\xd9\x89\x94\x9b(\x19\\\xf5!w\xbafo\xea\xe4\xb5Xe\x84\xbc\xcdw\x802\xb4\xb8\x1f\xc2\x97\xbfi\xe8\xf8\xbd\x1d,\xffUX\xbeA\x00{\"\xdbya#I\x03\xec\xed\x8b\x97\xff\x1eiq\xd1n\xf99\xc6\a\a\xed\x0f\x15x\x91\xdc\x05P\xf7\xf3\xad\xa3\xbc\xe4[\xa2\xc7\xfa\x9e\xad\xa2\xad\x86\xc4\aD\xc9\xdf\xf8\xf7\xc1\xc5\xc5.\x8a&:\x90\xb2\x8c\x86\xb2\\\xa8%!\x98TQ\x91\x00\x00\x00\x00$\x99\xbf', &(0x7f00000006c0)='\x01\x8dik\xc2\xed\xf9\x8a\xae\x86\xae)Dn<(\x02:cU\xa0d\xd4\x1f\xd4\x95\x93\xb7\xc1\xcc\x84\x8c\xdd\xbf^]~\xcf\xcb6w\xb3\xfa0b\x88\x04\x10\x9d_\x97\x9f\x89\xb7\xe35C\xf3\x1b\xafV\\wGU\xaf\xa4\f&\xe7m\xf0\xaa{\xb2\xe5\xe2\xeb\x9bN#\x99\xdc\x9f\"\xab&\x8f\x01\x17Y\xaf\xb7\xdc`r\x9c6\\\x0e\x94\xc0a\xf7\xd4u\xdf\xf0\x9b\xb0p\v\xa1\x8a\x145\x9b\xd95\xc8U\xe4V\x81-1\xb0K\x9a\xa3+\x03\xc1\xf0\xeb\xafYI&\x9e\xd0\xe1\x148\xfe\x10\x0f\xbd\xa2\xed}\xe6\x1asT\x1f\x92\xdb\xa1&\'\xc7\xe9\xa5\xd0\x89\x8d\xf1$\"\xdc\xe5\xfcT\xad\fj\xfe\'t', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000180)='$\x00', &(0x7f0000000340)='{)+}@@!}\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f00000001c0)='romfs\x00', &(0x7f0000002940)='\x19\x00\x00\x8dX\x12X\x96\x8a\xc5\xdd\x153\xdf\x9b\xd8\xb8N\x86\x95,B\x032\x13k\xc6]\xe5\xd4\x90\x1c\x06\x1d\xefo/U\x83E+', 0x0) fsconfig$FSCONFIG_SET_FD(r0, 0x5, &(0x7f0000000200)='\x00', 0x0, r0) fsconfig$FSCONFIG_SET_FLAG(r0, 0x0, &(0x7f0000000140)='silent\x00', 0x0, 0x0) read(r0, 0x0, 0x0) close(r0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="180000000000000000000000000000009500160000000000e2bac15d3b6641a215f099e26603a050337b2ccc70a9f928ba3c529bb6e7365e7e246317380f5884d79663e7fcaa89795d7b10e88378c33265a7af06040e3d0bbc6a5864dfa023c6ac1da574242785bbb4ece12b11da52496875e1e384042aad63a3094bf3bc0e40a79960f9f1610940e67e30611d9873d1e6cb9c4cce44c999c49ff52a6400192fd021d7158438d7686a6f66778022c93c544189b684754e7e0f77a4f498609e53104c8aa70632fcc58c757bbc06f6472622dce2729d7296959ce003ec84acd015e352484c42fc29e5aea62fb7977813f7254fd6f62fec638abf292e6c33925b29"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='sched_process_wait\x00', r1}, 0x10) r2 = bpf$ITER_CREATE(0xb, &(0x7f0000000500), 0x8) close(0xffffffffffffffff) close(r2) bpf$TOKEN_CREATE(0x24, &(0x7f0000000180)={0x0, r2}, 0x8) socket$inet_udplite(0x2, 0x2, 0x88) r3 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@bridge_setlink={0x20, 0x13, 0xa29}, 0x20}}, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x7, 0xfff, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x33, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) 12.05094416s ago: executing program 2 (id=1790): syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000ac0)={0x3, &(0x7f0000000a80)=[{0x40}, {0x20, 0x0, 0x0, 0xfffff00c}, {0x16}]}, 0x10) sendmmsg(r0, &(0x7f0000003180)=[{{0x0, 0x0, &(0x7f0000000e80)=[{&(0x7f0000000c00)="26f2d136", 0x4}], 0x1}}], 0x1, 0x0) sendmsg$NL80211_CMD_GET_MPP(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='new user:syz 000800'], 0x2a, 0xfffffffffffffffc) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000200)='hugetlbfs\x00', 0xa08000, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=ANY=[@ANYBLOB="3401000016008502000000000000000020010000000000000000000000000002e000000200"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000bb0000000032"], 0x134}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$nl_xfrm(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000580)=@flushsa={0x14, 0x1c, 0x1, 0x0, 0x0, {0xff}}, 0x14}}, 0x0) 11.935789659s ago: executing program 0 (id=1791): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) read$msr(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r4 = socket$l2tp6(0xa, 0x2, 0x73) r5 = dup2(r4, 0xffffffffffffffff) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f00000000c0)={@dev, 0x800, 0x0, 0x2, 0x9}, 0x20) setsockopt$inet6_IPV6_DSTOPTS(r5, 0x29, 0x3b, &(0x7f00000001c0)=ANY=[], 0x10) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (fail_nth: 6) 11.297479485s ago: executing program 2 (id=1792): ioctl$BLKROTATIONAL(0xffffffffffffffff, 0x127e, &(0x7f0000000000)) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, &(0x7f0000000380)) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(0xffffffffffffffff, 0x84, 0x6b, 0x0, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) syz_io_uring_setup(0x4179, &(0x7f0000000080)={0x0, 0x0, 0x10100, 0x80000}, &(0x7f0000000100), &(0x7f0000000140)) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r6, &(0x7f00000001c0)=ANY=[@ANYBLOB=')'], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r6, 0x0) io_uring_enter(r6, 0x4e9a, 0x0, 0x11, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r5, 0x84, 0x1d, 0x0, &(0x7f0000000040)) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r4, 0x84, 0x22, &(0x7f0000000080)={0x0, 0x0, 0xfffffffe, 0x200001}, 0x10) 10.923423488s ago: executing program 0 (id=1794): socket$inet6(0xa, 0x2, 0x0) (async) r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=@newlink={0x30, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_NET_NS_FD={0x8}, @IFLA_TARGET_NETNSID={0x8}]}, 0x30}}, 0x0) getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(r1, 0x84, 0x74, &(0x7f0000000580)=""/84, &(0x7f0000000600)=0x54) openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$UI_DEV_SETUP(r2, 0x405c5503, &(0x7f0000000940)={{}, 'syz0\x00'}) (async) ioctl$UI_DEV_SETUP(r2, 0x405c5503, &(0x7f0000000940)={{}, 'syz0\x00'}) ioctl$UI_SET_EVBIT(r2, 0x40045564, 0x12) ioctl$UI_SET_SNDBIT(r2, 0x4004556a, 0x1) ioctl$UI_DEV_CREATE(r2, 0x5501) r3 = syz_open_dev$tty20(0xc, 0x4, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x54c, 0x24b, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) (async) r5 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x54c, 0x24b, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_control_io(r5, 0x0, 0x0) syz_usb_control_io$hid(r5, &(0x7f0000000b80)={0x24, 0x0, 0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="002205"], 0x0}, 0x0) (async) syz_usb_control_io$hid(r5, &(0x7f0000000b80)={0x24, 0x0, 0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="002205"], 0x0}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000cc0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x30, 0x3, 0xa, 0x301, 0x0, 0x0, {0x5}, [@NFTA_CHAIN_USERDATA={0x4}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}]}], {0x14}}, 0x78}}, 0x0) dup(r3) (async) r6 = dup(r3) write$uinput_user_dev(r6, &(0x7f0000000080)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x3], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x80000], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4]}, 0x45c) ioctl$KVM_SET_PIT(r6, 0x8048ae66, &(0x7f0000000500)={[{0x6, 0x6, 0x5, 0xec, 0x95, 0x0, 0x6, 0x4, 0x1, 0x6, 0xbc, 0x9, 0x7fff}, {0x5, 0x7, 0x4, 0x8, 0xe, 0x0, 0x4, 0x1, 0x5, 0x3, 0x51, 0x6a, 0x9}, {0x6, 0x0, 0x40, 0x6, 0xb, 0x43, 0x71, 0x3, 0x5, 0x38, 0xb, 0xff}], 0x5}) sendmsg$inet6(r0, &(0x7f0000000200)={&(0x7f0000000000)={0xa, 0x4e23, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x1c, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="140000000000000007ce6da8da36a15d00000003000000004b0290264aa74ed73913968e71e96b8342ca680fefaa70b4572e3c51ec4b1d6943970e8b3c59e3f2cef1f7ee007d77e9e7221fffa885aca54b9c50bc"], 0x18}, 0x1) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=@newtaction={0x150, 0x30, 0xb, 0x0, 0x0, {}, [{0x13c, 0x1, [@m_gact={0x138, 0x1, 0x0, 0x0, {{0x9}, {0x40, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x3}}, @TCA_GACT_PROB={0xc}, @TCA_GACT_PARMS={0x18}]}, {0xcf, 0x6, "e50b6ce19e7b732cb33a2baac4ad64d49d12dcaf1a34d8875deb6d855e1bdca23fd883daef2aa297dbc194ed60230804d591b834d64fd7750a4443e86bb31f7f900817fde26f681ffcc94cdff34120acc70451db6d35a840985bed6b53bcb3f0945c4494ae57e746e50c1459d6232bd6196b306104ac8405dc7acb41555fb7bd1c85f91bc9bacda930ad2db07ecf74b983d9b796d7189a022d9e53f54f045ab9a12cd7909d219908ebcb8e5110ba51d451045bfab36d20a090fdea0a4bbd942c0cbde6986c0552c01083c4"}, {0xc, 0x7, {0x1}}, {0xc}}}]}]}, 0x150}}, 0x20000804) (async) sendmsg$nl_route_sched(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=@newtaction={0x150, 0x30, 0xb, 0x0, 0x0, {}, [{0x13c, 0x1, [@m_gact={0x138, 0x1, 0x0, 0x0, {{0x9}, {0x40, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x3}}, @TCA_GACT_PROB={0xc}, @TCA_GACT_PARMS={0x18}]}, {0xcf, 0x6, "e50b6ce19e7b732cb33a2baac4ad64d49d12dcaf1a34d8875deb6d855e1bdca23fd883daef2aa297dbc194ed60230804d591b834d64fd7750a4443e86bb31f7f900817fde26f681ffcc94cdff34120acc70451db6d35a840985bed6b53bcb3f0945c4494ae57e746e50c1459d6232bd6196b306104ac8405dc7acb41555fb7bd1c85f91bc9bacda930ad2db07ecf74b983d9b796d7189a022d9e53f54f045ab9a12cd7909d219908ebcb8e5110ba51d451045bfab36d20a090fdea0a4bbd942c0cbde6986c0552c01083c4"}, {0xc, 0x7, {0x1}}, {0xc}}}]}]}, 0x150}}, 0x20000804) 10.351754127s ago: executing program 2 (id=1796): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet(0x2, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_io_uring_setup(0x239, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000000)=0x0, &(0x7f00000001c0)=0x0) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000380)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x1991}, 0x0, {0x0, r5}}) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)) io_uring_enter(r2, 0x2def, 0x0, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19) r6 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000180), 0x1, 0x0) ioctl$BTRFS_IOC_QGROUP_LIMIT(r6, 0x8030942b, &(0x7f0000000200)={0x7fffffff, {0x4, 0xa, 0x3, 0x8000000000000000, 0x5}}) r7 = syz_io_uring_setup(0x82e, &(0x7f0000000300)={0x0, 0x0, 0x10100}, &(0x7f0000000100)=0x0, &(0x7f0000000080)) r9 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r9, 0x10e, 0xc, &(0x7f0000000040)={0x5}, 0x10) sendmsg$nl_route(r9, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="300000001a00010000000000000000000200000000000000000000000c00090007003303", @ANYRES32, @ANYBLOB="080004"], 0x30}}, 0x0) io_uring_register$IORING_REGISTER_PBUF_RING(r7, 0x16, &(0x7f0000000380)={&(0x7f0000001000)={[{0x0}, {0x0}, {0x0}, {0x0}]}, 0x4}, 0x1) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="800000001000010800000000ffdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="000000000000000008001b000000000058001a8054000a80050008"], 0x80}}, 0x0) syz_open_dev$dri(&(0x7f0000000280), 0x6, 0x125000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) setsockopt$inet_mreqsrc(r1, 0x0, 0x25, 0x0, 0x0) r11 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYRES32=r8], &(0x7f00000000c0)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000005c0)=ANY=[@ANYRES32=r0, @ANYRES32=r11, @ANYBLOB='\a\x00'], 0x10) socket$nl_generic(0x10, 0x3, 0x10) r12 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r12}, &(0x7f0000bbdffc)) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, &(0x7f0000000480)={{0x9, 0x0, 0x1, 0xfffffff8, '\x00', 0x8}, 0x0, 0x2, 0x3, r12, 0x2, 0x7, 'syz0\x00', &(0x7f0000000240)=['\x00\x00\x00\x00', 'GPL\x00'], 0x8}) 10.239676929s ago: executing program 1 (id=1797): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000fe050000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) r3 = syz_io_uring_setup(0xd2, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x1}, &(0x7f0000000040)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_CLOSE={0x13, 0x4, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}) io_uring_enter(r3, 0x47ba, 0x0, 0x0, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x10) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r6, 0x0) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000003e00000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=@base={0x12, 0x4, 0x8, 0xb, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000001c0)={@map=r8, r7, 0x7, 0x0, 0x0, @void, @value}, 0x10) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000380)={@fallback, 0xffffffffffffffff, 0x20, 0x2004, 0x0, @value}, 0x20) r9 = socket$l2tp(0x2, 0x2, 0x73) bind$l2tp(r9, &(0x7f00000000c0), 0x10) sendto$l2tp(r9, &(0x7f0000000040)="e5786a0d000000000000c83b", 0x5d, 0x0, &(0x7f0000000100)={0x2, 0x0, @loopback}, 0x10) r10 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000000000040ac054382408b0b00000109022400010000002009040000fd0301000009210000000122010009058103"], 0x0) syz_usb_control_io$hid(r10, 0x0, 0x0) syz_usb_control_io$hid(r10, &(0x7f00000003c0)={0x24, 0x0, 0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="002281"], 0x0}, 0x0) r11 = syz_open_dev$hiddev(&(0x7f00000000c0), 0x0, 0x0) ioctl$HIDIOCGREPORT(r11, 0x400c4807, 0x0) 9.99003124s ago: executing program 7 (id=1798): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0xfffffd66, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101804bc9555e1affd5020000000900010001797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a300000000009000300737975320000000014000000110001"], 0x7c}}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x9, 0x1c, &(0x7f0000000640)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x90}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9, 0xfe00}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x8}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x6, 0x1, 0xb, 0x8, 0x9}, {0x4, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x8, 0x2, 0x0, r2}, {}, {0x46, 0x0, 0x0, 0x76}}], {{}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000980)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @cgroup_sock, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) syz_emit_ethernet(0x3a, &(0x7f0000000ac0)={@local, @dev, @void, {@ipv4={0x800, @tcp={{0x6, 0x4, 0x0, 0x0, 0x2c, 0x0, 0xe0, 0x0, 0x6, 0x0, @private=0xa210104, @local, {[@generic={0x7, 0x2}]}}, {{0x0, 0xfffc, 0x41424344, 0x41424344, 0x0, 0x6, 0x5}}}}}}, 0x0) setxattr$security_ima(0x0, &(0x7f0000000100), &(0x7f0000000180)=ANY=[], 0x8, 0x3) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x9) r4 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x4, &(0x7f00000004c0)=ANY=[@ANYBLOB="1802000000000000000000000000000085000000170000009500000000"], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000200)={r6, r5, 0x25, 0x0, @val=@tracing={0x0, 0x7}}, 0x20) syz_emit_ethernet(0x66, &(0x7f0000001180)=ANY=[], 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r7 = syz_open_dev$video4linux(&(0x7f00000001c0), 0x0, 0x0) ioctl$VIDIOC_QUERYCTRL(r7, 0xc0445624, 0x0) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40088a01, &(0x7f0000000000)=0x100) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000001c00110c0000001400000f0007000000", @ANYRES32=r8, @ANYBLOB="800202000a000200577f0000aabb000020000e80"], 0x48}}, 0x0) 8.673592568s ago: executing program 7 (id=1799): r0 = socket$can_bcm(0x1d, 0x2, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x2) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000002700)=""/102392, 0x18ff8) fcntl$addseals(0xffffffffffffffff, 0x409, 0x7) bpf$MAP_CREATE(0x0, &(0x7f0000000e00)=ANY=[@ANYRESHEX, @ANYBLOB="6d460aab0477367f39718f15025e91e959c1c61427fee2c5b3478d12f48ff7486d5c4d5cce4b5ddd16f4b462b71997e895580d8c6780cc4d9a45b2204a83bceaf899fc5ad17a23d95a15c1b2e2437b998254aabd8c94d4bf07e3e01955178bf7f107b5ade3a9f9f139195bbef03898e2a52a44dec439995c39e510b650", @ANYRESOCT=r0, @ANYRESHEX, @ANYRESOCT=r1, @ANYRES32=r1, @ANYRES32=r0], 0x48) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$KVM_SET_NESTED_STATE(0xffffffffffffffff, 0x4080aebf, 0x0) finit_module(0xffffffffffffffff, 0x0, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) r2 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) recvmmsg(r2, &(0x7f0000000c00)=[{{0x0, 0x0, 0x0}, 0x1}, {{0x0, 0x0, &(0x7f0000001d00)=[{0xfffffffffffffffd, 0x38}], 0x1}}, {{&(0x7f00000002c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, 0xfffffffffffffd11, &(0x7f0000000880)=[{&(0x7f0000000500)=""/221, 0xdd}, {&(0x7f0000000400)=""/182, 0xb6}, {&(0x7f0000000600)=""/186, 0xba}, {&(0x7f00000006c0)=""/171, 0xab}, {&(0x7f0000000340)=""/71, 0x47}, {&(0x7f0000000780)=""/207, 0xcf}], 0x6, &(0x7f0000000900)=""/198, 0xc6}, 0x10}, {{0x0, 0x0, &(0x7f0000000bc0)=[{&(0x7f0000000a00)=""/186, 0xba}, {&(0x7f0000000ac0)=""/215, 0xd7}], 0x2}, 0x7}], 0x4, 0x0, 0x0) r3 = epoll_create(0x8) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000000)={0x14}) sendmsg$can_bcm(r0, &(0x7f00000004c0)={0x0, 0x0, 0x0}, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(0xffffffffffffffff, 0xc01064c1, &(0x7f0000000dc0)) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000d00)='./binderfs2/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300), 0x0, 0x0, 0x0}) syz_io_uring_setup(0xd0, &(0x7f0000000240)={0x0, 0x0, 0x8, 0x8000000, 0x159}, &(0x7f0000000d80)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000d40)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f0000000200)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x8, 0x2007, @fd_index=0x1, 0x1892, 0x0, 0x0, 0x6, 0x0, {0x2}}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r7, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) 8.423380905s ago: executing program 6 (id=1800): r0 = socket$l2tp6(0xa, 0x2, 0x73) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000012c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000300)=@filter={'filter\x00', 0xe, 0x4, 0x360, 0xffffffff, 0x0, 0x1c0, 0x1c0, 0xffffffff, 0xffffffff, 0x290, 0x290, 0x290, 0xffffffff, 0x4, &(0x7f0000000100), {[{{@uncond, 0x0, 0xa8, 0xf0}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz0\x00', 0x1}}}, {{@ipv6={@mcast1, @remote, [0x0, 0x0, 0x0, 0xffffff00], [0x0, 0xff, 0x0, 0xff], 'dvmrp0\x00', 'sit0\x00', {0xff}, {}, 0x89, 0x1, 0x0, 0xa}, 0x0, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x3}}}, {{@ipv6={@empty, @rand_addr=' \x01\x00', [0xff, 0xff000000, 0xff000000, 0xff000000], [0x0, 0x0, 0xff000000, 0xffffffff], 'veth0_to_batadv\x00', 'netdevsim0\x00', {0xff}, {0xff}, 0xe9, 0x1, 0x3, 0x2}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x5, 0x6}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3c0) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x20, 0x10, 0x701, 0x0, 0x0, {0xa}, [@typed={0xc, 0x2, 0x0, 0x0, @str='nl80211\x00'}]}, 0x20}}, 0x0) recvmmsg(r4, &(0x7f0000002f40)=[{{0x0, 0x0, &(0x7f0000002740)=[{&(0x7f00000002c0)=""/248, 0xf8}, {&(0x7f0000000140)=""/114, 0x72}, {&(0x7f0000001480)=""/217, 0xd9}, {&(0x7f00000000c0)=""/43, 0x2b}, {&(0x7f0000001600)=""/103, 0x67}, {&(0x7f0000001680)=""/4096, 0x1000}, {&(0x7f00000001c0)=""/27, 0x1b}, {&(0x7f0000002680)=""/178, 0xb2}], 0x132}, 0xd0140000}], 0x5, 0x0, 0x0) 7.773804482s ago: executing program 7 (id=1801): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$ax25(0x3, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() quotactl$Q_GETINFO(0xffffffff80000500, &(0x7f0000004ec0)=@filename='./file0\x00', 0x0, &(0x7f0000004f00)) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'xxhash64-generic\x00'}, 0x58) r4 = accept4(r3, 0x0, 0x0, 0x0) sendmsg$alg(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000dc0)=[{&(0x7f0000000280)="2f1537a8574fa7cd8f12f4", 0xb}], 0x1, 0x0, 0x0, 0xffffffff}, 0x0) 7.752464093s ago: executing program 2 (id=1802): syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000ac0)={0x3, &(0x7f0000000a80)=[{0x40}, {0x20, 0x0, 0x0, 0xfffff00c}, {0x16}]}, 0x10) sendmmsg(r0, &(0x7f0000003180)=[{{0x0, 0x0, &(0x7f0000000e80)=[{&(0x7f0000000c00)="26f2d136", 0x4}], 0x1}}], 0x1, 0x0) sendmsg$NL80211_CMD_GET_MPP(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='new user:syz 000800'], 0x2a, 0xfffffffffffffffc) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000200)='hugetlbfs\x00', 0xa08000, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=ANY=[@ANYBLOB="3401000016008502000000000000000020010000000000000000000000000002e000000200"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000bb0000000032"], 0x134}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$nl_xfrm(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000580)=@flushsa={0x14, 0x1c, 0x1, 0x0, 0x0, {0xff}}, 0x14}}, 0x0) 6.706390617s ago: executing program 7 (id=1803): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xb, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180200002000000000000000000000008500000027000000850000002300000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000440)={'sit0\x00', &(0x7f0000000400)={'syztnl0\x00', 0x0, 0x40, 0x0, 0x2d, 0x4, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x29, 0x0, @loopback, @empty}}}}) madvise(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x12) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r1, 0x89f5, &(0x7f0000000180)={'syztnl0\x00', 0x0}) openat$rdma_cm(0xffffff9c, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x3, 0x0, 0x2, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a010300000000000000000100fffd0900010073797a300000000040000000030a01020000000000000000010000000900030073797a3200000000140004800800024032658aeb08000140000000010900010073797a300000000044000000060a010400000000000001040100000008000b40000000000900010073797a30000000001c000480180001800d00010073796e70726f7879000000000400028014000000110001"], 0xcc}}, 0x0) syz_emit_ethernet(0x42, &(0x7f00000003c0)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @multicast, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x34, 0x0, 0x0, 0x0, 0x6, 0x0, @empty, @empty}, {{0x10, 0x4e26, 0x41424344, 0x41424344, 0x0, 0x0, 0x8, 0xc2, 0x1, 0x0, 0x0, {[@nop, @timestamp={0x8, 0xa, 0x7, 0x81}]}}}}}}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000200)={r0, 0x0, 0x2e, 0x0, &(0x7f0000000d00)="0100000000000000041ac600003074739bfff5dd7ff882511268f96e06fc4bb13e63be7ae5c589cefdd76e55fa4b", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 6.604668816s ago: executing program 1 (id=1804): socket$phonet_pipe(0x23, 0x5, 0x2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000280)) socket$alg(0x26, 0x5, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) pselect6(0x40, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300000000000000}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x2, 0x0, 0x0, 0x2}, 0x0, 0x0) 4.660729572s ago: executing program 7 (id=1805): r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r2 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0) syz_usb_control_io(r2, 0x0, &(0x7f0000000780)={0x84, &(0x7f0000000100)=ANY=[@ANYBLOB="0000010400000185678950dd2f38c1bfef3ba495f7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) ioctl$TIOCSIG(r3, 0x40045436, 0xe) r4 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$EVIOCGMASK(r4, 0x40015b13, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000004, 0x12, r1, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000001c0)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) ptrace$ARCH_GET_FS(0x1e, 0x0, 0x0, 0x1003) sendmsg$NFT_MSG_GETFLOWTABLE(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x38, 0x17, 0xa, 0x201, 0x0, 0x0, {0x3, 0x0, 0x5}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}]}, 0x38}, 0x1, 0x0, 0x0, 0x1}, 0x800) sendmsg$TIPC_NL_MON_PEER_GET(r0, &(0x7f0000000400)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80004}, 0xc, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="e8000000", @ANYRES16=0x0, @ANYBLOB="000326bd7000fbdbdf2513000000540009800800010000000000080002000561fb75080001000700000008000100030000000800020008000000080002000f000000080002007f0000000800010001000000080002000400000008000100a20800001c0009800800010004000000080001000000000008000100050000000c0003800800010008000000587183ff8e8c20225b22ce7018f500028004000c00040004003400038008000100ffffffff0b000200f9ffffff08000200010f00000800020002000000080002000001000008000200080000000400040014000380080001"], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x80) keyctl$dh_compute(0x17, &(0x7f0000000000), 0x0, 0x0, 0x0) 4.313525186s ago: executing program 0 (id=1806): ioctl$BLKROTATIONAL(0xffffffffffffffff, 0x127e, &(0x7f0000000000)) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, &(0x7f0000000380)) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(0xffffffffffffffff, 0x84, 0x6b, 0x0, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) syz_io_uring_setup(0x4179, &(0x7f0000000080)={0x0, 0x0, 0x10100, 0x80000}, &(0x7f0000000100), &(0x7f0000000140)) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r6, &(0x7f00000001c0)=ANY=[@ANYBLOB=')'], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r6, 0x0) io_uring_enter(r6, 0x4e9a, 0x0, 0x11, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r5, 0x84, 0x1d, 0x0, &(0x7f0000000040)) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r4, 0x84, 0x22, &(0x7f0000000080)={0x0, 0x0, 0xfffffffe, 0x200001}, 0x10) 4.313063435s ago: executing program 1 (id=1807): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x8, 0x8, 0xc2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000f80)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000085000000a000000095"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, &(0x7f0000000000), &(0x7f0000000040)=r1}, 0x20) bpf$ENABLE_STATS(0x20, &(0x7f0000000400), 0x4) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000800)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x801, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x4c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}, @NFTA_SET_EXPR={0x10, 0x11, 0x0, 0x1, @limit={{0xa}, @void}}]}], {0x14, 0x10}}, 0x94}}, 0x0) socket$inet_udp(0x2, 0x2, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000540)={0x2, &(0x7f0000000080)=[{0x2d}, {0x16}]}) r3 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0) r4 = socket$inet6_sctp(0xa, 0x0, 0x84) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x4, 0x3, &(0x7f0000000000)=@framed={{0x72, 0xa, 0x0, 0xffc4, 0xff000000, 0x69, 0x10, 0x26}}, &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) sendto$inet6(r4, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x0, 0x0, @loopback={0x0, 0xa8aaaafffeaaaa1f}}, 0x1c) mount$9p_fd(0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}}) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r3, 0xc0189379, &(0x7f0000000040)={{0x1, 0x1, 0x18}, './file0\x00'}) socket$inet_tcp(0x2, 0x1, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x6) r5 = socket(0x22, 0x2, 0x11) bind$bt_hci(r5, &(0x7f0000000000), 0x6) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.current\x00', 0x275a, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='sys_exit\x00', r6}, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r7 = openat$ppp(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r7, 0xc004743e, 0x20001400) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="1a04"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x67000000, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) ioctl$TUNSETOFFLOAD(r7, 0x4010744d, 0x20000000) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r3, 0x84, 0x1b, &(0x7f0000000200)={0x0, 0x84, "6eee6e425e468216da3c5b14e3a099b74495e259f56bc2067fa9dac9afb8b2b9f65f30e2340f89010079cc56aca59a1f0ba8610d72dbb911dfa12adee62d7cb10db5afe25ae9d845eea65db15ef802b4489a7ee1afd78528c3ce2151268fad104f027d39ebfef81f71eeb7c47884682b16690ed182704bdeb79b9c6236adc821a8b843f1"}, &(0x7f00000000c0)=0x8c) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r4, 0x84, 0x10, &(0x7f00000002c0)=@assoc_value={r8, 0x764e}, 0x8) socket$packet(0x11, 0x3, 0x300) r9 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000180), r5) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r3, &(0x7f0000000380)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000440)={&(0x7f00000001c0)={0x14, r9, 0x100, 0x30bd2e, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x20000002}, 0x0) 2.499676148s ago: executing program 0 (id=1808): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x42, 0x0) close_range(r0, r0, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='fd=', @ANYRESDEC=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESOCT=0x0]) setxattr$incfs_metadata(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, 0x0, 0x3) syz_fuse_handle_req(r0, &(0x7f0000004140)="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", 0x2000, &(0x7f0000000600)={&(0x7f00000002c0)={0x50}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_fuse_handle_req(r0, &(0x7f0000006140)="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", 0x2000, &(0x7f0000000700)={&(0x7f0000000500)={0x50, 0xffffffffffffff8c, 0x0, {0x7, 0x28, 0x0, 0x31002}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='maps\x00') r3 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000740), 0x0, 0x0) r4 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r4, 0xc0285700, &(0x7f0000000b00)={0x4, "abacd211119ca94c63377526aeb5ab2c7b9ca5fa07558139ede6dc06270ee042", 0xffffffffffffffff}) ioctl$SW_SYNC_IOC_CREATE_FENCE(r3, 0xc0285700, &(0x7f0000000f40)={0x8, "b546baa5cc590d3033de259c2996817bb959ebab028deda525e19bdeffafde25", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r5, 0xc0303e03, &(0x7f0000000f80)={"d1ed39d88b014976ab94c1fb10628c46d2e681cdb9e5c1a31965c61e0df52c5e", r6, 0xffffffffffffffff}) ioctl$SW_SYNC_IOC_INC(r4, 0x40045701, &(0x7f0000000040)=0x44b) ioctl$SYNC_IOC_MERGE(r7, 0xc0303e03, &(0x7f0000000000)={"9b000000000000000000c69671ea00", r7, 0xffffffffffffffff}) read$dsp(r2, &(0x7f00000000c0)=""/4096, 0x1000) write$P9_RRENAMEAT(r2, &(0x7f0000000000)={0x7, 0x4b, 0x43a}, 0x7) syz_usb_connect$hid(0x3, 0x36, &(0x7f00000024c0)={{0x12, 0x1, 0x2a3, 0x0, 0x0, 0x0, 0x20, 0x18d1, 0x5030, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x7, 0x128, 0x6, [{{0x9, 0x4, 0x0, 0x3, 0x2, 0x3, 0x1, 0x1, 0x6, {0x9, 0x21, 0xb1, 0x1, 0x1, {0x22, 0xb7a}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0xc, 0x40, 0x6}}}}}]}}]}}, &(0x7f00000028c0)={0x0, 0x0, 0x5, &(0x7f0000001140)=ANY=[@ANYBLOB="050f4dfd005b182cef383be710067ede6c789507ed46cc7fe027fd312068041ea07c600f5b35cf94ee9984f31c979dd13194c515eb49aafe45d7d41428ebf177be8206e1eb4937c5181df3eea61cdd2eb00bea48da81c10aca648f7e75f23d83711510b9a633f473abf6eaa3c4238d60060d37cd04d30801a29bc02e52acf8429c71c4f8761b2b6d46c6bd5280fd7daae3475d96a2990e4859dce9a4251ca175479460cd00deedf251abd8215820074fc9a3bc4013b504534af0f995be7f1d50285d70b7b9ee74072a786b57242ad636a9133d1af05c58ecdc00e46e77bfbed84e6bc7e4e2db23a0f74b9518b40a08"]}) fcntl$getownex(r8, 0x10, &(0x7f00000010c0)={0x0, 0x0}) syz_open_procfs(r9, &(0x7f0000001100)='cpuset\x00') 1.903877539s ago: executing program 1 (id=1809): r0 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x7, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000300)={0x27, 0x1, 0x1, "3ad38e26d20fb29e34b50b097f8e2303506c0000000000001000"}) 1.519705141s ago: executing program 1 (id=1810): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00'}, 0x10) pipe2(0x0, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000240)={'#! ', './file1', [{0x20, 'wg1\x00'}, {0x20, '{-+x^+.&'}, {0x20, '\x00'}], 0xa, "000bca1f7a69743fc90c32d59b88e5ce164b59f879b534b5885b062d7a9733a0582f319e46dac7150f3d52942ac13ff164002baaaa31bdd3501e822a48b3a1b9aebd972f4567889c7b893e052219c55691596302885ed476965a547c89c8efa0161ea0665cde2051c9bc822b6775d8886930d346b6a85b83109fc25f9346c82a56bfc24c2f576613199f4e5a25c9d0b9e96c981f995fe6afab67044fb1f2d50e8121d65af5c8cfc7edd46228fdd7d50e62e8"}, 0xcd) r4 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0x0, 0xffffffff, 0xffffffff, 0xd0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488) syz_emit_ethernet(0x50, &(0x7f0000000340)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x12}, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "8a37f2", 0x1a, 0x2c, 0x0, @remote, @local, {[], {{0x3a00, 0x5, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}, {"5a0900000017"}}}}}}}, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x2200c851, &(0x7f00000000c0)={0xa, 0x2, 0x0, @loopback}, 0x1c) sendto$inet6(0xffffffffffffffff, &(0x7f0000000080)='D', 0x1, 0x1, 0x0, 0x0) shutdown(0xffffffffffffffff, 0x1) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3fc, 0x0, 0x32}, 0x9c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000000)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0x8a}, 0x9c) setsockopt$inet_sctp6_SCTP_AUTOCLOSE(r0, 0x84, 0x4, &(0x7f0000000100)=0xfffffffb, 0x4) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0x100000000000000, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000a00)={0x0, @in6={{0xa, 0x4e23, 0x0, @loopback}}, 0x0, 0x0, 0x0, 0x0, 0x54}, 0x9c) close(r0) 864.455825ms ago: executing program 7 (id=1811): sched_setscheduler(0x0, 0x2, 0x0) r0 = socket$inet_smc(0x2b, 0x1, 0x0) bind$inet(r0, &(0x7f0000000140)={0x2, 0x4e22, @multicast2}, 0x10) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) setsockopt$SO_BINDTODEVICE_wg(r0, 0x1, 0x19, &(0x7f0000000100)='wg0\x00', 0x4) r1 = socket$inet_smc(0x2b, 0x1, 0x0) bind$inet(r1, &(0x7f0000000140)={0x2, 0x4e22, @multicast2}, 0x10) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r2 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="4c0000001200010300000000fd08000000000000010000000000000000000000000000000000000000000000000003f20fbc329442e4f7c63730e1aed2b5d7589ddfd109aa"], 0x4c}, 0x1, 0x0, 0x0, 0x40080}, 0x0) 0s ago: executing program 1 (id=1812): r0 = socket$inet6(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000000500)=[{{&(0x7f0000000240)={0xa, 0x4e23, 0x8, @mcast1, 0x7}, 0x1c, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="140000003f0000002900000e3400005996e58d000000"], 0x18}}], 0x1, 0x7ffffff7) kernel console output (not intermixed with test programs): gurations: 76, using maximum allowed: 8 [ 381.439021][ T5881] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 381.446824][ T5881] usb 3-1: can't read configurations, error -61 [ 382.555943][ T5881] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 382.665959][ T5881] usb 3-1: Using ep0 maxpacket: 8 [ 382.666619][ T9922] FAULT_INJECTION: forcing a failure. [ 382.666619][ T9922] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 382.811296][ T9922] CPU: 0 UID: 0 PID: 9922 Comm: syz.6.1027 Not tainted 6.12.0-rc4-syzkaller-00281-g284a2f899676 #0 [ 382.822039][ T9922] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 382.832095][ T9922] Call Trace: [ 382.835373][ T9922] [ 382.838306][ T9922] dump_stack_lvl+0x241/0x360 [ 382.842992][ T9922] ? __pfx_dump_stack_lvl+0x10/0x10 [ 382.848191][ T9922] ? __pfx__printk+0x10/0x10 [ 382.852782][ T9922] ? __pfx_lock_release+0x10/0x10 [ 382.857832][ T9922] should_fail_ex+0x3b0/0x4e0 [ 382.862512][ T9922] _copy_from_iter+0x21f/0x1e70 [ 382.867370][ T9922] ? __virt_addr_valid+0x183/0x530 [ 382.872481][ T9922] ? __pfx_lock_release+0x10/0x10 [ 382.877522][ T9922] ? __pfx__copy_from_iter+0x10/0x10 [ 382.882816][ T9922] ? __virt_addr_valid+0x183/0x530 [ 382.887966][ T9922] ? __virt_addr_valid+0x183/0x530 [ 382.893091][ T9922] ? __virt_addr_valid+0x45f/0x530 [ 382.898207][ T9922] ? __phys_addr_symbol+0x2f/0x70 [ 382.903229][ T9922] ? __check_object_size+0x48e/0x900 [ 382.908530][ T9922] bcm_tx_setup+0x1199/0x18a0 [ 382.913224][ T9922] bcm_sendmsg+0x585/0x7a0 [ 382.917648][ T9922] ? __pfx_bcm_sendmsg+0x10/0x10 [ 382.922592][ T9922] ? __import_iovec+0x590/0x870 [ 382.927457][ T9922] ? __pfx_bcm_sendmsg+0x10/0x10 [ 382.932392][ T9922] __sock_sendmsg+0x221/0x270 [ 382.937081][ T9922] ____sys_sendmsg+0x52a/0x7e0 [ 382.941864][ T9922] ? __pfx_____sys_sendmsg+0x10/0x10 [ 382.947180][ T9922] __sys_sendmsg+0x292/0x380 [ 382.951776][ T9922] ? __pfx___sys_sendmsg+0x10/0x10 [ 382.956930][ T9922] ? __pfx_vfs_write+0x10/0x10 [ 382.961737][ T9922] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 382.968065][ T9922] ? do_syscall_64+0x100/0x230 [ 382.972834][ T9922] ? do_syscall_64+0xb6/0x230 [ 382.977535][ T9922] do_syscall_64+0xf3/0x230 [ 382.982049][ T9922] ? clear_bhb_loop+0x35/0x90 [ 382.986742][ T9922] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 382.992634][ T9922] RIP: 0033:0x7efdfe77e719 [ 382.997071][ T9922] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 383.016681][ T9922] RSP: 002b:00007efdff4cb038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 383.025116][ T9922] RAX: ffffffffffffffda RBX: 00007efdfe935f80 RCX: 00007efdfe77e719 [ 383.033086][ T9922] RDX: 0000000000000000 RSI: 0000000020000080 RDI: 0000000000000006 [ 383.041057][ T9922] RBP: 00007efdff4cb090 R08: 0000000000000000 R09: 0000000000000000 [ 383.049020][ T9922] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 383.056986][ T9922] R13: 0000000000000000 R14: 00007efdfe935f80 R15: 00007ffeb1f21a68 [ 383.064965][ T9922] [ 383.081512][ T5881] usb 3-1: unable to get BOS descriptor or descriptor too short [ 383.089496][ T5881] usb 3-1: too many configurations: 76, using maximum allowed: 8 [ 384.988567][ T5881] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 384.996667][ T5881] usb 3-1: can't read configurations, error -71 [ 385.009896][ T5881] usb usb3-port1: unable to enumerate USB device [ 385.301406][ T9945] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1031'. [ 385.338667][ T9942] ecryptfs_parse_options: eCryptfs: unrecognized option [l] [ 385.358892][ T9942] ecryptfs_parse_options: eCryptfs: unrecognized option [io%bfq.io_serviced_recuÔèrsiÆ‹¡}͸ʼ(©zmÔbE1ôƬÐqd1 ˜K/dev/nullb0] [ 385.393095][ T9942] ecryptfs_parse_options: You must supply at least one valid auth tok signature as a mount parameter; see the eCryptfs README [ 385.504305][ T9942] Error parsing options; rc = [-22] [ 386.277826][ T9962] input input21: cannot allocate more than FF_MAX_EFFECTS effects [ 386.808702][ T9976] UBIFS error (pid: 9976): cannot open "/dev/sg0", error -22 [ 387.908900][ T9982] CIFS mount error: No usable UNC path provided in device string! [ 387.908900][ T9982] [ 387.946916][ T9982] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 388.274880][ T9986] FAULT_INJECTION: forcing a failure. [ 388.274880][ T9986] name failslab, interval 1, probability 0, space 0, times 0 [ 388.345468][ T9986] CPU: 0 UID: 0 PID: 9986 Comm: syz.0.1043 Not tainted 6.12.0-rc4-syzkaller-00281-g284a2f899676 #0 [ 388.356217][ T9986] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 388.366274][ T9986] Call Trace: [ 388.369570][ T9986] [ 388.372519][ T9986] dump_stack_lvl+0x241/0x360 [ 388.377244][ T9986] ? __pfx_dump_stack_lvl+0x10/0x10 [ 388.382445][ T9986] ? __pfx__printk+0x10/0x10 [ 388.387039][ T9986] ? __kmalloc_cache_noprof+0x44/0x2c0 [ 388.392499][ T9986] ? __pfx___might_resched+0x10/0x10 [ 388.397800][ T9986] should_fail_ex+0x3b0/0x4e0 [ 388.402482][ T9986] should_failslab+0xac/0x100 [ 388.407161][ T9986] ? drm_prime_add_buf_handle+0x5c/0x370 [ 388.412794][ T9986] __kmalloc_cache_noprof+0x6c/0x2c0 [ 388.418103][ T9986] drm_prime_add_buf_handle+0x5c/0x370 [ 388.423574][ T9986] drm_gem_prime_fd_to_handle+0x374/0x4b0 [ 388.429131][ T9988] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 388.429319][ T9986] drm_ioctl_kernel+0x337/0x440 [ 388.443808][ T9986] ? __pfx_drm_prime_fd_to_handle_ioctl+0x10/0x10 [ 388.450233][ T9986] ? __pfx_drm_ioctl_kernel+0x10/0x10 [ 388.455635][ T9986] ? __might_fault+0xaa/0x120 [ 388.460317][ T9986] ? __might_fault+0xc6/0x120 [ 388.465030][ T9986] drm_ioctl+0x60e/0xad0 [ 388.469353][ T9986] ? __pfx_drm_prime_fd_to_handle_ioctl+0x10/0x10 [ 388.475792][ T9986] ? __pfx_drm_ioctl+0x10/0x10 [ 388.480575][ T9986] ? __pfx_drm_ioctl+0x10/0x10 [ 388.485370][ T9986] __se_sys_ioctl+0xf9/0x170 [ 388.489995][ T9986] do_syscall_64+0xf3/0x230 [ 388.494516][ T9986] ? clear_bhb_loop+0x35/0x90 [ 388.499193][ T9986] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 388.505088][ T9986] RIP: 0033:0x7f92e537e719 [ 388.509529][ T9986] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 388.529140][ T9986] RSP: 002b:00007f92e4dff038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 388.537576][ T9986] RAX: ffffffffffffffda RBX: 00007f92e5535f80 RCX: 00007f92e537e719 [ 388.545551][ T9986] RDX: 0000000020000300 RSI: 00000000c00c642e RDI: 0000000000000003 [ 388.553538][ T9986] RBP: 00007f92e4dff090 R08: 0000000000000000 R09: 0000000000000000 [ 388.561521][ T9986] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 388.569495][ T9986] R13: 0000000000000000 R14: 00007f92e5535f80 R15: 00007ffec6e11378 [ 388.577490][ T9986] [ 389.614307][ T5917] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 389.774311][ T5917] usb 3-1: Using ep0 maxpacket: 8 [ 389.858113][ T5917] usb 3-1: config 253 has an invalid interface number: 48 but max is 0 [ 389.884338][ T5917] usb 3-1: config 253 has no interface number 0 [ 389.901201][ T5917] usb 3-1: config 253 interface 48 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 389.923353][T10012] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1053'. [ 389.939489][ T5917] usb 3-1: New USB device found, idVendor=2040, idProduct=6513, bcdDevice=c2.7e [ 389.964408][ T5917] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 390.014399][ T5917] usb 3-1: Product: syz [ 390.018626][ T5917] usb 3-1: Manufacturer: syz [ 390.029890][ T5917] usb 3-1: SerialNumber: syz [ 390.055299][ T5917] em28xx 3-1:253.48: New device syz syz @ 480 Mbps (2040:6513, interface 48, class 48) [ 390.109768][ T5917] em28xx 3-1:253.48: Video interface 48 found: [ 390.251397][T10025] netlink: zone id is out of range [ 390.277371][T10025] netlink: zone id is out of range [ 390.296977][T10025] netlink: zone id is out of range [ 390.303056][T10025] netlink: zone id is out of range [ 390.344882][T10025] netlink: set zone limit has 4 unknown bytes [ 390.407095][ T5917] em28xx 3-1:253.48: unknown em28xx chip ID (0) [ 391.552376][ T5917] em28xx 3-1:253.48: reading from i2c device at 0xa0 failed (error=-5) [ 391.564987][ T5917] em28xx 3-1:253.48: board has no eeprom [ 391.583977][T10037] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1060'. [ 391.594532][T10037] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1060'. [ 391.624475][ T5917] em28xx 3-1:253.48: Identified as Hauppauge WinTV HVR 950 (card=16) [ 391.632892][ T5917] em28xx 3-1:253.48: analog set to bulk mode. [ 391.639935][ T5882] em28xx 3-1:253.48: Registering V4L2 extension [ 391.668143][ T5917] usb 3-1: USB disconnect, device number 38 [ 391.716306][ T5882] em28xx 3-1:253.48: reading from i2c device at 0xb8 failed (error=-19) [ 391.769194][ T5882] em28xx 3-1:253.48: reading from i2c device at 0xba failed (error=-19) [ 391.780767][ T5917] em28xx 3-1:253.48: Disconnecting em28xx [ 392.006209][ T5882] em28xx 3-1:253.48: Config register raw data: 0xffffffed [ 392.021444][T10049] netlink: 56 bytes leftover after parsing attributes in process `syz.5.1065'. [ 392.032144][ T5882] em28xx 3-1:253.48: AC97 chip type couldn't be determined [ 392.690795][ T5882] em28xx 3-1:253.48: No AC97 audio processor [ 392.696996][ T5882] em28xx 3-1:253.48: em28xx_v4l2_init: Error while setting audio - error [-19]! [ 392.706292][ T5882] em28xx 3-1:253.48: Binding DVB extension [ 392.714597][ T5882] em28xx 3-1:253.48: no endpoint for DVB mode and transfer type 0 [ 392.722420][ T5882] em28xx 3-1:253.48: failed to pre-allocate USB transfer buffers for DVB. [ 392.731303][ T5882] em28xx 3-1:253.48: Registering input extension [ 392.754414][ T5917] em28xx 3-1:253.48: Closing input extension [ 392.798756][ T5917] em28xx 3-1:253.48: Freeing device [ 393.966921][T10076] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 393.978680][T10076] xt_SECMARK: unable to map security context 'system_u:object_r:dbusd_etc_t:s0' [ 395.211660][T10088] UBIFS error (pid: 10088): cannot open "/dev/sg0", error -22 [ 395.848050][T10084] QAT: Invalid ioctl -1071618518 [ 396.021729][T10092] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1077'. [ 396.031551][T10090] QAT: Invalid ioctl -805268463 [ 396.045247][T10084] QAT: Invalid ioctl -2114415556 [ 396.071473][T10084] QAT: Invalid ioctl -805268419 [ 396.092572][T10084] QAT: Invalid ioctl -805268418 [ 396.245279][T10090] QAT: Invalid ioctl -805268419 [ 396.275641][T10090] QAT: Invalid ioctl -1066363887 [ 396.346129][T10084] QAT: Invalid ioctl -1066363887 [ 396.375991][T10084] QAT: Invalid ioctl -2114415556 [ 396.377140][T10094] netlink: 300 bytes leftover after parsing attributes in process `syz.5.1078'. [ 396.404667][T10084] QAT: Invalid ioctl 21531 [ 396.486686][T10099] netlink: 60 bytes leftover after parsing attributes in process `syz.5.1078'. [ 396.613585][T10090] overlayfs: conflicting lowerdir path [ 397.524935][T10107] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1081'. [ 397.976219][T10116] fuse: Unknown parameter 'grîœÊoup_id' [ 397.990938][T10116] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1082'. [ 398.005917][ T25] usb 2-1: new high-speed USB device number 41 using dummy_hcd [ 399.005542][ T5882] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 399.152415][T10134] netlink: 'syz.6.1090': attribute type 29 has an invalid length. [ 399.160719][T10134] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1090'. [ 399.227453][ T25] usb 2-1: Using ep0 maxpacket: 8 [ 399.234365][ T25] usb 2-1: New USB device found, idVendor=0abf, idProduct=3370, bcdDevice= 3.0e [ 399.244231][ T25] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 399.257228][ T25] usb 2-1: config 0 descriptor?? [ 399.283782][ T5882] usb 1-1: Using ep0 maxpacket: 16 [ 399.325541][ T5882] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 399.347837][ T5882] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 399.365429][ T5882] usb 1-1: New USB device found, idVendor=046d, idProduct=ca03, bcdDevice= 0.00 [ 399.374556][ T5882] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 399.392640][T10138] netlink: 60 bytes leftover after parsing attributes in process `syz.5.1092'. [ 399.400145][ T5882] usb 1-1: config 0 descriptor?? [ 399.485534][ T6390] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 399.509306][T10110] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1083'. [ 399.526322][ T9] usb 2-1: USB disconnect, device number 41 [ 399.656837][ T6390] usb 7-1: Using ep0 maxpacket: 16 [ 399.663879][ T6390] usb 7-1: config 0 has an invalid interface number: 8 but max is 0 [ 399.677809][ T6390] usb 7-1: config 0 has no interface number 0 [ 399.684799][ T6390] usb 7-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 399.703739][ T6390] usb 7-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 399.716774][ T6390] usb 7-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 399.741700][ T6390] usb 7-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 399.763797][ T6390] usb 7-1: Product: syz [ 399.779726][ T6390] usb 7-1: SerialNumber: syz [ 399.791728][ T6390] usb 7-1: config 0 descriptor?? [ 399.804138][ T6390] cm109 7-1:0.8: invalid payload size 0, expected 4 [ 399.812833][ T6390] input: CM109 USB driver as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.8/input/input24 [ 399.826600][ T5882] logitech 0003:046D:CA03.0006: item fetching failed at offset 0/5 [ 399.843348][ T5882] logitech 0003:046D:CA03.0006: parse failed [ 399.851134][ T5882] logitech 0003:046D:CA03.0006: probe with driver logitech failed with error -22 [ 400.112353][ C1] cm109 7-1:0.8: cm109_urb_ctl_callback: usb_submit_urb (urb_irq) failed -90 [ 400.160013][ T5882] usb 1-1: USB disconnect, device number 26 [ 400.270604][T10151] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1096'. [ 400.351125][T10152] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 401.261788][T10160] openvswitch: netlink: Actions may not be safe on all matching packets [ 401.718320][T10156] syzkaller0: entered promiscuous mode [ 401.733133][ C1] cm109 7-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 401.733348][ T5882] usb 7-1: USB disconnect, device number 13 [ 401.740117][ C1] cm109 7-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 401.765877][T10156] syzkaller0: entered allmulticast mode [ 401.788175][ T5882] cm109 7-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 401.846581][T10156] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1097'. [ 402.966343][T10174] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1102'. [ 405.744151][T10185] tipc: Started in network mode [ 405.749291][T10185] tipc: Node identity ac141441, cluster identity 4711 [ 405.756613][T10185] tipc: Enabling of bearer rejected, failed to enable media [ 406.226331][ T5882] usb 7-1: new high-speed USB device number 14 using dummy_hcd [ 407.006473][ T9] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 407.137454][ T5882] usb 7-1: Using ep0 maxpacket: 8 [ 407.186424][ T9] usb 1-1: Using ep0 maxpacket: 8 [ 407.213714][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 407.231035][ T5882] usb 7-1: unable to get BOS descriptor or descriptor too short [ 407.259433][ T5882] usb 7-1: too many configurations: 230, using maximum allowed: 8 [ 407.272568][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 407.330076][ T5882] usb 7-1: invalid descriptor for config index 0: type = 0x2, length = 8 [ 407.350447][ T9] usb 1-1: New USB device found, idVendor=1781, idProduct=0898, bcdDevice= 0.00 [ 407.381073][ T5882] usb 7-1: can't read configurations, error -22 [ 407.420945][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 407.478759][ T9] usb 1-1: config 0 descriptor?? [ 407.498370][ T9] input: PXRC Flight Controller Adapter as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input25 [ 407.558313][ T5189] pxrc 1-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 407.596617][ T5882] usb 7-1: new high-speed USB device number 15 using dummy_hcd [ 407.632286][ T5835] pxrc 1-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 407.690522][ T5189] pxrc 1-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 407.728390][ T5189] pxrc 1-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 407.739003][ T5189] pxrc 1-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 407.794218][ T5189] pxrc 1-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 408.368329][ T5882] usb 7-1: Using ep0 maxpacket: 8 [ 408.384553][ T5882] usb 7-1: unable to get BOS descriptor or descriptor too short [ 408.393466][ T5882] usb 7-1: too many configurations: 230, using maximum allowed: 8 [ 408.406325][ T5882] usb 7-1: invalid descriptor for config index 0: type = 0x2, length = 8 [ 408.415315][ T5882] usb 7-1: can't read configurations, error -22 [ 408.422297][ T5882] usb usb7-port1: attempt power cycle [ 408.727018][ T6390] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 408.776703][ T5882] usb 7-1: new high-speed USB device number 16 using dummy_hcd [ 408.806709][ T5887] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 408.815954][ T5882] usb 7-1: Using ep0 maxpacket: 8 [ 408.830396][ T5882] usb 7-1: unable to get BOS descriptor or descriptor too short [ 408.841194][ T5882] usb 7-1: too many configurations: 230, using maximum allowed: 8 [ 408.850213][ T5882] usb 7-1: invalid descriptor for config index 0: type = 0x2, length = 8 [ 408.858983][ T5882] usb 7-1: can't read configurations, error -22 [ 408.881660][ T6390] usb 6-1: config 0 has an invalid interface number: 185 but max is 0 [ 408.890187][ T6390] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 408.907575][ T6390] usb 6-1: config 0 has no interface number 0 [ 408.914990][ T6390] usb 6-1: config 0 interface 185 has no altsetting 0 [ 408.922168][ T6390] usb 6-1: New USB device found, idVendor=12d1, idProduct=1c1f, bcdDevice=63.46 [ 408.931696][ T6390] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 408.957735][ T6390] usb 6-1: config 0 descriptor?? [ 408.966679][ T5887] usb 3-1: Using ep0 maxpacket: 16 [ 408.974693][ T6390] rndis_host 6-1:0.185: skipping garbage [ 408.984633][ T5887] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 408.994969][ T6390] rndis_host 6-1:0.185: skipping garbage [ 409.007939][ T6390] usb 6-1: bad CDC descriptors [ 409.015537][ T25] usb 1-1: USB disconnect, device number 27 [ 409.026728][ T5882] usb 7-1: new high-speed USB device number 17 using dummy_hcd [ 409.046393][ T6390] option 6-1:0.185: GSM modem (1-port) converter detected [ 409.051154][ T5887] usb 3-1: config 0 has no interfaces? [ 409.093651][ T5887] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 409.127831][ T5887] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 409.153704][ T5887] usb 3-1: config 0 descriptor?? [ 409.278700][ T5882] usb 7-1: device not accepting address 17, error -71 [ 409.307533][ T5882] usb usb7-port1: unable to enumerate USB device [ 409.309897][ T6390] usb 6-1: USB disconnect, device number 7 [ 409.352145][ T6390] option 6-1:0.185: device disconnected [ 409.579103][ T6390] usb 3-1: USB disconnect, device number 39 [ 410.934609][T10248] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1117'. [ 411.367002][ T5917] usb 7-1: new high-speed USB device number 18 using dummy_hcd [ 411.557088][T10264] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1127'. [ 411.566340][T10264] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1127'. [ 411.837227][ T6390] usb 6-1: new full-speed USB device number 8 using dummy_hcd [ 412.012574][ T6390] usb 6-1: New USB device found, idVendor=13d8, idProduct=0020, bcdDevice=f7.31 [ 412.112482][ T6390] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 412.182998][ T6390] usb 6-1: config 0 descriptor?? [ 412.196985][ T5917] usb 7-1: Using ep0 maxpacket: 16 [ 412.212501][ T5917] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 412.229915][ T6390] usb 6-1: selecting invalid altsetting 3 [ 412.234623][ T5917] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 412.235987][ T6390] comedi comedi0: could not set alternate setting 3 in high speed [ 412.282037][ T5917] usb 7-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 412.285871][ T6390] usbduxsigma 6-1:0.0: driver 'usbduxsigma' failed to auto-configure device. [ 412.301499][ T5917] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 412.301534][ T5917] usb 7-1: Product: syz [ 412.301552][ T5917] usb 7-1: Manufacturer: syz [ 412.301572][ T5917] usb 7-1: SerialNumber: syz [ 412.313944][ T5917] usb 7-1: config 0 descriptor?? [ 412.340094][ T5917] em28xx 7-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 412.375265][ T5917] em28xx 7-1:0.0: Audio interface 0 found (Vendor Class) [ 412.387970][ T6390] usbduxsigma 6-1:0.0: probe with driver usbduxsigma failed with error -22 [ 412.965636][T10273] netlink: 88 bytes leftover after parsing attributes in process `syz.1.1130'. [ 413.049806][ T5917] em28xx 7-1:0.0: unknown em28xx chip ID (0) [ 413.052764][ T5917] em28xx 7-1:0.0: Config register raw data: 0xfffffffb [ 413.797559][T10281] netlink: 300 bytes leftover after parsing attributes in process `syz.2.1133'. [ 413.814079][T10281] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1133'. [ 414.092534][ T5917] em28xx 7-1:0.0: AC97 command still being executed: not handled properly! [ 414.149208][ T5917] em28xx 7-1:0.0: Unknown AC97 audio processor detected! [ 414.319591][ T5887] usb 2-1: new high-speed USB device number 43 using dummy_hcd [ 414.573044][ T5881] usb 6-1: USB disconnect, device number 8 [ 414.781734][ T5887] usb 2-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 414.793190][ T5917] em28xx 7-1:0.0: AC97 command still being executed: not handled properly! [ 414.802626][ T5887] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 414.812067][ T5917] em28xx 7-1:0.0: couldn't setup AC97 register 2 [ 414.822485][ T5887] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 414.854441][ T5887] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 414.864362][ T5887] usb 2-1: SerialNumber: syz [ 415.066137][ T5917] em28xx 7-1:0.0: couldn't setup AC97 register 4 [ 415.115879][ T5917] em28xx 7-1:0.0: couldn't setup AC97 register 6 [ 415.372463][ T5887] usb 2-1: 0:2 : does not exist [ 415.753287][ T5917] em28xx 7-1:0.0: couldn't setup AC97 register 54 [ 415.791456][ T5917] em28xx 7-1:0.0: couldn't setup AC97 register 56 [ 415.820928][ T5887] usb 2-1: USB disconnect, device number 43 [ 415.894810][ T5917] usb 7-1: USB disconnect, device number 18 [ 415.935009][T10302] netlink: 'syz.0.1140': attribute type 2 has an invalid length. [ 415.965065][T10302] netlink: zone id is out of range [ 415.970832][T10302] netlink: zone id is out of range [ 415.977266][T10302] netlink: zone id is out of range [ 416.000572][T10306] netlink: 88 bytes leftover after parsing attributes in process `syz.6.1141'. [ 416.030720][T10310] netlink: 256 bytes leftover after parsing attributes in process `syz.0.1140'. [ 416.060110][T10302] netlink: zone id is out of range [ 416.089114][T10302] netlink: zone id is out of range [ 416.094315][T10302] netlink: zone id is out of range [ 416.144491][T10310] openvswitch: netlink: Key type 7430 is out of range max 32 [ 416.153226][T10302] netlink: zone id is out of range [ 416.170063][T10302] netlink: zone id is out of range [ 416.175433][T10302] netlink: zone id is out of range [ 416.304937][T10317] vlan3: entered promiscuous mode [ 416.513545][T10317] macvlan0: entered promiscuous mode [ 416.766247][T10317] macvlan0: left promiscuous mode [ 417.350298][T10331] netlink: 300 bytes leftover after parsing attributes in process `syz.6.1147'. [ 417.431312][T10333] netlink: 60 bytes leftover after parsing attributes in process `syz.6.1147'. [ 418.727431][T10347] tipc: Started in network mode [ 419.350319][T10347] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 419.361020][T10347] tipc: Enabled bearer , priority 10 [ 419.484209][T10350] netlink: 88 bytes leftover after parsing attributes in process `syz.0.1154'. [ 419.727937][ T5887] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 419.815074][ T29] audit: type=1326 audit(419.766:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10364 comm="syz.1.1159" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f5a2b57e719 code=0x0 [ 419.869059][T10369] netlink: 300 bytes leftover after parsing attributes in process `syz.2.1160'. [ 419.894371][ T5887] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 419.922050][T10369] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1160'. [ 419.933604][ T5887] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 419.957858][ T5887] usb 6-1: New USB device found, idVendor=5543, idProduct=0042, bcdDevice= 0.00 [ 419.967346][ T5887] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 420.005428][ T5887] usb 6-1: config 0 descriptor?? [ 420.153478][T10371] dvmrp8: entered allmulticast mode [ 420.185877][T10371] dvmrp8: left allmulticast mode [ 420.269746][T10372] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1161'. [ 420.319672][T10371] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1161'. [ 420.457461][ T5887] uclogic 0003:5543:0042.0007: No inputs registered, leaving [ 420.476537][ T5887] uclogic 0003:5543:0042.0007: hidraw0: USB HID v0.00 Device [HID 5543:0042] on usb-dummy_hcd.5-1/input0 [ 420.480743][ T5948] tipc: Node number set to 1 [ 420.656417][ T5887] usb 6-1: USB disconnect, device number 9 [ 421.833283][T10380] Bluetooth: MGMT ver 1.23 [ 422.192668][T10393] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 423.808948][T10402] FAULT_INJECTION: forcing a failure. [ 423.808948][T10402] name failslab, interval 1, probability 0, space 0, times 0 [ 423.855099][T10406] tap0: tun_chr_ioctl cmd 1074025677 [ 423.860657][T10406] tap0: linktype set to 774 [ 423.874318][T10403] netlink: 300 bytes leftover after parsing attributes in process `syz.6.1171'. [ 423.887271][T10402] CPU: 1 UID: 0 PID: 10402 Comm: syz.0.1168 Not tainted 6.12.0-rc4-syzkaller-00281-g284a2f899676 #0 [ 423.898074][T10402] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 423.908134][T10402] Call Trace: [ 423.911418][T10402] [ 423.914375][T10402] dump_stack_lvl+0x241/0x360 [ 423.919059][T10402] ? __pfx_dump_stack_lvl+0x10/0x10 [ 423.924264][T10402] ? __pfx__printk+0x10/0x10 [ 423.928865][T10402] ? fs_reclaim_acquire+0x93/0x130 [ 423.934007][T10402] ? __pfx___might_resched+0x10/0x10 [ 423.939321][T10402] should_fail_ex+0x3b0/0x4e0 [ 423.944019][T10402] ? tomoyo_encode+0x26f/0x540 [ 423.948804][T10402] should_failslab+0xac/0x100 [ 423.953481][T10402] ? tomoyo_encode+0x26f/0x540 [ 423.958287][T10402] __kmalloc_noprof+0xd8/0x400 [ 423.963072][T10402] tomoyo_encode+0x26f/0x540 [ 423.967680][T10402] tomoyo_realpath_from_path+0x59e/0x5e0 [ 423.973329][T10402] tomoyo_path_number_perm+0x23a/0x880 [ 423.978798][T10402] ? tomoyo_path_number_perm+0x208/0x880 [ 423.984431][T10402] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 423.990468][T10402] ? __fget_files+0x29/0x470 [ 423.995132][T10402] ? __fget_files+0x3f3/0x470 [ 423.999844][T10402] security_file_ioctl+0xc6/0x2a0 [ 424.004889][T10402] __se_sys_ioctl+0x47/0x170 [ 424.009503][T10402] do_syscall_64+0xf3/0x230 [ 424.014026][T10402] ? clear_bhb_loop+0x35/0x90 [ 424.018711][T10402] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 424.024610][T10402] RIP: 0033:0x7f92e537e719 [ 424.029029][T10402] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 424.048644][T10402] RSP: 002b:00007f92e4dff038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 424.057068][T10402] RAX: ffffffffffffffda RBX: 00007f92e5535f80 RCX: 00007f92e537e719 [ 424.065045][T10402] RDX: 00000000200003c0 RSI: 00000000c0585605 RDI: 0000000000000003 [ 424.073030][T10402] RBP: 00007f92e4dff090 R08: 0000000000000000 R09: 0000000000000000 [ 424.081012][T10402] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 424.088989][T10402] R13: 0000000000000000 R14: 00007f92e5535f80 R15: 00007ffec6e11378 [ 424.096978][T10402] [ 424.130892][T10402] ERROR: Out of memory at tomoyo_realpath_from_path. [ 424.137638][T10410] netlink: 60 bytes leftover after parsing attributes in process `syz.6.1171'. [ 424.379179][ T6390] usb 6-1: new full-speed USB device number 10 using dummy_hcd [ 424.563245][ T6390] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x99, changing to 0x89 [ 424.582415][ T6390] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x89 has an invalid bInterval 0, changing to 10 [ 424.597286][ T6390] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 424.615922][ T6390] usb 6-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 424.627611][ T6390] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 424.635805][ T6390] usb 6-1: Product: syz [ 424.640222][ T6390] usb 6-1: Manufacturer: syz [ 424.644964][ T6390] usb 6-1: SerialNumber: syz [ 424.657542][ T6390] usb 6-1: config 0 descriptor?? [ 424.667657][ T6390] streamzap 6-1:0.0: streamzap_probe: endpoint Max Packet Size is 0!?! [ 424.718622][ T5917] usb 7-1: new high-speed USB device number 19 using dummy_hcd [ 424.924194][ T5948] usb 6-1: USB disconnect, device number 10 [ 424.942095][ T5917] usb 7-1: New USB device found, idVendor=055f, idProduct=c230, bcdDevice=b6.ac [ 424.991185][ T5917] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 425.030766][ T5917] usb 7-1: Product: syz [ 425.048640][ T5917] usb 7-1: Manufacturer: syz [ 425.088000][ T5917] usb 7-1: SerialNumber: syz [ 425.119282][ T5917] usb 7-1: config 0 descriptor?? [ 425.144648][ T5917] gspca_main: sunplus-2.14.0 probing 055f:c230 [ 425.660897][T10436] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1179'. [ 425.903789][T10440] sctp: [Deprecated]: syz.6.1175 (pid 10440) Use of int in max_burst socket option deprecated. [ 425.903789][T10440] Use struct sctp_assoc_value instead [ 426.819740][ T5880] usb 7-1: USB disconnect, device number 19 [ 426.999808][T10448] netlink: 284 bytes leftover after parsing attributes in process `syz.5.1183'. [ 427.688649][T10447] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1182'. [ 427.698542][T10447] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1182'. [ 427.850374][T10449] netlink: 60 bytes leftover after parsing attributes in process `syz.5.1183'. [ 428.216102][T10456] netlink: 56 bytes leftover after parsing attributes in process `syz.6.1187'. [ 429.165055][T10463] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1186'. [ 430.773718][T10480] netlink: 'syz.0.1189': attribute type 3 has an invalid length. [ 431.949482][ T5887] usb 3-1: new high-speed USB device number 40 using dummy_hcd [ 433.534464][T10508] netlink: 284 bytes leftover after parsing attributes in process `syz.6.1198'. [ 433.593790][T10508] netlink: 60 bytes leftover after parsing attributes in process `syz.6.1198'. [ 433.817904][ T5887] usb 3-1: Using ep0 maxpacket: 16 [ 433.834435][ T5887] usb 3-1: device descriptor read/all, error -71 [ 435.197425][T10526] netlink: 56 bytes leftover after parsing attributes in process `syz.6.1204'. [ 435.491822][T10536] block nbd0: shutting down sockets [ 435.629816][ T5948] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 435.821856][ T5948] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 435.867260][ T5948] usb 6-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 435.903736][ T5948] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 435.939886][ T5948] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 435.982808][T10531] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 436.001265][ T5948] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 436.168080][T10533] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 436.181364][T10533] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 436.279871][T10533] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 436.293400][T10533] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 437.473197][T10533] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 437.486642][T10533] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 437.496879][ T5834] Bluetooth: hci1: command 0x0406 tx timeout [ 437.509523][T10533] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 438.445617][ T54] Bluetooth: hci2: command 0x0406 tx timeout [ 438.776145][ T5880] usb 6-1: USB disconnect, device number 11 [ 439.502562][ T5880] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 439.560300][ T54] Bluetooth: hci3: command 0x0c1a tx timeout [ 439.570641][ T54] Bluetooth: hci1: command 0x0406 tx timeout [ 439.680395][ T5880] usb 6-1: Using ep0 maxpacket: 8 [ 439.695628][ T5880] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 439.705967][ T5880] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 439.723297][ T5880] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 439.758347][ T5880] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 439.777084][ T5880] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 439.810424][ T5880] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 439.819912][ T5880] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 440.249756][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.256470][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.270330][ T5880] usb 6-1: usb_control_msg returned -32 [ 440.420537][ T5880] usbtmc 6-1:16.0: can't read capabilities [ 440.514634][T10576] binder: BINDER_SET_CONTEXT_MGR already set [ 440.522759][T10576] binder: 10575:10576 ioctl 4018620d 20000040 returned -16 [ 440.656213][ T54] Bluetooth: hci2: command 0x0406 tx timeout [ 440.705972][T10576] Unsupported ieee802154 address type: 0 [ 441.045337][T10582] usbtmc 6-1:16.0: usb_control_msg returned -32 [ 442.188786][ T54] Bluetooth: hci3: command 0x0c1a tx timeout [ 442.261521][ T5887] usb 6-1: USB disconnect, device number 12 [ 443.861379][T10615] netlink: 272 bytes leftover after parsing attributes in process `syz.6.1231'. [ 444.028305][T10615] netlink: 60 bytes leftover after parsing attributes in process `syz.6.1231'. [ 444.846987][ T54] Bluetooth: hci3: command 0x0c1a tx timeout [ 444.931851][T10625] netlink: 56 bytes leftover after parsing attributes in process `syz.5.1234'. [ 446.608084][T10648] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1237'. [ 447.228366][ T5948] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 447.511392][ T5948] usb 6-1: New USB device found, idVendor=0c70, idProduct=f010, bcdDevice= 0.00 [ 447.553239][ T5948] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 447.660596][ T5948] usb 6-1: config 0 descriptor?? [ 448.418639][ T5948] usbhid 6-1:0.0: can't add hid device: -71 [ 448.429164][ T5948] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 448.485647][ T5948] usb 6-1: USB disconnect, device number 13 [ 449.360766][T10669] netlink: 272 bytes leftover after parsing attributes in process `syz.0.1244'. [ 449.373908][T10669] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1244'. [ 451.898674][T10700] sp0: Synchronizing with TNC [ 454.028814][T10729] program syz.1.1264 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 455.081354][T10748] netlink: 272 bytes leftover after parsing attributes in process `syz.1.1268'. [ 455.146853][T10748] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1268'. [ 455.272352][T10752] net_ratelimit: 109 callbacks suppressed [ 455.272378][T10752] IPv4: Oversized IP packet from 172.20.20.24 [ 455.287546][ C1] IPv4: Oversized IP packet from 172.20.20.24 [ 455.294302][ C1] IPv4: Oversized IP packet from 172.20.20.24 [ 455.483170][T10764] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1276'. [ 455.542753][T10764] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1276'. [ 455.572601][T10764] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1276'. [ 456.866379][ T5881] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 457.048299][ T5881] usb 1-1: config 0 has an invalid interface number: 185 but max is 0 [ 457.072747][ T5881] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 457.097479][ T5881] usb 1-1: config 0 has no interface number 0 [ 457.114453][ T5881] usb 1-1: config 0 interface 185 has no altsetting 0 [ 457.175588][ T5881] usb 1-1: New USB device found, idVendor=12d1, idProduct=1c1f, bcdDevice=63.46 [ 457.210079][ T5881] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 457.281570][ T5881] usb 1-1: config 0 descriptor?? [ 457.840949][T10793] netlink: 272 bytes leftover after parsing attributes in process `syz.1.1283'. [ 457.954195][T10794] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1283'. [ 458.002686][ T5881] rndis_host 1-1:0.185: skipping garbage [ 458.008465][ T5881] rndis_host 1-1:0.185: skipping garbage [ 458.014284][ T5881] usb 1-1: bad CDC descriptors [ 458.029287][ T5881] option 1-1:0.185: GSM modem (1-port) converter detected [ 458.302236][ T5882] usb 1-1: USB disconnect, device number 28 [ 458.328065][ T5882] option 1-1:0.185: device disconnected [ 462.533516][T10830] @: renamed from vlan0 (while UP) [ 462.976951][T10831] xt_hashlimit: overflow, try lower: 1125899906842624/8 [ 464.282594][T10847] netlink: 'syz.1.1300': attribute type 2 has an invalid length. [ 465.383413][ T5887] usb 7-1: new high-speed USB device number 20 using dummy_hcd [ 465.533354][ T5887] usb 7-1: Using ep0 maxpacket: 16 [ 465.558316][ T5887] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid wMaxPacketSize 0 [ 465.569235][ T5887] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 0 [ 465.643001][ T5887] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 465.673360][ T5887] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 465.702677][ T5887] usb 7-1: New USB device found, idVendor=1608, idProduct=0303, bcdDevice=a1.cb [ 465.712175][ T5887] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 465.738333][ T5887] usb 7-1: Product: syz [ 465.742566][ T5887] usb 7-1: Manufacturer: syz [ 465.788536][ T5887] usb 7-1: SerialNumber: syz [ 465.817016][ T5887] usb 7-1: config 0 descriptor?? [ 465.834812][ T5887] io_ti 7-1:0.0: required endpoints missing [ 466.109787][T10862] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1304'. [ 466.567507][ T5887] usb 7-1: USB disconnect, device number 20 [ 467.991662][ T29] audit: type=1804 audit(467.921:81): pid=10886 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.5.1311" name="/newroot/171/bus/file1" dev="overlay" ino=937 res=1 errno=0 [ 469.934276][T10890] futex_wake_op: syz.6.1312 tries to shift op by 144; fix this program [ 469.943840][T10890] netlink: 'syz.6.1312': attribute type 1 has an invalid length. [ 469.952225][T10890] netlink: 224 bytes leftover after parsing attributes in process `syz.6.1312'. [ 470.183938][ T5882] usb 3-1: new high-speed USB device number 42 using dummy_hcd [ 470.523963][ T5882] usb 3-1: Using ep0 maxpacket: 32 [ 470.570521][ T5882] usb 3-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 470.583218][ T5882] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 470.598333][ T5882] usb 3-1: config 0 descriptor?? [ 470.606666][ T5882] gspca_main: nw80x-2.14.0 probing 055f:d001 [ 471.031836][ T5882] gspca_nw80x: reg_r err -71 [ 471.036756][ T5882] nw80x 3-1:0.0: probe with driver nw80x failed with error -71 [ 471.053392][ T5882] usb 3-1: USB disconnect, device number 42 [ 471.327482][T10919] input: syz0 as /devices/virtual/input/input30 [ 472.187799][T10921] nvme_fabrics: unknown parameter or missing value ' ' in ctrl creation request [ 473.174306][ T5882] usb 2-1: new high-speed USB device number 44 using dummy_hcd [ 473.336513][ T5882] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 473.390734][T10933] netlink: 60 bytes leftover after parsing attributes in process `syz.5.1325'. [ 473.407022][ T5882] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 473.430392][ T29] audit: type=1804 audit(473.370:82): pid=10933 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.5.1325" name="/newroot/174/file0/bus" dev="hugetlbfs" ino=30810 res=1 errno=0 [ 473.444070][ T5882] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 473.520002][ T5882] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0 [ 473.539509][ T5882] usb 2-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 473.552545][ T5882] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 473.553225][T10935] veth1_to_bridge: entered allmulticast mode [ 473.591214][ T5882] usb 2-1: config 0 descriptor?? [ 474.107219][ T5880] usb 7-1: new high-speed USB device number 21 using dummy_hcd [ 474.125266][ T5882] hdpvr 2-1:0.0: firmware version 0x1d dated [ 474.131983][ T5882] hdpvr 2-1:0.0: untested firmware, the driver might not work. [ 474.189319][ T63] bridge0: port 2(bridge_slave_1) entered disabled state [ 474.410658][ T5880] usb 7-1: Using ep0 maxpacket: 32 [ 474.447719][ T5880] usb 7-1: unable to get BOS descriptor or descriptor too short [ 475.319471][ T5880] usb 7-1: config 12 has an invalid interface number: 184 but max is 0 [ 475.327995][ T5880] usb 7-1: config 12 has no interface number 0 [ 475.345302][ T5880] usb 7-1: config 12 interface 184 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 16 [ 475.398252][ T5882] hdpvr 2-1:0.0: Could not setup controls [ 475.441063][T10948] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 475.448414][ T5882] hdpvr 2-1:0.0: registering videodev failed [ 475.471982][ T5882] hdpvr 2-1:0.0: probe with driver hdpvr failed with error -71 [ 475.484885][ T5880] usb 7-1: New USB device found, idVendor=0499, idProduct=100d, bcdDevice=84.a2 [ 475.494317][ T5880] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 475.514326][ T5880] usb 7-1: Product: ä—­ê‰à¿¥è†«ë»½å¸µäŒ î¬ é•‰ìœ–９僨⦦涳㽙ë²é¦ãµ†á¢¹ïš…ࡳ쿩Ù꧊áªêŠ±äª°å²µå¿”ã±¥â጑웑몲⣟褷廇跉ⶺ໫䇳ì¦é¶·ê »å•«ãˆŠç·˜ç¶¦í“«ï©ï©Ÿæˆ°é„೩࣋渧í†ã‹ˆë‡šëˆ´ê¹•è• í‚霡㾜儴鵪륶讀㨙鬼輧뿀è¸ìº‡ï «ç€î§¦à³·â¢…â­…ì°±è²ã¯ç•ã„Ží‡¥ï—™ì–’æ·‚à¡‘ç˜æ£´é³®ì€™ï¿„ᙼ৪硭ã§í„Žä–‹à¿–胱á¸å»½ï¢³ [ 475.676370][ T5882] usb 2-1: USB disconnect, device number 44 [ 476.430508][ T5880] usb 7-1: Manufacturer: о [ 476.435307][ T5880] usb 7-1: SerialNumber: င [ 476.480409][ T5880] usb 7-1: can't set config #12, error -71 [ 476.494056][ T5880] usb 7-1: USB disconnect, device number 21 [ 476.530117][T10955] batman_adv: batadv0: Adding interface: dummy0 [ 476.572676][T10955] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 476.607359][T10955] batman_adv: batadv0: Interface activated: dummy0 [ 476.688620][T10957] batadv0: mtu less than device minimum [ 476.724669][T10957] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 476.737762][T10957] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 476.750156][T10957] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 476.762882][T10957] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 476.775348][T10957] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 476.787735][T10957] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 476.800168][T10957] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 476.812510][T10957] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 480.268919][T10978] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 481.735414][ T5948] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 481.905482][ T5948] usb 6-1: Using ep0 maxpacket: 32 [ 481.917119][ T5948] usb 6-1: unable to get BOS descriptor or descriptor too short [ 481.928501][ T5948] usb 6-1: config 1 interface 0 has no altsetting 0 [ 481.999635][ T5948] usb 6-1: New USB device found, idVendor=05ac, idProduct=0259, bcdDevice= 0.40 [ 482.035342][ T5948] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 482.043431][ T5948] usb 6-1: Product: syz [ 482.055239][ T5948] usb 6-1: Manufacturer: syz [ 482.059888][ T5948] usb 6-1: SerialNumber: syz [ 482.331908][T11016] veth0: entered promiscuous mode [ 482.368161][T11016] team0: entered promiscuous mode [ 482.387559][T11016] team_slave_0: entered promiscuous mode [ 482.419344][T11016] team_slave_1: entered promiscuous mode [ 482.721695][T11030] FAULT_INJECTION: forcing a failure. [ 482.721695][T11030] name failslab, interval 1, probability 0, space 0, times 0 [ 482.735014][T11030] CPU: 1 UID: 0 PID: 11030 Comm: syz.6.1356 Not tainted 6.12.0-rc4-syzkaller-00281-g284a2f899676 #0 [ 482.745821][T11030] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 482.755892][T11030] Call Trace: [ 482.759175][T11030] [ 482.762112][T11030] dump_stack_lvl+0x241/0x360 [ 482.766807][T11030] ? __pfx_dump_stack_lvl+0x10/0x10 [ 482.772009][T11030] ? __pfx__printk+0x10/0x10 [ 482.776612][T11030] ? fs_reclaim_acquire+0x93/0x130 [ 482.781752][T11030] ? __pfx___might_resched+0x10/0x10 [ 482.787061][T11030] should_fail_ex+0x3b0/0x4e0 [ 482.791748][T11030] ? tomoyo_encode+0x26f/0x540 [ 482.796532][T11030] should_failslab+0xac/0x100 [ 482.801234][T11030] ? tomoyo_encode+0x26f/0x540 [ 482.806013][T11030] __kmalloc_noprof+0xd8/0x400 [ 482.810781][T11030] tomoyo_encode+0x26f/0x540 [ 482.815384][T11030] tomoyo_realpath_from_path+0x59e/0x5e0 [ 482.821036][T11030] tomoyo_mount_permission+0x3bc/0xb80 [ 482.826513][T11030] ? stack_depot_save_flags+0x29/0x830 [ 482.831979][T11030] ? tomoyo_mount_permission+0x295/0xb80 [ 482.837622][T11030] ? __pfx_tomoyo_mount_permission+0x10/0x10 [ 482.843645][T11030] ? hook_sb_mount+0x122/0x390 [ 482.848411][T11030] ? security_sb_mount+0x22/0x2f0 [ 482.853450][T11030] security_sb_mount+0xe0/0x2f0 [ 482.858317][T11030] path_mount+0xb9/0xfa0 [ 482.862574][T11030] ? kmem_cache_free+0x1a2/0x420 [ 482.867541][T11030] ? user_path_at+0x44/0x60 [ 482.872060][T11030] __se_sys_mount+0x2d6/0x3c0 [ 482.876776][T11030] ? __pfx___se_sys_mount+0x10/0x10 [ 482.881993][T11030] ? __x64_sys_mount+0x20/0xc0 [ 482.886794][T11030] do_syscall_64+0xf3/0x230 [ 482.891324][T11030] ? clear_bhb_loop+0x35/0x90 [ 482.896007][T11030] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 482.901906][T11030] RIP: 0033:0x7efdfe77e719 [ 482.906333][T11030] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 482.925948][T11030] RSP: 002b:00007efdff4aa038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 482.934390][T11030] RAX: ffffffffffffffda RBX: 00007efdfe936058 RCX: 00007efdfe77e719 [ 482.942382][T11030] RDX: 0000000020000280 RSI: 0000000020000100 RDI: 0000000000000000 [ 482.950361][T11030] RBP: 00007efdff4aa090 R08: 00000000200002c0 R09: 0000000000000000 [ 482.958341][T11030] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 482.966317][T11030] R13: 0000000000000000 R14: 00007efdfe936058 R15: 00007ffeb1f21a68 [ 482.974309][T11030] [ 482.978803][T11030] ERROR: Out of memory at tomoyo_realpath_from_path. [ 483.077064][T11032] FAULT_INJECTION: forcing a failure. [ 483.077064][T11032] name failslab, interval 1, probability 0, space 0, times 0 [ 483.090534][T11032] CPU: 1 UID: 0 PID: 11032 Comm: syz.0.1357 Not tainted 6.12.0-rc4-syzkaller-00281-g284a2f899676 #0 [ 483.101362][T11032] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 483.111447][T11032] Call Trace: [ 483.114751][T11032] [ 483.117700][T11032] dump_stack_lvl+0x241/0x360 [ 483.122415][T11032] ? __pfx_dump_stack_lvl+0x10/0x10 [ 483.127629][T11032] ? __pfx__printk+0x10/0x10 [ 483.132239][T11032] ? fs_reclaim_acquire+0x93/0x130 [ 483.137373][T11032] ? __pfx___might_resched+0x10/0x10 [ 483.142673][T11032] should_fail_ex+0x3b0/0x4e0 [ 483.147371][T11032] ? tomoyo_encode+0x26f/0x540 [ 483.152181][T11032] should_failslab+0xac/0x100 [ 483.156892][T11032] ? tomoyo_encode+0x26f/0x540 [ 483.161673][T11032] __kmalloc_noprof+0xd8/0x400 [ 483.166454][T11032] tomoyo_encode+0x26f/0x540 [ 483.171063][T11032] tomoyo_realpath_from_path+0x59e/0x5e0 [ 483.176715][T11032] tomoyo_path_number_perm+0x23a/0x880 [ 483.182184][T11032] ? tomoyo_path_number_perm+0x208/0x880 [ 483.187822][T11032] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 483.193849][T11032] ? __fget_files+0x29/0x470 [ 483.198451][T11032] ? __fget_files+0x3f3/0x470 [ 483.203146][T11032] security_file_ioctl+0xc6/0x2a0 [ 483.208187][T11032] __se_sys_ioctl+0x47/0x170 [ 483.212790][T11032] do_syscall_64+0xf3/0x230 [ 483.217572][T11032] ? clear_bhb_loop+0x35/0x90 [ 483.222276][T11032] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 483.228192][T11032] RIP: 0033:0x7f92e537e719 [ 483.232610][T11032] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 483.252225][T11032] RSP: 002b:00007f92e4dff038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 483.260648][T11032] RAX: ffffffffffffffda RBX: 00007f92e5535f80 RCX: 00007f92e537e719 [ 483.268630][T11032] RDX: 0000000020000040 RSI: 00000000401054d5 RDI: 0000000000000003 [ 483.276715][T11032] RBP: 00007f92e4dff090 R08: 0000000000000000 R09: 0000000000000000 [ 483.284686][T11032] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 483.292663][T11032] R13: 0000000000000000 R14: 00007f92e5535f80 R15: 00007ffec6e11378 [ 483.300662][T11032] [ 483.315680][T11032] ERROR: Out of memory at tomoyo_realpath_from_path. [ 483.677340][ T5948] input: bcm5974 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/input/input31 [ 484.064256][ T5189] bcm5974 6-1:1.0: could not read from device [ 484.500461][ T5948] usb 6-1: USB disconnect, device number 14 [ 484.576176][T11047] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1363'. [ 484.686115][T11047] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1363'. [ 486.215818][ T5948] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 486.296858][ T5880] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 486.491662][ T5880] usb 1-1: Using ep0 maxpacket: 8 [ 486.512931][ T5880] usb 1-1: New USB device found, idVendor=0545, idProduct=800c, bcdDevice= 3.0a [ 486.587606][ T5880] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 486.664682][ T5880] usb 1-1: Product: syz [ 486.698819][ T5880] usb 1-1: Manufacturer: syz [ 486.728645][ T5880] usb 1-1: SerialNumber: syz [ 486.838754][ T5880] usb 1-1: config 0 descriptor?? [ 486.994298][ T5880] gspca_main: xirlink-cit-2.14.0 probing 0545:800c [ 487.013002][ T5880] input: xirlink-cit as /devices/platform/dummy_hcd.0/usb1/1-1/input/input32 [ 487.126616][ T5948] usb 6-1: Using ep0 maxpacket: 16 [ 487.136194][ T5948] usb 6-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 487.145300][ T5948] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 487.164249][ T5948] usb 6-1: Product: syz [ 487.173452][ T5948] usb 6-1: Manufacturer: syz [ 487.178619][ T5948] usb 6-1: SerialNumber: syz [ 487.206951][ T5948] r8152-cfgselector 6-1: Unknown version 0x0000 [ 487.213291][ T5948] r8152-cfgselector 6-1: config 0 descriptor?? [ 487.449981][ T5948] r8152-cfgselector 6-1: Needed 1 retries to read version [ 487.473331][ T5948] r8152-cfgselector 6-1: Unknown version 0x0000 [ 487.496952][ T5948] r8152-cfgselector 6-1: bad CDC descriptors [ 487.637689][ T5917] usb 1-1: USB disconnect, device number 29 [ 488.905098][ T5880] r8152-cfgselector 6-1: USB disconnect, device number 15 [ 489.244332][T11098] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1378'. [ 489.292945][T11098] ipip0: entered promiscuous mode [ 491.163911][ T29] audit: type=1326 audit(491.108:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11114 comm="syz.1.1384" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a2b57e719 code=0x7ffc0000 [ 491.175895][T11115] pimreg: entered allmulticast mode [ 491.244427][ T29] audit: type=1326 audit(491.108:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11114 comm="syz.1.1384" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a2b57e719 code=0x7ffc0000 [ 491.326536][ T29] audit: type=1326 audit(491.108:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11114 comm="syz.1.1384" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5a2b57e719 code=0x7ffc0000 [ 491.486370][ T29] audit: type=1326 audit(491.108:86): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11114 comm="syz.1.1384" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a2b57e719 code=0x7ffc0000 [ 491.541226][ T29] audit: type=1326 audit(491.108:87): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11114 comm="syz.1.1384" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5a2b57e719 code=0x7ffc0000 [ 491.577551][T11121] netlink: 'syz.1.1384': attribute type 1 has an invalid length. [ 491.599516][ T29] audit: type=1326 audit(491.108:88): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11114 comm="syz.1.1384" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a2b57e719 code=0x7ffc0000 [ 491.621041][ T29] audit: type=1326 audit(491.108:89): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11114 comm="syz.1.1384" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a2b57e719 code=0x7ffc0000 [ 491.642383][ T29] audit: type=1326 audit(491.108:90): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11114 comm="syz.1.1384" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f5a2b57e719 code=0x7ffc0000 [ 491.664001][ T29] audit: type=1326 audit(491.108:91): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11114 comm="syz.1.1384" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a2b57e719 code=0x7ffc0000 [ 491.685729][ T29] audit: type=1326 audit(491.108:92): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11114 comm="syz.1.1384" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f5a2b57e719 code=0x7ffc0000 [ 493.176948][ T5879] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 493.296949][ T5948] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 493.473773][ T5948] usb 6-1: config index 0 descriptor too short (expected 65323, got 119) [ 493.484041][ T5948] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 493.526769][ T5879] usb 1-1: Using ep0 maxpacket: 16 [ 493.623488][ T5879] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 493.665130][ T5948] usb 6-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 493.691219][ T5879] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 493.726179][ T5948] usb 6-1: config 1 has no interface number 1 [ 493.746496][ T5879] usb 1-1: New USB device found, idVendor=1b96, idProduct=0008, bcdDevice= 0.00 [ 493.756322][ T5948] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 493.803620][ T5879] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 493.840994][ T5948] usb 6-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 493.867687][ T5879] usb 1-1: config 0 descriptor?? [ 493.886426][ T5948] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 493.920318][ T5948] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 493.937083][ T5948] usb 6-1: Product: syz [ 493.941715][ T5948] usb 6-1: Manufacturer: syz [ 493.946399][ T5948] usb 6-1: SerialNumber: syz [ 494.195533][ T5948] usb 6-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 494.220748][ T5948] usb 6-1: USB disconnect, device number 16 [ 494.651199][ T6151] udevd[6151]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 495.521646][ T5879] ntrig 0003:1B96:0008.0008: unbalanced collection at end of report description [ 495.628700][ T5879] ntrig 0003:1B96:0008.0008: parse failed [ 495.701284][ T5879] ntrig 0003:1B96:0008.0008: probe with driver ntrig failed with error -22 [ 495.727436][ T6390] usb 7-1: new high-speed USB device number 22 using dummy_hcd [ 495.854231][ T5879] usb 1-1: USB disconnect, device number 30 [ 495.948837][ T6390] usb 7-1: config 0 has an invalid interface number: 185 but max is 0 [ 495.963636][ T6390] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 495.974200][ T6390] usb 7-1: config 0 has no interface number 0 [ 495.980718][ T6390] usb 7-1: config 0 interface 185 has no altsetting 0 [ 495.987917][ T6390] usb 7-1: New USB device found, idVendor=12d1, idProduct=1c1f, bcdDevice=63.46 [ 495.998046][ T6390] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 496.020216][ T6390] usb 7-1: config 0 descriptor?? [ 496.029170][ T6390] rndis_host 7-1:0.185: skipping garbage [ 496.045206][ T6390] rndis_host 7-1:0.185: skipping garbage [ 496.054157][ T6390] usb 7-1: bad CDC descriptors [ 496.067859][ T6390] option 7-1:0.185: GSM modem (1-port) converter detected [ 496.207528][T11184] FAULT_INJECTION: forcing a failure. [ 496.207528][T11184] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 496.221463][T11184] CPU: 0 UID: 0 PID: 11184 Comm: syz.1.1405 Not tainted 6.12.0-rc4-syzkaller-00281-g284a2f899676 #0 [ 496.232279][T11184] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 496.242407][T11184] Call Trace: [ 496.245711][T11184] [ 496.248667][T11184] dump_stack_lvl+0x241/0x360 [ 496.250153][ T6390] usb 7-1: USB disconnect, device number 22 [ 496.253373][T11184] ? __pfx_dump_stack_lvl+0x10/0x10 [ 496.264491][T11184] ? __pfx__printk+0x10/0x10 [ 496.269120][T11184] ? snprintf+0xda/0x120 [ 496.273233][ T6390] option 7-1:0.185: device disconnected [ 496.273393][T11184] should_fail_ex+0x3b0/0x4e0 [ 496.283650][T11184] _copy_to_user+0x31/0xb0 [ 496.288104][T11184] simple_read_from_buffer+0xca/0x150 [ 496.293555][T11184] proc_fail_nth_read+0x1e9/0x250 [ 496.298617][T11184] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 496.304206][T11184] ? rw_verify_area+0x568/0x6f0 [ 496.309095][T11184] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 496.314680][T11184] vfs_read+0x1fc/0xb70 [ 496.318872][T11184] ? fdget_pos+0x24e/0x320 [ 496.323332][T11184] ? __pfx_vfs_read+0x10/0x10 [ 496.328058][T11184] ? __fget_files+0x3f3/0x470 [ 496.332804][T11184] ? fdget_pos+0x24e/0x320 [ 496.337274][T11184] ksys_read+0x183/0x2b0 [ 496.341557][T11184] ? __pfx_ksys_read+0x10/0x10 [ 496.346370][T11184] ? do_syscall_64+0x100/0x230 [ 496.351155][T11184] ? do_syscall_64+0xb6/0x230 [ 496.355837][T11184] do_syscall_64+0xf3/0x230 [ 496.360357][T11184] ? clear_bhb_loop+0x35/0x90 [ 496.365079][T11184] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 496.370988][T11184] RIP: 0033:0x7f5a2b57d15c [ 496.375421][T11184] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 69 8e 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 bf 8e 02 00 48 [ 496.395098][T11184] RSP: 002b:00007f5a2c376030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 496.403600][T11184] RAX: ffffffffffffffda RBX: 00007f5a2b735f80 RCX: 00007f5a2b57d15c [ 496.411590][T11184] RDX: 000000000000000f RSI: 00007f5a2c3760a0 RDI: 0000000000000005 [ 496.419584][T11184] RBP: 00007f5a2c376090 R08: 0000000000000000 R09: 0000000000000000 [ 496.427586][T11184] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 496.435582][T11184] R13: 0000000000000000 R14: 00007f5a2b735f80 R15: 00007ffd29f0e2e8 [ 496.443604][T11184] [ 498.222834][T11205] net_ratelimit: 11 callbacks suppressed [ 498.222857][T11205] A link change request failed with some changes committed already. Interface veth0_to_bond may have been left with an inconsistent configuration, please check. [ 498.451688][T11212] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1411'. [ 498.560639][ T5880] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 498.917300][T11211] netlink: 300 bytes leftover after parsing attributes in process `syz.1.1414'. [ 499.123657][T11211] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1414'. [ 499.177630][ T5880] usb 6-1: Using ep0 maxpacket: 8 [ 499.189514][ T5880] usb 6-1: config 0 has an invalid interface number: 151 but max is 0 [ 499.218533][T11217] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 499.263139][T11217] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 499.300544][ T5880] usb 6-1: config 0 has no interface number 0 [ 499.483051][ T5880] usb 6-1: config 0 interface 151 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 499.521744][ T5917] IPVS: starting estimator thread 0... [ 499.637748][T11219] IPVS: using max 18 ests per chain, 43200 per kthread [ 499.764217][ T5880] usb 6-1: config 0 interface 151 altsetting 0 has an invalid endpoint descriptor of length 2, skipping [ 499.786297][T11220] netlink: 44 bytes leftover after parsing attributes in process `syz.6.1416'. [ 499.807341][ T5880] usb 6-1: config 0 interface 151 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 499.920047][ T5880] usb 6-1: New USB device found, idVendor=0499, idProduct=500a, bcdDevice=e7.b7 [ 499.934533][ T5880] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 499.957400][ T5880] usb 6-1: Product: syz [ 499.961626][ T5880] usb 6-1: Manufacturer: syz [ 499.994449][ T5880] usb 6-1: SerialNumber: syz [ 500.023005][ T5880] usb 6-1: config 0 descriptor?? [ 500.038584][ T5880] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 500.152935][ T5880] snd-usb-audio 6-1:0.151: probe with driver snd-usb-audio failed with error -2 [ 501.231550][ T6151] udevd[6151]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.151/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 501.377268][T11236] syzkaller1: entered promiscuous mode [ 501.383137][T11236] syzkaller1: entered allmulticast mode [ 501.725990][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.763268][T11236] vcan0: tx drop: invalid da for name 0x0000000000000003 [ 502.006964][ T5917] usb 6-1: USB disconnect, device number 17 [ 503.744632][ T5917] usb 7-1: new high-speed USB device number 23 using dummy_hcd [ 503.861408][T11259] netlink: 300 bytes leftover after parsing attributes in process `syz.5.1428'. [ 503.889322][T11262] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1430'. [ 503.959880][ T5917] usb 7-1: config 0 has an invalid interface number: 185 but max is 0 [ 503.968327][ T5917] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 503.983834][ T5917] usb 7-1: config 0 has no interface number 0 [ 503.990545][ T29] kauditd_printk_skb: 117 callbacks suppressed [ 503.990563][ T29] audit: type=1326 audit(503.916:210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11264 comm="syz.1.1431" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a2b57e719 code=0x7ffc0000 [ 504.264510][ T5917] usb 7-1: config 0 interface 185 has no altsetting 0 [ 504.415988][ T5917] usb 7-1: New USB device found, idVendor=12d1, idProduct=1c1f, bcdDevice=63.46 [ 504.467757][ T29] audit: type=1326 audit(503.916:211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11264 comm="syz.1.1431" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a2b57e719 code=0x7ffc0000 [ 504.640012][ T5917] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 504.669400][ T29] audit: type=1326 audit(503.916:212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11264 comm="syz.1.1431" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f5a2b57e719 code=0x7ffc0000 [ 504.684290][T11267] netlink: 60 bytes leftover after parsing attributes in process `syz.5.1428'. [ 504.711571][ T5917] usb 7-1: config 0 descriptor?? [ 504.730457][ T5917] rndis_host 7-1:0.185: skipping garbage [ 504.739471][ T5917] rndis_host 7-1:0.185: skipping garbage [ 504.750542][ T5917] usb 7-1: bad CDC descriptors [ 504.756444][ T5917] option 7-1:0.185: GSM modem (1-port) converter detected [ 504.856686][ T29] audit: type=1326 audit(503.916:213): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11264 comm="syz.1.1431" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a2b57e719 code=0x7ffc0000 [ 504.945258][ T29] audit: type=1326 audit(503.916:214): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11264 comm="syz.1.1431" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a2b57e719 code=0x7ffc0000 [ 504.976725][ T29] audit: type=1326 audit(503.916:215): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11264 comm="syz.1.1431" exe="/root/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7f5a2b57e719 code=0x7ffc0000 [ 505.728526][ T5917] usb 7-1: USB disconnect, device number 23 [ 505.735506][ T5917] option 7-1:0.185: device disconnected [ 505.748171][ T29] audit: type=1326 audit(503.916:216): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11264 comm="syz.1.1431" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a2b57e719 code=0x7ffc0000 [ 505.876174][ T29] audit: type=1326 audit(503.916:217): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11264 comm="syz.1.1431" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a2b57e719 code=0x7ffc0000 [ 506.012689][ T29] audit: type=1326 audit(503.916:218): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11264 comm="syz.1.1431" exe="/root/syz-executor" sig=0 arch=c000003e syscall=119 compat=0 ip=0x7f5a2b57e719 code=0x7ffc0000 [ 506.143354][ T29] audit: type=1326 audit(503.916:219): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11264 comm="syz.1.1431" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a2b57e719 code=0x7ffc0000 [ 506.277240][T11298] netlink: 60 bytes leftover after parsing attributes in process `syz.6.1438'. [ 506.932208][T11305] UBIFS error (pid: 11305): cannot open "/dev/sg0", error -22 [ 506.997794][T11307] netlink: 44 bytes leftover after parsing attributes in process `syz.6.1442'. [ 510.126127][T11338] netlink: 300 bytes leftover after parsing attributes in process `syz.5.1448'. [ 510.224408][T11339] netlink: 60 bytes leftover after parsing attributes in process `syz.5.1448'. [ 510.390765][T11344] syzkaller1: entered promiscuous mode [ 510.409198][T11344] syzkaller1: entered allmulticast mode [ 511.278807][T11362] netlink: 60 bytes leftover after parsing attributes in process `syz.6.1453'. [ 511.334400][T11361] Process accounting resumed [ 511.372804][T11361] netdevsim netdevsim0 netdevsim0: entered allmulticast mode [ 511.401334][T11364] netlink: 44 bytes leftover after parsing attributes in process `syz.5.1454'. [ 512.875006][T11359] Process accounting resumed [ 513.054564][T11387] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1460'. [ 513.685815][T11397] netlink: 300 bytes leftover after parsing attributes in process `syz.2.1465'. [ 513.726563][T11401] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1466'. [ 513.772918][T11397] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1465'. [ 514.025383][T11408] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1468'. [ 514.213855][T11412] No such timeout policy "syz0" [ 516.239940][ T6390] usb 3-1: new full-speed USB device number 43 using dummy_hcd [ 516.397065][T11442] netlink: 60 bytes leftover after parsing attributes in process `syz.5.1478'. [ 516.411449][ T6390] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 516.427576][ T6390] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 576, setting to 64 [ 516.444066][ T6390] usb 3-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 22 [ 516.461485][ T6390] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 516.473498][ T6390] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 516.488322][ T6390] usb 3-1: SerialNumber: syz [ 516.514654][T11430] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 516.526194][T11430] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 516.536316][ T6390] cdc_acm 3-1:1.0: Control and data interfaces are not separated! [ 516.749213][T11430] : renamed from bond0 (while UP) [ 516.780467][ T6390] cdc_acm 3-1:1.0: ttyACM0: USB ACM device [ 516.818401][ T6390] usb 3-1: USB disconnect, device number 43 [ 517.042222][T11436] netlink: 'syz.1.1476': attribute type 4 has an invalid length. [ 517.747378][T11466] No such timeout policy "syz0" [ 521.011903][T11478] overlayfs: failed to get index nlink (file1/bus, err=-61) [ 521.042554][T11495] loop2: detected capacity change from 0 to 7 [ 521.076381][T11495] Dev loop2: unable to read RDB block 7 [ 521.085965][T11495] loop2: unable to read partition table [ 521.097892][T11495] loop2: partition table beyond EOD, truncated [ 521.108158][T11495] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 521.162629][ T29] kauditd_printk_skb: 11 callbacks suppressed [ 521.162646][ T29] audit: type=1804 audit(521.064:231): pid=11478 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz.2.1489" name="/newroot/286/bus/bus" dev="overlay" ino=1532 res=1 errno=0 [ 521.245166][T11498] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1495'. [ 521.295176][ T29] audit: type=1800 audit(521.084:232): pid=11478 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.2.1489" name="bus" dev="overlay" ino=1532 res=0 errno=0 [ 523.141145][T11512] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 523.147586][T11512] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 523.157685][T11512] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 523.730697][ T5948] usb 3-1: new high-speed USB device number 44 using dummy_hcd [ 524.619980][T11542] tipc: Enabling of bearer rejected, failed to enable media [ 524.650979][ T5948] usb 3-1: Using ep0 maxpacket: 8 [ 524.691396][ T5879] usb 6-1: new full-speed USB device number 18 using dummy_hcd [ 524.839707][ T5948] usb 3-1: config index 0 descriptor too short (expected 6427, got 27) [ 524.859575][ T5948] usb 3-1: config 0 has too many interfaces: 241, using maximum allowed: 32 [ 524.889929][ T5879] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 524.919478][ T5879] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 524.931533][ T5948] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 241 [ 524.982621][ T5948] usb 3-1: config 0 has no interface number 0 [ 524.988826][ T5879] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid maxpacket 121, setting to 64 [ 525.015587][ T5948] usb 3-1: config 0 interface 21 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 525.040072][T11544] netlink: 300 bytes leftover after parsing attributes in process `syz.1.1510'. [ 525.079244][ T5879] usb 6-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 525.090454][ T5948] usb 3-1: config 0 interface 21 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 525.113705][T11544] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1510'. [ 525.130593][ T5879] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 525.170338][ T54] Bluetooth: hci3: command 0x0c1a tx timeout [ 525.176421][ T54] Bluetooth: hci2: command 0x0406 tx timeout [ 525.182594][ T54] Bluetooth: hci1: command 0x0406 tx timeout [ 525.186894][ T5948] usb 3-1: config 0 interface 21 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 525.207755][ T5879] usb 6-1: Product: syz [ 525.218731][ T5879] usb 6-1: Manufacturer: syz [ 525.239429][ T5879] usb 6-1: SerialNumber: syz [ 525.246418][ T5948] usb 3-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=92.d4 [ 525.257789][ T5948] usb 3-1: New USB device strings: Mfr=228, Product=255, SerialNumber=0 [ 525.267776][ T5879] usb 6-1: config 0 descriptor?? [ 525.339305][ T29] audit: type=1326 audit(525.274:233): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11548 comm="syz.0.1512" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f92e537e719 code=0x0 [ 525.439480][ T5948] usb 3-1: Product: syz [ 526.180512][ T5948] usb 3-1: Manufacturer: syz [ 526.187744][ T5948] usb 3-1: config 0 descriptor?? [ 526.195320][ T5948] usb 3-1: can't set config #0, error -71 [ 526.202921][ T5948] usb 3-1: USB disconnect, device number 44 [ 526.284908][T11533] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 526.340659][T11533] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 526.352687][ T5879] usb 6-1: ucan: probing device on interface #0 [ 528.983874][ T5879] usb 6-1: ucan: could not read protocol version, ret=-71 [ 529.531726][ T5879] usb 6-1: ucan: probe failed; try to update the device firmware [ 529.919277][ T5879] usb 6-1: USB disconnect, device number 18 [ 530.260929][T11575] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1520'. [ 530.641442][ T29] audit: type=1804 audit(530.263:234): pid=11575 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.2.1520" name="/newroot/290/file0/bus" dev="hugetlbfs" ino=32408 res=1 errno=0 [ 531.101106][T11581] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1522'. [ 531.144929][T11583] program syz.1.1523 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 531.341895][T11583] netlink: 'syz.1.1523': attribute type 10 has an invalid length. [ 531.356153][T11583] syz_tun: entered promiscuous mode [ 531.429360][T11583] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 531.526526][T11598] netlink: 60 bytes leftover after parsing attributes in process `syz.5.1527'. [ 531.715423][ T29] audit: type=1804 audit(531.513:235): pid=11598 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.5.1527" name="/newroot/203/file0/bus" dev="hugetlbfs" ino=32451 res=1 errno=0 [ 532.354154][T11601] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1528'. [ 532.491489][ T29] audit: type=1804 audit(532.403:236): pid=11601 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.1.1528" name="/newroot/308/file0/bus" dev="hugetlbfs" ino=32468 res=1 errno=0 [ 533.132366][T11611] No such timeout policy "syz0" [ 533.374513][T11606] nfs: Unknown parameter 'wlan1' [ 533.570633][T11606] netlink: 'syz.1.1531': attribute type 3 has an invalid length. [ 533.602362][T11613] netlink: 'syz.1.1531': attribute type 3 has an invalid length. [ 533.644588][T11606] netlink: 130984 bytes leftover after parsing attributes in process `syz.1.1531'. [ 533.687690][T11613] netlink: 130984 bytes leftover after parsing attributes in process `syz.1.1531'. [ 534.222011][ T5882] usb 3-1: new high-speed USB device number 45 using dummy_hcd [ 534.371452][ T5882] usb 3-1: Using ep0 maxpacket: 16 [ 534.378981][ T5882] usb 3-1: unable to get BOS descriptor or descriptor too short [ 534.388189][ T5882] usb 3-1: config 7 has an invalid interface number: 79 but max is 0 [ 534.399595][ T5882] usb 3-1: config 7 has no interface number 0 [ 534.433261][ T5882] usb 3-1: config 7 interface 79 altsetting 6 endpoint 0xF has invalid maxpacket 512, setting to 64 [ 534.471106][ T5882] usb 3-1: config 7 interface 79 altsetting 6 endpoint 0x7 has an invalid bInterval 64, changing to 10 [ 534.521169][ T5882] usb 3-1: config 7 interface 79 has no altsetting 0 [ 534.636342][ T5882] usb 3-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=f4.98 [ 534.646073][ T5882] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 534.654401][ T5882] usb 3-1: Product: syz [ 534.658595][ T5882] usb 3-1: Manufacturer: syz [ 534.663328][ T5882] usb 3-1: SerialNumber: syz [ 534.967987][T11639] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1538'. [ 535.073514][ T29] audit: type=1804 audit(534.973:237): pid=11639 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.1.1538" name="/newroot/311/file0/bus" dev="hugetlbfs" ino=32538 res=1 errno=0 [ 535.352803][ T5882] usb 3-1: USB disconnect, device number 45 [ 535.814608][T11642] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1540'. [ 535.972249][T11647] FAULT_INJECTION: forcing a failure. [ 535.972249][T11647] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 536.041102][T11647] CPU: 0 UID: 0 PID: 11647 Comm: syz.0.1542 Not tainted 6.12.0-rc4-syzkaller-00281-g284a2f899676 #0 [ 536.051939][T11647] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 536.062022][T11647] Call Trace: [ 536.065311][T11647] [ 536.068249][T11647] dump_stack_lvl+0x241/0x360 [ 536.072954][T11647] ? __pfx_dump_stack_lvl+0x10/0x10 [ 536.078187][T11647] ? __pfx__printk+0x10/0x10 [ 536.082793][T11647] ? snprintf+0xda/0x120 [ 536.087053][T11647] should_fail_ex+0x3b0/0x4e0 [ 536.091764][T11647] _copy_to_user+0x31/0xb0 [ 536.096210][T11647] simple_read_from_buffer+0xca/0x150 [ 536.101603][T11647] proc_fail_nth_read+0x1e9/0x250 [ 536.106644][T11647] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 536.112206][T11647] ? rw_verify_area+0x568/0x6f0 [ 536.117070][T11647] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 536.122637][T11647] vfs_read+0x1fc/0xb70 [ 536.126810][T11647] ? fdget_pos+0x24e/0x320 [ 536.131239][T11647] ? __pfx_vfs_read+0x10/0x10 [ 536.135926][T11647] ? __fget_files+0x3f3/0x470 [ 536.140616][T11647] ? fdget_pos+0x24e/0x320 [ 536.145044][T11647] ksys_read+0x183/0x2b0 [ 536.149298][T11647] ? __pfx_ksys_read+0x10/0x10 [ 536.154069][T11647] ? do_syscall_64+0x100/0x230 [ 536.158890][T11647] ? do_syscall_64+0xb6/0x230 [ 536.163591][T11647] do_syscall_64+0xf3/0x230 [ 536.168133][T11647] ? clear_bhb_loop+0x35/0x90 [ 536.172835][T11647] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 536.178741][T11647] RIP: 0033:0x7f92e537d15c [ 536.183164][T11647] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 69 8e 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 bf 8e 02 00 48 [ 536.202789][T11647] RSP: 002b:00007f92e4dff030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 536.211216][T11647] RAX: ffffffffffffffda RBX: 00007f92e5535f80 RCX: 00007f92e537d15c [ 536.219191][T11647] RDX: 000000000000000f RSI: 00007f92e4dff0a0 RDI: 0000000000000004 [ 536.227163][T11647] RBP: 00007f92e4dff090 R08: 0000000000000000 R09: 0000000000000000 [ 536.235141][T11647] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 536.243117][T11647] R13: 0000000000000000 R14: 00007f92e5535f80 R15: 00007ffec6e11378 [ 536.251108][T11647] [ 538.479666][T11674] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1550'. [ 538.959438][T11681] netlink: 32 bytes leftover after parsing attributes in process `syz.6.1553'. [ 539.808809][T11685] sp0: Synchronizing with TNC [ 539.846549][T11688] ieee802154 phy0 wpan0: encryption failed: -22 [ 539.871558][T11685] sp0: Found TNC [ 540.123936][T11696] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1558'. [ 540.532463][ T29] audit: type=1804 audit(540.142:238): pid=11696 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.1.1558" name="/newroot/317/file0/bus" dev="hugetlbfs" ino=32618 res=1 errno=0 [ 540.679947][T11692] [U] è` [ 541.000624][T11712] devpts: called with bogus options [ 543.252761][T11547] Bluetooth: hci1: command 0x0406 tx timeout [ 543.264109][T11704] Bluetooth: hci1: Opcode 0x0c1a failed: -110 [ 543.396978][T11746] netlink: 103 bytes leftover after parsing attributes in process `syz.0.1570'. [ 543.832003][T11704] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 544.242288][ T11] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 544.292876][T11763] 9pnet_fd: Insufficient options for proto=fd [ 544.501529][ T11] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 544.531261][T11769] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1579'. [ 544.545833][ T54] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 544.556256][ T54] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 544.566191][ T54] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 544.579863][ T54] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 544.588609][ T54] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 544.596580][ T54] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 544.661093][ T11] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 544.749422][ T11] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 544.942325][T11765] chnl_net:caif_netlink_parms(): no params data found [ 545.510749][ T54] Bluetooth: hci2: command 0x0406 tx timeout [ 545.569100][ T11] bridge_slave_1: left allmulticast mode [ 545.575136][ T11] bridge_slave_1: left promiscuous mode [ 546.213133][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 546.363869][ T11] bridge_slave_0: left allmulticast mode [ 546.487984][ T11] bridge_slave_0: left promiscuous mode [ 546.526699][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 546.624169][ T5887] usb 2-1: new high-speed USB device number 45 using dummy_hcd [ 546.702425][T11547] Bluetooth: hci3: command tx timeout [ 546.793780][ T5887] usb 2-1: Using ep0 maxpacket: 32 [ 546.805347][ T5887] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 546.818764][ T5887] usb 2-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80 [ 546.828518][ T5887] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 546.836970][ T5887] usb 2-1: Product: syz [ 546.841364][ T5887] usb 2-1: Manufacturer: syz [ 546.846613][ T5887] usb 2-1: SerialNumber: syz [ 546.863798][ T5887] usb 2-1: config 0 descriptor?? [ 546.870784][ T5887] cdc_ether 2-1:0.0: skipping garbage [ 546.876960][ T5887] usb 2-1: bad CDC descriptors [ 546.882199][ T5887] usb 2-1: unsupported MDLM descriptors [ 547.172361][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 547.194210][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 547.209682][ T11] bond0 (unregistering): Released all slaves [ 547.370116][ T11] bond1 (unregistering): Released all slaves [ 547.473254][T11788] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1584'. [ 547.583262][T11547] Bluetooth: hci2: command 0x0406 tx timeout [ 547.930501][T11765] bridge0: port 1(bridge_slave_0) entered blocking state [ 547.949032][T11765] bridge0: port 1(bridge_slave_0) entered disabled state [ 547.959402][T11765] bridge_slave_0: entered allmulticast mode [ 547.967147][T11765] bridge_slave_0: entered promiscuous mode [ 547.975827][T11765] bridge0: port 2(bridge_slave_1) entered blocking state [ 547.983994][T11765] bridge0: port 2(bridge_slave_1) entered disabled state [ 547.991906][T11765] bridge_slave_1: entered allmulticast mode [ 548.009772][T11765] bridge_slave_1: entered promiscuous mode [ 548.488489][T11765] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 548.523726][T11765] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 548.591328][ T5917] usb 2-1: USB disconnect, device number 45 [ 548.707011][ T11] hsr_slave_0: left promiscuous mode [ 548.717228][ T11] hsr_slave_1: left promiscuous mode [ 548.741506][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 548.751699][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 548.769397][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 548.773497][T11547] Bluetooth: hci3: command tx timeout [ 548.777532][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 549.175423][ T11] veth1_macvtap: left promiscuous mode [ 549.181013][ T11] veth0_macvtap: left promiscuous mode [ 549.188920][ T11] veth1_vlan: left promiscuous mode [ 549.202535][ T11] veth0_vlan: left promiscuous mode [ 550.854862][T11547] Bluetooth: hci3: command tx timeout [ 552.883399][ T11] team0 (unregistering): Port device team_slave_1 removed [ 552.937946][T11547] Bluetooth: hci3: command tx timeout [ 552.966353][ T11] team0 (unregistering): Port device team_slave_0 removed [ 553.759115][T11765] team0: Port device team_slave_0 added [ 553.843044][T11765] team0: Port device team_slave_1 added [ 553.889827][T11765] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 553.897007][T11765] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 553.923270][T11765] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 553.936400][T11765] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 553.943385][T11765] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 553.969647][T11765] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 554.032805][T11765] hsr_slave_0: entered promiscuous mode [ 554.059625][T11765] hsr_slave_1: entered promiscuous mode [ 554.397433][T11765] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 554.449700][T11765] Cannot create hsr debugfs directory [ 556.369101][T11765] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 556.402549][T11765] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 556.477226][T11765] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 556.509581][T11765] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 556.540939][ T5917] usb 2-1: new full-speed USB device number 46 using dummy_hcd [ 556.619112][T11765] 8021q: adding VLAN 0 to HW filter on device bond0 [ 556.637004][T11765] 8021q: adding VLAN 0 to HW filter on device team0 [ 556.669108][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 556.676345][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 556.842544][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 556.849759][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 556.879778][ T5917] usb 2-1: unable to get BOS descriptor or descriptor too short [ 557.660301][ T5917] usb 2-1: not running at top speed; connect to a high speed hub [ 557.678975][ T5917] usb 2-1: config 1 interface 0 altsetting 129 endpoint 0x82 has invalid wMaxPacketSize 0 [ 557.692298][ T5917] usb 2-1: config 1 interface 0 altsetting 129 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 557.718887][ T5917] usb 2-1: config 1 interface 0 has no altsetting 0 [ 557.741002][ T5917] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 557.750572][ T5917] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 557.764488][ T5917] usb 2-1: Product: syz [ 557.770604][ T5917] usb 2-1: Manufacturer: syz [ 557.786709][ T5917] usb 2-1: SerialNumber: syz [ 557.983132][T11918] netlink: 300 bytes leftover after parsing attributes in process `syz.6.1618'. [ 558.041308][T11918] netlink: 60 bytes leftover after parsing attributes in process `syz.6.1618'. [ 558.093165][T11894] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 558.126084][T11894] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 558.156580][T11765] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 558.912471][ T5917] cdc_ether 2-1:1.0: probe with driver cdc_ether failed with error -22 [ 558.924752][ T5917] usb 2-1: USB disconnect, device number 46 [ 559.182207][T11765] veth0_vlan: entered promiscuous mode [ 559.220296][T11765] veth1_vlan: entered promiscuous mode [ 559.271173][T11765] veth0_macvtap: entered promiscuous mode [ 559.281363][T11765] veth1_macvtap: entered promiscuous mode [ 559.347242][T11765] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 559.368965][T11765] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 559.402165][T11765] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 559.431000][T11765] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 559.479491][T11765] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 559.548836][T11950] vlan0: entered promiscuous mode [ 559.553931][T11950] vlan0: entered allmulticast mode [ 560.091580][T11765] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 560.294436][T11765] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 560.364503][T11765] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 560.394801][T11765] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 560.444420][T11765] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 560.485689][T11765] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 560.485720][T11765] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 560.485738][T11765] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 560.487739][T11765] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 560.493659][T11765] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 560.493685][T11765] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 560.493705][T11765] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 560.493725][T11765] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 560.625392][ T1898] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 560.625454][ T1898] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 560.793656][ T5879] usb 1-1: new low-speed USB device number 31 using dummy_hcd [ 560.825124][ T63] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 560.833062][ T63] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 561.073422][ T5879] usb 1-1: config 0 has an invalid interface number: 130 but max is 0 [ 561.081961][ T5879] usb 1-1: config 0 has no interface number 0 [ 561.126570][T11973] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1573'. [ 561.183295][T11975] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1634'. [ 561.538263][T11985] netlink: 60 bytes leftover after parsing attributes in process `syz.7.1636'. [ 561.595726][ T29] audit: type=1804 audit(561.520:239): pid=11985 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.7.1636" name="/newroot/1/file0/bus" dev="hugetlbfs" ino=34491 res=1 errno=0 [ 561.616474][ C1] vkms_vblank_simulate: vblank timer overrun [ 561.662396][ T5887] usb 3-1: new high-speed USB device number 46 using dummy_hcd [ 561.865279][ T5887] usb 3-1: Using ep0 maxpacket: 16 [ 561.892807][ T5887] usb 3-1: New USB device found, idVendor=0fc5, idProduct=1227, bcdDevice=d9.10 [ 561.905508][ T5887] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 561.932046][ T5887] usb 3-1: Product: syz [ 561.946585][ T5887] usb 3-1: Manufacturer: syz [ 561.956296][ T5887] usb 3-1: SerialNumber: syz [ 562.182067][ T5887] usb 3-1: config 0 descriptor?? [ 562.255811][ T5887] usbsevseg 3-1:0.0: USB 7 Segment device now attached [ 562.483892][ T5948] usb 3-1: USB disconnect, device number 46 [ 562.514520][ T5948] usbsevseg 3-1:0.0: USB 7 Segment now disconnected [ 563.099070][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.560206][ T5879] usb 1-1: New USB device found, idVendor=0bda, idProduct=1724, bcdDevice=1c.56 [ 563.571401][ T5879] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 563.618907][ T5879] usb 1-1: config 0 descriptor?? [ 563.640434][ T5879] usb 1-1: can't set config #0, error -71 [ 563.662061][ T5879] usb 1-1: USB disconnect, device number 31 [ 565.217655][T12045] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 565.238800][T12045] FAULT_INJECTION: forcing a failure. [ 565.238800][T12045] name failslab, interval 1, probability 0, space 0, times 0 [ 565.252096][T12045] CPU: 1 UID: 0 PID: 12045 Comm: syz.1.1657 Not tainted 6.12.0-rc4-syzkaller-00281-g284a2f899676 #0 [ 565.262892][T12045] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 565.272985][T12045] Call Trace: [ 565.276286][T12045] [ 565.279234][T12045] dump_stack_lvl+0x241/0x360 [ 565.283960][T12045] ? __pfx_dump_stack_lvl+0x10/0x10 [ 565.289205][T12045] ? __pfx__printk+0x10/0x10 [ 565.293833][T12045] ? irqentry_exit+0x63/0x90 [ 565.298455][T12045] ? __pfx___might_resched+0x10/0x10 [ 565.303777][T12045] should_fail_ex+0x3b0/0x4e0 [ 565.308479][T12045] should_failslab+0xac/0x100 [ 565.313196][T12045] ? iopt_reserve_iova+0x1b8/0x2f0 [ 565.318341][T12045] __kmalloc_cache_noprof+0x6c/0x2c0 [ 565.323665][T12045] iopt_reserve_iova+0x1b8/0x2f0 [ 565.328631][T12045] iopt_table_add_domain+0x2e3/0xb10 [ 565.333942][T12045] ? __raw_spin_lock_init+0x45/0x100 [ 565.339258][T12045] ? __pfx_iopt_table_add_domain+0x10/0x10 [ 565.345111][T12045] ? _raw_spin_unlock+0x3e/0x50 [ 565.349997][T12045] iommufd_hwpt_paging_alloc+0x638/0x910 [ 565.355694][T12045] ? __pfx_iommufd_device_do_replace+0x10/0x10 [ 565.361881][T12045] ? __pfx_iommufd_device_do_attach+0x10/0x10 [ 565.367980][T12045] iommufd_device_change_pt+0x37d/0xaa0 [ 565.373572][T12045] ? __pfx_iommufd_device_do_replace+0x10/0x10 [ 565.379782][T12045] iommufd_test+0x19dc/0x3e30 [ 565.384508][T12045] ? __pfx_iommufd_test+0x10/0x10 [ 565.389556][T12045] ? __might_fault+0xaa/0x120 [ 565.394261][T12045] ? __pfx_lock_release+0x10/0x10 [ 565.399338][T12045] ? __might_fault+0xaa/0x120 [ 565.404043][T12045] ? __might_fault+0xc6/0x120 [ 565.408751][T12045] iommufd_fops_ioctl+0x4d6/0x5a0 [ 565.413805][T12045] ? __pfx_iommufd_fops_ioctl+0x10/0x10 [ 565.419386][T12045] ? hook_file_ioctl+0x6e/0x2d0 [ 565.424258][T12045] ? __pfx_iommufd_fops_ioctl+0x10/0x10 [ 565.429837][T12045] __se_sys_ioctl+0xf9/0x170 [ 565.434464][T12045] do_syscall_64+0xf3/0x230 [ 565.439022][T12045] ? clear_bhb_loop+0x35/0x90 [ 565.443726][T12045] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 565.449645][T12045] RIP: 0033:0x7f5a2b57e719 [ 565.454078][T12045] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 565.473717][T12045] RSP: 002b:00007f5a2c334038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 565.482161][T12045] RAX: ffffffffffffffda RBX: 00007f5a2b736130 RCX: 00007f5a2b57e719 [ 565.490150][T12045] RDX: 0000000020000240 RSI: 0000000000003ba0 RDI: 0000000000000006 [ 565.498140][T12045] RBP: 00007f5a2c334090 R08: 0000000000000000 R09: 0000000000000000 [ 565.506130][T12045] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 565.514146][T12045] R13: 0000000000000000 R14: 00007f5a2b736130 R15: 00007ffd29f0e2e8 [ 565.522169][T12045] [ 565.525240][ C1] vkms_vblank_simulate: vblank timer overrun [ 565.534745][ T6390] usb 7-1: new high-speed USB device number 24 using dummy_hcd [ 565.716960][ T6390] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 565.740149][ T6390] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 565.759378][ T6390] usb 7-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 565.861986][ T6390] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 565.873561][ T6390] usb 7-1: config 0 descriptor?? [ 566.183711][T12059] FAULT_INJECTION: forcing a failure. [ 566.183711][T12059] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 566.197171][T12059] CPU: 0 UID: 0 PID: 12059 Comm: syz.1.1664 Not tainted 6.12.0-rc4-syzkaller-00281-g284a2f899676 #0 [ 566.207978][T12059] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 566.218068][T12059] Call Trace: [ 566.221378][T12059] [ 566.224331][T12059] dump_stack_lvl+0x241/0x360 [ 566.229049][T12059] ? __pfx_dump_stack_lvl+0x10/0x10 [ 566.234290][T12059] ? __pfx__printk+0x10/0x10 [ 566.238920][T12059] ? __pfx_lock_release+0x10/0x10 [ 566.243996][T12059] should_fail_ex+0x3b0/0x4e0 [ 566.248709][T12059] _copy_from_iter+0x4ae/0x1e70 [ 566.253610][T12059] ? __virt_addr_valid+0x183/0x530 [ 566.256015][ T5881] usb 3-1: new high-speed USB device number 47 using dummy_hcd [ 566.258739][T12059] ? __pfx__copy_from_iter+0x10/0x10 [ 566.258794][T12059] ? __virt_addr_valid+0x183/0x530 [ 566.276735][T12059] ? __virt_addr_valid+0x183/0x530 [ 566.281875][T12059] ? __virt_addr_valid+0x45f/0x530 [ 566.287008][T12059] ? __check_object_size+0x48e/0x900 [ 566.292308][T12059] af_alg_sendmsg+0x1519/0x2650 [ 566.297198][T12059] ? __pfx_af_alg_sendmsg+0x10/0x10 [ 566.302416][T12059] ? __import_iovec+0x3a8/0x870 [ 566.307299][T12059] ? skcipher_sendmsg+0x28/0xf0 [ 566.312158][T12059] ? __pfx_skcipher_sendmsg+0x10/0x10 [ 566.317533][T12059] __sock_sendmsg+0x221/0x270 [ 566.322222][T12059] ____sys_sendmsg+0x52a/0x7e0 [ 566.327000][T12059] ? __pfx_____sys_sendmsg+0x10/0x10 [ 566.332294][T12059] ? rcu_read_lock_any_held+0xb7/0x160 [ 566.337791][T12059] __sys_sendmsg+0x292/0x380 [ 566.342406][T12059] ? __pfx___sys_sendmsg+0x10/0x10 [ 566.347552][T12059] ? __pfx_vfs_write+0x10/0x10 [ 566.352321][T12059] ? do_sys_openat2+0x17a/0x1d0 [ 566.357209][T12059] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 566.363564][T12059] ? do_syscall_64+0x100/0x230 [ 566.368351][T12059] ? do_syscall_64+0xb6/0x230 [ 566.373040][T12059] do_syscall_64+0xf3/0x230 [ 566.377564][T12059] ? clear_bhb_loop+0x35/0x90 [ 566.382247][T12059] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 566.388138][T12059] RIP: 0033:0x7f5a2b57e719 [ 566.392555][T12059] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 566.412172][T12059] RSP: 002b:00007f5a2c376038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 566.420595][T12059] RAX: ffffffffffffffda RBX: 00007f5a2b735f80 RCX: 00007f5a2b57e719 [ 566.428581][T12059] RDX: 00000000200008d1 RSI: 0000000020000d40 RDI: 0000000000000004 [ 566.436566][T12059] RBP: 00007f5a2c376090 R08: 0000000000000000 R09: 0000000000000000 [ 566.444543][T12059] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 566.452527][T12059] R13: 0000000000000000 R14: 00007f5a2b735f80 R15: 00007ffd29f0e2e8 [ 566.460520][T12059] [ 566.491221][ T6390] pyra 0003:1E7D:2CF6.0009: hidraw0: USB HID v0.00 Device [HID 1e7d:2cf6] on usb-dummy_hcd.6-1/input0 [ 566.653332][ T5881] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 566.665208][ T5881] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 566.704269][ T6390] pyra 0003:1E7D:2CF6.0009: couldn't init struct pyra_device [ 566.740289][ T6390] pyra 0003:1E7D:2CF6.0009: couldn't install mouse [ 566.749590][ T6390] pyra 0003:1E7D:2CF6.0009: probe with driver pyra failed with error -32 [ 566.777273][ T5881] usb 3-1: New USB device found, idVendor=1781, idProduct=0938, bcdDevice=9b.49 [ 566.786838][ T5881] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 566.794864][ T5881] usb 3-1: Product: syz [ 566.815162][ T5881] usb 3-1: Manufacturer: syz [ 566.825481][ T5881] usb 3-1: SerialNumber: syz [ 566.880072][ T5881] usb 3-1: config 0 descriptor?? [ 566.918465][ T5881] iguanair 3-1:0.0: probe with driver iguanair failed with error -12 [ 567.438861][ T5881] usb 3-1: USB disconnect, device number 47 [ 567.916080][ T5882] usb 2-1: new high-speed USB device number 47 using dummy_hcd [ 568.158126][ T5882] usb 2-1: Using ep0 maxpacket: 32 [ 568.475583][ T5882] usb 2-1: config 1 interface 0 has no altsetting 0 [ 568.574185][ T5882] usb 2-1: New USB device found, idVendor=05ac, idProduct=0246, bcdDevice= 0.40 [ 568.589498][ T5879] usb 7-1: USB disconnect, device number 24 [ 568.595705][ T5882] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 568.621366][ T5882] usb 2-1: Product: syz [ 568.640868][ T5882] usb 2-1: Manufacturer: syz [ 568.661735][ T5882] usb 2-1: SerialNumber: syz [ 568.741615][T12084] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.1670'. [ 568.926548][ T5882] input: bcm5974 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/input/input35 [ 569.034259][ T5882] usb 2-1: USB disconnect, device number 47 [ 569.328119][T12098] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1675'. [ 569.338121][T11547] Bluetooth: hci1: ACL packet for unknown connection handle 201 [ 569.897832][T12104] netlink: 'syz.2.1676': attribute type 10 has an invalid length. [ 569.948132][T12104] netdevsim netdevsim2 netdevsim0: entered allmulticast mode [ 569.960228][T12104] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 569.981100][T12104] team0: Port device netdevsim0 added [ 570.090549][T12106] netlink: 'syz.2.1676': attribute type 10 has an invalid length. [ 570.145218][T12106] netdevsim netdevsim2 netdevsim0: left allmulticast mode [ 570.189503][T12106] team0: Port device netdevsim0 removed [ 570.203444][T12106] netdevsim netdevsim2 netdevsim0: left promiscuous mode [ 570.223840][T12106] : (slave netdevsim0): Enslaving as an active interface with an up link [ 570.375686][ T5882] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 570.515947][ T5917] usb 2-1: new high-speed USB device number 48 using dummy_hcd [ 570.596510][ T5882] usb 1-1: Using ep0 maxpacket: 16 [ 570.620274][ T5882] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 570.641156][ T5882] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 570.653208][ T5882] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2d50, bcdDevice= 0.00 [ 570.683342][ T5882] usb 1-1: New USB device strings: Mfr=236, Product=255, SerialNumber=0 [ 570.716176][ T5917] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 570.735823][ T5882] usb 1-1: Product: syz [ 570.741347][ T5917] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 570.755690][ T5882] usb 1-1: Manufacturer: syz [ 570.762729][ T5882] usb 1-1: config 0 descriptor?? [ 570.782165][ T5917] usb 2-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.00 [ 570.796758][ T5917] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 570.827883][ T5917] usb 2-1: config 0 descriptor?? [ 571.220948][T12119] overlayfs: upper fs does not support tmpfile. [ 571.270405][ T5882] kovaplus 0003:1E7D:2D50.000A: unknown main item tag 0xd [ 571.314096][ T5882] kovaplus 0003:1E7D:2D50.000A: hidraw0: USB HID v0.07 Device [syz syz] on usb-dummy_hcd.0-1/input0 [ 571.455783][ T5917] usbhid 2-1:0.0: can't add hid device: -71 [ 571.461946][ T5917] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 571.497579][ T5917] usb 2-1: USB disconnect, device number 48 [ 572.136007][T11547] Bluetooth: hci1: command 0x0406 tx timeout [ 572.247909][T12144] 9pnet_fd: Insufficient options for proto=fd [ 572.608787][ T5882] kovaplus 0003:1E7D:2D50.000A: couldn't init struct kovaplus_device [ 572.636045][ T5882] kovaplus 0003:1E7D:2D50.000A: couldn't install mouse [ 572.916794][ T5882] kovaplus 0003:1E7D:2D50.000A: probe with driver kovaplus failed with error -71 [ 572.961963][ T5882] usb 1-1: USB disconnect, device number 32 [ 574.368336][T12176] netlink: 'syz.6.1696': attribute type 1 has an invalid length. [ 574.528611][T12181] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1695'. [ 574.755840][T12186] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 574.858535][T12185] loop2: detected capacity change from 0 to 7 [ 575.579459][T12185] Dev loop2: unable to read RDB block 7 [ 575.585150][T12185] loop2: unable to read partition table [ 575.695078][T12185] loop2: partition table beyond EOD, truncated [ 575.896220][ C0] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 576.468866][T12185] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 577.417187][T12209] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1704'. [ 577.560277][ T29] audit: type=1804 audit(577.428:240): pid=12209 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.0.1704" name="/newroot/391/file0/bus" dev="hugetlbfs" ino=36057 res=1 errno=0 [ 577.702302][T11547] Bluetooth: hci1: ACL packet for unknown connection handle 200 [ 578.836860][ T5881] usb 7-1: new high-speed USB device number 25 using dummy_hcd [ 579.212714][ T5880] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 579.449626][T12244] netlink: 'syz.2.1715': attribute type 9 has an invalid length. [ 579.453874][ T5881] usb 7-1: config 0 has an invalid interface number: 8 but max is 0 [ 579.465874][ T5881] usb 7-1: config 0 has no interface number 0 [ 579.467356][T12245] netlink: 'syz.2.1715': attribute type 9 has an invalid length. [ 579.472326][ T5881] usb 7-1: config 0 interface 8 altsetting 0 bulk endpoint 0xB has invalid maxpacket 1023 [ 579.505632][ T5881] usb 7-1: New USB device found, idVendor=0582, idProduct=b9d5, bcdDevice=73.f7 [ 579.511757][T12245] netlink: 134660 bytes leftover after parsing attributes in process `syz.2.1715'. [ 579.524384][ T5881] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 579.539478][ T5880] usb 1-1: config 0 has an invalid interface number: 185 but max is 0 [ 579.553705][ T5880] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 579.565537][ T5880] usb 1-1: config 0 has no interface number 0 [ 579.576721][T12244] netlink: 134660 bytes leftover after parsing attributes in process `syz.2.1715'. [ 579.594301][ T5880] usb 1-1: config 0 interface 185 has no altsetting 0 [ 579.597650][ T5881] usb 7-1: config 0 descriptor?? [ 579.608606][ T5880] usb 1-1: New USB device found, idVendor=12d1, idProduct=1c1f, bcdDevice=63.46 [ 579.624206][ T5880] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 579.632661][T12237] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 579.694769][ T5880] usb 1-1: config 0 descriptor?? [ 579.732417][ T5880] rndis_host 1-1:0.185: skipping garbage [ 579.759237][ T5880] rndis_host 1-1:0.185: skipping garbage [ 579.775096][ T6151] udevd[6151]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.8/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 579.795854][ T5880] usb 1-1: bad CDC descriptors [ 579.827409][ T5880] option 1-1:0.185: GSM modem (1-port) converter detected [ 579.897587][ T5882] usb 7-1: USB disconnect, device number 25 [ 579.939371][ T5917] usb 1-1: USB disconnect, device number 33 [ 579.946119][ T5917] option 1-1:0.185: device disconnected [ 580.292085][T12254] binder: 12253:12254 ioctl 8933 20000000 returned -22 [ 580.441583][T12256] netlink: 72 bytes leftover after parsing attributes in process `syz.7.1718'. [ 580.441694][T12255] binder: 12253:12255 ioctl ae80 0 returned -22 [ 581.221797][T12268] FAULT_INJECTION: forcing a failure. [ 581.221797][T12268] name failslab, interval 1, probability 0, space 0, times 0 [ 581.348539][T12267] cgroup: fork rejected by pids controller in /syz6 [ 581.417773][T12268] CPU: 1 UID: 0 PID: 12268 Comm: syz.6.1721 Not tainted 6.12.0-rc4-syzkaller-00281-g284a2f899676 #0 [ 581.428606][T12268] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 581.438684][T12268] Call Trace: [ 581.441961][T12268] [ 581.444890][T12268] dump_stack_lvl+0x241/0x360 [ 581.449589][T12268] ? __pfx_dump_stack_lvl+0x10/0x10 [ 581.454826][T12268] ? __pfx__printk+0x10/0x10 [ 581.459501][T12268] ? kmem_cache_alloc_noprof+0x44/0x2a0 [ 581.465047][T12268] ? __pfx___might_resched+0x10/0x10 [ 581.470330][T12268] should_fail_ex+0x3b0/0x4e0 [ 581.475006][T12268] ? copy_mm+0x16b/0x1f40 [ 581.479365][T12268] should_failslab+0xac/0x100 [ 581.484052][T12268] ? copy_mm+0x16b/0x1f40 [ 581.488384][T12268] kmem_cache_alloc_noprof+0x6c/0x2a0 [ 581.493764][T12268] copy_mm+0x16b/0x1f40 [ 581.497934][T12268] ? __asan_memset+0x23/0x50 [ 581.502533][T12268] ? __pfx_lockdep_init_map_type+0x10/0x10 [ 581.508349][T12268] ? lockdep_init_map_type+0xa1/0x910 [ 581.513726][T12268] ? __pfx_copy_mm+0x10/0x10 [ 581.518326][T12268] ? __raw_spin_lock_init+0x45/0x100 [ 581.523618][T12268] ? __init_rwsem+0x122/0x160 [ 581.528298][T12268] ? copy_signal+0x52a/0x650 [ 581.532891][T12268] copy_process+0x1845/0x3d50 [ 581.537600][T12268] ? copy_process+0x9fa/0x3d50 [ 581.542382][T12268] ? __pfx_copy_process+0x10/0x10 [ 581.547431][T12268] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 581.553326][T12268] kernel_clone+0x223/0x880 [ 581.557838][T12268] ? vfs_write+0x730/0xd30 [ 581.562246][T12268] ? __pfx_kernel_clone+0x10/0x10 [ 581.567305][T12268] __x64_sys_clone+0x258/0x2a0 [ 581.572084][T12268] ? __pfx___x64_sys_clone+0x10/0x10 [ 581.577391][T12268] ? do_syscall_64+0x100/0x230 [ 581.582153][T12268] ? do_syscall_64+0xb6/0x230 [ 581.586836][T12268] do_syscall_64+0xf3/0x230 [ 581.591349][T12268] ? clear_bhb_loop+0x35/0x90 [ 581.596039][T12268] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 581.601938][T12268] RIP: 0033:0x7efdfe77e719 [ 581.606349][T12268] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 581.625961][T12268] RSP: 002b:00007efdff4a2fe8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 581.634383][T12268] RAX: ffffffffffffffda RBX: 00007efdfe936058 RCX: 00007efdfe77e719 [ 581.642347][T12268] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000004000000 [ 581.650348][T12268] RBP: 00007efdff4a3090 R08: 0000000000000000 R09: 0000000000000000 [ 581.658314][T12268] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000002 [ 581.666285][T12268] R13: 0000000000000000 R14: 00007efdfe936058 R15: 00007ffeb1f21a68 [ 581.674258][T12268] [ 581.677282][ C1] vkms_vblank_simulate: vblank timer overrun [ 581.714412][T12304] xt_CT: You must specify a L4 protocol and not use inversions on it [ 583.027338][ T5882] usb 1-1: new high-speed USB device number 34 using dummy_hcd [ 583.237227][ T6390] usb 3-1: new high-speed USB device number 48 using dummy_hcd [ 583.655647][ T5882] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 583.725355][ T5882] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 583.737442][ T5882] usb 1-1: New USB device found, idVendor=1e7d, idProduct=319c, bcdDevice= 0.00 [ 583.741863][ T6390] usb 3-1: config 0 has an invalid interface number: 185 but max is 0 [ 583.748850][ T5882] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 583.756624][ T6390] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 583.765857][ T5882] usb 1-1: config 0 descriptor?? [ 583.786734][ T6390] usb 3-1: config 0 has no interface number 0 [ 583.805707][ T6390] usb 3-1: config 0 interface 185 has no altsetting 0 [ 583.822784][ T6390] usb 3-1: New USB device found, idVendor=12d1, idProduct=1c1f, bcdDevice=63.46 [ 583.833376][ T6390] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 583.862809][ T6390] usb 3-1: config 0 descriptor?? [ 583.881029][ T6390] rndis_host 3-1:0.185: skipping garbage [ 583.894296][ T6390] rndis_host 3-1:0.185: skipping garbage [ 583.902769][ T6390] usb 3-1: bad CDC descriptors [ 583.907207][ T5917] usb 7-1: new high-speed USB device number 26 using dummy_hcd [ 583.918684][ T6390] option 3-1:0.185: GSM modem (1-port) converter detected [ 584.060465][ T5917] usb 7-1: config 0 has an invalid interface number: 185 but max is 0 [ 584.078485][ T5917] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 584.128066][ T5917] usb 7-1: config 0 has no interface number 0 [ 584.149471][ T5917] usb 7-1: config 0 interface 185 has no altsetting 0 [ 584.156381][ T5917] usb 7-1: New USB device found, idVendor=12d1, idProduct=1c1f, bcdDevice=63.46 [ 584.167432][ T5917] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 584.181202][ T5887] usb 3-1: USB disconnect, device number 48 [ 584.188450][ T5887] option 3-1:0.185: device disconnected [ 584.210473][ T5882] isku 0003:1E7D:319C.000B: hidraw0: USB HID v0.00 Device [HID 1e7d:319c] on usb-dummy_hcd.0-1/input0 [ 584.263719][ T5917] usb 7-1: config 0 descriptor?? [ 584.290724][ T5917] rndis_host 7-1:0.185: skipping garbage [ 584.303808][ T5917] rndis_host 7-1:0.185: skipping garbage [ 584.310208][ T5917] usb 7-1: bad CDC descriptors [ 584.315912][ T5917] option 7-1:0.185: GSM modem (1-port) converter detected [ 584.503348][ T5882] usb 7-1: USB disconnect, device number 26 [ 584.517476][ T5882] option 7-1:0.185: device disconnected [ 585.220962][ T5882] usb 1-1: USB disconnect, device number 34 [ 585.654916][T12359] netlink: 'syz.6.1742': attribute type 5 has an invalid length. [ 585.917565][ T5882] usb 1-1: new high-speed USB device number 35 using dummy_hcd [ 586.203162][T12370] overlayfs: missing 'workdir' [ 586.210576][ T5882] usb 1-1: config 17 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 586.243467][ T5882] usb 1-1: config 17 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 586.395075][ T5882] usb 1-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 586.664883][ T5882] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 587.204714][ T5882] aiptek 1-1:17.0: Aiptek using 400 ms programming speed [ 587.217013][ T5882] input: Aiptek as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:17.0/input/input37 [ 587.327725][ T5882] input: failed to attach handler kbd to device input37, error: -5 [ 587.394089][T12380] netlink: zone id is out of range [ 587.401752][T12380] netlink: zone id is out of range [ 587.407053][T12380] netlink: zone id is out of range [ 587.446911][ T5882] usb 1-1: USB disconnect, device number 35 [ 587.476568][T12380] netlink: zone id is out of range [ 587.575707][T12380] netlink: zone id is out of range [ 587.626241][T12380] netlink: set zone limit has 4 unknown bytes [ 588.445905][T12384] netlink: 14 bytes leftover after parsing attributes in process `syz.1.1748'. [ 588.593618][T12404] netlink: 'syz.6.1752': attribute type 1 has an invalid length. [ 589.816174][T12415] loop7: detected capacity change from 0 to 16384 [ 590.246669][T12410] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1753'. [ 590.450058][ T5917] usb 3-1: new high-speed USB device number 49 using dummy_hcd [ 590.827365][ T5917] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 128, changing to 11 [ 590.859322][ T5917] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 590.871841][ T5917] usb 3-1: New USB device found, idVendor=056a, idProduct=00d1, bcdDevice= 0.00 [ 590.881526][ T5917] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 590.893770][ T5917] usb 3-1: config 0 descriptor?? [ 590.899240][T12417] loop7: detected capacity change from 16384 to 0 [ 591.851767][ T5917] wacom 0003:056A:00D1.000C: Unknown device_type for 'HID 056a:00d1'. Assuming pen. [ 591.866387][ T5917] wacom 0003:056A:00D1.000C: hidraw0: USB HID v0.00 Device [HID 056a:00d1] on usb-dummy_hcd.2-1/input0 [ 591.889374][ T5917] input: Wacom Bamboo 2FG 4x5 Pen as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:056A:00D1.000C/input/input38 [ 592.151181][ T5881] usb 3-1: USB disconnect, device number 49 [ 595.749475][T12490] fuse: Bad value for 'group_id' [ 595.754470][T12490] fuse: Bad value for 'group_id' [ 596.280823][T12497] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1778'. [ 596.566934][T12503] 9pnet: Could not find request transport: fd.rfdno=0x0000000000000007 [ 598.290312][T12517] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 600.379644][T12549] FAULT_INJECTION: forcing a failure. [ 600.379644][T12549] name failslab, interval 1, probability 0, space 0, times 0 [ 600.392769][T12549] CPU: 1 UID: 0 PID: 12549 Comm: syz.0.1791 Not tainted 6.12.0-rc4-syzkaller-00281-g284a2f899676 #0 [ 600.403608][T12549] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 600.413685][T12549] Call Trace: [ 600.416979][T12549] [ 600.419928][T12549] dump_stack_lvl+0x241/0x360 [ 600.424649][T12549] ? __pfx_dump_stack_lvl+0x10/0x10 [ 600.429904][T12549] ? __pfx__printk+0x10/0x10 [ 600.434524][T12549] ? fs_reclaim_acquire+0x93/0x130 [ 600.439676][T12549] ? __pfx___might_resched+0x10/0x10 [ 600.445021][T12549] should_fail_ex+0x3b0/0x4e0 [ 600.449725][T12549] ? tomoyo_encode+0x26f/0x540 [ 600.454519][T12549] should_failslab+0xac/0x100 [ 600.459229][T12549] ? tomoyo_encode+0x26f/0x540 [ 600.464018][T12549] __kmalloc_noprof+0xd8/0x400 [ 600.468804][T12549] tomoyo_encode+0x26f/0x540 [ 600.473431][T12549] tomoyo_realpath_from_path+0x59e/0x5e0 [ 600.479142][T12549] tomoyo_check_open_permission+0x255/0x500 [ 600.485070][T12549] ? __lock_acquire+0x1384/0x2050 [ 600.490130][T12549] ? tomoyo_check_open_permission+0x204/0x500 [ 600.496218][T12549] ? __pfx_tomoyo_check_open_permission+0x10/0x10 [ 600.502704][T12549] ? tomoyo_file_open+0x165/0x220 [ 600.507763][T12549] security_file_open+0x777/0x990 [ 600.512823][T12549] do_dentry_open+0x369/0x1460 [ 600.517624][T12549] vfs_open+0x3e/0x330 [ 600.521714][T12549] path_openat+0x2c84/0x3590 [ 600.526366][T12549] ? __pfx_path_openat+0x10/0x10 [ 600.531369][T12549] do_filp_open+0x235/0x490 [ 600.535906][T12549] ? __pfx_do_filp_open+0x10/0x10 [ 600.540982][T12549] ? _raw_spin_unlock+0x28/0x50 [ 600.545883][T12549] ? alloc_fd+0x5a1/0x640 [ 600.550249][T12549] do_sys_openat2+0x13e/0x1d0 [ 600.554963][T12549] ? __pfx_do_sys_openat2+0x10/0x10 [ 600.560177][T12549] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 600.566185][T12549] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 600.572561][T12549] __x64_sys_openat+0x247/0x2a0 [ 600.577440][T12549] ? __pfx___x64_sys_openat+0x10/0x10 [ 600.582855][T12549] do_syscall_64+0xf3/0x230 [ 600.587388][T12549] ? clear_bhb_loop+0x35/0x90 [ 600.592090][T12549] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 600.598009][T12549] RIP: 0033:0x7f92e537e719 [ 600.602533][T12549] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 600.622189][T12549] RSP: 002b:00007f92e4dbd038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 600.630644][T12549] RAX: ffffffffffffffda RBX: 00007f92e5536130 RCX: 00007f92e537e719 [ 600.638643][T12549] RDX: 0000000000000000 RSI: 0000000020000040 RDI: ffffffffffffff9c [ 600.646631][T12549] RBP: 00007f92e4dbd090 R08: 0000000000000000 R09: 0000000000000000 [ 600.654647][T12549] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 600.662642][T12549] R13: 0000000000000000 R14: 00007f92e5536130 R15: 00007ffec6e11378 [ 600.670675][T12549] [ 600.673762][ C1] vkms_vblank_simulate: vblank timer overrun [ 600.684163][T12549] ERROR: Out of memory at tomoyo_realpath_from_path. [ 600.762453][T12547] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1790'. [ 601.657311][T12559] input: syz0 as /devices/virtual/input/input41 [ 601.718394][T12560] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 601.749379][T12560] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 601.929249][ T5882] usb 1-1: new high-speed USB device number 36 using dummy_hcd [ 602.080932][ T5882] usb 1-1: device descriptor read/64, error -71 [ 602.489651][ T6390] usb 2-1: new high-speed USB device number 49 using dummy_hcd [ 602.792323][ T6390] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 602.849028][ T6390] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 602.873831][ T6390] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 602.910429][ T6390] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 602.991133][ T5882] usb 1-1: new high-speed USB device number 37 using dummy_hcd [ 603.349542][T12579] netlink: 'syz.7.1798': attribute type 1 has an invalid length. [ 603.389092][ T6390] usb 2-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 603.419802][ T6390] usb 2-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 603.456732][ T6390] usb 2-1: Manufacturer: syz [ 603.469548][ T5882] usb 1-1: device descriptor read/64, error -71 [ 603.480322][ T6390] usb 2-1: config 0 descriptor?? [ 603.580105][ T5882] usb usb1-port1: attempt power cycle [ 603.719640][T12582] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1796'. [ 603.929650][ T5882] usb 1-1: new high-speed USB device number 38 using dummy_hcd [ 603.936903][T12585] x_tables: duplicate underflow at hook 2 [ 603.958471][ T6390] appleir 0003:05AC:8243.000D: unknown main item tag 0x0 [ 603.961578][ T5882] usb 1-1: device descriptor read/8, error -71 [ 603.966851][ T6390] appleir 0003:05AC:8243.000D: No inputs registered, leaving [ 604.104308][ T6390] appleir 0003:05AC:8243.000D: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.1-1/input0 [ 604.582471][ T5882] usb 1-1: new high-speed USB device number 39 using dummy_hcd [ 604.611170][ T5882] usb 1-1: device descriptor read/8, error -71 [ 605.296945][ T5881] usb 2-1: USB disconnect, device number 49 [ 605.373392][ T5882] usb usb1-port1: unable to enumerate USB device [ 605.530617][T12592] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1802'. [ 608.836776][ T29] audit: type=1326 audit(608.054:241): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12604 comm="syz.1.1807" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f5a2b57e719 code=0x0 [ 609.686693][T12610] delete_channel: no stack [ 610.670374][ T5879] usb 1-1: new high-speed USB device number 40 using dummy_hcd [ 611.051491][ T5879] usb 1-1: Using ep0 maxpacket: 32 [ 611.062445][ T5879] usb 1-1: unable to get BOS descriptor set [ 611.083228][ T5879] usb 1-1: config 1 interface 0 altsetting 3 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 611.929603][ T5879] usb 1-1: config 1 interface 0 has no altsetting 0 [ 612.120933][ T5879] usb 1-1: New USB device found, idVendor=18d1, idProduct=5030, bcdDevice= 0.40 [ 612.188678][ T5879] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 612.242805][ T5879] usb 1-1: Product: syz [ 612.247036][ T5879] usb 1-1: Manufacturer: syz [ 613.399856][ T5879] usb 1-1: SerialNumber: syz [ 623.485845][ T24] sched: DL replenish lagged too much [ 626.563005][ T5879] usb 1-1: can't set config #1, error -110 [ 678.932892][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 729.593512][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 729.600573][ C1] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P12614/2:b..l P12625/1:b..l [ 729.610548][ C1] rcu: (detected by 1, t=10503 jiffies, g=48437, q=1791444 ncpus=2) [ 729.618650][ C1] task:syz.7.1811 state:R running task stack:25048 pid:12625 tgid:12624 ppid:11765 flags:0x00004006 [ 729.632249][ C1] Call Trace: [ 729.635568][ C1] [ 729.638532][ C1] __schedule+0x185a/0x4b70 [ 729.643108][ C1] ? __pfx___schedule+0x10/0x10 [ 729.648021][ C1] ? mark_lock+0x9a/0x360 [ 729.652400][ C1] ? preempt_schedule+0xe1/0xf0 [ 729.657302][ C1] preempt_schedule_common+0x84/0xd0 [ 729.662628][ C1] preempt_schedule+0xe1/0xf0 [ 729.667343][ C1] ? __pfx_preempt_schedule+0x10/0x10 [ 729.672754][ C1] ? folio_remove_rmap_ptes+0x2d9/0x480 [ 729.678357][ C1] preempt_schedule_thunk+0x1a/0x30 [ 729.683610][ C1] _raw_spin_unlock+0x3e/0x50 [ 729.688343][ C1] unmap_page_range+0x36b1/0x40e0 [ 729.693437][ C1] ? __pfx_unmap_page_range+0x10/0x10 [ 729.698868][ C1] ? mas_next_slot+0xdc6/0xea0 [ 729.703688][ C1] ? uprobe_munmap+0x183/0x460 [ 729.708487][ C1] ? unmap_single_vma+0x1bd/0x2b0 [ 729.713559][ C1] unmap_vmas+0x3cc/0x5f0 [ 729.717943][ C1] ? __pfx_unmap_vmas+0x10/0x10 [ 729.722848][ C1] ? tlb_gather_mmu_fullmm+0x160/0x210 [ 729.728361][ C1] exit_mmap+0x275/0xc40 [ 729.732654][ C1] ? __mutex_lock+0x2ef/0xd70 [ 729.737371][ C1] ? __pfx_exit_mmap+0x10/0x10 [ 729.742232][ C1] ? __pfx_exit_aio+0x10/0x10 [ 729.746958][ C1] ? uprobe_clear_state+0x271/0x290 [ 729.752224][ C1] ? mm_update_next_owner+0xa2/0x8a0 [ 729.757547][ C1] ? do_raw_spin_unlock+0x13c/0x8b0 [ 729.762792][ C1] __mmput+0x115/0x380 [ 729.766930][ C1] exit_mm+0x220/0x310 [ 729.771033][ C1] ? __pfx_exit_mm+0x10/0x10 [ 729.775657][ C1] ? taskstats_exit+0x326/0xa60 [ 729.780566][ C1] do_exit+0x9b2/0x28e0 [ 729.784766][ C1] ? __pfx_do_exit+0x10/0x10 [ 729.789397][ C1] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 729.794813][ C1] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 729.800839][ C1] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 729.807210][ C1] ? _raw_spin_lock_irq+0xdf/0x120 [ 729.812381][ C1] do_group_exit+0x207/0x2c0 [ 729.817025][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 729.822266][ C1] ? lockdep_hardirqs_on+0x99/0x150 [ 729.827496][ C1] get_signal+0x16a3/0x1740 [ 729.832050][ C1] ? __pfx_get_signal+0x10/0x10 [ 729.836944][ C1] arch_do_signal_or_restart+0x96/0x860 [ 729.842538][ C1] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 729.848753][ C1] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 729.854788][ C1] ? syscall_exit_to_user_mode+0xa3/0x370 [ 729.860539][ C1] syscall_exit_to_user_mode+0xc9/0x370 [ 729.866120][ C1] do_syscall_64+0x100/0x230 [ 729.870765][ C1] ? clear_bhb_loop+0x35/0x90 [ 729.875519][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 729.881442][ C1] RIP: 0033:0x7fee3117e719 [ 729.885886][ C1] RSP: 002b:00007fee31fbc038 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 729.894333][ C1] RAX: fffffffffffffe00 RBX: 00007fee31335f80 RCX: 00007fee3117e719 [ 729.902332][ C1] RDX: 0000000000000010 RSI: 0000000020000000 RDI: 0000000000000003 [ 729.910350][ C1] RBP: 00007fee311f132e R08: 0000000000000000 R09: 0000000000000000 [ 729.918347][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 729.926340][ C1] R13: 0000000000000000 R14: 00007fee31335f80 R15: 00007ffe1537a9c8 [ 729.934350][ C1] [ 729.937387][ C1] task:syz.0.1808 state:R running task stack:26096 pid:12614 tgid:12613 ppid:5832 flags:0x00000002 [ 729.949178][ C1] Call Trace: [ 729.952485][ C1] [ 729.955458][ C1] __schedule+0x185a/0x4b70 [ 729.960000][ C1] ? __pfx_validate_chain+0x10/0x10 [ 729.965235][ C1] ? validate_chain+0x11e/0x5920 [ 729.970214][ C1] ? __pfx___schedule+0x10/0x10 [ 729.975099][ C1] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 729.981134][ C1] ? preempt_schedule_irq+0xf0/0x1c0 [ 729.986456][ C1] preempt_schedule_irq+0xfb/0x1c0 [ 729.991627][ C1] ? __pfx_preempt_schedule_irq+0x10/0x10 [ 729.997393][ C1] irqentry_exit+0x5e/0x90 [ 730.001835][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 730.007851][ C1] RIP: 0010:lock_acquire+0x264/0x550 [ 730.013176][ C1] Code: 2b 00 74 08 4c 89 f7 e8 da 2a 8b 00 f6 44 24 61 02 0f 85 85 01 00 00 41 f7 c7 00 02 00 00 74 01 fb 48 c7 44 24 40 0e 36 e0 45 <4b> c7 44 25 00 00 00 00 00 43 c7 44 25 09 00 00 00 00 43 c7 44 25 [ 730.032831][ C1] RSP: 0018:ffffc900033df3c0 EFLAGS: 00000206 [ 730.038945][ C1] RAX: 0000000000000001 RBX: 1ffff9200067be84 RCX: 3092888a7c3f7300 [ 730.046950][ C1] RDX: dffffc0000000000 RSI: ffffffff8c0adcc0 RDI: ffffffff8c603020 [ 730.054966][ C1] RBP: ffffc900033df510 R08: ffffffff94297807 R09: 1ffffffff2852f00 [ 730.062975][ C1] R10: dffffc0000000000 R11: fffffbfff2852f01 R12: 1ffff9200067be80 [ 730.070987][ C1] R13: dffffc0000000000 R14: ffffc900033df420 R15: 0000000000000246 [ 730.079007][ C1] ? mark_lock+0x9a/0x360 [ 730.083386][ C1] ? __pfx_lock_acquire+0x10/0x10 [ 730.088464][ C1] ? deref_stack_reg+0x17c/0x210 [ 730.093450][ C1] ? stack_trace_save+0x118/0x1d0 [ 730.098520][ C1] ? unwind_next_frame+0x18e6/0x22d0 [ 730.103826][ C1] ? deref_stack_reg+0x17c/0x210 [ 730.108795][ C1] ? preempt_count_add+0x93/0x190 [ 730.113861][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 730.120053][ C1] is_bpf_text_address+0x46/0x2a0 [ 730.125137][ C1] ? is_bpf_text_address+0x26/0x2a0 [ 730.130377][ C1] ? is_bpf_text_address+0x26/0x2a0 [ 730.135617][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 730.141908][ C1] kernel_text_address+0xa7/0xe0 [ 730.146885][ C1] __kernel_text_address+0xd/0x40 [ 730.151942][ C1] unwind_get_return_address+0x4d/0x90 [ 730.157444][ C1] arch_stack_walk+0xfd/0x150 [ 730.162172][ C1] stack_trace_save+0x118/0x1d0 [ 730.167067][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 730.172518][ C1] save_stack+0xfb/0x1f0 [ 730.176808][ C1] ? __pfx_save_stack+0x10/0x10 [ 730.181694][ C1] ? free_unref_page+0xcd0/0xf00 [ 730.186666][ C1] ? __slab_free+0x31b/0x3d0 [ 730.191285][ C1] ? qlist_free_all+0x9a/0x140 [ 730.196084][ C1] ? kasan_quarantine_reduce+0x14f/0x170 [ 730.201746][ C1] ? __kasan_kmalloc+0x23/0xb0 [ 730.206543][ C1] ? __kmalloc_noprof+0x1fc/0x400 [ 730.211612][ C1] ? tomoyo_encode+0x26f/0x540 [ 730.216414][ C1] ? tomoyo_realpath_from_path+0x59e/0x5e0 [ 730.222273][ C1] ? tomoyo_path_number_perm+0x23a/0x880 [ 730.227973][ C1] ? security_file_ioctl+0xc6/0x2a0 [ 730.233210][ C1] ? __se_sys_ioctl+0x47/0x170 [ 730.238010][ C1] ? do_syscall_64+0xf3/0x230 [ 730.242717][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 730.248829][ C1] ? page_ext_get+0x20/0x2a0 [ 730.253471][ C1] __reset_page_owner+0x76/0x430 [ 730.258476][ C1] free_unref_page+0xcd0/0xf00 [ 730.263296][ C1] __slab_free+0x31b/0x3d0 [ 730.267761][ C1] ? __phys_addr+0xba/0x170 [ 730.272307][ C1] qlist_free_all+0x9a/0x140 [ 730.277032][ C1] kasan_quarantine_reduce+0x14f/0x170 [ 730.282546][ C1] __kasan_kmalloc+0x23/0xb0 [ 730.287182][ C1] ? tomoyo_encode+0x26f/0x540 [ 730.291978][ C1] ? tomoyo_encode+0x26f/0x540 [ 730.296780][ C1] __kmalloc_noprof+0x1fc/0x400 [ 730.301669][ C1] tomoyo_encode+0x26f/0x540 [ 730.306304][ C1] tomoyo_realpath_from_path+0x59e/0x5e0 [ 730.311992][ C1] tomoyo_path_number_perm+0x23a/0x880 [ 730.317503][ C1] ? tomoyo_path_number_perm+0x208/0x880 [ 730.323201][ C1] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 730.329273][ C1] ? __fget_files+0x29/0x470 [ 730.333914][ C1] ? __fget_files+0x3f3/0x470 [ 730.338644][ C1] security_file_ioctl+0xc6/0x2a0 [ 730.343716][ C1] __se_sys_ioctl+0x47/0x170 [ 730.348343][ C1] do_syscall_64+0xf3/0x230 [ 730.352890][ C1] ? clear_bhb_loop+0x35/0x90 [ 730.357613][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 730.363546][ C1] RIP: 0033:0x7f92e537e31b [ 730.367991][ C1] RSP: 002b:00007f92e4dfcf10 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 730.376441][ C1] RAX: ffffffffffffffda RBX: 000000000000000b RCX: 00007f92e537e31b [ 730.384449][ C1] RDX: 0000000000000006 RSI: 000000004004550a RDI: 000000000000000b [ 730.392482][ C1] RBP: 00007f92e4dfdfe0 R08: 0000000000000000 R09: 0000000000000000 [ 730.400498][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000080085502 [ 730.408519][ C1] R13: 0000000800000000 R14: 0000000000000000 R15: 00007f92e53fb30b [ 730.416573][ C1] [ 730.419635][ C1] rcu: rcu_preempt kthread starved for 5164 jiffies! g48437 f0x2 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=0 [ 730.430790][ C1] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 730.440795][ C1] rcu: RCU grace-period kthread stack dump: [ 730.446717][ C1] task:rcu_preempt state:R running task stack:24656 pid:17 tgid:17 ppid:2 flags:0x00004000 [ 730.458516][ C1] Call Trace: [ 730.461822][ C1] [ 730.464784][ C1] __schedule+0x185a/0x4b70 [ 730.469338][ C1] ? __pfx___schedule+0x10/0x10 [ 730.474224][ C1] ? __pfx_lock_release+0x10/0x10 [ 730.479282][ C1] ? __asan_memset+0x23/0x50 [ 730.483911][ C1] ? __pfx_lockdep_init_map_type+0x10/0x10 [ 730.489751][ C1] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 730.496120][ C1] ? schedule+0x90/0x320 [ 730.500395][ C1] schedule+0x14b/0x320 [ 730.504612][ C1] schedule_timeout+0x1be/0x310 [ 730.509495][ C1] ? __pfx_schedule_timeout+0x10/0x10 [ 730.514901][ C1] ? __pfx_process_timeout+0x10/0x10 [ 730.520240][ C1] ? prepare_to_swait_event+0x330/0x350 [ 730.525841][ C1] rcu_gp_fqs_loop+0x2df/0x1330 [ 730.530717][ C1] ? lockdep_hardirqs_on+0x99/0x150 [ 730.535962][ C1] ? __pfx_rcu_watching_snap_recheck+0x10/0x10 [ 730.542151][ C1] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 730.547479][ C1] ? finish_swait+0xd4/0x1e0 [ 730.552104][ C1] rcu_gp_kthread+0xa7/0x3b0 [ 730.556722][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 730.561949][ C1] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 730.567898][ C1] ? __kthread_parkme+0x169/0x1d0 [ 730.572981][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 730.578220][ C1] kthread+0x2f0/0x390 [ 730.582321][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 730.587551][ C1] ? __pfx_kthread+0x10/0x10 [ 730.592172][ C1] ret_from_fork+0x4b/0x80 [ 730.596622][ C1] ? __pfx_kthread+0x10/0x10 [ 730.601240][ C1] ret_from_fork_asm+0x1a/0x30 [ 730.606070][ C1] [ 730.609114][ C1] rcu: Stack dump where RCU GP kthread last ran: [ 730.615470][ C1] Sending NMI from CPU 1 to CPUs 0: [ 730.620714][ C0] NMI backtrace for cpu 0 [ 730.620730][ C0] CPU: 0 UID: 0 PID: 16 Comm: ksoftirqd/0 Not tainted 6.12.0-rc4-syzkaller-00281-g284a2f899676 #0 [ 730.620749][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 730.620760][ C0] RIP: 0010:synproxy_send_tcp+0x217/0x6c0 [ 730.620791][ C0] Code: e8 fe f5 98 f7 89 c3 31 ff 89 c6 e8 b3 68 b4 f7 85 db 0f 84 71 02 00 00 e8 66 64 b4 f7 bf 01 00 00 00 4c 89 e6 e8 39 69 b4 f7 <49> 8d 8f 81 00 00 00 49 8d 9f 84 00 00 00 48 89 c8 48 89 0c 24 48 [ 730.620806][ C0] RSP: 0018:ffffc90000156d78 EFLAGS: 00000246 [ 730.620821][ C0] RAX: 0000000000000100 RBX: 0000000000000001 RCX: ffff88801cebda00 [ 730.620833][ C0] RDX: 0000000000000100 RSI: ffff888230d02a00 RDI: 0000000000000001 [ 730.620844][ C0] RBP: 1ffff110461a074b R08: ffffffff89e085c7 R09: ffff888231362140 [ 730.620857][ C0] R10: dffffc0000000000 R11: ffffed104626c45d R12: ffff888230d02a00 [ 730.620869][ C0] R13: dffffc0000000000 R14: 0000000000000154 R15: ffff888230d03b40 [ 730.620881][ C0] FS: 0000000000000000(0000) GS:ffff8880b8600000(0000) knlGS:0000000000000000 [ 730.620895][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 730.620907][ C0] CR2: 000000110c36e243 CR3: 000000000e734000 CR4: 00000000003526f0 [ 730.620922][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 730.620932][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 730.620943][ C0] Call Trace: [ 730.620948][ C0] [ 730.620955][ C0] ? nmi_cpu_backtrace+0x3c2/0x4d0 [ 730.620980][ C0] ? __pfx_lock_acquire+0x10/0x10 [ 730.621006][ C0] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 730.621028][ C0] ? nmi_handle+0x2a/0x5a0 [ 730.621052][ C0] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 730.621074][ C0] ? nmi_handle+0x14f/0x5a0 [ 730.621091][ C0] ? nmi_handle+0x2a/0x5a0 [ 730.621108][ C0] ? synproxy_send_tcp+0x217/0x6c0 [ 730.621132][ C0] ? default_do_nmi+0x63/0x160 [ 730.621156][ C0] ? exc_nmi+0x123/0x1f0 [ 730.621178][ C0] ? end_repeat_nmi+0xf/0x53 [ 730.621199][ C0] ? synproxy_send_tcp+0x217/0x6c0 [ 730.621224][ C0] ? synproxy_send_tcp+0x217/0x6c0 [ 730.621251][ C0] ? synproxy_send_tcp+0x217/0x6c0 [ 730.621277][ C0] ? synproxy_send_tcp+0x217/0x6c0 [ 730.621312][ C0] [ 730.621317][ C0] [ 730.621324][ C0] ? skb_put+0x114/0x1f0 [ 730.621343][ C0] synproxy_send_client_synack+0x8b8/0xf30 [ 730.621373][ C0] ? __pfx_synproxy_send_client_synack+0x10/0x10 [ 730.621398][ C0] ? synproxy_pernet+0x45/0x270 [ 730.621416][ C0] nft_synproxy_eval_v4+0x3ca/0x610 [ 730.621434][ C0] ? __pfx_nft_synproxy_eval_v4+0x10/0x10 [ 730.621452][ C0] ? nf_ip_checksum+0x13a/0x500 [ 730.621470][ C0] nft_synproxy_do_eval+0x362/0xa60 [ 730.621489][ C0] ? __pfx_nft_synproxy_do_eval+0x10/0x10 [ 730.621513][ C0] ? __pfx_validate_chain+0x10/0x10 [ 730.621534][ C0] nft_do_chain+0x4ad/0x1da0 [ 730.621557][ C0] ? __pfx_nft_do_chain+0x10/0x10 [ 730.621573][ C0] ? __local_bh_enable_ip+0x168/0x200 [ 730.621605][ C0] ? __pfx_nf_nat_inet_fn+0x10/0x10 [ 730.621626][ C0] nft_do_chain_inet+0x418/0x6b0 [ 730.621644][ C0] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 730.621659][ C0] ? ipt_do_table+0x312/0x1860 [ 730.621683][ C0] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 730.621698][ C0] nf_hook_slow+0xc3/0x220 [ 730.621721][ C0] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 730.621742][ C0] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 730.621763][ C0] NF_HOOK+0x29e/0x450 [ 730.621783][ C0] ? NF_HOOK+0x9a/0x450 [ 730.621802][ C0] ? __pfx_NF_HOOK+0x10/0x10 [ 730.621822][ C0] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 730.621862][ C0] ? ip_rcv_finish+0x406/0x560 [ 730.621885][ C0] ? __pfx_ip_rcv_finish+0x10/0x10 [ 730.621906][ C0] NF_HOOK+0x3a4/0x450 [ 730.621926][ C0] ? __lock_acquire+0x1384/0x2050 [ 730.621951][ C0] ? NF_HOOK+0x9a/0x450 [ 730.621971][ C0] ? __pfx_NF_HOOK+0x10/0x10 [ 730.621990][ C0] ? ip_rcv_core+0x801/0xd10 [ 730.622022][ C0] ? __pfx_ip_rcv_finish+0x10/0x10 [ 730.622045][ C0] ? __pfx_ip_rcv+0x10/0x10 [ 730.622065][ C0] __netif_receive_skb+0x2bf/0x650 [ 730.622089][ C0] ? __pfx_lock_acquire+0x10/0x10 [ 730.622112][ C0] ? __pfx___netif_receive_skb+0x10/0x10 [ 730.622132][ C0] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 730.622155][ C0] ? __pfx_lock_release+0x10/0x10 [ 730.622177][ C0] ? _raw_spin_lock_irq+0xdf/0x120 [ 730.622206][ C0] process_backlog+0x662/0x15b0 [ 730.622232][ C0] ? process_backlog+0x33b/0x15b0 [ 730.622258][ C0] ? __pfx_process_backlog+0x10/0x10 [ 730.622280][ C0] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 730.622304][ C0] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 730.622329][ C0] __napi_poll+0xcb/0x490 [ 730.622351][ C0] net_rx_action+0x89b/0x1240 [ 730.622392][ C0] ? __pfx_net_rx_action+0x10/0x10 [ 730.622433][ C0] ? __pfx_tmigr_handle_remote+0x10/0x10 [ 730.622489][ C0] handle_softirqs+0x2c5/0x980 [ 730.622521][ C0] ? run_ksoftirqd+0xca/0x130 [ 730.622548][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 730.622571][ C0] ? preempt_schedule+0xe1/0xf0 [ 730.622592][ C0] run_ksoftirqd+0xca/0x130 [ 730.622618][ C0] ? __pfx_run_ksoftirqd+0x10/0x10 [ 730.622642][ C0] ? __pfx_run_ksoftirqd+0x10/0x10 [ 730.622669][ C0] ? __pfx_ksoftirqd_should_run+0x10/0x10 [ 730.622695][ C0] ? smpboot_thread_fn+0x2d3/0xa30 [ 730.622718][ C0] ? smpboot_thread_fn+0x4fb/0xa30 [ 730.622742][ C0] ? smpboot_thread_fn+0x656/0xa30 [ 730.622766][ C0] ? __pfx_run_ksoftirqd+0x10/0x10 [ 730.622791][ C0] smpboot_thread_fn+0x544/0xa30 [ 730.622815][ C0] ? smpboot_thread_fn+0x4e/0xa30 [ 730.622843][ C0] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 730.622867][ C0] kthread+0x2f0/0x390 [ 730.622884][ C0] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 730.622907][ C0] ? __pfx_kthread+0x10/0x10 [ 730.622925][ C0] ret_from_fork+0x4b/0x80 [ 730.622950][ C0] ? __pfx_kthread+0x10/0x10 [ 730.622967][ C0] ret_from_fork_asm+0x1a/0x30 [ 730.622999][ C0] [ 734.843754][ T5834] Bluetooth: hci3: command 0x0406 tx timeout [ 734.955579][ T1301] ieee802154 phy0 wpan0: encryption failed: -22