last executing test programs: 10.828409971s ago: executing program 0 (id=2575): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r4}, 0x10) inotify_init1(0x0) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000140)) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000140)) sendmsg$BATADV_CMD_GET_NEIGHBORS(r5, &(0x7f0000004340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x1c, r6, 0x331, 0x0, 0x0, {0x8}, [@BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x1c}}, 0x0) quotactl$Q_SYNC(0xffffffff80000102, 0x0, 0x0, 0x0) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_MAX_THREADS(r7, 0x40046205, &(0x7f0000000000)=0x1) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f0000001a80)={0x4, 0x400000000000000, &(0x7f0000001900)=[@enter_looper], 0x1, 0x0, &(0x7f0000001a40)="a1"}) 9.094379691s ago: executing program 3 (id=2582): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x16, 0x8, &(0x7f00000011c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0xffffffff}, 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000003f80)={'team0\x00', &(0x7f0000003f40)=@ethtool_channels={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe}}) r2 = socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SCHED_CORE(0x36, 0x0, 0x0, 0x3, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r3, 0xc004743e, &(0x7f0000000140)) ioctl$PPPIOCSPASS(r3, 0x40107447, &(0x7f0000000180)={0x1, &(0x7f00000007c0)=[{0x6, 0x0, 0x0, 0x2}]}) write$ppp(r3, &(0x7f0000000900)='\x00\x00', 0x2) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x8, 0xe, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"/1423], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000340)}, 0x42) r5 = fcntl$dupfd(r4, 0x0, r4) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000180)=@generic={0x0, r5}, 0x14) fchmodat(r5, &(0x7f0000000000)='./file0\x00', 0xea) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000540)='binfmt_misc\x00', 0x0, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) lseek(r6, 0x4, 0x0) r7 = syz_usb_connect(0x0, 0x24, &(0x7f0000000680)={{0x12, 0x1, 0x0, 0x10, 0xa0, 0xfd, 0x20, 0x2c42, 0x16f8, 0xbae3, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xb5, 0x51, 0xd2}}]}}]}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0xe, 0x2, &(0x7f0000000100)=@raw=[@ldst={0x1, 0x0, 0x4, 0x0, 0x1, 0x4a}, @jmp={0x5, 0x0, 0x9}], &(0x7f0000000280)='GPL\x00'}, 0x90) syz_usb_control_io$uac1(r7, 0x0, 0x0) r8 = syz_usb_connect(0x0, 0x24, &(0x7f0000000980)={{0x12, 0x1, 0x0, 0x1d, 0x12, 0x26, 0x10, 0x18d1, 0x1eaf, 0x779, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xe1, 0x15, 0x3d}}]}}]}}, 0x0) syz_usb_control_io$cdc_ecm(r8, 0x0, &(0x7f0000000340)={0x1c, &(0x7f00000001c0)=ANY=[@ANYBLOB="0017c8000000b8"], 0x0, &(0x7f0000000300)={0x0, 0x8, 0x1, 0x4}}) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r10 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001dc0)={0x250, r9, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r11}, @void}}, [@NL80211_ATTR_TX_RATES={0x8, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x4}]}, @NL80211_ATTR_TX_RATES={0xb8, 0x5a, 0x0, 0x1, [@NL80211_BAND_60GHZ={0xc, 0x2, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}, @NL80211_BAND_2GHZ={0x64, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_LEGACY={0x19, 0x1, [0x9, 0x6c, 0x18, 0x6, 0x60, 0x1b, 0x30, 0x48, 0x2, 0x30, 0x0, 0x1b, 0x7e, 0x9, 0x6c, 0x2, 0x60, 0x6, 0x24, 0x1b, 0x1]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x81, 0xf05, 0x0, 0xb, 0x5a, 0x3, 0x5, 0x4]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_LEGACY={0x1f, 0x1, [0x2, 0x48, 0x9, 0x4, 0x2e, 0x1, 0x2, 0x9, 0x48, 0x0, 0x5, 0x30, 0x6c, 0x24, 0x3, 0x3, 0x9, 0x6c, 0x3, 0x2, 0x1b, 0x30, 0x12, 0x6, 0x6c, 0x9, 0x16]}]}, @NL80211_BAND_5GHZ={0x20, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x2, 0x9, 0xe237, 0x8, 0x6, 0x4, 0x2, 0x5]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}]}, @NL80211_BAND_2GHZ={0x24, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x1e, 0x2, [{0x3, 0x1}, {0x0, 0x9}, {0x3, 0x4}, {0x0, 0x3}, {0x0, 0x5}, {0x3, 0x5}, {0x0, 0x1}, {0x0, 0x4}, {0x1, 0x2}, {0x2, 0xa}, {0x3, 0x8}, {0x7, 0x6}, {0x5, 0x7}, {0x4, 0x7}, {0x4, 0x2}, {0x1, 0x5}, {0x3, 0xa}, {0x1, 0x8}, {0x6, 0x3}, {0x5, 0x8}, {0x1, 0x2}, {0x5, 0x2}, {0x6, 0x9}, {0x0, 0x4}, {0x0, 0xa}, {0x1, 0x4}]}]}]}, @NL80211_ATTR_TX_RATES={0x174, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x6c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x1b, 0x1, [0x16, 0x3, 0x36, 0x12, 0x7, 0x6, 0x5, 0x36, 0xb, 0xc, 0x1b, 0x18, 0x1, 0x18, 0xb, 0x9, 0x5, 0x6c, 0x2, 0x9, 0x6c, 0xe, 0x1b]}, @NL80211_TXRATE_LEGACY={0x19, 0x1, [0x4, 0x50, 0x36, 0x12, 0x12, 0xb, 0x30, 0x12, 0x60, 0x5, 0x6c, 0x60, 0x1b, 0x60, 0xb, 0x12, 0x18, 0x3, 0x30, 0x0, 0x2]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x6, 0x2d1, 0x46, 0x4, 0x8, 0x4, 0xf, 0x4]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x8001, 0x62, 0xa0b6, 0x0, 0x401, 0x8]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}, @NL80211_BAND_5GHZ={0x104, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0x39, 0x2, [{0x5, 0x6}, {0x4, 0x7}, {0x5, 0x2}, {0x3, 0x1}, {0x2, 0x2}, {0x3, 0x3}, {0x2, 0x7}, {0x7, 0x5}, {0x0, 0x3}, {0x3, 0x4}, {0x6, 0x3}, {0x2, 0x5}, {0x6, 0x7}, {0x6, 0x6}, {0x1, 0x7}, {0x5}, {0x2, 0x3}, {0x6, 0x7}, {0x2, 0x9}, {0x0, 0x2}, {0x1, 0x2}, {0x3, 0x9}, {0x0, 0x3}, {0x0, 0x8}, {0x7, 0x8}, {0x4, 0xa}, {0x7, 0x8}, {0x2, 0x7}, {0x4, 0x2}, {0x1, 0x5}, {0x1, 0x1}, {0x6, 0x7}, {0x7, 0x3}, {0x0, 0xa}, {0x5, 0x9}, {0x3, 0x7}, {0x3, 0x6}, {0x5, 0x9}, {0x5}, {0x1}, {0x0, 0x4}, {0x7}, {0x1, 0x7}, {0x6, 0x2}, {0x2, 0x2}, {0x0, 0xa}, {0x0, 0x5}, {0x7, 0x9}, {0x0, 0x8}, {0x7, 0x6}, {0x5}, {0x1, 0x9}, {0x6, 0xa}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HT={0x4f, 0x2, [{0x3, 0x8}, {0x5, 0x8}, {0x0, 0x2}, {0x2, 0x2}, {0x5, 0x1}, {0x2}, {0x5, 0x9}, {0x1, 0xa}, {0x6, 0xa}, {0x6, 0x1}, {0x0, 0x8}, {0x5, 0x8}, {0x4, 0x1}, {0x2, 0x1}, {0x1, 0x1}, {0x0, 0x5}, {0x0, 0x3}, {0x5, 0x2}, {0x4, 0x5}, {0x3, 0x1}, {0x4, 0x7}, {0x1, 0x7}, {0x4, 0xa}, {0x3, 0xa}, {0x3, 0x8}, {0x5}, {0x5, 0x3}, {0x6, 0x2}, {0x0, 0x7}, {0x1, 0x1}, {0x0, 0x5}, {0x4, 0xa}, {0x0, 0x5}, {0x4, 0x9}, {0x6, 0xa}, {0x1, 0x9}, {0x6, 0x2}, {0x7, 0x1}, {0x0, 0x8}, {0x0, 0x9}, {0x7}, {0x1, 0x2}, {0x6, 0x6}, {0x1, 0x8}, {0x0, 0x9}, {0x7, 0x7}, {0x3, 0xa}, {0x1, 0x1}, {0x0, 0x2}, {0x7, 0x8}, {0x3, 0x2}, {0x7, 0x2}, {0x4, 0x7}, {0x1, 0x6}, {0x3, 0x4}, {0x5}, {0x3, 0xa}, {0x5, 0x2}, {}, {0x2, 0x3}, {0x7, 0xa}, {0x7, 0x3}, {0x2, 0x3}, {0x1, 0x4}, {0x6, 0x1}, {0x0, 0x8}, {0x7, 0x2}, {0x4, 0x6}, {0x0, 0x9}, {0x2}, {0x6, 0xa}, {0x6, 0x5}, {0x4}, {0x3, 0x2}, {0x6, 0x6}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xfff8, 0x7, 0x10, 0x1ff, 0x400, 0x9, 0x4a3, 0x7]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x89f, 0x8, 0xb, 0x7fff, 0x4, 0x800, 0x1, 0x4]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x9f, 0x5d, 0x6, 0x0, 0x1000, 0x1, 0xa0, 0xffff]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xac3, 0xbc81, 0xfff7, 0xdc, 0x1, 0x5, 0x5, 0x2]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xb, 0x8, 0x2, 0x9, 0x2, 0x101, 0x7f, 0x5]}}]}]}]}, 0x250}}, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) 8.332351428s ago: executing program 0 (id=2584): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f00000018c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x6}, 0x70) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2, 0xc3072, 0xffffffffffffffff, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup3(r3, r2, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$tipc(0x1e, 0x0, 0x0, &(0x7f0000000000)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0, r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) openat$nullb(0xffffffffffffff9c, 0x0, 0xc4382, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpid() mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r4, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r5 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x80380, 0x0) preadv(r5, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x19, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="18000000000000000000000000850000007b000000180100002020752500000000002023c4a3cb50770d0ac11e7ad8d9979520207b010072000000000000f8ffffffb702000008000000b703000000000000000000000600000095000000e800"/105], &(0x7f0000000180)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r6}, 0xc) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r7 = socket$inet6(0xa, 0x2, 0x3a) setsockopt$inet6_int(r7, 0x29, 0x4e, &(0x7f0000000040)=0x9, 0x4) bind$inet6(r7, &(0x7f0000000000)={0xa, 0x2, 0x0, @local, 0xa}, 0x1c) socket(0x2, 0x2, 0x1) bind$unix(0xffffffffffffffff, &(0x7f0000000000)=@abs, 0x6e) r8 = syz_open_procfs(0x0, &(0x7f0000000480)='net/icmp6\x00') preadv(r8, &(0x7f0000000080)=[{&(0x7f00000001c0)=""/133, 0x85}], 0x1, 0xa3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) 7.288874848s ago: executing program 0 (id=2587): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000000c0)={{{@in6=@ipv4={""/10, ""/2, @local}, @in6=@dev}}, {{@in=@remote}, 0x0, @in=@private}}, &(0x7f0000000040)=0xe8) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x8, &(0x7f00000000c0)=0x7d, 0x4) bind$inet(r1, &(0x7f0000001c00)={0x2, 0x4e23, @multicast1}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000e8ffffff850000000400000095"], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000340)='sched_switch\x00'}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000002c0)=0x7) r2 = getpid() ioctl$sock_ipv6_tunnel_SIOCADDPRL(r0, 0x89f5, &(0x7f0000000300)={'sit0\x00', &(0x7f0000000380)={@loopback, 0x0, 0x0, 0x70, 0x0, [{@remote}, {@broadcast}, {}, {@empty}, {@private}, {@dev}, {@loopback}]}}) sched_setscheduler(r2, 0x3, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$inet_sctp6_SCTP_EVENTS(0xffffffffffffffff, 0x84, 0xb, 0x0, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) connect$inet(r1, &(0x7f0000001bc0)={0x2, 0x4e23, @loopback}, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) write$binfmt_misc(r1, &(0x7f00000002c0)=ANY=[], 0x3a7) r4 = syz_open_procfs(0x0, &(0x7f00000001c0)='timers\x00') read$FUSE(r4, &(0x7f0000000540)={0x2020}, 0x2020) lseek(r4, 0x3, 0x0) sendmmsg$inet(r1, &(0x7f0000000800)=[{{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000002c40)="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", 0x10d}], 0x1}}], 0x1, 0x4014) syz_emit_ethernet(0x0, 0x0, 0x0) 6.716027541s ago: executing program 2 (id=2589): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) openat2$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = memfd_secret(0x80000) openat$cgroup_ro(r1, &(0x7f0000000800)='cpu.stat\x00', 0x0, 0x0) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x0, 0xe, 0x0, &(0x7f0000000340)="e02742e8680d85ff9782762f86dd", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000880)={0x38, 0x28, 0x100, 0x0, 0x0, {0x2}, [@nested={0x10, 0x1, 0x0, 0x1, [@typed={0x9, 0x0, 0x0, 0x0, @str='!])&\x00'}]}, @nested={0x14, 0xd0, 0x0, 0x1, [@typed={0x8, 0xbb, 0x0, 0x0, @u32=0x400}, @typed={0x8, 0x7d, 0x0, 0x0, @str=']*\'\x00'}]}]}, 0x38}}, 0x0) pwrite64(0xffffffffffffffff, &(0x7f0000000140), 0x0, 0x0) geteuid() r3 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000380)=@filter={'filter\x00', 0xe, 0x4, 0x388, 0xffffffff, 0x0, 0x1d8, 0x0, 0xffffffff, 0xffffffff, 0x2f0, 0x2f0, 0x2f0, 0xffffffff, 0x4, &(0x7f0000000100), {[{{@ip={@local, @loopback, 0x0, 0xff, 'batadv_slave_0\x00', 'wlan0\x00', {}, {0xff}, 0x5e, 0x2, 0x10}, 0x0, 0xb8, 0xe0, 0x0, {}, [@common=@socket0={{0x20}}, @common=@icmp={{0x28}, {0x12, 'p$'}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x1}}}, {{@ip={@multicast2, @local, 0xffffff00, 0xff, 'sit0\x00', 'veth1_to_bond\x00', {}, {}, 0x73, 0x2, 0x4c}, 0x0, 0x98, 0xf8, 0x0, {}, [@common=@ttl={{0x28}, {0x0, 0x10}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x3, [0x1, 0x9, 0x4, 0x1, 0x2, 0x4], 0x6, 0x4}, {0x2, [0x3, 0x1, 0xc, 0x6, 0x2, 0x4]}}}}, {{@ip={@multicast1, @rand_addr=0x64010101, 0x0, 0xffffffff, 'tunl0\x00', 'vxcan1\x00', {0xff}, {}, 0x33, 0x1, 0x21}, 0x0, 0xf0, 0x118, 0x0, {}, [@common=@set={{0x40}, {{0x3, [0x5, 0x2, 0x1, 0x0, 0x6, 0x5], 0x3, 0x2}}}, @common=@set={{0x40}, {{0x3, [0x2, 0x3, 0x4, 0x0, 0x3, 0x4], 0x3, 0x6}}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x6}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3e8) bpf$PROG_BIND_MAP(0x23, 0x0, 0x0) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000240)={0x6, 0x3, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2d}, 0x90) r5 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={r4, r6}, 0x40) syz_emit_ethernet(0x4e, &(0x7f0000000300)={@local, @empty, @val={@val={0x88a8, 0x1, 0x0, 0x3}, {0x8100, 0x2, 0x1, 0x402}}, {@llc_tr={0x11, {@llc={0x6, 0x1a, "157e", "b557f731ef7af52da589dcbfaf6012f629aae3796c572c6099db0ab7b14d35f7b83cd8c8628e290918311053427fa1fa85eb317f"}}}}}, 0x0) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, 0x0, 0x0) getsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) syz_usb_connect(0x3, 0x52, &(0x7f0000000f80)={{0x12, 0x1, 0x0, 0xaa, 0x32, 0x25, 0x10, 0x7af, 0x4, 0x101, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x40, 0x1, 0x3, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xd8, 0x0, 0x1, 0x23, 0x76, 0x71, 0x0, [@uac_control={{}, [@mixer_unit={0x8, 0x24, 0x4, 0x0, 0x0, "c6d401"}]}], [{{0x9, 0x5, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, [@generic={0x12, 0x21, "aec70bcb0541d6e497fe637fa3a9dde3"}, @generic={0x2}]}}]}}]}}]}}, 0x0) sendmsg(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000ec0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_KEY(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)={0x30, 0x0, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r7}, @NL802154_ATTR_SEC_KEY={0x14, 0x30, 0x0, 0x1, [@NL802154_KEY_ATTR_ID={0x10, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x4}]}]}]}, 0x30}}, 0x0) sendmsg$NL802154_CMD_SET_MAX_FRAME_RETRIES(0xffffffffffffffff, &(0x7f0000000940)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x40000002}, 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x1c, 0x0, 0x20, 0x70bd28, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r7}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4004}, 0x48000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f00000007c0), 0x2, 0x0) ioctl$sock_FIOGETOWN(r3, 0x8903, &(0x7f0000000780)) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={0x30, 0x1, 0x1, 0x101, 0x0, 0x0, {0xa}, [@CTA_LABELS={0x10, 0x16, 0x1, 0x0, [0x0, 0x8001, 0x8]}, @CTA_FILTER={0xc, 0x19, 0x0, 0x1, [@CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0xcd}]}]}, 0x30}}, 0x0) 6.714786192s ago: executing program 4 (id=2590): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, 0x0, &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r0, 0x5, 0x0, 0x0, &(0x7f0000000240), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) openat$capi20(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) openat$capi20(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r1 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) read$FUSE(r1, &(0x7f00000022c0)={0x2020}, 0x2020) prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x2, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = dup(r2) write$UHID_INPUT(r3, &(0x7f0000002080)={0xfc, {"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", 0x1000}}, 0x1006) preadv(0xffffffffffffffff, &(0x7f0000000240), 0x0, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, 0x0, 0x0) openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) epoll_create1(0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$capi20(0xffffffffffffff9c, &(0x7f00000003c0), 0x2400, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x0) getsockopt$inet_opts(0xffffffffffffffff, 0x0, 0xc, 0xffffffffffffffff, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000280), 0xffffffffffffffff) write$RDMA_USER_CM_CMD_LISTEN(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_NL_LINK_SET(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000440)={0x38, r6, 0x101, 0x0, 0x0, {}, [@TIPC_NLA_LINK={0x24, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x63d}]}]}]}, 0x38}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a00000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r4}, 0x0, &(0x7f0000000300)=r4}, 0x20) 6.712888742s ago: executing program 1 (id=2591): r0 = socket$nl_generic(0x10, 0x3, 0x10) fsopen(&(0x7f0000000040)='afs\x00', 0x0) r1 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) socket$l2tp6(0xa, 0x2, 0x73) connect$can_bcm(0xffffffffffffffff, 0x0, 0x0) futex(0x0, 0x8, 0x0, &(0x7f0000000040)={0x77359400}, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) creat(0x0, 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000100000,user_i', @ANYRESDEC=0x0, @ANYBLOB=',group_id', @ANYRESDEC=0x0]) write$FUSE_NOTIFY_POLL(r2, &(0x7f00000000c0)={0x18}, 0x18) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r3, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) setxattr$incfs_id(&(0x7f0000000140)='./file0\x00', &(0x7f0000000200), &(0x7f0000000280)={'0000000000000000000000000000000', 0x33}, 0x20, 0x0) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000f, 0x10, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x0) ioctl$VT_RESIZEX(0xffffffffffffffff, 0x560a, 0x0) r4 = syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301) ioctl$USBDEVFS_ALLOW_SUSPEND(r4, 0x5522) ioctl$USBDEVFS_ALLOC_STREAMS(r4, 0x8008551c, &(0x7f0000000300)=ANY=[@ANYRES64, @ANYRES64=r3]) sendmmsg(r1, &(0x7f0000000480), 0x2e9, 0x0) setsockopt$inet6_MCAST_LEAVE_GROUP(r1, 0x29, 0x3c, 0x0, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)={0x1c, r5, 0x5, 0x0, 0x0, {{0x96}, {@val={0x8, 0x3, r6}, @void}}}, 0x1c}}, 0x0) r7 = syz_io_uring_setup(0x239, &(0x7f0000000080), &(0x7f0000000000), &(0x7f0000000040)) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r7, 0x13, &(0x7f0000000140)=[0xe57a0000], 0x2) 6.565106699s ago: executing program 3 (id=2592): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000005080), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TDLS_MGMT(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000500)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="47000000000000008a007f00000008000300", @ANYRES32=r3], 0x1c}}, 0x0) (fail_nth: 8) 6.347199337s ago: executing program 3 (id=2593): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) msgget$private(0x0, 0x0) sendmsg$NL80211_CMD_SET_CHANNEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000300)) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000004c0)='./binderfs/binder0\x00', 0x0, 0x0) dup3(r2, r1, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000980)={{0x14}, [@NFT_MSG_DELRULE={0x6f4, 0x8, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x6}, [@NFTA_RULE_EXPRESSIONS={0xa4, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @dynset={{0xb}, @void}}, {0x2c, 0x1, 0x0, 0x1, @counter={{0xc}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x8}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0xfffffffffffffff9}]}}}, {0x28, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_CT_SREG={0x8, 0x4, 0x1, 0x0, 0x11}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x8}, @NFTA_CT_DIRECTION={0x5}]}}}, {0x14, 0x1, 0x0, 0x1, @byteorder={{0xe}, @void}}, {0x10, 0x1, 0x0, 0x1, @exthdr={{0xb}, @void}}, {0x18, 0x1, 0x0, 0x1, @osf={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_OSF_FLAGS={0x8}]}}}]}, @NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x3}, @NFTA_RULE_COMPAT={0x3c, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_RULE_COMPAT_FLAGS={0x8}, @NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0xa0}, @NFTA_RULE_COMPAT_FLAGS={0x8}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x80f3}, @NFTA_RULE_COMPAT_FLAGS={0x8}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x600}]}, @NFTA_RULE_EXPRESSIONS={0x164, 0x4, 0x0, 0x1, [{0x84, 0x1, 0x0, 0x1, @dynset={{0xb}, @val={0x74, 0x2, 0x0, 0x1, [@NFTA_DYNSET_SET_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_DYNSET_OP={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_DYNSET_OP={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_DYNSET_EXPRESSIONS={0x34, 0xa, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, @NFTA_LOOKUP_DREG={0x8, 0x3, 0x1, 0x0, 0x9}}, {0xc, 0x1, 0x0, 0x1, @NFTA_LOOKUP_DREG={0x8, 0x3, 0x1, 0x0, 0x2}}, {0xc, 0x1, 0x0, 0x1, @NFTA_LOOKUP_SET_ID={0x8, 0x4, 0x1, 0x0, 0x2}}, {0xc, 0x1, 0x0, 0x1, @NFTA_LOOKUP_SET_ID={0x8, 0x4, 0x1, 0x0, 0x3}}]}, @NFTA_DYNSET_EXPR={0x10, 0x7, 0x0, 0x1, {{0xb}, @void}}, @NFTA_DYNSET_SREG_KEY={0x8, 0x4, 0x1, 0x0, 0x15}, @NFTA_DYNSET_SET_ID={0x8, 0x2, 0x1, 0x0, 0x2}]}}}, {0x10, 0x1, 0x0, 0x1, @queue={{0xa}, @void}}, {0x14, 0x1, 0x0, 0x1, @immediate={{0xe}, @void}}, {0x38, 0x1, 0x0, 0x1, @fwd={{0x8}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_FWD_NFPROTO={0x8, 0x3, 0x1, 0x0, 0xa}, @NFTA_FWD_SREG_ADDR={0x8}, @NFTA_FWD_SREG_DEV={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_FWD_SREG_DEV={0x8, 0x1, 0x1, 0x0, 0xf}, @NFTA_FWD_NFPROTO={0x8}]}}}, {0x1c, 0x1, 0x0, 0x1, @meta={{0x9}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x1f}]}}}, {0x48, 0x1, 0x0, 0x1, @synproxy={{0xd}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_SYNPROXY_WSCALE={0x5, 0x2, 0x1}, @NFTA_SYNPROXY_FLAGS={0x8, 0x3, 0x1, 0x0, 0x18}, @NFTA_SYNPROXY_WSCALE={0x5, 0x2, 0x24}, @NFTA_SYNPROXY_FLAGS={0x8, 0x3, 0x1, 0x0, 0x8}, @NFTA_SYNPROXY_MSS={0x6, 0x1, 0x1, 0x0, 0x5}, @NFTA_SYNPROXY_FLAGS={0x8, 0x3, 0x1, 0x0, 0x4}]}}}, {0xc, 0x1, 0x0, 0x1, @cmp={{0x8}, @void}}, {0x10, 0x1, 0x0, 0x1, @quota={{0xa}, @void}}]}, @NFTA_RULE_USERDATA={0x51, 0x7, 0x1, 0x0, "106fe7dfb4a11f63257725b0cbff8365a2b4bba656b7b092a07359ad113e25c129ee26d75b04c0a84f58e69e15164137fc363007975066b8e16aa4e3e928f78145d193e1a04d5f298f11cf241d"}, @NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x3}, @NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0xe}, @NFTA_RULE_ID={0x8}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x414, 0x4, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, @fib={{0x8}, @void}}, {0x2c, 0x1, 0x0, 0x1, @xfrm={{0x9}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_XFRM_SPNUM={0x8, 0x4, 0x1, 0x0, 0x6}, @NFTA_XFRM_SPNUM={0x8}, @NFTA_XFRM_DREG={0x8, 0x1, 0x1, 0x0, 0x3}]}}}, {0x30, 0x1, 0x0, 0x1, @lookup={{0xb}, @val={0x20, 0x2, 0x0, 0x1, [@NFTA_LOOKUP_DREG={0x8, 0x3, 0x1, 0x0, 0xd}, @NFTA_LOOKUP_SET={0x9, 0x1, 'syz0\x00'}, @NFTA_LOOKUP_SREG={0x8, 0x2, 0x1, 0x0, 0x2}]}}}, {0x3a8, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x398, 0x2, 0x0, 0x1, [@NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0xf}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x13}, @NFTA_BITWISE_DATA={0x36c, 0x7, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}]}, @NFTA_DATA_VALUE={0x4c, 0x1, "1046ab31ca322fdb8c342fd2d221687422ac2d8c779dc7ba247fc68ddfffd514a20c55ebea5406aaee61313ebc7375c638a5ac988dac18efaa7043a88eb2b90bc783b7d68aab8d7a"}, @NFTA_DATA_VALUE={0xde, 0x1, "3599f7a8a47abf6482a46857e7e7394ca579ad4b7a05b8e17a757ba83f575f60a4d11d98e099cf21281c442c45f138f434ec42922d285936c5cd06d5cf6fb04f8516367990c8ef9951ff09f28ddce1b5f18e3aecfcfbf41fbd7284dbf42851d33d2997baf17cf52b895ea5d948605b20338f5873119233dbb17f5b7e4416ed60de8d879a8dd520943e8d7c125228f02d6cb35b3884ff6bf4ad7a438e128885c6bd21e082d8182db0e7fcd184b3df1e75d99d35d7aa22d3857e3282b5ec41e5ab41fbe909366487c4f12e7704d6ba1daff69217f674c224d9decf"}, @NFTA_DATA_VALUE={0x83, 0x1, "602a41cb69ab9a3da03476927b3be4ab9cd4fef13aa08af78871f50b108f5e7a3e719b159427be69602f9a50f7cb614ea5341d5d4a583666bb3a54fbf85b40e65ee49e6f74682b903d7e3624f7973dfd75ba13549416c9d6b87883fd0daf961bde5ce3c4d8ffbb3ad7122d2f64e13ed56d42e10aaa5d1a4c138df3c9789d58"}, @NFTA_DATA_VERDICT={0x64, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN_ID={0x8}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0xf}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VALUE={0xea, 0x1, "553b2f5e5b9412fb11ccc49d0ac959fed66a1998d0f07d43cf13cd2dd143f11c64552a6e9d8c7119bd970e43297236b3d9066bfc022c82390451d050ff0de47a3b65710952c036a317cd55890d0356ad2cf036c34eb847475f5aee45ed64c922c9ecc9c3c7e14ae9c2f6fd20dfb91b88d85b16fb00f1f35a5ebc323a2cdf6762b40bb3c4ae60bfec22c2e2c662e9c6a69b624f27a6e09b9b63aa48b5c3e4816b03bb746e64ea86846ac19df07be5dbb0b2e9fd48471eafc20e86aaacd652f26a44a62d92dd291dffbe7a72ee2668b587466ca0494a104a373285a5dc001c0369e1bf8e004ab9"}, @NFTA_DATA_VERDICT={0x38, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x5}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0xfffffffd}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0xb4}]}, @NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}]}]}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x13}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x13}, @NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x80000001}]}}}]}]}, @NFT_MSG_DELOBJ={0xcc, 0x14, 0xa, 0x3, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x3}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x9}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x8}, @NFTA_OBJ_USERDATA={0x85, 0x8, "689320f2b98fdc41581eae4ee908b4d4d8a4531b51eff457c9b4eb34bc9bc447fc730c9a348850dd53e2f2d4912880d4dd273bb1f6763ea5dec2436e1ae86f57175b43fce18b4d194bc573802e30030882ff924ccf7e79e8055e7ec941c70610f685606d0ecbbdb6eca43a1f32ae0dcc47c1d6b87d588de76e693d5ec850a65398"}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x8}]}], {0x14}}, 0x7e8}, 0x1, 0x0, 0x0, 0xc0}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETFLOWTABLE(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000600)={0x100, 0x17, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_FLOWTABLE_HOOK={0xe0, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0xcc, 0x3, 0x0, 0x1, [{0x14, 0x1, 'macvlan1\x00'}, {0x14, 0x1, 'geneve1\x00'}, {0x14, 0x1, 'ipvlan1\x00'}, {0x14, 0x1, 'wlan0\x00'}, {0x14, 0x1, 'gre0\x00'}, {0x14, 0x1, 'veth1_to_bond\x00'}, {0x14, 0x1, 'vxcan1\x00'}, {0x14, 0x1, 'vlan0\x00'}, {0x14, 0x1, 'veth1_to_hsr\x00'}, {0x14, 0x1, 'wg0\x00'}]}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0xdb2f}]}]}, 0x100}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x0, 0x4, 0x8}, 0x48) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r6, &(0x7f0000000080)={0xa, 0x14e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) listen(r6, 0xfffffffd) r7 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$int_in(r7, 0x5452, &(0x7f0000000100)=0x8) setsockopt$inet_tcp_int(r7, 0x6, 0x19, &(0x7f00000000c0)=0x7, 0x4) ioctl$int_in(r7, 0x5421, &(0x7f0000000080)=0x7) connect$inet(r7, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) sendto$inet(r7, &(0x7f0000000040)='u', 0xa792a, 0x804, 0x0, 0x0) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000003100), r8) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r8, &(0x7f0000003240)={0x0, 0x0, &(0x7f0000003200)={&(0x7f0000000540)=ANY=[@ANYBLOB="c9573b2564db591e40ebb2740312b561fceb89568caab7911ad97b1e86acbfe18c31daf08ddc9cf9c18b9710eb9e99cc88252068f81a103f22fa6a299819e82542bca06e68d8a40b219f1f8f6ac0ec4bdfcdaccb45587d30245d3e00dd94e6afa4e9d7d26753e07cb19f2a012b2e5d8814e985d5ef8080", @ANYRES16=r9, @ANYBLOB="010000000000000000000400000014000200fe8000000000000000000000000000aa140006006272696467655f736c6176655f310000"], 0x3c}}, 0x0) 5.680349117s ago: executing program 0 (id=2594): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r4}, 0x10) inotify_init1(0x0) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000140)) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000140)) sendmsg$BATADV_CMD_GET_NEIGHBORS(r5, &(0x7f0000004340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x1c, r6, 0x331, 0x0, 0x0, {0x8}, [@BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x1c}}, 0x0) quotactl$Q_SYNC(0xffffffff80000102, 0x0, 0x0, 0x0) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_MAX_THREADS(r7, 0x40046205, &(0x7f0000000000)=0x1) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f0000001a80)={0x4, 0x400000000000000, &(0x7f0000001900)=[@enter_looper], 0x1, 0x0, &(0x7f0000001a40)="a1"}) 5.599034848s ago: executing program 1 (id=2595): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="12010000090003206d0414c340000000000109022400010000a0000904000001030101000921000800012201000905", @ANYRES64], 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, &(0x7f0000000dc0)=ANY=[@ANYBLOB="00020c0000000c0002"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000080)={0x7b, &(0x7f00000000c0)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000900)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x20, 0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000000)={'sit0\x00', &(0x7f00000002c0)={'syztnl1\x00', 0x0, 0x7800, 0x0, 0x1, 0x0, {{0x8, 0x4, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast, @remote, {[@timestamp={0x44, 0xc, 0x0, 0x0, 0x0, [0x0, 0x5]}]}}}}}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, &(0x7f00000002c0)=[{0x0, 0x3, 0x0, 0x9}, {0x0, 0x4, 0x0, 0x4}, {0x0, 0x2, 0x0, 0x2}]}, 0x90) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='net_prio.prioidx\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000080), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r2, 0x0) write$binfmt_script(r1, &(0x7f0000000040), 0xfea7) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r1, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000200)={&(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000004000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000/0xb000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, 0x0}, 0x68) syz_usb_control_io(r0, 0x0, &(0x7f00000009c0)={0x84, 0x0, 0x0, 0x0, &(0x7f00000005c0)={0x20, 0x0, 0x4, {0x3}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_connect$cdc_ncm(0x6, 0x156, &(0x7f0000000600)={{0x12, 0x1, 0x200, 0x2, 0x0, 0x0, 0xff, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x144, 0x2, 0x1, 0x7f, 0x100, 0x7f, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x6, 0x24, 0x6, 0x0, 0x1, "d4"}, {0x5, 0x24, 0x0, 0x3}, {0xd, 0x24, 0xf, 0x1, 0xfffffff9, 0x6, 0x0, 0xf6}, {0x6, 0x24, 0x1a, 0xa}, [@mdlm_detail={0x49, 0x24, 0x13, 0xd5, "7ef99251668f66b8890f21b36c48c1fb9088ab5b14ea263c1c6bee8100de98f73b654411762639624365f474f2bc5dde4dfbc30f3bc6b3cda6ae5e810f459d32a011a727ed"}, @mdlm_detail={0x97, 0x24, 0x13, 0x80, "f0f5d02758b89ce1bce8467a06213f9da36c7e1110022ea103c1cab13f6ce88111ef9de7f082304129eab04a7182ff94ff9df8e1b491ccf51e12cf60da9a8031070e05cc0116863e64d1f3357fc82537d9417f1a37d8dff647e91a24b4398f361c51ff7bfc149a9ef98199685d86d1badf417c273e4ad6992174105ad1593ba26a4e6ab23aa6d4fd654ed668ef0a9490995ce4"}, @dmm={0x7, 0x24, 0x14, 0x39ae, 0x10}]}, {{0x9, 0x5, 0x81, 0x3, 0x10, 0x4, 0x82, 0x4}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x8, 0xc, 0x1, 0x81}}, {{0x9, 0x5, 0x3, 0x2, 0x400, 0x0, 0x2, 0xb}}}}}}}]}}, &(0x7f0000000300)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x201, 0x1, 0x7f, 0x6, 0x8, 0x4}, 0x39, &(0x7f0000000140)=ANY=[@ANYBLOB="050f390005071002089007000b2de9c9a8b279cd05000903100b0b10010c1400400003008014100459f59b9cf9ab70f4a3a6bb9c84e863b5c4"], 0x3, [{0x96, &(0x7f0000000400)=@string={0x96, 0x3, "c4355845c00098d475c0f67c8d34adc215389ab9be52fb878497b9571705f5737858f401a15237bccfc930d2b9f0ee2b4472324235130d45c71e5cecf3f61a93eef90b0ea7c2c241b52cf05edece290e210871b58b656ff5a801195866f460ef87d0ab8ce3513cd8509a995be68a09027de5712d03bc4601b166c1598416d9401ffb874835553b9ed0d35cacab6c5d42471d846d"}}, {0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x500a}}, {0xe1, &(0x7f0000000780)=@string={0xe1, 0x3, "c3529c1b87f504b394a875ff5efe731c7e156644bc82cc54dd7f7190229d37ac26890b9cdb7c49ce55f1944b9fea047c24402e08c3abf3826a067b3aafabcab321fa95e753ab240bc596d33026ebbb8385b89f991c86ca6a5c0e19eb76cca308b13df6b92cfa0155dc98358d4778cae385fcfb0d383c07e9b2f929fa86b3a985ac3e124d3557b7d495f0e11d8a11f647729bb7a3ca9ac3c74717a1226b75243e59dd7e18073f9a62e4adb629f07c8d52fe4a1767ce78dbdd56f60c0ad5258723dd448d0f9e4b0502f78fe29606943711b445d982028a54c78022fda0b31d8a"}}]}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000e40)={0x2c, &(0x7f0000000000)=ANY=[@ANYBLOB='\x00\x00\b\x00\x00\x00', @ANYRESHEX], 0x0, 0x0, 0x0, 0x0}) 5.047810133s ago: executing program 2 (id=2596): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8}, 0x0) sched_setscheduler(0x0, 0x0, 0x0) getpid() connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x89}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) syz_emit_ethernet(0x171, 0x0, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x1, 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) connect$inet6(0xffffffffffffffff, 0x0, 0x0) r0 = gettid() sigaltstack(&(0x7f0000001000)={&(0x7f0000000000)=""/4088, 0x80000000, 0xff54}, 0x0) rt_sigqueueinfo(r0, 0x0, &(0x7f0000001500)) 4.982925584s ago: executing program 3 (id=2597): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) (async, rerun: 64) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (rerun: 64) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) ptrace$getregset(0x4204, r0, 0x4, &(0x7f00000000c0)={&(0x7f0000000240)=""/89, 0x59}) (async, rerun: 32) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) (async, rerun: 32) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000100), 0x208e24b) (async) getsockopt$bt_BT_SECURITY(0xffffffffffffffff, 0x11, 0x68, 0x0, 0x20000000) (async) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f00000002c0)={@mcast1, 0xffffff38, 0x1, 0xff, 0xa, 0x2, 0x5}, 0x20) r3 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000200)={0x28, 0x0, 0x0, @my=0x1}, 0x10) (async, rerun: 64) connect$vsock_stream(r3, &(0x7f0000000340)={0x28, 0x0, 0x0, @my=0x1}, 0x10) (rerun: 64) r4 = syz_open_dev$video4linux(&(0x7f0000000000), 0x2004, 0x0) ioctl$VIDIOC_SUBDEV_S_FMT(r4, 0xc040563d, &(0x7f0000000380)={0x0, 0x10}) (async) prctl$PR_SCHED_CORE(0x53564d41, 0x1, 0x0, 0x0, 0x0) (async, rerun: 64) r5 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 64) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000200)={'lo\x00', 0x0}) (async) syz_open_dev$tty20(0xc, 0x4, 0x1) open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) (async) mount(&(0x7f0000000100)=@md0, &(0x7f0000000080)='./bus\x00', &(0x7f00000000c0)='ecryptfs\x00', 0x0, &(0x7f0000000040)='&@,,') (async) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000100)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x2, 0x2, [@TCA_HHF_RESET_TIMEOUT={0x8}]}}]}, 0x38}}, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, 0xffffffffffffffff, 0x0) r7 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x541b, &(0x7f0000000040)={'wlan1\x00'}) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000180)={0x0, 0x10000}, &(0x7f00000001c0)=0x8) 4.716244499s ago: executing program 2 (id=2598): r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) io_setup(0x3, &(0x7f00000003c0)=0x0) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') io_submit(r1, 0x1, &(0x7f0000000140)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x0, r2, 0x0}]) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000580)=ANY=[@ANYBLOB="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"/3601], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000180)="71e67a15cdf0311cfcf33a52a7d86bd1", 0x10) r5 = accept4$alg(r4, 0x0, 0x0, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000caefb8)={0x8, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="850000006100000054000000000000009500000000000000b4a8b1541206000000e9c79077fa15ba36eca61299de54cf77c9062c30bc068829afff36b31fa7e358e95cfa"], &(0x7f0000281ffc)='GPL\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000200)={r6, 0x2000000, 0x1b, 0x0, &(0x7f00000001c0)="5cdd3086ddffff6633c9bbac88a8861000dffd00139fb7a884bdfc", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$alg(r5, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) io_setup(0x20000000001005, &(0x7f0000000880)=0x0) io_submit(r7, 0x1, &(0x7f0000000580)=[&(0x7f00000000c0)={0x5000000, 0x0, 0xd, 0x0, 0x0, r5, &(0x7f0000000080)='=', 0x19}]) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r3}, 0x10) io_getevents(r1, 0x100, 0x0, &(0x7f0000000300), &(0x7f0000000340)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) rt_sigprocmask(0x0, &(0x7f0000000480), 0x0, 0x8) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, 0x0, 0x0, 0x0, 0x0) capset(0x0, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x1, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) creat(0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x4, 0x3c56, 0x1}, 0x48) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r8}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r9}, 0x10) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280), &(0x7f0000000580), 0xffffffff, r8}, 0x38) write$rfkill(r0, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x1}, 0x8) 4.076786802s ago: executing program 4 (id=2599): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), 0xffffffffffffffff) mount_setattr(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x1100, &(0x7f0000000280)={0x100070, 0x80}, 0x20) sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)={0x14, r1, 0x309, 0x0, 0x0, {0x21}}, 0x14}, 0x1, 0xf000000}, 0x0) r2 = socket(0x10, 0x80002, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'veth0_macvtap\x00'}) ioctl$sock_ipv6_tunnel_SIOCGETPRL(r2, 0x89f4, &(0x7f0000000080)={'sit0\x00', &(0x7f0000000040)={@multicast2, 0x1, 0x0, 0x30, 0x0, [{@dev}, {@multicast1}, {@initdev}]}}) getsockopt$IP_SET_OP_VERSION(r0, 0x1, 0x53, &(0x7f00000000c0), &(0x7f0000000100)=0x8) sendmsg$TIPC_NL_PUBL_GET(r0, &(0x7f0000000200)={&(0x7f0000000180), 0xc, &(0x7f00000001c0)={&(0x7f0000000580)={0x1c8, 0x0, 0x511, 0x70bd2c, 0x25dfdbfe, {}, [@TIPC_NLA_BEARER={0xe0, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e20, 0x7ff, @ipv4={'\x00', '\xff\xff', @multicast2}, 0xfffffc01}}, {0x14, 0x2, @in={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}}}}, @TIPC_NLA_BEARER_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xecf}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x8}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0x6, @ipv4={'\x00', '\xff\xff', @loopback}, 0xaf1}}, {0x14, 0x2, @in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}}}}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}]}]}, @TIPC_NLA_SOCK={0x10, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x4}]}, @TIPC_NLA_PUBL={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x8000}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x6}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x8}]}, @TIPC_NLA_NET={0x50, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x6}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x46c2}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x40}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x9}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x1}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xda5}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x2}]}, @TIPC_NLA_LINK={0x44, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}, @TIPC_NLA_MON={0x14, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x5}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1}]}]}, 0x1c8}}, 0x40000) 3.796356649s ago: executing program 4 (id=2600): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x16, 0x8, &(0x7f00000011c0)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd120000000000008500000006000000b70000000000000095000000000000003faf4f2aa3d9b18ed812a2e2c49e8020a6f4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0ff5b14104fe62cc60e413905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64f751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07a72c234664c0af9360a1f7a5e6b607130c89f18c0c1089d8b853289d01aa27ae8b09e00e79ab20b0b8e1148f49faf2ad0000000000000006fa03c6468972089b302d7bf2364149215108333719acd97cfa107d40224edc5465a93df8513a32ec450bebc6099ad2300000080006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f4ab87b1bfeda7be586602d985430cea0162ab3fcf4591c926abfb076719237c8d0e60b0eea24492a660583eecdbf5bcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c95c25a573dc2edcaea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe511195418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b5b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4929330142ba11de6c5d50b83bae613402216b5054d1e7c13b1355d6f4a8245ffa4997da8c77af4c0eb97fca585ec6bf58351d564beb6d952aab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a326eea31ae4e0f7505ebf6c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57000000009700cf0b4b8bc2294133000000000000000000030000000000000000dd11e6e8861c46495ba585a4b2d02edc3e28dd271c896249ed85b980680b00002b435ac15f2a169cdcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffff7f000010000000000000905ad897ef3b7cda42013d53046da21b40216e14ba2d6ad5656bfff17addaedab25b30002abbba7fa725f38400bee3dfc8fb24f67c1f001b2cd317902f19e385be9e48dccff729433282830689da6b53b263339863297771429d120000003341b74abaa7c95900fca0493cf29b33dcc9ffffffffffffffd39fec2271ff01589646efd1cf870cd7bb232bbdb9dc33cbd7643866fde41f94290c2a5ff870ce5dfd3467decb05cfd9fcb32c8ed1dbd9d10a64c1083d5e71b5565b1768ee58969c41595270fb4021428ce970275d13b78100788f11f761038b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4ce0232fcea69c271d7fa29822aea68a660e717a04becff0f719197724f4fce1093b62d7e8c7123d8ec571be54c72d978cf906df0042e36acd37d7f9e119f2c06f815312e0cfe222a06f76dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2acd1fe582786105c7df8be5877050c91301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d2e959efc71f665c4d75cf2458e3322c9062ece84c99a061997a20639b41c8c12ee86c50804042b3eac1f879b136345cf67ca3fb5aac518a75f9e7d7101d5e186c489b3a06fb99f0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad05573af40326993947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457acf37331766e472391e358c3b377327ac9ecc34f24c9ae153ec60ac0694dc55bff9f5f4df90400000000000000d6b2c5ea1393fdf24285bf16b99c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e66964ae09bb6d164118e4cbe02400000000ff0700000000cc9d8046c216c1f895778cb25122a2a998de44aeadea2a40da8daccf080842a4867217373934bbd42dcb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcd62981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99b355b72d538ba495aea8e4aa37094191e10096e7e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250df98674152f94e32409e2a3bce109b60000000000001700d6d5210d7560eb92d6a97a27602b81f76386f1535b1fad6ec9a31137abf9a404abde7750898b1bd627e87306703be8672d70d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294059323e7a45319f18101288d139bd3da20fed05a8fe64680b0a3fc22dd704e4214de5946932d6c98cd1a9fbe1e7d58c08acaf30235b918a31d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69993e9960ff5f76015e6009756237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff854356cb4900000000000000000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66418d169fc03aa188546b3ad2a182068e1e3a0e2505466ac96e0d4b3bc19faa5449209b083dbd334b47f067bbab40743b2a428f1da1fc8df75cf43f8ecc8d3726602111b40e761fd21081920382f14d12ca3c3431ee97471c7868dcda7eaa69eb7f7f80572fdd11bb1d0d1280fbc22bf73468788df51710d7d31c632fc5ed1785eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331945e20fa26b8471d42645288d7226bbd9c9e9e1cc9eb3d541e407cc2dae5e690cd628ab84875f2c50ba891cea599b079b4b4ba686fcdf240430a537a395dc73bda367bf12cb7d81691a5fe8c47be2f5656a297e9df0e71f96756ea5cce7daac4be290159f6bcd75f0dda9de5532e71ae9e48b0ed1254a83100000000f6fbb869604d51a36a54c832e45b2569dc0d90b075225fde44c4e0973171ad47d6b70ebc660309e1e245b0fd78f9743af932cd6db49a47613808bad959719c0000000000378a921c7f7f6933c2e24c7e800003c9e8095e02985f28de0bbc76d58dd92606b1ef6486c85fa3e678f66422436f949e2ab8f162d7e3f855e378f4a1f40b0c6fb2d4b205a800b6968d12418a4d2a0d086d8438d415d713acebc5b014e61a543a5a391f03daca80f08f0e3b1a569e7397f6cafa86966d7ba19e720413267a6ccea9c439671d2c680f2753ca184eeeb843450368acb4383a01d25eb3d1e23e112645d1cdfa9fa410632f95a5f622f851c66ee7e30393cd7a4d67ff2a49c4f93c0984b5c2d4523497e4d64f95f08493564a1df87111c9bf3194fef97dcecc467ace45feeb685c5870d05f88a0f463db88d377442e1349acaf766218b54a9d624778e1c4cba6e6390a9f302c6eb2df7766411bef0ebb5000000000006065d6735eb7a00e127c000000000000000000000000000000a1c3da144589dcaddb71cf9374843e23f992a237a9040747e0434a8a643990b4059a98411ce867d1af7e8ea89f49e6f564d4dce8a7d6939a9214a7f39e83bd247e03a09dba000000000000000000000000aaf033d47249c8444bc13844cbf1be617d82b269e5ea0c0d525603c0ec543ea581f63893ae414a6683e941fdbdff03cfc5f8744583c0aa766a65321f907927a59d75b47f06895e8471ebc2840ce5bd054df223fb09b9c739ad64cfcfd2d498b0f11056f6c40874cb977c99b6bc1a8732198a17e610082b7ce0365f271b11d4b4a3d4c7d0bb273f406ecd4b26c93151c30f5a269991402d109becb1b9bafcb2b47e940000000000e540d8b0db3774effb7469a21f96e2594b2973ebf7a1bd9ace2ed4d6eb1735f85885be5be74dc2ea5d7d499bd28271b98f187f5879b16b409a04d78175cc8d0f707c822805d7011ed4b22419186dd2b22aadf15828db2ca19d79e1bf2f7989237ee5cb2e1eb7b2bfc92d3aa95a26f060935c4fee8b2d7d0bf3c6d82d04329164bd4ee0b8060183f36762b0440d9082d7c8b06e4c2024f77e1018758d28e7ee290f32a48bfc2aa10b3dba9bff00d2410f3477a8e0df689c880dc9a677cfaa16603527c06625a3363744cea5f2d350224cc0fea76c72ca08507235c67346722f20690fde0790f040f5fd3eff75f9b291cc5e9c686ebaadbe756c6fa039ff441e427ed12578d5cb041ebf729cfaa575cc852fbdb54e60435e6d62b9d270433b220ed9ff1ff042b8d3d866231c460765"], &(0x7f0000000100)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0xffffffff}, 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000003f80)={'team0\x00', &(0x7f0000003f40)=@ethtool_channels={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe}}) r2 = socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SCHED_CORE(0x36, 0x0, 0x0, 0x3, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r3, 0xc004743e, &(0x7f0000000140)) ioctl$PPPIOCSPASS(r3, 0x40107447, &(0x7f0000000180)={0x1, &(0x7f00000007c0)=[{0x6, 0x0, 0x0, 0x2}]}) write$ppp(r3, &(0x7f0000000900)='\x00\x00', 0x2) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x8, 0xe, &(0x7f0000000c00)=ANY=[@ANYBLOB="b702000000000080bfa30000000000000703000000feffff7a0af0fff8ffff1971a4f0ff00000000b7060000080000001e6400000000000045040400010000001704000001000a00b7040000000100006a0af2fe000000008500000053000000b70000000000000095000000000000008e17f199a68b061b93d83298a8cdda1ce784909b849d5550ad855dab54d8877a6db61d69f2ffcaa10350e11cb97ce8df1bc9a0c4eeceb9971e43405d621ffbc9b0d8ca56b50f0c010ddb03cf1c62d57c08a90b189d190c341035de53a9a53608c10556e5734eb84049761451ce540c772e069f80cb201b2de17dfdb4b60939d5d6aed4062049b87e03e2cd18a77dda613e0c64497fcc059c062234d5595f6fbaa187b81d1106000000000f0000fd9ac3d09e29a9d542ca9d85a5c9c88474895d679838def0a83a733dc6a39b63a5ed69d32394c53361d7480884bd8000000000000000b91c61bd99dc89f12907af7dccd106cb937b450f859ce8292a79c3e40000b59b0fc46d6cec3c080a882add4e1179bd4a44f231a2d73148be428ba953df4aece69311687f4122073a236c3a32efa04137d46f0247d2638da3261c8162bb7c7824be6195a66d2e17e122040e11001131ce319045e5b3334e68475ac3f46aa2837f9004600daded9b19b35eebe52613c346e255421b23a278fd00004270b1cd5fc9aa2286ccca37db965d9dd366598f5ec993cb0cf127e2a46cfbdf63eea190d86a4d1b75ae98480100bd5828954a7d093a54f7e75b3753508ca3c41685d1e407315e59d626c23b3f89a926e9382966853774e7dd1f1a2177cdf2802237c177d543e8da47a01f05e113e53518270239b69c117e2637c31085f4d8a596b6edab26afaf6605b231199f38a6fc7eb83714387450ea18eafbace8eec18a4b2c442e7b88a7611c1283bec84e1715fb9f4fcaf52c08058fc4f21c0ad71adabdd850aed3eeec6eaab347bdf474e17b9aa345d1e6e3bb83f90230bdf53e7d0e5c3f914d905422b83f30936674ba8f0bffaf2305c0972df71fe5f4e01506471e897bced7798509e64df360d95f9a4099f86438ac2bbcbdbd1d9db21a1d5c065567fd70aae68096827fa5c2d9bd20292344c7dcf6241447cfbb05b5d0fdb4e08afbac5397b64aa369922ed7ed8918f97294b6854210d2b93aaf92159dbaa2f186d4a420c68d6baf1c31de4f0bf478bfd51bb1e96ea849a80ae5a89be7e38474c7aade344d68324f9e12a6b9770e6bd12ae69efffaee58040753701af84c2924c1b5aea1650f42c9ae9820a33095f062fb88313d035ea405515a61a4be64f9fa0985c5be592090cc48291004609fdac2ab6100000000000000a84570c7c00d647daf8af334050b61e9b2d3f0adad1d1ff47be19b8da2799e9ecef8efabe73f92dbd0760f8bbd9c710bd1371e2b5d9a2ea2190f5e4f5cd641cdfe5d89f84a368ef7e6ff1eacdc0ec9e97b8f9c9e314661ea0aa8a104008d188b66b3a4aedeed9df4238a08fc2fb1007233cc2c87fcaa0cccd8ec03444471c1dd660c73acc17bff740d199a7c0c52c63c0408b5158e0000000c275eedb02f141113cf2c55b2c08c2c68cc99d2bb5840fba332e1c82862ec9b90106248f81d32a47ac94ddee815dba8aeb5d3121cf247a81aef7805b020e9eec44cbe3055be69fe066824ba2292b9cdce41635fc00df96fb10a3a8cc60c4a76c65ebbb0640e0a29de94edf5cbefac1c5fa96e7080af804b22cabce10ea52f1018527f4aa39cdafa3eff63de2a7f50d042667820f6f86f276afb2b8134301e031351ee13013137e9d5cec0c84d7e3f82c6fd12eb98f9ea654bcb9ce59a2015183c6e65bb0537e611b830d74c30fb8207fca0990acdbb51e4e234026e00000000b3ebae3eb52c140953a350fcf0124b1a30b1afc29ea56f8413686d912eb8118d73ef9c6d3843ebcb555301c0205dd3bd9b1d742e334319c8979c322e92fbc2c400"/1423], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000340)}, 0x42) r5 = fcntl$dupfd(r4, 0x0, r4) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000180)=@generic={0x0, r5}, 0x14) fchmodat(r5, &(0x7f0000000000)='./file0\x00', 0xea) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000540)='binfmt_misc\x00', 0x0, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) lseek(r6, 0x4, 0x0) r7 = syz_usb_connect(0x0, 0x24, &(0x7f0000000680)={{0x12, 0x1, 0x0, 0x10, 0xa0, 0xfd, 0x20, 0x2c42, 0x16f8, 0xbae3, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xb5, 0x51, 0xd2}}]}}]}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0xe, 0x2, &(0x7f0000000100)=@raw=[@ldst={0x1, 0x0, 0x4, 0x0, 0x1, 0x4a}, @jmp={0x5, 0x0, 0x9}], &(0x7f0000000280)='GPL\x00'}, 0x90) syz_usb_control_io$uac1(r7, 0x0, 0x0) r8 = syz_usb_connect(0x0, 0x24, &(0x7f0000000980)={{0x12, 0x1, 0x0, 0x1d, 0x12, 0x26, 0x10, 0x18d1, 0x1eaf, 0x779, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xe1, 0x15, 0x3d}}]}}]}}, 0x0) syz_usb_control_io$cdc_ecm(r8, 0x0, &(0x7f0000000340)={0x1c, &(0x7f00000001c0)=ANY=[@ANYBLOB="0017c8000000b8"], 0x0, &(0x7f0000000300)={0x0, 0x8, 0x1, 0x4}}) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r10 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001dc0)={0x250, r9, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r11}, @void}}, [@NL80211_ATTR_TX_RATES={0x8, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x4}]}, @NL80211_ATTR_TX_RATES={0xb8, 0x5a, 0x0, 0x1, [@NL80211_BAND_60GHZ={0xc, 0x2, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}, @NL80211_BAND_2GHZ={0x64, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_LEGACY={0x19, 0x1, [0x9, 0x6c, 0x18, 0x6, 0x60, 0x1b, 0x30, 0x48, 0x2, 0x30, 0x0, 0x1b, 0x7e, 0x9, 0x6c, 0x2, 0x60, 0x6, 0x24, 0x1b, 0x1]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x81, 0xf05, 0x0, 0xb, 0x5a, 0x3, 0x5, 0x4]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_LEGACY={0x1f, 0x1, [0x2, 0x48, 0x9, 0x4, 0x2e, 0x1, 0x2, 0x9, 0x48, 0x0, 0x5, 0x30, 0x6c, 0x24, 0x3, 0x3, 0x9, 0x6c, 0x3, 0x2, 0x1b, 0x30, 0x12, 0x6, 0x6c, 0x9, 0x16]}]}, @NL80211_BAND_5GHZ={0x20, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x2, 0x9, 0xe237, 0x8, 0x6, 0x4, 0x2, 0x5]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}]}, @NL80211_BAND_2GHZ={0x24, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x1e, 0x2, [{0x3, 0x1}, {0x0, 0x9}, {0x3, 0x4}, {0x0, 0x3}, {0x0, 0x5}, {0x3, 0x5}, {0x0, 0x1}, {0x0, 0x4}, {0x1, 0x2}, {0x2, 0xa}, {0x3, 0x8}, {0x7, 0x6}, {0x5, 0x7}, {0x4, 0x7}, {0x4, 0x2}, {0x1, 0x5}, {0x3, 0xa}, {0x1, 0x8}, {0x6, 0x3}, {0x5, 0x8}, {0x1, 0x2}, {0x5, 0x2}, {0x6, 0x9}, {0x0, 0x4}, {0x0, 0xa}, {0x1, 0x4}]}]}]}, @NL80211_ATTR_TX_RATES={0x174, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x6c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x1b, 0x1, [0x16, 0x3, 0x36, 0x12, 0x7, 0x6, 0x5, 0x36, 0xb, 0xc, 0x1b, 0x18, 0x1, 0x18, 0xb, 0x9, 0x5, 0x6c, 0x2, 0x9, 0x6c, 0xe, 0x1b]}, @NL80211_TXRATE_LEGACY={0x19, 0x1, [0x4, 0x50, 0x36, 0x12, 0x12, 0xb, 0x30, 0x12, 0x60, 0x5, 0x6c, 0x60, 0x1b, 0x60, 0xb, 0x12, 0x18, 0x3, 0x30, 0x0, 0x2]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x6, 0x2d1, 0x46, 0x4, 0x8, 0x4, 0xf, 0x4]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x8001, 0x62, 0xa0b6, 0x0, 0x401, 0x8]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}, @NL80211_BAND_5GHZ={0x104, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0x39, 0x2, [{0x5, 0x6}, {0x4, 0x7}, {0x5, 0x2}, {0x3, 0x1}, {0x2, 0x2}, {0x3, 0x3}, {0x2, 0x7}, {0x7, 0x5}, {0x0, 0x3}, {0x3, 0x4}, {0x6, 0x3}, {0x2, 0x5}, {0x6, 0x7}, {0x6, 0x6}, {0x1, 0x7}, {0x5}, {0x2, 0x3}, {0x6, 0x7}, {0x2, 0x9}, {0x0, 0x2}, {0x1, 0x2}, {0x3, 0x9}, {0x0, 0x3}, {0x0, 0x8}, {0x7, 0x8}, {0x4, 0xa}, {0x7, 0x8}, {0x2, 0x7}, {0x4, 0x2}, {0x1, 0x5}, {0x1, 0x1}, {0x6, 0x7}, {0x7, 0x3}, {0x0, 0xa}, {0x5, 0x9}, {0x3, 0x7}, {0x3, 0x6}, {0x5, 0x9}, {0x5}, {0x1}, {0x0, 0x4}, {0x7}, {0x1, 0x7}, {0x6, 0x2}, {0x2, 0x2}, {0x0, 0xa}, {0x0, 0x5}, {0x7, 0x9}, {0x0, 0x8}, {0x7, 0x6}, {0x5}, {0x1, 0x9}, {0x6, 0xa}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HT={0x4e, 0x2, [{0x3, 0x8}, {0x5, 0x8}, {0x0, 0x2}, {0x2, 0x2}, {0x5, 0x1}, {0x2}, {0x5, 0x9}, {0x1, 0xa}, {0x6, 0xa}, {0x6, 0x1}, {0x0, 0x8}, {0x5, 0x8}, {0x4, 0x1}, {0x2, 0x1}, {0x1, 0x1}, {0x0, 0x5}, {0x0, 0x3}, {0x5, 0x2}, {0x4, 0x5}, {0x3, 0x1}, {0x4, 0x7}, {0x1, 0x7}, {0x4, 0xa}, {0x3, 0xa}, {0x3, 0x8}, {0x5}, {0x5, 0x3}, {0x6, 0x2}, {0x0, 0x7}, {0x1, 0x1}, {0x0, 0x5}, {0x4, 0xa}, {0x0, 0x5}, {0x4, 0x9}, {0x6, 0xa}, {0x1, 0x9}, {0x6, 0x2}, {0x7, 0x1}, {0x0, 0x8}, {0x0, 0x9}, {0x7}, {0x1, 0x2}, {0x6, 0x6}, {0x1, 0x8}, {0x0, 0x9}, {0x7, 0x7}, {0x3, 0xa}, {0x1, 0x1}, {0x0, 0x2}, {0x7, 0x8}, {0x3, 0x2}, {0x7, 0x2}, {0x4, 0x7}, {0x1, 0x6}, {0x3, 0x4}, {0x5}, {0x3, 0xa}, {0x5, 0x2}, {}, {0x2, 0x3}, {0x7, 0xa}, {0x7, 0x3}, {0x2, 0x3}, {0x1, 0x4}, {0x6, 0x1}, {0x0, 0x8}, {0x7, 0x2}, {0x4, 0x6}, {0x2, 0x1}, {0x6, 0xa}, {0x6, 0x5}, {0x4}, {0x3, 0x2}, {0x6, 0x6}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xfff8, 0x7, 0x10, 0x1ff, 0x400, 0x9, 0x4a3, 0x7]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x89f, 0x8, 0xb, 0x7fff, 0x4, 0x800, 0x1, 0x4]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x9f, 0x5d, 0x6, 0x0, 0x1000, 0x1, 0xa0, 0xffff]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xac3, 0xbc81, 0xfff7, 0xdc, 0x1, 0x5, 0x5, 0x2]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xb, 0x8, 0x2, 0x9, 0x2, 0x101, 0x7f, 0x5]}}]}]}]}, 0x250}}, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) 3.44202697s ago: executing program 0 (id=2601): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x16, 0x8, &(0x7f00000011c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0xffffffff}, 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000003f80)={'team0\x00', &(0x7f0000003f40)=@ethtool_channels={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe}}) r2 = socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SCHED_CORE(0x36, 0x0, 0x0, 0x3, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r3, 0xc004743e, &(0x7f0000000140)) ioctl$PPPIOCSPASS(r3, 0x40107447, &(0x7f0000000180)={0x1, &(0x7f00000007c0)=[{0x6, 0x0, 0x0, 0x2}]}) write$ppp(r3, &(0x7f0000000900)='\x00\x00', 0x2) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x8, 0xe, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"/1423], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000340)}, 0x42) r5 = fcntl$dupfd(r4, 0x0, r4) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000180)=@generic={0x0, r5}, 0x14) fchmodat(r5, &(0x7f0000000000)='./file0\x00', 0xea) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000540)='binfmt_misc\x00', 0x0, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) lseek(r6, 0x4, 0x0) r7 = syz_usb_connect(0x0, 0x24, &(0x7f0000000680)={{0x12, 0x1, 0x0, 0x10, 0xa0, 0xfd, 0x20, 0x2c42, 0x16f8, 0xbae3, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xb5, 0x51, 0xd2}}]}}]}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0xe, 0x2, &(0x7f0000000100)=@raw=[@ldst={0x1, 0x0, 0x4, 0x0, 0x1, 0x4a}, @jmp={0x5, 0x0, 0x9}], &(0x7f0000000280)='GPL\x00'}, 0x90) syz_usb_control_io$uac1(r7, 0x0, 0x0) r8 = syz_usb_connect(0x0, 0x24, &(0x7f0000000980)={{0x12, 0x1, 0x0, 0x1d, 0x12, 0x26, 0x10, 0x18d1, 0x1eaf, 0x779, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xe1, 0x15, 0x3d}}]}}]}}, 0x0) syz_usb_control_io$cdc_ecm(r8, 0x0, &(0x7f0000000340)={0x1c, &(0x7f00000001c0)=ANY=[@ANYBLOB="0017c8000000b8"], 0x0, &(0x7f0000000300)={0x0, 0x8, 0x1, 0x4}}) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r10 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001dc0)={0x250, r9, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r11}, @void}}, [@NL80211_ATTR_TX_RATES={0x8, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x4}]}, @NL80211_ATTR_TX_RATES={0xb8, 0x5a, 0x0, 0x1, [@NL80211_BAND_60GHZ={0xc, 0x2, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}, @NL80211_BAND_2GHZ={0x64, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_LEGACY={0x19, 0x1, [0x9, 0x6c, 0x18, 0x6, 0x60, 0x1b, 0x30, 0x48, 0x2, 0x30, 0x0, 0x1b, 0x7e, 0x9, 0x6c, 0x2, 0x60, 0x6, 0x24, 0x1b, 0x1]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x81, 0xf05, 0x0, 0xb, 0x5a, 0x3, 0x5, 0x4]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_LEGACY={0x1f, 0x1, [0x2, 0x48, 0x9, 0x4, 0x2e, 0x1, 0x2, 0x9, 0x48, 0x0, 0x5, 0x30, 0x6c, 0x24, 0x3, 0x3, 0x9, 0x6c, 0x3, 0x2, 0x1b, 0x30, 0x12, 0x6, 0x6c, 0x9, 0x16]}]}, @NL80211_BAND_5GHZ={0x20, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x2, 0x9, 0xe237, 0x8, 0x6, 0x4, 0x2, 0x5]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}]}, @NL80211_BAND_2GHZ={0x24, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x1e, 0x2, [{0x3, 0x1}, {0x0, 0x9}, {0x3, 0x4}, {0x0, 0x3}, {0x0, 0x5}, {0x3, 0x5}, {0x0, 0x1}, {0x0, 0x4}, {0x1, 0x2}, {0x2, 0xa}, {0x3, 0x8}, {0x7, 0x6}, {0x5, 0x7}, {0x4, 0x7}, {0x4, 0x2}, {0x1, 0x5}, {0x3, 0xa}, {0x1, 0x8}, {0x6, 0x3}, {0x5, 0x8}, {0x1, 0x2}, {0x5, 0x2}, {0x6, 0x9}, {0x0, 0x4}, {0x0, 0xa}, {0x1, 0x4}]}]}]}, @NL80211_ATTR_TX_RATES={0x174, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x6c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x1b, 0x1, [0x16, 0x3, 0x36, 0x12, 0x7, 0x6, 0x5, 0x36, 0xb, 0xc, 0x1b, 0x18, 0x1, 0x18, 0xb, 0x9, 0x5, 0x6c, 0x2, 0x9, 0x6c, 0xe, 0x1b]}, @NL80211_TXRATE_LEGACY={0x19, 0x1, [0x4, 0x50, 0x36, 0x12, 0x12, 0xb, 0x30, 0x12, 0x60, 0x5, 0x6c, 0x60, 0x1b, 0x60, 0xb, 0x12, 0x18, 0x3, 0x30, 0x0, 0x2]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x6, 0x2d1, 0x46, 0x4, 0x8, 0x4, 0xf, 0x4]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x8001, 0x62, 0xa0b6, 0x0, 0x401, 0x8]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}, @NL80211_BAND_5GHZ={0x104, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0x39, 0x2, [{0x5, 0x6}, {0x4, 0x7}, {0x5, 0x2}, {0x3, 0x1}, {0x2, 0x2}, {0x3, 0x3}, {0x2, 0x7}, {0x7, 0x5}, {0x0, 0x3}, {0x3, 0x4}, {0x6, 0x3}, {0x2, 0x5}, {0x6, 0x7}, {0x6, 0x6}, {0x1, 0x7}, {0x5}, {0x2, 0x3}, {0x6, 0x7}, {0x2, 0x9}, {0x0, 0x2}, {0x1, 0x2}, {0x3, 0x9}, {0x0, 0x3}, {0x0, 0x8}, {0x7, 0x8}, {0x4, 0xa}, {0x7, 0x8}, {0x2, 0x7}, {0x4, 0x2}, {0x1, 0x5}, {0x1, 0x1}, {0x6, 0x7}, {0x7, 0x3}, {0x0, 0xa}, {0x5, 0x9}, {0x3, 0x7}, {0x3, 0x6}, {0x5, 0x9}, {0x5}, {0x1}, {0x0, 0x4}, {0x7}, {0x1, 0x7}, {0x6, 0x2}, {0x2, 0x2}, {0x0, 0xa}, {0x0, 0x5}, {0x7, 0x9}, {0x0, 0x8}, {0x7, 0x6}, {0x5}, {0x1, 0x9}, {0x6, 0xa}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HT={0x4e, 0x2, [{0x3, 0x8}, {0x5, 0x8}, {0x0, 0x2}, {0x2, 0x2}, {0x5, 0x1}, {0x2}, {0x5, 0x9}, {0x1, 0xa}, {0x6, 0xa}, {0x6, 0x1}, {0x0, 0x8}, {0x5, 0x8}, {0x4, 0x1}, {0x2, 0x1}, {0x1, 0x1}, {0x0, 0x5}, {0x0, 0x3}, {0x5, 0x2}, {0x4, 0x5}, {0x3, 0x1}, {0x4, 0x7}, {0x1, 0x7}, {0x4, 0xa}, {0x3, 0xa}, {0x3, 0x8}, {0x5}, {0x5, 0x3}, {0x6, 0x2}, {0x0, 0x7}, {0x1, 0x1}, {0x0, 0x5}, {0x4, 0xa}, {0x0, 0x5}, {0x4, 0x9}, {0x6, 0xa}, {0x1, 0x9}, {0x6, 0x2}, {0x7, 0x1}, {0x0, 0x8}, {0x0, 0x9}, {0x7}, {0x1, 0x2}, {0x6, 0x6}, {0x1, 0x8}, {0x0, 0x9}, {0x7, 0x7}, {0x3, 0xa}, {0x1, 0x1}, {0x0, 0x2}, {0x7, 0x8}, {0x3, 0x2}, {0x7, 0x2}, {0x4, 0x7}, {0x1, 0x6}, {0x3, 0x4}, {0x5}, {0x3, 0xa}, {0x5, 0x2}, {}, {0x2, 0x3}, {0x7, 0xa}, {0x7, 0x3}, {0x2, 0x3}, {0x1, 0x4}, {0x6, 0x1}, {0x0, 0x8}, {0x7, 0x2}, {0x4, 0x6}, {0x2, 0x1}, {0x6, 0xa}, {0x6, 0x5}, {0x4}, {0x3, 0x2}, {0x6, 0x6}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xfff8, 0x7, 0x10, 0x1ff, 0x400, 0x9, 0x4a3, 0x7]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x89f, 0x8, 0xb, 0x7fff, 0x4, 0x800, 0x1, 0x4]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x9f, 0x5d, 0x6, 0x0, 0x1000, 0x1, 0xa0, 0xffff]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xac3, 0xbc81, 0xfff7, 0xdc, 0x1, 0x5, 0x5, 0x2]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xb, 0x8, 0x2, 0x9, 0x2, 0x101, 0x7f, 0x5]}}]}]}]}, 0x250}}, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) 3.316477109s ago: executing program 2 (id=2602): openat$kvm(0xffffffffffffff9c, &(0x7f0000000840), 0x0, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sysvipc/msg\x00', 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x8cff, &(0x7f0000000080)='.\x00', &(0x7f0000000180), 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1]) 3.257140763s ago: executing program 2 (id=2603): r0 = fsopen(&(0x7f0000000080)='pstore\x00', 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000140)='si\x98d\x96\a\xf7\xceF\xda\x8c\x02\xfd\x8e#3Z:lent\x00', &(0x7f00000000c0)='\x00\x13\xf5\fa\x00\x00\x9c)\xe75\x978\x96\xb9;\x7f_.\xa5S\xeaC\xeb\xe9On\x03\x01\xefIy\x95\xc9W\xc5\xf6\xad\x84\xf4\xf5\x8fHe\xac\'x\xd4', 0x0) fsconfig$FSCONFIG_SET_FLAG(r0, 0x0, &(0x7f0000000040)='silent\x00', 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x0, 0x8000, 0x6}, 0x1c) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000002100)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x46d, 0xc71b, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x1, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) r3 = syz_open_dev$evdev(&(0x7f0000000740), 0x0, 0x10002) ioctl$EVIOCGBITSW(r3, 0x80404525, &(0x7f0000000780)=""/44) syz_usb_control_io(r2, &(0x7f0000003cc0)={0x2c, 0x0, &(0x7f0000003bc0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x2409}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_connect$uac1(0x1, 0x132, &(0x7f0000000180)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x40, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x120, 0x3, 0x1, 0xc, 0x0, 0x5, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x3, 0x2}, [@mixer_unit={0x6, 0x24, 0x4, 0x4, 0x5, '\\'}, @input_terminal={0xc, 0x24, 0x2, 0x2, 0x203, 0x5, 0x7, 0x40, 0xfb, 0x49}, @input_terminal={0xc, 0x24, 0x2, 0x6, 0x203, 0x6, 0xf8, 0xb3, 0x5, 0x4}, @feature_unit={0x13, 0x24, 0x6, 0x2, 0x1, 0x6, [0xf, 0x9, 0x2, 0xd, 0x2, 0x8]}, @output_terminal={0x9, 0x24, 0x3, 0x2, 0x204, 0x5, 0x0, 0x4}, @extension_unit={0x9, 0x24, 0x8, 0x4, 0x3, 0xab, 'yz'}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7, 0x24, 0x1, 0x81, 0x88, 0x4}, @format_type_i_discrete={0x11, 0x24, 0x2, 0x1, 0xf5, 0x4, 0x6, 0x0, "27009bc41f08e89aa0"}, @format_type_i_discrete={0x10, 0x24, 0x2, 0x1, 0x3, 0x2, 0x5, 0xfe, "00adfbf61eff53f3"}, @format_type_i_continuous={0x9, 0x24, 0x2, 0x1, 0x7, 0x2, 0x6, 0x9, "de"}, @format_type_ii_discrete={0xb, 0x24, 0x2, 0x2, 0x9c63, 0x9, 0x1, "5cfc"}]}, {{0x9, 0x5, 0x1, 0x9, 0x3ff, 0x7f, 0xe, 0xa5, {0x7, 0x25, 0x1, 0x82, 0xf8}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0xa, 0x24, 0x2, 0x2, 0x8, 0x81d6, 0x1, '7'}, @format_type_i_continuous={0xb, 0x24, 0x2, 0x1, 0x10, 0x3, 0x9, 0x5, 'k', "8626"}, @format_type_i_discrete={0xf, 0x24, 0x2, 0x1, 0x7, 0x2, 0x4, 0xc, "8a599cdb11f31b"}, @format_type_ii_discrete={0x10, 0x24, 0x2, 0x2, 0x7, 0x55, 0x2, "dc831d702f3d13"}, @format_type_ii_discrete={0xe, 0x24, 0x2, 0x2, 0xfffb, 0x3, 0x10, "c95d14cefb"}]}, {{0x9, 0x5, 0x82, 0x9, 0x10, 0xfa, 0x5, 0x7, {0x7, 0x25, 0x1, 0x1, 0x35, 0x7}}}}}}}]}}, &(0x7f0000000640)={0xa, &(0x7f00000002c0)={0xa, 0x6, 0x201, 0x33, 0x9, 0x6e, 0x10, 0x3}, 0xc0, &(0x7f0000000300)={0x5, 0xf, 0xc0, 0x2, [@generic={0xb1, 0x10, 0xb, "5c9eac656c5555c28c1433b9d08fec7effcdc5f42249a20f512095d3294339ceed5c2370ba55051a08383b6801da99109ca4bce2b279828644ebda4dbf532c396c1c9279ecc7ea01284a27be081ff863ae3fe18eccdd0b3e5a7aeb1935afd180218229bd4bbefc97698c010d682824aa27acff1264b7de9d435c45e951800d67e45046f89c5bbe6a7c0c70d2a96002e58ec4d5c78215f1c77c83cc32c809d6147f63bde1c174dbd5c511183a5b6b"}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x5, 0xcc, 0x92, 0x80}]}, 0x5, [{0x46, &(0x7f00000007c0)=ANY=[@ANYBLOB="4603d810b944162b93de9748891d363d179fa46d03e5aa6117fd03ca070cceeb619604b4024ca4624032af52e3fdbcb2c1d0d8794221f3cfb709fdff01fea5ecd47679f81d80"]}, {0x23, &(0x7f0000000400)=@string={0x23, 0x3, "f4ef7b0b2eca61a41c4b2ccab48b815816527305192dee49b3fc65f9643085252b"}}, {0x93, &(0x7f0000000440)=@string={0x93, 0x3, "ed564f4d125cce99769c9954e35eba373fdb93fa1c5503be8332320cc37d032d324028d89f3a273ff4c2c68f49e3262a2a8660404734d382f4bb005fe23144e2b3daacccf0e4fe92142197f05bb02922e0a904f961ee744cfa3bcb8996efe4e1ea46795a8fbbc38f7104539724672f3b68777f248d4828dbd8f9e73c2481849546223263c96ac68dfa9a8e1680ca8e18c9"}}, {0xee, &(0x7f0000000500)=@string={0xee, 0x3, "8e7ebd9d2a83e5f630cb6b13674f4df309778872444f4b1e4f7f5b6fec67e8126784c6107d870b917d5179214274d0669c50571d6be6462f8499ce3c8c1e77de699d08a483a6eb006790947bae016455a868034b9711ccff289ef99eb727e3d3a0e429ea5897233fe1f0cad3c9167ab7c2c1445421c064f70c59397136c46eb9d932a9af12182e55991b1325d4780cc6e1d1d187a38a1fa94883a29e109d943efd018d7c69d3f68c55cd7896799ee459971112b6622c33a3f85411caeaa6fc6d9531520db3a6f9ca0cc8ce4515594f247a8980b40c5b7515efb2a7df69c3fc9e0de425452d96d1f2558c5fd8"}}, {0x4, &(0x7f0000000600)=@lang_id={0x4, 0x3, 0x1407}}]}) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$packet(0x11, 0x2, 0x300) r5 = socket$packet(0x11, 0x2, 0x300) syz_open_dev$hidraw(&(0x7f00000003c0), 0x1, 0x110000) setsockopt$packet_fanout(r5, 0x107, 0x12, &(0x7f0000000040), 0x4) r6 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r6, 0x107, 0x12, &(0x7f0000000000)={0x200}, 0x4) read$FUSE(0xffffffffffffffff, &(0x7f0000003d00)={0x2020}, 0x2020) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000000), 0x8) fremovexattr(r1, &(0x7f0000000000)=@random={'system.', 'pstore\x00'}) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r1, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4) 3.069780729s ago: executing program 1 (id=2604): r0 = userfaultfd(0x1) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000040)) ioctl$UFFDIO_COPY(r0, 0x8010aa02, &(0x7f0000000100)={&(0x7f00009e5000/0x2000)=nil, &(0x7f0000962000/0x2000)=nil, 0x2000}) (fail_nth: 2) 2.604324806s ago: executing program 1 (id=2605): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) (async) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) (async) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) (async) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) (async) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) (async) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) getpeername$packet(0xffffffffffffffff, 0x0, 0x0) (async) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f00000000c0)={'ip6_vti0\x00', &(0x7f0000000040)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @dev, @private0={0xfc, 0x0, '\x00', 0x1}}}) (async) ioctl$SNDRV_TIMER_IOCTL_START(0xffffffffffffffff, 0x54a0) (async) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_int(r5, 0x0, 0xb, &(0x7f0000000000)=0x4, 0x4) syz_emit_ethernet(0x7e, &(0x7f0000000180)={@broadcast, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0xc, 0x0, 0x0, 0x3, 0x0, 0x0, {0x15, 0x4, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @private, @dev, {[@timestamp_addr={0x44, 0x1c, 0x0, 0x1, 0x0, [{@local}, {@loopback}, {@loopback}]}, @cipso={0x86, 0x21, 0x0, [{0x0, 0x8, "0100f2fcb6ba"}, {0x0, 0x11, "4eb8a616e1992a157e49878192645b"}, {0x0, 0x2}]}]}}}}}}}, 0x0) recvfrom(r5, 0x0, 0x0, 0x40002020, 0x0, 0x0) 2.092559312s ago: executing program 1 (id=2606): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000840), 0xffffffffffffffff) r2 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xe2, 0x54, 0x46, 0x10, 0x23a7, 0xfedc, 0xe00b, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x3, 0x42}}]}}]}}, 0x0) syz_usb_control_io$printer(r2, &(0x7f00000001c0)={0x14, 0x0, &(0x7f0000000340)=ANY=[@ANYRES8]}, 0x0) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)=@updpolicy={0xb8, 0x19, 0xfd3649826d894c67, 0x0, 0x0, {{@in6=@mcast1, @in=@multicast1}}}, 0xb8}}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x6, 0x10, 0x0, 0x57}, 0x48) r4 = socket$inet6(0xa, 0x3, 0x4) connect$inet6(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x43, &(0x7f0000000340)={{{@in6=@mcast1, @in=@initdev={0xac, 0x1e, 0x10, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x33}, {0x0, 0x3, 0x0, 0xfffffffffffffffc}, {}, 0x0, 0x0, 0x0, 0x0, 0x3, 0x6}, {{@in6=@mcast1}, 0x2, @in6=@ipv4={'\x00', '\xff\xff', @private=0xa010101}, 0x0, 0x2, 0x1}}, 0xe8) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f00000002c0)={0x0, 0x0, 0x0, 'queue1\x00'}) write$sndseq(r3, &(0x7f0000000000)=[{0x1e, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}], 0x1001a) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r3, 0x402c5342, &(0x7f0000000040)={0x0, 0xc862, 0x60}) r5 = fanotify_init(0x1, 0x101000) syz_usb_connect$cdc_ecm(0x0, 0x7b, &(0x7f0000000200)={{0x12, 0x1, 0x110, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x69, 0x1, 0x1, 0x2, 0x20, 0x80, [{{0x9, 0x4, 0x0, 0x5, 0x2, 0x2, 0x6, 0x0, 0x0, {{0x8, 0x24, 0x6, 0x0, 0x0, "90f54e"}, {0x5, 0x24, 0x0, 0x7}, {0xd, 0x24, 0xf, 0x1, 0x1c0, 0x6, 0x5, 0x4}, [@country_functional={0x8, 0x24, 0x7, 0x67, 0x80, [0x3]}, @country_functional={0xe, 0x24, 0x7, 0x7, 0x9, [0x8000, 0xe, 0x1, 0x7fb]}, @network_terminal={0x7, 0x24, 0xa, 0xfd, 0x5, 0xb, 0x1}, @call_mgmt={0x5, 0x24, 0x1, 0x2}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x400, 0x81, 0x4, 0xfc}}], {{0x9, 0x5, 0x82, 0x2, 0x40, 0xb, 0xf7, 0x9}}, {{0x9, 0x5, 0x3, 0x2, 0x200, 0xfa, 0x9, 0xff}}}}}]}}]}}, &(0x7f0000000480)={0xa, &(0x7f0000000180)={0xa, 0x6, 0x201, 0x7, 0x8, 0x3, 0x10, 0x7}, 0x39, &(0x7f0000000280)={0x5, 0xf, 0x39, 0x3, [@ext_cap={0x7, 0x10, 0x2, 0x12, 0x1, 0x7, 0x66}, @generic={0x2a, 0x10, 0x1, "4e426379f47e9e80a5b9e4897abc6edd8c7fad1c3ee4310954deee2fd459303ee816d6218aaa15"}, @ptm_cap={0x3}]}, 0x2, [{0x4, &(0x7f0000000380)=@lang_id={0x4, 0x3, 0x420}}, {0xb6, &(0x7f00000004c0)=ANY=[@ANYBLOB="b603a16b7c477707b74e5ad67babf91a07e2a964f6882820208b9d60c6b3cc15309dc00c74694bb47fc8dcde848ea801c5fb58a6415b856fd5126ffed16bcc0dd34e5702d9ae06323098aecdd10885f853fc397ce33c79b41b6d906c77e04f42de572fecf71c391a4d1ea5ee6befb3b6006f085286f825623b49389f77ee3c8ee3df29fac2a09b4c586e511505bbd96366acc75171577c3d657df48081ef88f7d014e24171f1e4ad6e4ffcba0dcd22bd6798a74a7ac7f2879ce246c18284621e8a11a66c0eabc4a73e59c491cbbe7c9be948183e3dbd7a9f466bb75bd80eee00bca1ee1b623c24a22dcba369c423d986a065551257ccd0e966f52e67efb5eda5baf5a502ad94a3954989543040650c4d3bb6d977f162aba502d12dc19dd5a2ff912d7d1b6af6162eb55bcd58d5e014f921a8b03486183dd85190a12d127f09f30a00cb47927dff3c8d2bcde7c52ec239cf5cc4936e70b1150496b08595ff0c839d4f1273e3d6d886802164323c505860cf86e29b7c92a3e6abc868d5ca48147723c38c904a49f69a057d8d8027e0ce18762ac7329991"]}]}) syz_usb_control_io$hid(r2, &(0x7f0000000700)={0x24, &(0x7f00000003c0)={0x20, 0x24, 0x70, {0x70, 0x30, "6c086e94d5d91c307b203906bd7b846690be687eaf6454c0ba79440612cb3a42eab27193b78db3e00b22838ab400eee8d13486f9161f3979f4d708e597433cd14881811d8cf28af53297c27b3679ab16d5c594492d1143b1651fdce8fcf7a4de1271b0e9d69aac8aea8233eefe64"}}, &(0x7f0000000980)=ANY=[@ANYBLOB="00030400000004030f08c0ece842139db3076da67fb4271e601b2c11b8297bff05da1f5d85a3459f514752081b120460ee1321f81533e7b1d02656a381808e043338442b25a88a82c14e44e34ace5cf395cfe6878051b83ec95340d4245256fc5947b91983d9682f9cea51e665fca6042f41caff95ad88b5742449c9edca47cbaf27ef895d55f6c84cf4e23c95eaac8373be"], &(0x7f0000000680)={0x0, 0x22, 0x15, {[@global=@item_4={0x3, 0x1, 0xa, "bfb0ab47"}, @main=@item_4={0x3, 0x0, 0xa, "a2e8ed8f"}, @global=@item_012={0x2, 0x1, 0x0, "f83f"}, @main=@item_012={0x2, 0x0, 0x9, "8899"}, @main=@item_4={0x3, 0x0, 0xa, "8dbfd0a6"}]}}, &(0x7f00000006c0)={0x0, 0x21, 0x9, {0x9, 0x21, 0xa, 0xa9, 0x1, {0x22, 0xb20}}}}, &(0x7f0000000940)={0x2c, &(0x7f0000000800)={0x40, 0x6, 0xaf, "c0b0bf8f9cea7eafc08696ca1ffb81f526d447b91d03457ce14f487b49830fbf6ffad7482b9d30531203dc10c11acefe7e6cc458d97dacb8124970e763404f00a01828cb5a0ccda59da9977ac3040f0af175c016030ba388e6b9e617c86b0803e6e844d4c2f36465fa38e029cc985493c820fc31dcd95786cb55c84d312b73d3c535c73e67faa363b289d719ee439a2b7848671d1c3616a343d955099d95fbdf4ff593260c005d8a1b39ee2862c703"}, &(0x7f0000000740)={0x0, 0xa, 0x1}, &(0x7f0000000780)={0x0, 0x8, 0x1, 0x3}, &(0x7f00000008c0)={0x20, 0x1, 0x16, "f789305839438697987d8de21f68f40d05e339ac61c4"}, &(0x7f0000000900)={0x20, 0x3, 0x1, 0x2}}) ioctl$EXT4_IOC_GET_ES_CACHE(r5, 0xc020662a, &(0x7f0000000080)={0x5119f374, 0x3, 0x0, 0x4, 0x4, [{0x1, 0x10000, 0x1c8, '\x00', 0x108a}, {0xff, 0x400, 0xc0, '\x00', 0x4}, {0x2, 0x9, 0x9, '\x00', 0x2181}, {0x3, 0x9, 0x8000000000000000, '\x00', 0x2}]}) syz_usb_control_io$printer(r2, &(0x7f0000000040)={0x14, 0x0, &(0x7f00000007c0)={0x0, 0x3, 0x26, @string={0x26, 0x3, "2d3a1a853d61b149806c6b5986ec7f30900987d916c964d1971d6f238052c55693b96a75"}}}, 0x0) r6 = socket(0x200000100000011, 0x803, 0x0) bind$inet6(r6, &(0x7f00000001c0)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, 0x1c) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000000)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r0, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000e40)={0x20, r1, 0x400, 0x4000000, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r7}, @NL802154_ATTR_SEC_OUT_KEY_ID={0x4}]}, 0x20}}, 0x0) ioctl$TCSETSF(0xffffffffffffffff, 0x5404, &(0x7f0000000400)={0x0, 0xffff8001, 0x0, 0x0, 0x0, "51f88e4d000000000000000000000010002000"}) r8 = dup(0xffffffffffffffff) write$UHID_INPUT(r8, &(0x7f0000001040)={0x18, {"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", 0x101c}}, 0x1006) 1.908540772s ago: executing program 3 (id=2607): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="0c00000000000000711033000000000006000000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc9, &(0x7f0000000080)=""/201, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x0, 0x6}, 0x10}, 0x90) syz_emit_ethernet(0x3e, &(0x7f0000000080)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff080047000030000000000006907800000000000000008608ffffffff0102"], 0x0) syz_usb_connect(0x0, 0x41, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000e518a708ac0501859d200000690109022f00010000000009040000000e010000152403"], 0x0) 1.700415438s ago: executing program 4 (id=2608): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8}, 0x0) sched_setscheduler(0x0, 0x0, 0x0) getpid() connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x89}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) syz_emit_ethernet(0x171, 0x0, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x1, 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) connect$inet6(0xffffffffffffffff, 0x0, 0x0) r0 = gettid() sigaltstack(&(0x7f0000001000)={&(0x7f0000000000)=""/4088, 0x80000000, 0xff54}, 0x0) rt_sigqueueinfo(r0, 0x0, &(0x7f0000001500)) 1.665536615s ago: executing program 4 (id=2609): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, 0x0, &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r0, 0x5, 0x0, 0x0, &(0x7f0000000240), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) openat$capi20(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) openat$capi20(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r1 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) read$FUSE(r1, &(0x7f00000022c0)={0x2020}, 0x2020) prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x2, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = dup(r2) write$UHID_INPUT(r3, &(0x7f0000002080)={0xfc, {"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", 0x1000}}, 0x1006) preadv(0xffffffffffffffff, &(0x7f0000000240), 0x0, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, 0x0, 0x0) openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) epoll_create1(0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$capi20(0xffffffffffffff9c, &(0x7f00000003c0), 0x2400, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x0) getsockopt$inet_opts(0xffffffffffffffff, 0x0, 0xc, 0xffffffffffffffff, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000280), 0xffffffffffffffff) write$RDMA_USER_CM_CMD_LISTEN(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_NL_LINK_SET(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000440)={0x38, r6, 0x101, 0x0, 0x0, {}, [@TIPC_NLA_LINK={0x24, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x63d}]}]}]}, 0x38}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a00000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r4}, 0x0, &(0x7f0000000300)=r4}, 0x20) 1.096006894s ago: executing program 0 (id=2610): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) msgget$private(0x0, 0x0) sendmsg$NL80211_CMD_SET_CHANNEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000300)) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000004c0)='./binderfs/binder0\x00', 0x0, 0x0) dup3(r2, r1, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000980)={{0x14}, [@NFT_MSG_DELRULE={0x6f4, 0x8, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x6}, [@NFTA_RULE_EXPRESSIONS={0xa4, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @dynset={{0xb}, @void}}, {0x2c, 0x1, 0x0, 0x1, @counter={{0xc}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x8}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0xfffffffffffffff9}]}}}, {0x28, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_CT_SREG={0x8, 0x4, 0x1, 0x0, 0x11}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x8}, @NFTA_CT_DIRECTION={0x5}]}}}, {0x14, 0x1, 0x0, 0x1, @byteorder={{0xe}, @void}}, {0x10, 0x1, 0x0, 0x1, @exthdr={{0xb}, @void}}, {0x18, 0x1, 0x0, 0x1, @osf={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_OSF_FLAGS={0x8}]}}}]}, @NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x3}, @NFTA_RULE_COMPAT={0x3c, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_RULE_COMPAT_FLAGS={0x8}, @NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0xa0}, @NFTA_RULE_COMPAT_FLAGS={0x8}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x80f3}, @NFTA_RULE_COMPAT_FLAGS={0x8}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x600}]}, @NFTA_RULE_EXPRESSIONS={0x164, 0x4, 0x0, 0x1, [{0x84, 0x1, 0x0, 0x1, @dynset={{0xb}, @val={0x74, 0x2, 0x0, 0x1, [@NFTA_DYNSET_SET_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_DYNSET_OP={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_DYNSET_OP={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_DYNSET_EXPRESSIONS={0x34, 0xa, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, @NFTA_LOOKUP_DREG={0x8, 0x3, 0x1, 0x0, 0x9}}, {0xc, 0x1, 0x0, 0x1, @NFTA_LOOKUP_DREG={0x8, 0x3, 0x1, 0x0, 0x2}}, {0xc, 0x1, 0x0, 0x1, @NFTA_LOOKUP_SET_ID={0x8, 0x4, 0x1, 0x0, 0x2}}, {0xc, 0x1, 0x0, 0x1, @NFTA_LOOKUP_SET_ID={0x8, 0x4, 0x1, 0x0, 0x3}}]}, @NFTA_DYNSET_EXPR={0x10, 0x7, 0x0, 0x1, {{0xb}, @void}}, @NFTA_DYNSET_SREG_KEY={0x8, 0x4, 0x1, 0x0, 0x15}, @NFTA_DYNSET_SET_ID={0x8, 0x2, 0x1, 0x0, 0x2}]}}}, {0x10, 0x1, 0x0, 0x1, @queue={{0xa}, @void}}, {0x14, 0x1, 0x0, 0x1, @immediate={{0xe}, @void}}, {0x38, 0x1, 0x0, 0x1, @fwd={{0x8}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_FWD_NFPROTO={0x8, 0x3, 0x1, 0x0, 0xa}, @NFTA_FWD_SREG_ADDR={0x8}, @NFTA_FWD_SREG_DEV={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_FWD_SREG_DEV={0x8, 0x1, 0x1, 0x0, 0xf}, @NFTA_FWD_NFPROTO={0x8}]}}}, {0x1c, 0x1, 0x0, 0x1, @meta={{0x9}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x1f}]}}}, {0x48, 0x1, 0x0, 0x1, @synproxy={{0xd}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_SYNPROXY_WSCALE={0x5, 0x2, 0x1}, @NFTA_SYNPROXY_FLAGS={0x8, 0x3, 0x1, 0x0, 0x18}, @NFTA_SYNPROXY_WSCALE={0x5, 0x2, 0x24}, @NFTA_SYNPROXY_FLAGS={0x8, 0x3, 0x1, 0x0, 0x8}, @NFTA_SYNPROXY_MSS={0x6, 0x1, 0x1, 0x0, 0x5}, @NFTA_SYNPROXY_FLAGS={0x8, 0x3, 0x1, 0x0, 0x4}]}}}, {0xc, 0x1, 0x0, 0x1, @cmp={{0x8}, @void}}, {0x10, 0x1, 0x0, 0x1, @quota={{0xa}, @void}}]}, @NFTA_RULE_USERDATA={0x51, 0x7, 0x1, 0x0, "106fe7dfb4a11f63257725b0cbff8365a2b4bba656b7b092a07359ad113e25c129ee26d75b04c0a84f58e69e15164137fc363007975066b8e16aa4e3e928f78145d193e1a04d5f298f11cf241d"}, @NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x3}, @NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0xe}, @NFTA_RULE_ID={0x8}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x414, 0x4, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, @fib={{0x8}, @void}}, {0x2c, 0x1, 0x0, 0x1, @xfrm={{0x9}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_XFRM_SPNUM={0x8, 0x4, 0x1, 0x0, 0x6}, @NFTA_XFRM_SPNUM={0x8}, @NFTA_XFRM_DREG={0x8, 0x1, 0x1, 0x0, 0x3}]}}}, {0x30, 0x1, 0x0, 0x1, @lookup={{0xb}, @val={0x20, 0x2, 0x0, 0x1, [@NFTA_LOOKUP_DREG={0x8, 0x3, 0x1, 0x0, 0xd}, @NFTA_LOOKUP_SET={0x9, 0x1, 'syz0\x00'}, @NFTA_LOOKUP_SREG={0x8, 0x2, 0x1, 0x0, 0x2}]}}}, {0x3a8, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x398, 0x2, 0x0, 0x1, [@NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0xf}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x13}, @NFTA_BITWISE_DATA={0x36c, 0x7, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}]}, @NFTA_DATA_VALUE={0x4c, 0x1, "1046ab31ca322fdb8c342fd2d221687422ac2d8c779dc7ba247fc68ddfffd514a20c55ebea5406aaee61313ebc7375c638a5ac988dac18efaa7043a88eb2b90bc783b7d68aab8d7a"}, @NFTA_DATA_VALUE={0xde, 0x1, "3599f7a8a47abf6482a46857e7e7394ca579ad4b7a05b8e17a757ba83f575f60a4d11d98e099cf21281c442c45f138f434ec42922d285936c5cd06d5cf6fb04f8516367990c8ef9951ff09f28ddce1b5f18e3aecfcfbf41fbd7284dbf42851d33d2997baf17cf52b895ea5d948605b20338f5873119233dbb17f5b7e4416ed60de8d879a8dd520943e8d7c125228f02d6cb35b3884ff6bf4ad7a438e128885c6bd21e082d8182db0e7fcd184b3df1e75d99d35d7aa22d3857e3282b5ec41e5ab41fbe909366487c4f12e7704d6ba1daff69217f674c224d9decf"}, @NFTA_DATA_VALUE={0x83, 0x1, "602a41cb69ab9a3da03476927b3be4ab9cd4fef13aa08af78871f50b108f5e7a3e719b159427be69602f9a50f7cb614ea5341d5d4a583666bb3a54fbf85b40e65ee49e6f74682b903d7e3624f7973dfd75ba13549416c9d6b87883fd0daf961bde5ce3c4d8ffbb3ad7122d2f64e13ed56d42e10aaa5d1a4c138df3c9789d58"}, @NFTA_DATA_VERDICT={0x64, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN_ID={0x8}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0xf}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VALUE={0xea, 0x1, "553b2f5e5b9412fb11ccc49d0ac959fed66a1998d0f07d43cf13cd2dd143f11c64552a6e9d8c7119bd970e43297236b3d9066bfc022c82390451d050ff0de47a3b65710952c036a317cd55890d0356ad2cf036c34eb847475f5aee45ed64c922c9ecc9c3c7e14ae9c2f6fd20dfb91b88d85b16fb00f1f35a5ebc323a2cdf6762b40bb3c4ae60bfec22c2e2c662e9c6a69b624f27a6e09b9b63aa48b5c3e4816b03bb746e64ea86846ac19df07be5dbb0b2e9fd48471eafc20e86aaacd652f26a44a62d92dd291dffbe7a72ee2668b587466ca0494a104a373285a5dc001c0369e1bf8e004ab9"}, @NFTA_DATA_VERDICT={0x38, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x5}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0xfffffffd}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0xb4}]}, @NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}]}]}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x13}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x13}, @NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x80000001}]}}}]}]}, @NFT_MSG_DELOBJ={0xcc, 0x14, 0xa, 0x3, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x3}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x9}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x8}, @NFTA_OBJ_USERDATA={0x85, 0x8, "689320f2b98fdc41581eae4ee908b4d4d8a4531b51eff457c9b4eb34bc9bc447fc730c9a348850dd53e2f2d4912880d4dd273bb1f6763ea5dec2436e1ae86f57175b43fce18b4d194bc573802e30030882ff924ccf7e79e8055e7ec941c70610f685606d0ecbbdb6eca43a1f32ae0dcc47c1d6b87d588de76e693d5ec850a65398"}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x8}]}], {0x14}}, 0x7e8}, 0x1, 0x0, 0x0, 0xc0}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETFLOWTABLE(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000600)={0x100, 0x17, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_FLOWTABLE_HOOK={0xe0, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0xcc, 0x3, 0x0, 0x1, [{0x14, 0x1, 'macvlan1\x00'}, {0x14, 0x1, 'geneve1\x00'}, {0x14, 0x1, 'ipvlan1\x00'}, {0x14, 0x1, 'wlan0\x00'}, {0x14, 0x1, 'gre0\x00'}, {0x14, 0x1, 'veth1_to_bond\x00'}, {0x14, 0x1, 'vxcan1\x00'}, {0x14, 0x1, 'vlan0\x00'}, {0x14, 0x1, 'veth1_to_hsr\x00'}, {0x14, 0x1, 'wg0\x00'}]}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0xdb2f}]}]}, 0x100}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x0, 0x4, 0x8}, 0x48) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r6, &(0x7f0000000080)={0xa, 0x14e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) listen(r6, 0xfffffffd) r7 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$int_in(r7, 0x5452, &(0x7f0000000100)=0x8) setsockopt$inet_tcp_int(r7, 0x6, 0x19, &(0x7f00000000c0)=0x7, 0x4) ioctl$int_in(r7, 0x5421, &(0x7f0000000080)=0x7) connect$inet(r7, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) sendto$inet(r7, &(0x7f0000000040)='u', 0xa792a, 0x804, 0x0, 0x0) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000003100), r8) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r8, &(0x7f0000003240)={0x0, 0x0, &(0x7f0000003200)={&(0x7f0000000540)=ANY=[@ANYBLOB="c9573b2564db591e40ebb2740312b561fceb89568caab7911ad97b1e86acbfe18c31daf08ddc9cf9c18b9710eb9e99cc88252068f81a103f22fa6a299819e82542bca06e68d8a40b219f1f8f6ac0ec4bdfcdaccb45587d30245d3e00dd94e6afa4e9d7d26753e07cb19f2a012b2e5d8814e985d5ef8080", @ANYRES16=r9, @ANYBLOB="010000000000000000000400000014000200fe8000000000000000000000000000aa140006006272696467655f736c6176655f310000"], 0x3c}}, 0x0) 1.009640227s ago: executing program 2 (id=2611): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r4}, 0x10) inotify_init1(0x0) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000140)) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000140)) sendmsg$BATADV_CMD_GET_NEIGHBORS(r5, &(0x7f0000004340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x1c, r6, 0x331, 0x0, 0x0, {0x8}, [@BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x1c}}, 0x0) quotactl$Q_SYNC(0xffffffff80000102, 0x0, 0x0, 0x0) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_MAX_THREADS(r7, 0x40046205, &(0x7f0000000000)=0x1) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f0000001a80)={0x4, 0x400000000000000, &(0x7f0000001900)=[@enter_looper], 0x1, 0x0, &(0x7f0000001a40)="a1"}) 588.166242ms ago: executing program 3 (id=2612): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r4}, 0x10) inotify_init1(0x0) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000140)) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000140)) sendmsg$BATADV_CMD_GET_NEIGHBORS(r5, &(0x7f0000004340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x1c, r6, 0x331, 0x0, 0x0, {0x8}, [@BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x1c}}, 0x0) quotactl$Q_SYNC(0xffffffff80000102, 0x0, 0x0, 0x0) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_MAX_THREADS(r7, 0x40046205, &(0x7f0000000000)=0x1) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f0000001a80)={0x4, 0x400000000000000, &(0x7f0000001900)=[@enter_looper], 0x1, 0x0, &(0x7f0000001a40)="a1"}) 82.616566ms ago: executing program 4 (id=2613): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(0xffffffffffffffff, 0xc05064a7, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_SETPROPERTY(0xffffffffffffffff, 0xc01064ab, &(0x7f0000000240)) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(0xffffffffffffffff, 0xc02064b9, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r1 = getpgid(0x0) timer_create(0x7, &(0x7f00000000c0)={0x0, 0xb, 0x1, @tid=r1}, &(0x7f0000000400)=0x0) timer_settime(r2, 0x0, &(0x7f0000000440), &(0x7f0000000c40)) timer_settime(r2, 0x0, &(0x7f0000000100)={{0x77359400}, {0x0, 0x989680}}, &(0x7f0000000140)) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x1, &(0x7f00000004c0)="b9", 0x1) r3 = getpid() openat$dir(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x80, 0x1c) lseek(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x6, 0x5, 0x1000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r4], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) clock_gettime(0xfffffffffffffffc, &(0x7f0000000300)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r5}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x1, 0x40, 0x6, 0x8}, 0x48) sched_setscheduler(r3, 0x2, &(0x7f0000000240)) r6 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r6, 0x1, &(0x7f00000001c0)='\x00', &(0x7f0000000240)='{}k%@\x00', 0x0) 0s ago: executing program 1 (id=2614): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2d}, 0x90) write$P9_RSTATFS(0xffffffffffffffff, &(0x7f0000000180)={0x43, 0x9, 0x2, {0x3, 0xe1101d4, 0x1, 0x3ab8d85e, 0xa33, 0x7, 0x2, 0xb}}, 0x43) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={r0, r2, 0x25, 0x0, @val=@kprobe_multi=@syms={0x0, 0x0, 0x0}}, 0x40) syz_emit_ethernet(0xfdef, &(0x7f0000000200)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa88a800008864"], 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setresuid(0x0, r7, 0x0) fsetxattr$security_capability(r5, &(0x7f0000001080), &(0x7f00000010c0)=@v3, 0x18, 0x0) setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f0000000100)={0x84, @remote, 0x0, 0x0, 'nq\x00'}, 0x2c) r8 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX(r8, 0x84, 0x6e, &(0x7f0000009200)=[@in={0x2, 0x0, @remote}], 0x10) ioctl$SG_GET_REQUEST_TABLE(r3, 0x2286, &(0x7f00000003c0)) kernel console output (not intermixed with test programs): 278:792): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15620 comm="syz.1.2271" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4af3777299 code=0x7ffc0000 [ 1273.748704][T15645] FAULT_INJECTION: forcing a failure. [ 1273.748704][T15645] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1273.769040][ T1055] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1273.801902][T15645] CPU: 0 UID: 0 PID: 15645 Comm: syz.4.2274 Not tainted 6.11.0-rc1-syzkaller-00004-gdc1c8034e31b #0 [ 1273.812819][T15645] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 1273.822903][T15645] Call Trace: [ 1273.826202][T15645] [ 1273.829160][T15645] dump_stack_lvl+0x241/0x360 [ 1273.833867][T15645] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1273.839089][T15645] ? __pfx__printk+0x10/0x10 [ 1273.843698][T15645] ? __pfx_lock_release+0x10/0x10 [ 1273.848804][T15645] should_fail_ex+0x3b0/0x4e0 [ 1273.853498][T15645] strncpy_from_user+0x36/0x2e0 [ 1273.858367][T15645] ? kmem_cache_alloc_noprof+0x185/0x2a0 [ 1273.864022][T15645] getname_flags+0xf1/0x540 [ 1273.868562][T15645] user_path_at+0x24/0x60 [ 1273.872910][T15645] __se_sys_mount+0x297/0x3c0 [ 1273.877801][T15645] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 1273.883802][T15645] ? __pfx___se_sys_mount+0x10/0x10 [ 1273.889037][T15645] ? do_syscall_64+0x100/0x230 [ 1273.893838][T15645] ? __x64_sys_mount+0x20/0xc0 [ 1273.898637][T15645] do_syscall_64+0xf3/0x230 [ 1273.903172][T15645] ? clear_bhb_loop+0x35/0x90 [ 1273.907875][T15645] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1273.913786][T15645] RIP: 0033:0x7f88ed577299 [ 1273.918215][T15645] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1273.937862][T15645] RSP: 002b:00007f88ee29f048 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1273.946290][T15645] RAX: ffffffffffffffda RBX: 00007f88ed705f80 RCX: 00007f88ed577299 [ 1273.954356][T15645] RDX: 0000000000000000 RSI: 0000000020000040 RDI: 0000000000000000 [ 1273.962357][T15645] RBP: 00007f88ee29f0a0 R08: 0000000000000000 R09: 0000000000000000 [ 1273.970338][T15645] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1273.978318][T15645] R13: 000000000000000b R14: 00007f88ed705f80 R15: 00007ffc53424b88 [ 1273.986311][T15645] [ 1274.068174][ T1055] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1274.203932][T15585] bridge0: port 1(bridge_slave_0) entered blocking state [ 1274.215301][T15585] bridge0: port 1(bridge_slave_0) entered disabled state [ 1274.225010][T15585] bridge_slave_0: entered allmulticast mode [ 1274.232871][T15585] bridge_slave_0: entered promiscuous mode [ 1274.478965][T15652] fuse: Bad value for 'fd' [ 1275.088056][ T54] Bluetooth: hci3: command tx timeout [ 1275.094593][ T5229] Bluetooth: hci0: command tx timeout [ 1275.162801][T15585] bridge0: port 2(bridge_slave_1) entered blocking state [ 1275.189017][T15585] bridge0: port 2(bridge_slave_1) entered disabled state [ 1275.205955][T15585] bridge_slave_1: entered allmulticast mode [ 1275.213363][T15585] bridge_slave_1: entered promiscuous mode [ 1275.679182][T15585] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1275.728990][T15585] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1275.840655][T15585] team0: Port device team_slave_0 added [ 1275.874354][T15585] team0: Port device team_slave_1 added [ 1276.006292][T15585] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1276.030474][T15585] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1276.103646][T15585] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1276.130665][T15585] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1276.169052][T15585] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1276.206547][T15585] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1276.309554][T15585] hsr_slave_0: entered promiscuous mode [ 1276.327139][T15585] hsr_slave_1: entered promiscuous mode [ 1276.340913][T15585] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1276.356176][T15585] Cannot create hsr debugfs directory [ 1276.561599][T15662] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2277'. [ 1276.915748][ T5275] usb 2-1: new high-speed USB device number 61 using dummy_hcd [ 1277.099781][ T1055] bridge_slave_1: left allmulticast mode [ 1277.123426][ T1055] bridge_slave_1: left promiscuous mode [ 1277.145972][ T5229] Bluetooth: hci3: command tx timeout [ 1277.185660][ T1055] bridge0: port 2(bridge_slave_1) entered disabled state [ 1277.898180][ T1055] bridge_slave_0: left allmulticast mode [ 1277.903905][ T1055] bridge_slave_0: left promiscuous mode [ 1277.938067][ T1055] bridge0: port 1(bridge_slave_0) entered disabled state [ 1278.003012][ T5275] usb 2-1: Using ep0 maxpacket: 8 [ 1278.017453][ T5275] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1278.032999][ T5275] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1278.043246][ T5275] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1278.059398][ T5275] usb 2-1: New USB device found, idVendor=046d, idProduct=c71b, bcdDevice= 0.40 [ 1278.072493][ T5275] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1278.083238][ T5275] usb 2-1: Product: syz [ 1278.088744][ T5275] usb 2-1: Manufacturer: syz [ 1278.093556][ T5275] usb 2-1: SerialNumber: syz [ 1278.308376][ T5275] usbhid 2-1:1.0: can't add hid device: -22 [ 1278.314670][ T5275] usbhid 2-1:1.0: probe with driver usbhid failed with error -22 [ 1278.493515][ T1055] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1278.508522][ T1055] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1278.525100][T15669] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1278.525625][ T1055] bond0 (unregistering): Released all slaves [ 1278.539685][T15669] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1278.557018][ T5275] usb 2-1: USB disconnect, device number 61 [ 1278.627572][T15678] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 1278.819181][T15686] FAULT_INJECTION: forcing a failure. [ 1278.819181][T15686] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1278.832732][T15686] CPU: 0 UID: 0 PID: 15686 Comm: syz.4.2284 Not tainted 6.11.0-rc1-syzkaller-00004-gdc1c8034e31b #0 [ 1278.843555][T15686] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 1278.853744][T15686] Call Trace: [ 1278.857046][T15686] [ 1278.860097][T15686] dump_stack_lvl+0x241/0x360 [ 1278.864883][T15686] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1278.870143][T15686] ? __pfx__printk+0x10/0x10 [ 1278.874873][T15686] ? __pfx_lock_release+0x10/0x10 [ 1278.880194][T15686] should_fail_ex+0x3b0/0x4e0 [ 1278.885801][T15686] _copy_from_user+0x2f/0xe0 [ 1278.890439][T15686] memdup_user+0x64/0xc0 [ 1278.894728][T15686] i2cdev_write+0xea/0x1b0 [ 1278.899187][T15686] vfs_writev+0x5af/0xbb0 [ 1278.903559][T15686] ? __pfx_i2cdev_write+0x10/0x10 [ 1278.908612][T15686] ? __pfx_vfs_writev+0x10/0x10 [ 1278.913759][T15686] ? __fget_files+0x29/0x470 [ 1278.918382][T15686] __se_sys_pwritev2+0x1ca/0x2d0 [ 1278.923449][T15686] ? __pfx___se_sys_pwritev2+0x10/0x10 [ 1278.929034][T15686] ? do_syscall_64+0x100/0x230 [ 1278.933842][T15686] ? __x64_sys_pwritev2+0x21/0xf0 [ 1278.939064][T15686] do_syscall_64+0xf3/0x230 [ 1278.944400][T15686] ? clear_bhb_loop+0x35/0x90 [ 1278.949116][T15686] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1278.955059][T15686] RIP: 0033:0x7f88ed577299 [ 1278.959579][T15686] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1278.979299][T15686] RSP: 002b:00007f88ee29f048 EFLAGS: 00000246 ORIG_RAX: 0000000000000148 [ 1278.987821][T15686] RAX: ffffffffffffffda RBX: 00007f88ed705f80 RCX: 00007f88ed577299 [ 1278.995895][T15686] RDX: 0000000000000002 RSI: 0000000020001b00 RDI: 0000000000000003 [ 1279.003985][T15686] RBP: 00007f88ee29f0a0 R08: 0000000000000000 R09: 0000000000000000 [ 1279.012081][T15686] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1279.020088][T15686] R13: 000000000000000b R14: 00007f88ed705f80 R15: 00007ffc53424b88 [ 1279.028267][T15686] [ 1279.195803][ T5229] Bluetooth: hci3: command tx timeout [ 1279.415091][T15689] fuse: Bad value for 'fd' [ 1279.451041][T15692] tmpfs: Bad value for 'mpol' [ 1280.680935][T15703] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 1281.275536][ T5229] Bluetooth: hci3: command tx timeout [ 1285.776220][ T1055] hsr_slave_0: left promiscuous mode [ 1285.840593][ T1055] hsr_slave_1: left promiscuous mode [ 1285.866878][ T1055] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1285.900768][ T1055] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1285.913885][T15716] netlink: 'syz.4.2290': attribute type 1 has an invalid length. [ 1285.958418][ T1055] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1286.115344][ T1055] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1286.921581][ T1055] veth1_macvtap: left promiscuous mode [ 1287.025884][ T1055] veth0_macvtap: left promiscuous mode [ 1287.036132][ T1055] veth1_vlan: left promiscuous mode [ 1287.055579][ T1055] veth0_vlan: left promiscuous mode [ 1287.274648][T15737] FAULT_INJECTION: forcing a failure. [ 1287.274648][T15737] name failslab, interval 1, probability 0, space 0, times 0 [ 1287.291293][T15737] CPU: 1 UID: 0 PID: 15737 Comm: syz.0.2293 Not tainted 6.11.0-rc1-syzkaller-00004-gdc1c8034e31b #0 [ 1287.302118][T15737] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 1287.312207][T15737] Call Trace: [ 1287.315523][T15737] [ 1287.318492][T15737] dump_stack_lvl+0x241/0x360 [ 1287.323214][T15737] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1287.328456][T15737] ? __pfx__printk+0x10/0x10 [ 1287.333088][T15737] ? __kmalloc_cache_noprof+0x44/0x2c0 [ 1287.338593][T15737] ? __pfx___might_resched+0x10/0x10 [ 1287.344182][T15737] should_fail_ex+0x3b0/0x4e0 [ 1287.348907][T15737] should_failslab+0xac/0x100 [ 1287.353624][T15737] ? io_rsrc_data_alloc+0x61/0x270 [ 1287.358765][T15737] __kmalloc_cache_noprof+0x6c/0x2c0 [ 1287.364099][T15737] io_rsrc_data_alloc+0x61/0x270 [ 1287.369071][T15737] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 1287.375621][T15737] io_sqe_files_register+0x1fc/0x680 [ 1287.380933][T15737] ? irqentry_exit+0x63/0x90 [ 1287.385560][T15737] ? lockdep_hardirqs_on+0x99/0x150 [ 1287.390799][T15737] ? __pfx_io_sqe_files_register+0x10/0x10 [ 1287.396807][T15737] ? io_register_rsrc+0x1c8/0x390 [ 1287.401857][T15737] ? io_register_rsrc+0x23a/0x390 [ 1287.406936][T15737] io_register_rsrc+0x344/0x390 [ 1287.411825][T15737] ? __pfx_io_register_rsrc+0x10/0x10 [ 1287.417245][T15737] ? __sanitizer_cov_trace_switch+0x9d/0x120 [ 1287.423278][T15737] __se_sys_io_uring_register+0x825/0x15d0 [ 1287.429312][T15737] ? __pfx___se_sys_io_uring_register+0x10/0x10 [ 1287.435610][T15737] do_syscall_64+0xf3/0x230 [ 1287.440150][T15737] ? clear_bhb_loop+0x35/0x90 [ 1287.444867][T15737] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1287.450797][T15737] RIP: 0033:0x7f4c04377299 [ 1287.455246][T15737] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1287.474883][T15737] RSP: 002b:00007f4c05226048 EFLAGS: 00000246 ORIG_RAX: 00000000000001ab [ 1287.483338][T15737] RAX: ffffffffffffffda RBX: 00007f4c04505f80 RCX: 00007f4c04377299 [ 1287.491335][T15737] RDX: 0000000020000180 RSI: 000000000000000d RDI: 0000000000000003 [ 1287.499332][T15737] RBP: 00007f4c052260a0 R08: 0000000000000000 R09: 0000000000000000 [ 1287.507329][T15737] R10: 0000000000000020 R11: 0000000000000246 R12: 0000000000000001 [ 1287.515327][T15737] R13: 000000000000000b R14: 00007f4c04505f80 R15: 00007fff6f52a518 [ 1287.523346][T15737] [ 1287.969984][ C0] eth0: bad gso: type: 1, size: 1408 [ 1289.213408][ T1055] team0 (unregistering): Port device team_slave_1 removed [ 1289.285750][ T1055] team0 (unregistering): Port device team_slave_0 removed [ 1289.850184][T15752] fuse: Invalid rootmode [ 1290.895828][T15628] chnl_net:caif_netlink_parms(): no params data found [ 1291.344389][ T54] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1291.358210][ T54] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1291.380432][ T54] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1291.390911][ T54] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1291.410131][ T54] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 1291.418105][ T54] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1291.700008][T15628] bridge0: port 1(bridge_slave_0) entered blocking state [ 1291.725845][T15628] bridge0: port 1(bridge_slave_0) entered disabled state [ 1291.733365][T15628] bridge_slave_0: entered allmulticast mode [ 1291.748899][T15628] bridge_slave_0: entered promiscuous mode [ 1291.771258][T15628] bridge0: port 2(bridge_slave_1) entered blocking state [ 1291.815782][T15628] bridge0: port 2(bridge_slave_1) entered disabled state [ 1291.823161][T15628] bridge_slave_1: entered allmulticast mode [ 1296.133795][ T54] Bluetooth: hci2: command tx timeout [ 1296.166252][T15628] bridge_slave_1: entered promiscuous mode [ 1296.308380][T15585] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1296.570200][T15585] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1296.592199][T15585] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1296.638139][T15628] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1296.697093][T15585] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1296.741151][T15628] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1297.376986][T15792] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.2303'. [ 1297.386506][T15792] openvswitch: netlink: ERSPAN option length err (len 3060, max 255). [ 1298.213488][ T54] Bluetooth: hci2: command tx timeout [ 1300.254594][ T54] Bluetooth: hci2: command tx timeout [ 1302.175636][ T1268] ieee802154 phy0 wpan0: encryption failed: -22 [ 1302.182090][ T1268] ieee802154 phy1 wpan1: encryption failed: -22 [ 1302.277563][ T5229] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1302.296243][ T5229] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1302.313345][ T5229] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1302.371373][ T5229] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1302.382357][ T5229] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 1302.392997][ T5229] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1302.513809][ T1055] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1302.729858][T15628] team0: Port device team_slave_0 added [ 1302.740874][T15628] team0: Port device team_slave_1 added [ 1302.783127][ T1055] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1302.912044][ T1055] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1302.953023][T15628] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1302.961359][T15628] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1302.988783][T15628] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1303.125019][ T1055] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1303.144075][T15628] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1303.151478][T15628] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1303.183399][T15628] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1303.418878][T15628] hsr_slave_0: entered promiscuous mode [ 1303.426160][T15628] hsr_slave_1: entered promiscuous mode [ 1303.432688][T15628] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1303.440459][T15628] Cannot create hsr debugfs directory [ 1303.496478][T15762] chnl_net:caif_netlink_parms(): no params data found [ 1303.747721][ T1055] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1303.918865][ T1055] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1304.097828][ T1055] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1304.143520][T15762] bridge0: port 1(bridge_slave_0) entered blocking state [ 1304.161632][T15762] bridge0: port 1(bridge_slave_0) entered disabled state [ 1304.169672][T15762] bridge_slave_0: entered allmulticast mode [ 1304.190998][T15762] bridge_slave_0: entered promiscuous mode [ 1304.213103][T15794] chnl_net:caif_netlink_parms(): no params data found [ 1304.237278][ T5229] Bluetooth: hci2: command tx timeout [ 1304.383523][ T1055] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1304.460215][T15762] bridge0: port 2(bridge_slave_1) entered blocking state [ 1304.475877][ T5229] Bluetooth: hci1: command tx timeout [ 1304.483210][T15762] bridge0: port 2(bridge_slave_1) entered disabled state [ 1304.502565][T15762] bridge_slave_1: entered allmulticast mode [ 1304.516269][T15762] bridge_slave_1: entered promiscuous mode [ 1304.557076][ C0] eth0: bad gso: type: 1, size: 1408 [ 1304.577872][T15585] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1304.717229][T15762] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1304.731721][T15762] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1304.888611][T15762] team0: Port device team_slave_0 added [ 1304.948219][T15794] bridge0: port 1(bridge_slave_0) entered blocking state [ 1304.956177][T15794] bridge0: port 1(bridge_slave_0) entered disabled state [ 1304.964232][T15794] bridge_slave_0: entered allmulticast mode [ 1304.972467][T15794] bridge_slave_0: entered promiscuous mode [ 1304.998151][T15762] team0: Port device team_slave_1 added [ 1305.026903][T15585] 8021q: adding VLAN 0 to HW filter on device team0 [ 1305.045569][T15794] bridge0: port 2(bridge_slave_1) entered blocking state [ 1305.052911][T15794] bridge0: port 2(bridge_slave_1) entered disabled state [ 1305.075712][T15794] bridge_slave_1: entered allmulticast mode [ 1305.089222][T15794] bridge_slave_1: entered promiscuous mode [ 1305.248189][T15762] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1305.255200][T15762] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1305.310698][T15762] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1305.338199][T15762] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1305.347164][T15762] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1305.393453][T15762] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1305.587871][T15762] hsr_slave_0: entered promiscuous mode [ 1305.606043][T15762] hsr_slave_1: entered promiscuous mode [ 1305.612875][T15762] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1305.632664][T15762] Cannot create hsr debugfs directory [ 1305.646379][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 1305.653651][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1305.678177][T15794] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1305.723227][T15794] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1305.803366][ T1055] bridge_slave_1: left allmulticast mode [ 1305.815634][ T1055] bridge_slave_1: left promiscuous mode [ 1305.821474][ T1055] bridge0: port 2(bridge_slave_1) entered disabled state [ 1305.852080][ T1055] bridge_slave_0: left allmulticast mode [ 1305.875152][ T1055] bridge_slave_0: left promiscuous mode [ 1305.891943][ T1055] bridge0: port 1(bridge_slave_0) entered disabled state [ 1305.915193][ T1055] bridge_slave_1: left allmulticast mode [ 1305.932541][ T1055] bridge_slave_1: left promiscuous mode [ 1305.955035][ T1055] bridge0: port 2(bridge_slave_1) entered disabled state [ 1305.977019][ T1055] bridge_slave_0: left allmulticast mode [ 1305.982726][ T1055] bridge_slave_0: left promiscuous mode [ 1305.998735][ T1055] bridge0: port 1(bridge_slave_0) entered disabled state [ 1306.556618][ T5229] Bluetooth: hci1: command tx timeout [ 1306.956585][ T1055] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1306.975319][ T1055] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1306.987702][ T1055] bond0 (unregistering): Released all slaves [ 1307.119653][ T1055] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1307.134776][ T1055] bond_slave_0: left promiscuous mode [ 1307.143243][ T1055] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1307.153085][ T1055] bond_slave_1: left promiscuous mode [ 1307.162148][ T1055] bond0 (unregistering): Released all slaves [ 1307.297385][ T5275] bridge0: port 2(bridge_slave_1) entered blocking state [ 1307.304678][ T5275] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1307.416011][T15794] team0: Port device team_slave_0 added [ 1307.575896][T15794] team0: Port device team_slave_1 added [ 1308.036397][T15794] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1308.043428][T15794] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1308.100255][T15794] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1308.201736][T15794] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1308.214093][T15794] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1308.246155][T15794] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1308.637962][ T5229] Bluetooth: hci1: command tx timeout [ 1308.684951][T15794] hsr_slave_0: entered promiscuous mode [ 1308.699119][T15794] hsr_slave_1: entered promiscuous mode [ 1308.723400][T15794] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1308.747431][T15794] Cannot create hsr debugfs directory [ 1309.082776][ T1055] hsr_slave_0: left promiscuous mode [ 1309.100022][ T1055] hsr_slave_1: left promiscuous mode [ 1309.114159][ T1055] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1309.125851][ T1055] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1309.142652][ T1055] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1309.150972][ T1055] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1309.164963][ T1055] hsr_slave_0: left promiscuous mode [ 1309.178429][ T1055] hsr_slave_1: left promiscuous mode [ 1309.194069][ T1055] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1309.203453][ T1055] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1309.224401][ T1055] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1309.233903][ T1055] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1309.323928][ T1055] veth1_macvtap: left promiscuous mode [ 1309.339802][ T1055] veth0_macvtap: left promiscuous mode [ 1309.350668][ T1055] veth1_vlan: left promiscuous mode [ 1309.363288][ T1055] veth0_vlan: left promiscuous mode [ 1309.397538][ T1055] veth1_macvtap: left promiscuous mode [ 1309.403138][ T1055] veth0_macvtap: left promiscuous mode [ 1309.419113][ T1055] veth1_vlan: left promiscuous mode [ 1309.432367][ T1055] veth0_vlan: left promiscuous mode [ 1310.343854][ T1055] team0 (unregistering): Port device team_slave_1 removed [ 1310.402858][ T1055] team0 (unregistering): Port device team_slave_0 removed [ 1310.721118][ T5229] Bluetooth: hci1: command tx timeout [ 1311.370378][ T1055] team0 (unregistering): Port device team_slave_1 removed [ 1311.418906][ T1055] team0 (unregistering): Port device team_slave_0 removed [ 1312.051914][T15628] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1312.097812][T15628] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1312.180119][ T29] kauditd_printk_skb: 8 callbacks suppressed [ 1312.180141][ T29] audit: type=1326 audit(1722280830.248:801): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15883 comm="syz.0.2309" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c04377299 code=0x7ffc0000 [ 1312.219742][ T29] audit: type=1326 audit(1722280830.248:802): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15883 comm="syz.0.2309" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c04377299 code=0x7ffc0000 [ 1312.250168][ T29] audit: type=1326 audit(1722280830.248:803): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15883 comm="syz.0.2309" exe="/root/syz-executor" sig=0 arch=c000003e syscall=283 compat=0 ip=0x7f4c04377299 code=0x7ffc0000 [ 1312.442463][ T29] audit: type=1326 audit(1722280830.248:804): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15883 comm="syz.0.2309" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c04377299 code=0x7ffc0000 [ 1312.464395][ T29] audit: type=1326 audit(1722280830.248:805): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15883 comm="syz.0.2309" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c04377299 code=0x7ffc0000 [ 1312.486700][ T29] audit: type=1326 audit(1722280830.258:806): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15883 comm="syz.0.2309" exe="/root/syz-executor" sig=0 arch=c000003e syscall=287 compat=0 ip=0x7f4c04377299 code=0x7ffc0000 [ 1312.508277][ C1] vkms_vblank_simulate: vblank timer overrun [ 1312.526259][T15628] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1312.639902][ T29] audit: type=1326 audit(1722280830.258:807): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15883 comm="syz.0.2309" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c04377299 code=0x7ffc0000 [ 1312.673877][T15628] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1312.797298][ T29] audit: type=1326 audit(1722280830.258:808): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15883 comm="syz.0.2309" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c04377299 code=0x7ffc0000 [ 1312.986356][ T29] audit: type=1326 audit(1722280830.258:809): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15883 comm="syz.0.2309" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4c04377299 code=0x7ffc0000 [ 1313.245782][ T29] audit: type=1326 audit(1722280830.258:810): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15883 comm="syz.0.2309" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c04377299 code=0x7ffc0000 [ 1314.823403][T15585] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1315.179470][T15794] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1315.597124][T15893] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.2310'. [ 1315.606773][T15893] openvswitch: netlink: ERSPAN option length err (len 3060, max 255). [ 1317.145086][T15794] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1317.309152][ C0] eth0: bad gso: type: 1, size: 1408 [ 1317.418090][T15794] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1317.514116][T15628] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1317.629642][T15794] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1317.683145][ T54] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1317.694184][ T54] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1317.702980][ T54] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1317.715358][ T54] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1317.724541][ T54] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 1317.732281][ T54] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1317.822769][T15628] 8021q: adding VLAN 0 to HW filter on device team0 [ 1317.865007][ T5274] bridge0: port 1(bridge_slave_0) entered blocking state [ 1317.872265][ T5274] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1317.882048][ T5274] bridge0: port 2(bridge_slave_1) entered blocking state [ 1317.889426][ T5274] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1318.061548][ T1055] bridge_slave_1: left allmulticast mode [ 1318.075789][ T1055] bridge_slave_1: left promiscuous mode [ 1318.081668][ T1055] bridge0: port 2(bridge_slave_1) entered disabled state [ 1318.097484][ T1055] bridge_slave_0: left allmulticast mode [ 1318.103190][ T1055] bridge_slave_0: left promiscuous mode [ 1318.116482][ T1055] bridge0: port 1(bridge_slave_0) entered disabled state [ 1318.741348][ T1055] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1318.761874][ T1055] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1318.779146][ T1055] bond0 (unregistering): Released all slaves [ 1319.202192][T15762] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1319.291964][T15762] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1319.316347][T15762] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1319.431628][T15628] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1319.445949][T15762] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1319.746115][ T1055] hsr_slave_0: left promiscuous mode [ 1319.776961][ T1055] hsr_slave_1: left promiscuous mode [ 1319.803359][ T1055] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1319.821888][ T1055] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1319.836174][ T54] Bluetooth: hci0: command tx timeout [ 1319.842956][ T1055] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1319.865772][ T1055] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1319.914933][ T1055] veth1_macvtap: left promiscuous mode [ 1319.923228][ T1055] veth0_macvtap: left promiscuous mode [ 1319.929262][ T1055] veth1_vlan: left promiscuous mode [ 1319.934643][ T1055] veth0_vlan: left promiscuous mode [ 1320.900777][ T1055] team0 (unregistering): Port device team_slave_1 removed [ 1321.017520][ T1055] team0 (unregistering): Port device team_slave_0 removed [ 1321.851791][T15794] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1321.890386][T15897] chnl_net:caif_netlink_parms(): no params data found [ 1321.915835][ T54] Bluetooth: hci0: command tx timeout [ 1321.933835][T15794] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1321.946277][T15794] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1321.987839][T15794] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1322.143041][T15628] veth0_vlan: entered promiscuous mode [ 1322.419574][T15628] veth1_vlan: entered promiscuous mode [ 1322.476872][T15897] bridge0: port 1(bridge_slave_0) entered blocking state [ 1322.484069][T15897] bridge0: port 1(bridge_slave_0) entered disabled state [ 1322.505912][T15897] bridge_slave_0: entered allmulticast mode [ 1322.513986][T15897] bridge_slave_0: entered promiscuous mode [ 1322.538065][T15897] bridge0: port 2(bridge_slave_1) entered blocking state [ 1322.545246][T15897] bridge0: port 2(bridge_slave_1) entered disabled state [ 1322.553830][T15897] bridge_slave_1: entered allmulticast mode [ 1322.567259][T15897] bridge_slave_1: entered promiscuous mode [ 1322.743421][T15897] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1322.768806][T15897] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1322.805920][T15628] veth0_macvtap: entered promiscuous mode [ 1322.832313][ T5229] Bluetooth: hci4: sending frame failed (-49) [ 1322.840251][ T54] Bluetooth: hci4: Opcode 0x1003 failed: -49 [ 1322.945062][T15897] team0: Port device team_slave_0 added [ 1322.970722][T15897] team0: Port device team_slave_1 added [ 1322.989955][T15762] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1323.007605][T15628] veth1_macvtap: entered promiscuous mode [ 1323.101297][T15897] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1323.110933][T15897] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1323.140273][T15897] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1323.161942][T15897] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1323.170493][T15897] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1323.198865][T15897] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1323.365308][T15897] hsr_slave_0: entered promiscuous mode [ 1323.372064][T15897] hsr_slave_1: entered promiscuous mode [ 1323.383203][T15762] 8021q: adding VLAN 0 to HW filter on device team0 [ 1323.400796][T15628] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1323.411931][T15628] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1323.424224][T15628] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1323.540664][ T9650] bridge0: port 1(bridge_slave_0) entered blocking state [ 1323.547923][ T9650] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1323.603619][T15794] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1323.623298][T15628] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1323.639713][T15628] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1323.659220][T15628] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1323.675452][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 1323.682647][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1323.804299][T15794] 8021q: adding VLAN 0 to HW filter on device team0 [ 1323.845120][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 1323.852360][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1323.872196][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 1323.879438][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1323.929667][T15628] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1323.946551][T15628] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1323.962325][T15628] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1323.971533][T15628] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1324.005838][ T54] Bluetooth: hci0: command tx timeout [ 1324.140564][T15794] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1324.496846][ T1055] bridge_slave_1: left allmulticast mode [ 1324.502549][ T1055] bridge_slave_1: left promiscuous mode [ 1324.535972][ T1055] bridge0: port 2(bridge_slave_1) entered disabled state [ 1324.547122][ T1055] bridge_slave_0: left allmulticast mode [ 1324.552819][ T1055] bridge_slave_0: left promiscuous mode [ 1324.576361][ T1055] bridge0: port 1(bridge_slave_0) entered disabled state [ 1325.185193][ T1055] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1325.207933][ T1055] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1325.219760][ T1055] bond0 (unregistering): Released all slaves [ 1325.474038][ T1055] hsr_slave_0: left promiscuous mode [ 1325.484447][ T1055] hsr_slave_1: left promiscuous mode [ 1325.515484][ T1055] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1325.523902][ T1055] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1325.839354][ T5229] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1325.857854][ T5229] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1325.886018][ T5229] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1325.898607][ T5229] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1325.919603][ T5229] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 1325.945084][ T5229] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1326.042478][ T1055] team0 (unregistering): Port device team_slave_1 removed [ 1326.076751][ T5229] Bluetooth: hci0: command tx timeout [ 1326.104427][ T1055] team0 (unregistering): Port device team_slave_0 removed [ 1326.577714][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1326.596688][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1326.725139][T15794] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1326.806459][T15762] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1327.213809][T15762] veth0_vlan: entered promiscuous mode [ 1327.296060][T14995] usb 1-1: new high-speed USB device number 51 using dummy_hcd [ 1327.321671][T15762] veth1_vlan: entered promiscuous mode [ 1327.510079][T15897] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1327.527510][T14995] usb 1-1: Using ep0 maxpacket: 8 [ 1327.536643][T14995] usb 1-1: config 6 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 1327.550994][T14995] usb 1-1: config 6 interface 0 altsetting 0 has an endpoint descriptor with address 0xEC, changing to 0x8C [ 1327.583399][T14995] usb 1-1: config 6 interface 0 altsetting 0 endpoint 0x8C has invalid wMaxPacketSize 0 [ 1327.593995][T15897] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1327.610851][T14995] usb 1-1: New USB device found, idVendor=0af0, idProduct=7271, bcdDevice=88.91 [ 1327.629427][T15897] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1327.641537][T14995] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1327.650893][T14995] usb 1-1: Product: syz [ 1327.655112][T14995] usb 1-1: Manufacturer: syz [ 1327.664930][T14995] usb 1-1: SerialNumber: syz [ 1327.695728][T14995] hso 1-1:6.0: Can't find BULK IN endpoint [ 1327.760548][T15897] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1327.847539][T15762] veth0_macvtap: entered promiscuous mode [ 1327.890141][T15762] veth1_macvtap: entered promiscuous mode [ 1328.087071][ T5229] Bluetooth: hci4: command tx timeout [ 1328.447521][ T5272] usb 1-1: USB disconnect, device number 51 [ 1328.498901][ T1055] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1328.522758][T16005] chnl_net:caif_netlink_parms(): no params data found [ 1328.551802][T15762] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1328.571003][T15762] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1328.581425][T15762] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1328.592251][T15762] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1328.603925][T15762] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1328.660341][ T1055] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1328.690776][T15762] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1328.701480][T15762] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1328.712656][T15762] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1328.723765][T15762] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1328.736395][T15762] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1328.797291][ T1055] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1328.815909][T15762] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1328.824681][T15762] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1328.834761][T15762] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1328.843922][T15762] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1328.929362][ T1055] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1328.963942][T15794] veth0_vlan: entered promiscuous mode [ 1328.971572][T16005] bridge0: port 1(bridge_slave_0) entered blocking state [ 1329.005560][T16005] bridge0: port 1(bridge_slave_0) entered disabled state [ 1329.022980][T16005] bridge_slave_0: entered allmulticast mode [ 1329.031038][T16005] bridge_slave_0: entered promiscuous mode [ 1329.100571][T16005] bridge0: port 2(bridge_slave_1) entered blocking state [ 1329.165669][T16005] bridge0: port 2(bridge_slave_1) entered disabled state [ 1329.177194][T16005] bridge_slave_1: entered allmulticast mode [ 1329.568173][T16042] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.2317'. [ 1329.577743][T16042] openvswitch: netlink: ERSPAN option length err (len 3060, max 255). [ 1329.641723][T16005] bridge_slave_1: entered promiscuous mode [ 1330.953800][ T5229] Bluetooth: hci4: command tx timeout [ 1331.152160][T16005] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1331.175227][T15794] veth1_vlan: entered promiscuous mode [ 1331.250062][T16005] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1331.412664][T16005] team0: Port device team_slave_0 added [ 1331.542897][T16005] team0: Port device team_slave_1 added [ 1331.676582][T15897] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1331.742140][ T2551] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1331.747739][T15794] veth0_macvtap: entered promiscuous mode [ 1331.771336][ T2551] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1331.780305][ T1055] bridge_slave_1: left allmulticast mode [ 1331.796631][ T1055] bridge_slave_1: left promiscuous mode [ 1331.802487][ T1055] bridge0: port 2(bridge_slave_1) entered disabled state [ 1331.827754][ T1055] bridge_slave_0: left allmulticast mode [ 1331.833563][ T1055] bridge_slave_0: left promiscuous mode [ 1331.856492][ T1055] bridge0: port 1(bridge_slave_0) entered disabled state [ 1332.600502][ T1055] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1332.616721][ T1055] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1332.652894][ T1055] bond0 (unregistering): Released all slaves [ 1332.701070][T16005] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1332.727859][T16005] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1332.770928][T16005] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1332.834607][T16005] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1332.862126][T16005] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1332.899596][T16005] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1332.960598][T15897] 8021q: adding VLAN 0 to HW filter on device team0 [ 1333.027030][T15794] veth1_macvtap: entered promiscuous mode [ 1333.053098][ T5229] Bluetooth: hci4: command tx timeout [ 1333.138970][ T1055] hsr_slave_0: left promiscuous mode [ 1333.164626][ T1055] hsr_slave_1: left promiscuous mode [ 1333.176871][ T1055] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1333.184341][ T1055] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1333.201599][ T1055] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1333.212094][ T1055] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1333.259554][ T1055] veth1_macvtap: left promiscuous mode [ 1333.265162][ T1055] veth0_macvtap: left promiscuous mode [ 1333.278964][ T1055] veth1_vlan: left promiscuous mode [ 1333.284419][ T1055] veth0_vlan: left promiscuous mode [ 1333.942325][ T1055] team0 (unregistering): Port device team_slave_1 removed [ 1333.994086][ T1055] team0 (unregistering): Port device team_slave_0 removed [ 1334.595918][ T5271] bridge0: port 1(bridge_slave_0) entered blocking state [ 1334.603462][ T5271] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1334.627551][ T5271] bridge0: port 2(bridge_slave_1) entered blocking state [ 1334.634718][ T5271] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1334.664758][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1334.679449][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1334.713273][T16005] hsr_slave_0: entered promiscuous mode [ 1334.727842][T16005] hsr_slave_1: entered promiscuous mode [ 1334.741206][T16005] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1334.749647][T16005] Cannot create hsr debugfs directory [ 1334.764378][T15794] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1334.776560][T15794] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1334.788342][T15794] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1334.815439][T15794] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1334.840831][T15794] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1334.932620][T15794] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1334.957638][T15794] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1334.976224][T15794] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1334.995609][T15794] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1335.025139][T15794] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1335.168670][ T5229] Bluetooth: hci4: command tx timeout [ 1335.383215][T15794] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1335.392762][T15794] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1335.405483][T15794] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1335.418004][T15794] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1336.237429][ T35] Bluetooth: hci3: Frame reassembly failed (-84) [ 1336.529069][ T2551] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1336.560774][ T2551] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1336.689413][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1336.702246][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1336.749924][T15897] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1336.938140][T15897] veth0_vlan: entered promiscuous mode [ 1337.023163][T15897] veth1_vlan: entered promiscuous mode [ 1337.184202][T15897] veth0_macvtap: entered promiscuous mode [ 1337.247909][T15897] veth1_macvtap: entered promiscuous mode [ 1337.394534][T16005] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1337.432514][T16005] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1337.454821][T15897] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1337.483006][T15897] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1337.500242][T15897] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1337.513235][T15897] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1337.534492][T15897] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1337.560717][T15897] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1337.603805][T15897] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1337.627803][T16005] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1337.729594][T15897] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1338.236271][ T5229] Bluetooth: hci3: Opcode 0x1003 failed: -110 [ 1338.353174][T15897] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1338.390911][T15897] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1338.439292][T15897] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1338.489513][T15897] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1338.524453][T15897] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1338.637902][T15897] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1338.662714][T16005] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1338.692268][T16116] xt_NFQUEUE: number of total queues is 0 [ 1338.729075][T15897] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1338.746511][T15897] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1338.763621][T15897] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1338.780696][T15897] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1339.088072][ T9650] usb 5-1: new low-speed USB device number 72 using dummy_hcd [ 1339.256643][ T9650] usb 5-1: device descriptor read/64, error -71 [ 1339.329036][ T2551] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1339.363278][ T2551] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1339.555521][ T9650] usb 5-1: new low-speed USB device number 73 using dummy_hcd [ 1339.873644][T16005] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1340.232806][T16143] netlink: 52 bytes leftover after parsing attributes in process `syz.1.2328'. [ 1340.323319][ T1055] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1340.335021][ T9650] usb 5-1: device descriptor read/64, error -71 [ 1340.353254][ T1055] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1340.414452][T16005] 8021q: adding VLAN 0 to HW filter on device team0 [ 1340.481985][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 1340.489213][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1340.501211][ T9650] usb usb5-port1: attempt power cycle [ 1340.588193][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 1340.595498][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1340.959790][ T9650] usb 5-1: new low-speed USB device number 74 using dummy_hcd [ 1341.085951][ T9650] usb 5-1: device descriptor read/8, error -71 [ 1341.849289][T16164] fuse: Bad value for 'user_id' [ 1341.854704][T16164] fuse: Bad value for 'user_id' [ 1342.034004][T16005] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1342.379473][T16170] netlink: 'syz.0.2333': attribute type 1 has an invalid length. [ 1344.194354][T16005] veth0_vlan: entered promiscuous mode [ 1344.234585][T16005] veth1_vlan: entered promiscuous mode [ 1344.320649][T16005] veth0_macvtap: entered promiscuous mode [ 1344.327098][T16184] fuse: Unknown parameter 'f‹h×G[¯eõ‡­n>AÅÓžû' [ 1344.357901][T16184] binder: 16182:16184 ioctl 4018620d 0 returned -22 [ 1344.364864][T16005] veth1_macvtap: entered promiscuous mode [ 1344.470896][T16005] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1344.505086][T16005] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1344.521328][T16005] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1344.532400][T16005] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1344.550186][T16005] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1344.569682][T16005] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1344.583528][T16005] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1344.588559][T16187] FAULT_INJECTION: forcing a failure. [ 1344.588559][T16187] name failslab, interval 1, probability 0, space 0, times 0 [ 1344.594812][T16005] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1344.628310][T16005] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1344.628578][T16187] CPU: 1 UID: 0 PID: 16187 Comm: syz.1.2337 Not tainted 6.11.0-rc1-syzkaller-00004-gdc1c8034e31b #0 [ 1344.646336][T16187] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 1344.653087][T16005] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1344.656412][T16187] Call Trace: [ 1344.656426][T16187] [ 1344.656437][T16187] dump_stack_lvl+0x241/0x360 [ 1344.656478][T16187] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1344.656511][T16187] ? __pfx__printk+0x10/0x10 [ 1344.656546][T16187] ? __lock_acquire+0x137a/0x2040 [ 1344.656589][T16187] should_fail_ex+0x3b0/0x4e0 [ 1344.656621][T16187] should_failslab+0xac/0x100 [ 1344.656653][T16187] ? __alloc_skb+0x1c3/0x440 [ 1344.656687][T16187] kmem_cache_alloc_node_noprof+0x71/0x320 [ 1344.673274][T16005] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1344.673318][T16187] __alloc_skb+0x1c3/0x440 [ 1344.680660][T16005] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1344.683184][T16187] ? __pfx___alloc_skb+0x10/0x10 [ 1344.696054][T16005] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1344.697550][T16187] sctp_packet_transmit+0x30c/0x2ca0 [ 1344.702441][T16005] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1344.706790][T16187] ? __pfx_lock_acquire+0x10/0x10 [ 1344.706829][T16187] ? sctp_outq_flush+0x1122/0x3e20 [ 1344.706870][T16187] ? __pfx_lock_release+0x10/0x10 [ 1344.706916][T16187] ? sctp_outq_flush+0x1122/0x3e20 [ 1344.706978][T16187] sctp_outq_flush+0x142a/0x3e20 [ 1344.707009][T16187] ? sctp_outq_flush+0x1122/0x3e20 [ 1344.707049][T16187] ? sctp_auth_send_cid+0x69/0x250 [ 1344.721224][T16005] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1344.722629][T16187] ? sctp_make_heartbeat_ack+0x3c3/0x4b0 [ 1344.732746][T16005] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1344.737428][T16187] ? __pfx_sctp_outq_flush+0x10/0x10 [ 1344.737474][T16187] ? sctp_outq_tail+0x67a/0x930 [ 1344.737508][T16187] ? sctp_outq_uncork+0x4f/0xb0 [ 1344.737543][T16187] sctp_do_sm+0x59cc/0x60c0 [ 1344.737606][T16187] ? __pfx_sctp_do_sm+0x10/0x10 [ 1344.737643][T16187] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 1344.737710][T16187] ? __pfx_seqcount_lockdep_reader_access+0x10/0x10 [ 1344.866497][T16187] ? read_tsc+0x9/0x20 [ 1344.870584][T16187] ? timekeeping_get_ns+0x2c0/0x420 [ 1344.875807][T16187] sctp_assoc_bh_rcv+0x3f1/0x640 [ 1344.880772][T16187] sctp_backlog_rcv+0x177/0x3f0 [ 1344.885749][T16187] ? __pfx_sctp_backlog_rcv+0x10/0x10 [ 1344.891135][T16187] __release_sock+0x243/0x350 [ 1344.895836][T16187] release_sock+0x61/0x1f0 [ 1344.900270][T16187] sctp_setsockopt+0xb91/0x11c0 [ 1344.905138][T16187] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 1344.911045][T16187] do_sock_setsockopt+0x3af/0x720 [ 1344.916083][T16187] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 1344.921721][T16187] ? __fget_files+0x29/0x470 [ 1344.926330][T16187] ? __fget_files+0x3f6/0x470 [ 1344.931034][T16187] __sys_setsockopt+0x1ae/0x250 [ 1344.935902][T16187] __x64_sys_setsockopt+0xb5/0xd0 [ 1344.940947][T16187] do_syscall_64+0xf3/0x230 [ 1344.945467][T16187] ? clear_bhb_loop+0x35/0x90 [ 1344.950164][T16187] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1344.956077][T16187] RIP: 0033:0x7faabdd77299 [ 1344.960505][T16187] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1344.980121][T16187] RSP: 002b:00007faabd7ff048 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 1344.988585][T16187] RAX: ffffffffffffffda RBX: 00007faabdf05f80 RCX: 00007faabdd77299 [ 1344.996567][T16187] RDX: 0000000000000009 RSI: 0000000000000084 RDI: 0000000000000003 [ 1345.004572][T16187] RBP: 00007faabd7ff0a0 R08: 000000000000009c R09: 0000000000000000 [ 1345.012550][T16187] R10: 0000000020000a00 R11: 0000000000000246 R12: 0000000000000002 [ 1345.020539][T16187] R13: 000000000000000b R14: 00007faabdf05f80 R15: 00007ffca6947c78 [ 1345.028623][T16187] [ 1345.033865][T16005] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1345.061309][T16005] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1345.132723][T16005] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1345.162209][T16005] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1345.190507][T16005] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1345.205640][T16005] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1345.294342][T15797] Bluetooth: hci3: Frame reassembly failed (-84) [ 1345.516852][T16197] xt_NFQUEUE: number of total queues is 0 [ 1345.626502][ T25] usb 4-1: new high-speed USB device number 51 using dummy_hcd [ 1345.651290][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1345.705918][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1345.790344][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1345.809661][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1345.905613][ T5272] usb 5-1: new low-speed USB device number 76 using dummy_hcd [ 1346.095639][ T5272] usb 5-1: device descriptor read/64, error -71 [ 1346.385600][ T5272] usb 5-1: new low-speed USB device number 77 using dummy_hcd [ 1346.565792][ T5272] usb 5-1: device descriptor read/64, error -71 [ 1346.696406][ T5272] usb usb5-port1: attempt power cycle [ 1347.645569][ T54] Bluetooth: hci3: command 0x1003 tx timeout [ 1347.654078][ T5229] Bluetooth: hci3: Opcode 0x1003 failed: -110 [ 1348.135582][ T5272] usb 5-1: new low-speed USB device number 78 using dummy_hcd [ 1348.406117][ T5272] usb 5-1: device descriptor read/8, error -71 [ 1348.645326][T16227] FAULT_INJECTION: forcing a failure. [ 1348.645326][T16227] name failslab, interval 1, probability 0, space 0, times 0 [ 1348.650769][T16227] CPU: 1 UID: 0 PID: 16227 Comm: syz.3.2347 Not tainted 6.11.0-rc1-syzkaller-00004-gdc1c8034e31b #0 [ 1348.650807][T16227] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 1348.650823][T16227] Call Trace: [ 1348.650834][T16227] [ 1348.650845][T16227] dump_stack_lvl+0x241/0x360 [ 1348.650886][T16227] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1348.650920][T16227] ? __pfx__printk+0x10/0x10 [ 1348.650953][T16227] ? kmem_cache_alloc_node_noprof+0x49/0x320 [ 1348.650989][T16227] ? __pfx___might_resched+0x10/0x10 [ 1348.651026][T16227] should_fail_ex+0x3b0/0x4e0 [ 1348.651056][T16227] should_failslab+0xac/0x100 [ 1348.651091][T16227] ? __alloc_skb+0x1c3/0x440 [ 1348.651127][T16227] kmem_cache_alloc_node_noprof+0x71/0x320 [ 1348.651173][T16227] __alloc_skb+0x1c3/0x440 [ 1348.651215][T16227] ? __pfx___alloc_skb+0x10/0x10 [ 1348.651253][T16227] ? netlink_autobind+0xd6/0x2f0 [ 1348.651287][T16227] ? netlink_autobind+0x2b0/0x2f0 [ 1348.651327][T16227] netlink_sendmsg+0x638/0xcb0 [ 1348.651375][T16227] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1348.651412][T16227] ? __import_iovec+0x536/0x820 [ 1348.651447][T16227] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 1348.651480][T16227] ? security_socket_sendmsg+0x87/0xb0 [ 1348.651512][T16227] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1348.651543][T16227] __sock_sendmsg+0x221/0x270 [ 1348.651578][T16227] ____sys_sendmsg+0x525/0x7d0 [ 1348.651614][T16227] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1348.651658][T16227] __sys_sendmsg+0x2b0/0x3a0 [ 1348.651687][T16227] ? __pfx___sys_sendmsg+0x10/0x10 [ 1348.651710][T16227] ? vfs_write+0x7c4/0xc90 [ 1348.651781][T16227] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 1348.651816][T16227] ? do_syscall_64+0x100/0x230 [ 1348.651851][T16227] ? do_syscall_64+0xb6/0x230 [ 1348.651886][T16227] do_syscall_64+0xf3/0x230 [ 1348.651918][T16227] ? clear_bhb_loop+0x35/0x90 [ 1348.651957][T16227] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1348.651991][T16227] RIP: 0033:0x7fd51b977299 [ 1348.652013][T16227] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1348.652033][T16227] RSP: 002b:00007fd51c828048 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1348.652061][T16227] RAX: ffffffffffffffda RBX: 00007fd51bb05f80 RCX: 00007fd51b977299 [ 1348.652080][T16227] RDX: 0000000000000000 RSI: 00000000200001c0 RDI: 0000000000000003 [ 1348.652096][T16227] RBP: 00007fd51c8280a0 R08: 0000000000000000 R09: 0000000000000000 [ 1348.652113][T16227] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1348.652128][T16227] R13: 000000000000000b R14: 00007fd51bb05f80 R15: 00007fff1ba5db78 [ 1348.652170][T16227] [ 1349.569008][ T5274] usb 4-1: new high-speed USB device number 52 using dummy_hcd [ 1349.757477][ T5274] usb 4-1: Using ep0 maxpacket: 32 [ 1349.760439][ T5274] usb 4-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 1349.760477][ T5274] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1349.764651][ T5274] usb 4-1: config 0 descriptor?? [ 1349.795891][ T5274] gspca_main: sunplus-2.14.0 probing 041e:400b [ 1350.207829][ T5274] gspca_sunplus: reg_w_riv err -71 [ 1350.207939][ T5274] sunplus 4-1:0.0: probe with driver sunplus failed with error -71 [ 1350.212511][ T5274] usb 4-1: USB disconnect, device number 52 [ 1350.435903][T16247] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2354'. [ 1350.751566][T16251] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2357'. [ 1351.605745][T16269] xt_NFQUEUE: number of total queues is 0 [ 1351.670983][T14995] usb 1-1: new high-speed USB device number 52 using dummy_hcd [ 1351.907147][T14995] usb 1-1: Using ep0 maxpacket: 16 [ 1351.957688][T14995] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1352.012613][T14995] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1352.047224][ T5272] usb 3-1: new low-speed USB device number 58 using dummy_hcd [ 1352.097468][T14995] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1352.118812][T16257] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1352.129908][T16257] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 1352.139463][T14995] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1352.161544][T14995] usb 1-1: config 0 descriptor?? [ 1352.192510][T16257] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1352.208287][T16257] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 1352.444125][ T5272] usb 3-1: device descriptor read/64, error -71 [ 1352.474785][T16257] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1352.486723][T16257] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 1352.555892][T16289] netlink: 'syz.4.2363': attribute type 13 has an invalid length. [ 1352.563908][T16289] macvtap0: entered allmulticast mode [ 1352.569419][T16289] veth0_macvtap: entered allmulticast mode [ 1352.820812][T14995] microsoft 0003:045E:07DA.0008: unknown main item tag 0x0 [ 1352.828219][T14995] microsoft 0003:045E:07DA.0008: unknown main item tag 0x1 [ 1352.835939][T14995] microsoft 0003:045E:07DA.0008: unknown main item tag 0x0 [ 1352.844074][T14995] microsoft 0003:045E:07DA.0008: unknown main item tag 0x0 [ 1352.851559][T14995] microsoft 0003:045E:07DA.0008: unknown main item tag 0x0 [ 1352.859054][T14995] microsoft 0003:045E:07DA.0008: unknown main item tag 0x0 [ 1352.866425][T14995] microsoft 0003:045E:07DA.0008: unknown main item tag 0x0 [ 1352.880502][T16289] macvtap0: refused to change device tx_queue_len [ 1352.922230][T16257] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1352.929541][T14995] microsoft 0003:045E:07DA.0008: unknown main item tag 0x0 [ 1352.957855][T16257] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 1352.962174][T14995] microsoft 0003:045E:07DA.0008: unknown main item tag 0x0 [ 1352.976495][ T5272] usb 3-1: new low-speed USB device number 59 using dummy_hcd [ 1352.998755][T14995] microsoft 0003:045E:07DA.0008: unknown main item tag 0x0 [ 1353.006302][T14995] microsoft 0003:045E:07DA.0008: unknown main item tag 0x0 [ 1353.140036][T14995] microsoft 0003:045E:07DA.0008: unknown main item tag 0x0 [ 1353.140078][T14995] microsoft 0003:045E:07DA.0008: unknown main item tag 0x0 [ 1353.140111][T14995] microsoft 0003:045E:07DA.0008: unknown main item tag 0x0 [ 1353.140141][T14995] microsoft 0003:045E:07DA.0008: unknown main item tag 0x0 [ 1353.142873][T14995] microsoft 0003:045E:07DA.0008: No inputs registered, leaving [ 1353.164980][T14995] microsoft 0003:045E:07DA.0008: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.0-1/input0 [ 1353.165024][T14995] microsoft 0003:045E:07DA.0008: no inputs found [ 1353.165044][T14995] microsoft 0003:045E:07DA.0008: could not initialize ff, continuing anyway [ 1353.197516][T14995] usb 1-1: USB disconnect, device number 52 [ 1353.281837][ T5272] usb 3-1: device descriptor read/64, error -71 [ 1353.399386][ T5272] usb usb3-port1: attempt power cycle [ 1353.805536][ T5272] usb 3-1: new low-speed USB device number 60 using dummy_hcd [ 1353.876400][ T5272] usb 3-1: device descriptor read/8, error -71 [ 1354.161459][T16305] netlink: 644 bytes leftover after parsing attributes in process `syz.3.2368'. [ 1354.210373][ T5272] usb 3-1: new low-speed USB device number 61 using dummy_hcd [ 1355.288186][ T5272] usb 3-1: device descriptor read/8, error -71 [ 1355.315121][T16310] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2369'. [ 1355.681796][ T5272] usb usb3-port1: unable to enumerate USB device [ 1356.373692][T16340] netlink: 'syz.0.2375': attribute type 13 has an invalid length. [ 1356.403469][T16340] macvtap0: refused to change device tx_queue_len [ 1357.291558][ T29] kauditd_printk_skb: 26 callbacks suppressed [ 1357.291580][ T29] audit: type=1800 audit(1722280875.338:837): pid=16358 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.4.2380" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0 [ 1357.867250][T16372] fuse: Unknown parameter 'group_i00000000000000000000' [ 1358.445722][T16376] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2384'. [ 1358.741007][T16396] netlink: 'syz.3.2391': attribute type 1 has an invalid length. [ 1359.871923][T16418] FAULT_INJECTION: forcing a failure. [ 1359.871923][T16418] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1359.891622][T16418] CPU: 1 UID: 0 PID: 16418 Comm: syz.0.2397 Not tainted 6.11.0-rc1-syzkaller-00004-gdc1c8034e31b #0 [ 1359.902448][T16418] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 1359.912537][T16418] Call Trace: [ 1359.915835][T16418] [ 1359.918786][T16418] dump_stack_lvl+0x241/0x360 [ 1359.923480][T16418] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1359.928710][T16418] ? __pfx__printk+0x10/0x10 [ 1359.933309][T16418] ? __pfx_lock_release+0x10/0x10 [ 1359.938352][T16418] should_fail_ex+0x3b0/0x4e0 [ 1359.943034][T16418] _copy_from_user+0x2f/0xe0 [ 1359.947637][T16418] get_timespec64+0x97/0x280 [ 1359.952431][T16418] ? __pfx_get_timespec64+0x10/0x10 [ 1359.957650][T16418] ? __pfx_do_sys_openat2+0x10/0x10 [ 1359.962978][T16418] __se_sys_pselect6+0x124/0x3f0 [ 1359.967957][T16418] ? __pfx___se_sys_pselect6+0x10/0x10 [ 1359.973543][T16418] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 1359.979923][T16418] ? do_syscall_64+0x100/0x230 [ 1359.984715][T16418] ? __x64_sys_pselect6+0x21/0xf0 [ 1359.989774][T16418] do_syscall_64+0xf3/0x230 [ 1359.994297][T16418] ? clear_bhb_loop+0x35/0x90 [ 1359.999083][T16418] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1360.005047][T16418] RIP: 0033:0x7f4c04377299 [ 1360.009476][T16418] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1360.029194][T16418] RSP: 002b:00007f4c05226048 EFLAGS: 00000246 ORIG_RAX: 000000000000010e [ 1360.037629][T16418] RAX: ffffffffffffffda RBX: 00007f4c04505f80 RCX: 00007f4c04377299 [ 1360.045615][T16418] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000000040 [ 1360.053688][T16418] RBP: 00007f4c052260a0 R08: 0000000020000280 R09: 0000000000000000 [ 1360.061665][T16418] R10: 0000000020000180 R11: 0000000000000246 R12: 0000000000000001 [ 1360.069645][T16418] R13: 000000000000000b R14: 00007f4c04505f80 R15: 00007fff6f52a518 [ 1360.077750][T16418] [ 1361.461099][T16435] fuse: Unknown parameter 'group_i00000000000000000000' [ 1361.839081][ T1268] ieee802154 phy0 wpan0: encryption failed: -22 [ 1361.847881][ T1268] ieee802154 phy1 wpan1: encryption failed: -22 [ 1361.854563][T16441] netlink: 9 bytes leftover after parsing attributes in process `syz.4.2400'. [ 1361.987201][T16441] gretap0: entered promiscuous mode [ 1362.023398][T16444] netlink: 5 bytes leftover after parsing attributes in process `syz.4.2400'. [ 1362.068441][T16444] 0ªX¹¦D: renamed from gretap0 [ 1362.134302][T16444] 0ªX¹¦D: left promiscuous mode [ 1362.147255][T16444] 0ªX¹¦D: entered allmulticast mode [ 1362.173493][T16444] A link change request failed with some changes committed already. Interface 30ªX¹¦D may have been left with an inconsistent configuration, please check. [ 1364.881731][T16501] fuse: Unknown parameter 'group_i00000000000000000000' [ 1365.780012][T16473] netlink: 'syz.1.2406': attribute type 4 has an invalid length. [ 1365.855612][T16525] netlink: 9 bytes leftover after parsing attributes in process `syz.4.2418'. [ 1365.896753][ T2551] Bluetooth: hci3: Frame reassembly failed (-84) [ 1365.903630][T16525] 0ªX¹¦D: entered promiscuous mode [ 1365.913731][T16525] 0ªX¹¦D: left allmulticast mode [ 1365.952840][T16530] netlink: 5 bytes leftover after parsing attributes in process `syz.4.2418'. [ 1365.963200][T16530] 1ªX¹¦D: renamed from 30ªX¹¦D [ 1365.988212][T16530] 1ªX¹¦D: left promiscuous mode [ 1365.993271][T16530] 1ªX¹¦D: entered allmulticast mode [ 1366.000209][T16530] A link change request failed with some changes committed already. Interface 31ªX¹¦D may have been left with an inconsistent configuration, please check. [ 1366.034439][T16525] syzkaller0: entered allmulticast mode [ 1366.042234][T16525] syzkaller0: entered promiscuous mode [ 1366.067224][ T29] audit: type=1326 audit(1722280884.138:838): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16534 comm="syz.2.2420" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4db5577299 code=0x7ffc0000 [ 1366.127353][ T29] audit: type=1326 audit(1722280884.168:839): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16534 comm="syz.2.2420" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4db5577299 code=0x7ffc0000 [ 1366.181872][T16525] syzkaller0 (unregistering): left promiscuous mode [ 1366.228987][ T29] audit: type=1326 audit(1722280884.178:840): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16534 comm="syz.2.2420" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4db5577299 code=0x7ffc0000 [ 1366.251763][T16525] syzkaller0 (unregistering): left allmulticast mode [ 1366.272169][T16536] netlink: 'syz.2.2420': attribute type 1 has an invalid length. [ 1366.274362][ T29] audit: type=1326 audit(1722280884.178:841): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16534 comm="syz.2.2420" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4db5577299 code=0x7ffc0000 [ 1366.304192][T16536] netlink: 9348 bytes leftover after parsing attributes in process `syz.2.2420'. [ 1366.331335][ T29] audit: type=1326 audit(1722280884.178:842): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16534 comm="syz.2.2420" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4db5577299 code=0x7ffc0000 [ 1366.355767][ T9650] usb 4-1: new high-speed USB device number 53 using dummy_hcd [ 1366.381001][ T29] audit: type=1326 audit(1722280884.178:843): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16534 comm="syz.2.2420" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f4db5577299 code=0x7ffc0000 [ 1366.463786][ T29] audit: type=1326 audit(1722280884.178:844): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16534 comm="syz.2.2420" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4db5577299 code=0x7ffc0000 [ 1366.512562][ T29] audit: type=1326 audit(1722280884.178:845): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16534 comm="syz.2.2420" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4db5577299 code=0x7ffc0000 [ 1366.631013][ T29] audit: type=1326 audit(1722280884.178:846): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16534 comm="syz.2.2420" exe="/root/syz-executor" sig=0 arch=c000003e syscall=203 compat=0 ip=0x7f4db5577299 code=0x7ffc0000 [ 1366.744594][ T29] audit: type=1326 audit(1722280884.178:847): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16534 comm="syz.2.2420" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4db5577299 code=0x7ffc0000 [ 1367.329216][T16562] fuse: Unknown parameter 'group_id00000000000000000000' [ 1367.997199][ T54] Bluetooth: hci3: command 0x1003 tx timeout [ 1368.013633][ T5229] Bluetooth: hci3: Opcode 0x1003 failed: -110 [ 1368.524512][T16580] netlink: 'syz.2.2431': attribute type 1 has an invalid length. [ 1368.932430][T16589] affs: No valid root block on device nullb0 [ 1369.767525][T16604] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2434'. [ 1369.981745][T16609] netlink: 'syz.4.2435': attribute type 1 has an invalid length. [ 1369.995901][T16609] netlink: 9348 bytes leftover after parsing attributes in process `syz.4.2435'. [ 1370.050336][T16604] mkiss: ax0: crc mode is auto. [ 1370.706779][T16617] fuse: Unknown parameter 'group_id00000000000000000000' [ 1371.597410][ C0] eth0: bad gso: type: 1, size: 1408 [ 1371.619729][ C0] eth0: bad gso: type: 1, size: 1408 [ 1372.718711][T16632] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.2440'. [ 1372.730451][T16632] openvswitch: netlink: ERSPAN option length err (len 3060, max 255). [ 1373.169689][ T29] kauditd_printk_skb: 28 callbacks suppressed [ 1373.169710][ T29] audit: type=1326 audit(1722280891.238:876): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16640 comm="syz.2.2446" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f4db5577299 code=0x0 [ 1373.378033][T16649] fuse: Unknown parameter 'group_id00000000000000000000' [ 1374.206750][ T5272] usb 1-1: new high-speed USB device number 53 using dummy_hcd [ 1374.226719][ T29] audit: type=1326 audit(1722280892.288:877): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16652 comm="syz.4.2449" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd160377299 code=0x7ffc0000 [ 1374.295461][ T29] audit: type=1326 audit(1722280892.298:878): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16652 comm="syz.4.2449" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd160377299 code=0x7ffc0000 [ 1374.325843][T11475] usb 2-1: new high-speed USB device number 62 using dummy_hcd [ 1374.377394][ T29] audit: type=1326 audit(1722280892.318:879): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16652 comm="syz.4.2449" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd160377299 code=0x7ffc0000 [ 1374.400334][T16655] netlink: 'syz.4.2449': attribute type 1 has an invalid length. [ 1374.422409][ C0] eth0: bad gso: type: 1, size: 1408 [ 1374.425556][T16655] netlink: 9348 bytes leftover after parsing attributes in process `syz.4.2449'. [ 1374.445492][ T29] audit: type=1326 audit(1722280892.328:880): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16652 comm="syz.4.2449" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd160377299 code=0x7ffc0000 [ 1374.468349][ T5272] usb 1-1: Using ep0 maxpacket: 8 [ 1374.491376][ T5272] usb 1-1: config 0 has an invalid descriptor of length 55, skipping remainder of the config [ 1374.515677][ T5272] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 1374.528658][ T29] audit: type=1326 audit(1722280892.328:881): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16652 comm="syz.4.2449" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7fd160377299 code=0x7ffc0000 [ 1374.550798][ T5272] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 55, changing to 9 [ 1374.565663][ T5272] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid maxpacket 8496, setting to 1024 [ 1374.585853][T11475] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1374.601238][T11475] usb 2-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 1374.618575][ T29] audit: type=1326 audit(1722280892.328:882): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16652 comm="syz.4.2449" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd160377299 code=0x7ffc0000 [ 1374.641428][ T5272] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1374.657022][T11475] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1374.666898][T11475] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 1374.679377][ T29] audit: type=1326 audit(1722280892.328:883): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16652 comm="syz.4.2449" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd160377299 code=0x7ffc0000 [ 1374.704797][T11475] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 1374.727556][ T5272] usb 1-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 1374.737250][ T5272] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 1374.748989][ T29] audit: type=1326 audit(1722280892.328:884): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16652 comm="syz.4.2449" exe="/root/syz-executor" sig=0 arch=c000003e syscall=203 compat=0 ip=0x7fd160377299 code=0x7ffc0000 [ 1374.778050][ T5272] usb 1-1: Product: syz [ 1374.788202][T11475] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1374.797660][T11475] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1374.807203][ T5272] usb 1-1: Manufacturer: syz [ 1374.812380][ T5272] usb 1-1: SerialNumber: syz [ 1374.820424][T11475] usb 2-1: Product: syz [ 1374.823249][ T29] audit: type=1326 audit(1722280892.328:885): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16652 comm="syz.4.2449" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd160377299 code=0x7ffc0000 [ 1374.850633][T11475] usb 2-1: Manufacturer: syz [ 1374.866811][ T5272] usb 1-1: config 0 descriptor?? [ 1374.894937][T11475] cdc_wdm 2-1:1.0: skipping garbage [ 1374.902365][T11475] cdc_wdm 2-1:1.0: skipping garbage [ 1374.912849][T11475] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 1374.920537][T11475] cdc_wdm 2-1:1.0: Unknown control protocol [ 1375.135959][T16666] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2445'. [ 1375.167367][T11475] usb 2-1: USB disconnect, device number 62 [ 1375.397146][ T5272] radio-si470x 1-1:0.0: si470x_get_report: usb_control_msg returned -110 [ 1375.428598][ T5272] radio-si470x 1-1:0.0: probe with driver radio-si470x failed with error -5 [ 1375.908697][ T9650] usb 2-1: new high-speed USB device number 63 using dummy_hcd [ 1375.948284][T16684] fuse: Bad value for 'user_id' [ 1375.953532][T16684] fuse: Bad value for 'user_id' [ 1376.525291][T14995] usb 1-1: USB disconnect, device number 53 [ 1376.678801][T16685] affs: No valid root block on device nullb0 [ 1376.750458][T16686] affs: No valid root block on device nullb0 [ 1377.974199][T16699] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.2461'. [ 1377.983792][T16699] openvswitch: netlink: ERSPAN option length err (len 3060, max 255). [ 1378.894766][ C0] eth0: bad gso: type: 1, size: 1408 [ 1379.122848][ T29] kauditd_printk_skb: 9 callbacks suppressed [ 1379.122869][ T29] audit: type=1326 audit(1722280897.188:895): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16710 comm="syz.0.2467" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c04377299 code=0x7ffc0000 [ 1379.189691][T16709] cgroup: fork rejected by pids controller in /syz3 [ 1379.220434][ T29] audit: type=1326 audit(1722280897.188:896): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16710 comm="syz.0.2467" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c04377299 code=0x7ffc0000 [ 1379.268165][ T29] audit: type=1326 audit(1722280897.188:897): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16710 comm="syz.0.2467" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4c04377299 code=0x7ffc0000 [ 1379.402605][ T29] audit: type=1326 audit(1722280897.198:898): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16710 comm="syz.0.2467" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c04377299 code=0x7ffc0000 [ 1379.493808][ T29] audit: type=1326 audit(1722280897.198:899): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16710 comm="syz.0.2467" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c04377299 code=0x7ffc0000 [ 1379.503974][T16711] netlink: 'syz.0.2467': attribute type 1 has an invalid length. [ 1379.525010][T16711] netlink: 9348 bytes leftover after parsing attributes in process `syz.0.2467'. [ 1379.557112][ T29] audit: type=1326 audit(1722280897.198:900): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16710 comm="syz.0.2467" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f4c04377299 code=0x7ffc0000 [ 1379.628771][ T29] audit: type=1326 audit(1722280897.318:901): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16710 comm="syz.0.2467" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c04377299 code=0x7ffc0000 [ 1379.659745][ T29] audit: type=1326 audit(1722280897.318:902): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16710 comm="syz.0.2467" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c04377299 code=0x7ffc0000 [ 1379.686338][ T29] audit: type=1326 audit(1722280897.388:903): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16710 comm="syz.0.2467" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7f4c04377299 code=0x7ffc0000 [ 1379.725176][ T29] audit: type=1326 audit(1722280897.388:904): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16710 comm="syz.0.2467" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c04377299 code=0x7ffc0000 [ 1380.301150][T16822] REISERFS warning (device nullb0): sh-2021 reiserfs_fill_super: can not find reiserfs on nullb0 [ 1380.429785][T16826] fuse: Bad value for 'user_id' [ 1380.434774][T16826] fuse: Bad value for 'user_id' [ 1381.295238][T15797] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1381.499419][T15797] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1381.616332][T16832] FAULT_INJECTION: forcing a failure. [ 1381.616332][T16832] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1381.653309][T16832] CPU: 0 UID: 0 PID: 16832 Comm: syz.2.2474 Not tainted 6.11.0-rc1-syzkaller-00004-gdc1c8034e31b #0 [ 1381.664142][T16832] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 1381.674235][T16832] Call Trace: [ 1381.677814][T16832] [ 1381.680781][T16832] dump_stack_lvl+0x241/0x360 [ 1381.685517][T16832] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1381.690761][T16832] ? __pfx__printk+0x10/0x10 [ 1381.695380][T16832] ? iovec_from_user+0x61/0x240 [ 1381.700259][T16832] ? __pfx_lock_release+0x10/0x10 [ 1381.705402][T16832] should_fail_ex+0x3b0/0x4e0 [ 1381.710117][T16832] _copy_from_user+0x2f/0xe0 [ 1381.714743][T16832] ____sys_sendmsg+0x2e4/0x7d0 [ 1381.719530][T16832] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1381.724841][T16832] __sys_sendmsg+0x2b0/0x3a0 [ 1381.729454][T16832] ? __pfx___sys_sendmsg+0x10/0x10 [ 1381.734574][T16832] ? vfs_write+0x7c4/0xc90 [ 1381.739037][T16832] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 1381.745478][T16832] ? do_syscall_64+0x100/0x230 [ 1381.750258][T16832] ? do_syscall_64+0xb6/0x230 [ 1381.754974][T16832] do_syscall_64+0xf3/0x230 [ 1381.759493][T16832] ? clear_bhb_loop+0x35/0x90 [ 1381.764190][T16832] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1381.770099][T16832] RIP: 0033:0x7f4db5577299 [ 1381.774529][T16832] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1381.794144][T16832] RSP: 002b:00007f4db6429048 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1381.802601][T16832] RAX: ffffffffffffffda RBX: 00007f4db5705f80 RCX: 00007f4db5577299 [ 1381.810589][T16832] RDX: 0000000000000000 RSI: 0000000020000240 RDI: 0000000000000003 [ 1381.818612][T16832] RBP: 00007f4db64290a0 R08: 0000000000000000 R09: 0000000000000000 [ 1381.826594][T16832] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1381.834584][T16832] R13: 000000000000000b R14: 00007f4db5705f80 R15: 00007ffe67c2c238 [ 1381.842850][T16832] [ 1381.853856][T15797] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1382.596015][T16838] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.2476'. [ 1382.605879][T16838] openvswitch: netlink: ERSPAN option length err (len 3060, max 255). [ 1386.482443][T15797] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1386.860986][T16847] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2479'. [ 1386.958405][ T29] kauditd_printk_skb: 54 callbacks suppressed [ 1386.958428][ T29] audit: type=1326 audit(1722280905.008:959): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16850 comm="syz.1.2481" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faabdd77299 code=0x7ffc0000 [ 1387.092179][ T29] audit: type=1326 audit(1722280905.008:960): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16850 comm="syz.1.2481" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faabdd77299 code=0x7ffc0000 [ 1387.136601][ T29] audit: type=1326 audit(1722280905.028:961): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16850 comm="syz.1.2481" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7faabdd77299 code=0x7ffc0000 [ 1387.140213][T16853] netlink: 'syz.1.2481': attribute type 1 has an invalid length. [ 1387.166554][T16853] netlink: 9348 bytes leftover after parsing attributes in process `syz.1.2481'. [ 1387.166703][ T29] audit: type=1326 audit(1722280905.028:962): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16850 comm="syz.1.2481" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faabdd77299 code=0x7ffc0000 [ 1387.215485][ T29] audit: type=1326 audit(1722280905.028:963): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16850 comm="syz.1.2481" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faabdd77299 code=0x7ffc0000 [ 1387.277846][ C0] eth0: bad gso: type: 1, size: 1408 [ 1387.358132][ T54] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1387.373016][ T29] audit: type=1326 audit(1722280905.028:964): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16850 comm="syz.1.2481" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7faabdd77299 code=0x7ffc0000 [ 1387.395189][ T54] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1387.406025][T15797] bridge_slave_1: left allmulticast mode [ 1387.412992][ T54] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1387.447619][ T54] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1387.453977][T15797] bridge_slave_1: left promiscuous mode [ 1387.477600][ T54] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 1387.492318][ T54] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1387.500229][T15797] bridge0: port 2(bridge_slave_1) entered disabled state [ 1387.528176][ T5229] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1387.530409][ T29] audit: type=1326 audit(1722280905.028:965): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16850 comm="syz.1.2481" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faabdd77299 code=0x7ffc0000 [ 1387.560046][ T5229] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1387.567667][ T29] audit: type=1326 audit(1722280905.028:966): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16850 comm="syz.1.2481" exe="/root/syz-executor" sig=0 arch=c000003e syscall=203 compat=0 ip=0x7faabdd77299 code=0x7ffc0000 [ 1387.590929][ T5229] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1387.612231][ T5229] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1387.636378][ T5229] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 1387.647444][ T5229] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1387.663989][ T29] audit: type=1326 audit(1722280905.028:967): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16850 comm="syz.1.2481" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faabdd77299 code=0x7ffc0000 [ 1387.676264][T15797] bridge_slave_0: left allmulticast mode [ 1387.692497][T16868] REISERFS warning (device nullb0): sh-2021 reiserfs_fill_super: can not find reiserfs on nullb0 [ 1387.695988][ T29] audit: type=1326 audit(1722280905.028:968): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16850 comm="syz.1.2481" exe="/root/syz-executor" sig=0 arch=c000003e syscall=111 compat=0 ip=0x7faabdd77299 code=0x7ffc0000 [ 1387.792549][T15797] bridge_slave_0: left promiscuous mode [ 1387.814109][T15797] bridge0: port 1(bridge_slave_0) entered disabled state [ 1388.325220][T16875] fuse: Bad value for 'user_id' [ 1388.330310][T16875] fuse: Bad value for 'user_id' [ 1389.083145][T16876] affs: No valid root block on device nullb0 [ 1389.755628][ T54] Bluetooth: hci0: command tx timeout [ 1389.807536][T15797] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1389.816207][T15797] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1389.824067][T15797] bond0 (unregistering): Released all slaves [ 1389.866837][T16860] netlink: 'syz.2.2483': attribute type 1 has an invalid length. [ 1389.867501][T16860] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 1390.000418][T16887] affs: No valid root block on device nullb0 [ 1390.705651][T15797] hsr_slave_0: left promiscuous mode [ 1390.761798][T15797] hsr_slave_1: left promiscuous mode [ 1390.816019][T15797] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1390.845665][T15797] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1390.873342][T15797] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1390.891922][T15797] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1391.005693][T15797] veth1_macvtap: left promiscuous mode [ 1391.011438][T15797] veth0_macvtap: left promiscuous mode [ 1391.053970][T15797] veth1_vlan: left promiscuous mode [ 1391.063911][T15797] veth0_vlan: left promiscuous mode [ 1391.718405][T16909] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.2492'. [ 1391.727943][T16909] openvswitch: netlink: ERSPAN option length err (len 3060, max 255). [ 1391.836855][ T54] Bluetooth: hci0: command tx timeout [ 1393.085938][ T29] kauditd_printk_skb: 9 callbacks suppressed [ 1393.085958][ T29] audit: type=1326 audit(1722280911.148:978): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16924 comm="syz.2.2495" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4db5577299 code=0x7ffc0000 [ 1393.130934][ T29] audit: type=1326 audit(1722280911.148:979): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16924 comm="syz.2.2495" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4db5577299 code=0x7ffc0000 [ 1393.153895][ T29] audit: type=1326 audit(1722280911.158:980): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16924 comm="syz.2.2495" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4db5577299 code=0x7ffc0000 [ 1393.183978][ T29] audit: type=1326 audit(1722280911.158:981): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16924 comm="syz.2.2495" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4db5577299 code=0x7ffc0000 [ 1393.208944][ T29] audit: type=1326 audit(1722280911.158:982): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16924 comm="syz.2.2495" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4db5577299 code=0x7ffc0000 [ 1393.209849][T15797] team0 (unregistering): Port device team_slave_1 removed [ 1393.230543][ C1] vkms_vblank_simulate: vblank timer overrun [ 1393.258876][T16926] netlink: 'syz.2.2495': attribute type 1 has an invalid length. [ 1393.272622][ T29] audit: type=1326 audit(1722280911.158:983): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16924 comm="syz.2.2495" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f4db5577299 code=0x7ffc0000 [ 1393.304466][T16926] netlink: 9348 bytes leftover after parsing attributes in process `syz.2.2495'. [ 1393.327347][ T29] audit: type=1326 audit(1722280911.198:984): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16924 comm="syz.2.2495" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4db5577299 code=0x7ffc0000 [ 1393.349369][ C1] vkms_vblank_simulate: vblank timer overrun [ 1393.365664][ T29] audit: type=1326 audit(1722280911.198:985): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16924 comm="syz.2.2495" exe="/root/syz-executor" sig=0 arch=c000003e syscall=203 compat=0 ip=0x7f4db5577299 code=0x7ffc0000 [ 1393.393331][ T29] audit: type=1326 audit(1722280911.198:986): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16924 comm="syz.2.2495" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4db5577299 code=0x7ffc0000 [ 1393.415157][ C1] vkms_vblank_simulate: vblank timer overrun [ 1393.429344][ T29] audit: type=1326 audit(1722280911.198:987): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16924 comm="syz.2.2495" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4db5577299 code=0x7ffc0000 [ 1393.450931][ C1] vkms_vblank_simulate: vblank timer overrun [ 1393.468944][T15797] team0 (unregistering): Port device team_slave_0 removed [ 1393.925519][ T54] Bluetooth: hci0: command tx timeout [ 1394.618023][T16933] fuse: Bad value for 'fd' [ 1394.711941][T16855] chnl_net:caif_netlink_parms(): no params data found [ 1395.156905][T16855] bridge0: port 1(bridge_slave_0) entered blocking state [ 1395.166254][T16855] bridge0: port 1(bridge_slave_0) entered disabled state [ 1395.166479][T16855] bridge_slave_0: entered allmulticast mode [ 1395.175735][T16855] bridge_slave_0: entered promiscuous mode [ 1395.185269][T16855] bridge0: port 2(bridge_slave_1) entered blocking state [ 1395.185817][T16855] bridge0: port 2(bridge_slave_1) entered disabled state [ 1395.186003][T16855] bridge_slave_1: entered allmulticast mode [ 1395.211153][T16855] bridge_slave_1: entered promiscuous mode [ 1395.265492][T14995] usb 3-1: new high-speed USB device number 62 using dummy_hcd [ 1395.475684][T14995] usb 3-1: Using ep0 maxpacket: 16 [ 1395.477488][T14995] usb 3-1: too many endpoints for config 0 interface 0 altsetting 164: 61, using maximum allowed: 30 [ 1395.508866][T14995] usb 3-1: config 0 interface 0 altsetting 164 has 0 endpoint descriptors, different from the interface descriptor's value: 61 [ 1395.508911][T14995] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1395.512349][T14995] usb 3-1: New USB device found, idVendor=0572, idProduct=0041, bcdDevice=d5.24 [ 1395.512386][T14995] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1395.512413][T14995] usb 3-1: Product: syz [ 1395.512433][T14995] usb 3-1: Manufacturer: syz [ 1395.512452][T14995] usb 3-1: SerialNumber: syz [ 1395.518350][T14995] usb 3-1: config 0 descriptor?? [ 1395.522591][T14995] gspca_main: conex-2.14.0 probing 0572:0041 [ 1395.553959][T16855] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1395.587011][T16855] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1400.893737][ T54] Bluetooth: hci0: command tx timeout [ 1401.105089][T16855] team0: Port device team_slave_0 added [ 1401.131161][T16855] team0: Port device team_slave_1 added [ 1401.275948][T14995] usb 3-1: USB disconnect, device number 62 [ 1401.368699][T16855] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1401.368723][T16855] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1401.368756][T16855] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1401.416234][T16855] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1401.416260][T16855] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1401.416293][T16855] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1401.672881][T16976] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2508'. [ 1401.814301][T16983] REISERFS warning (device nullb0): sh-2021 reiserfs_fill_super: can not find reiserfs on nullb0 [ 1401.944262][T16855] hsr_slave_0: entered promiscuous mode [ 1401.963182][T16855] hsr_slave_1: entered promiscuous mode [ 1402.785486][ T9652] usb 3-1: new high-speed USB device number 63 using dummy_hcd [ 1402.928425][ T8469] usb 1-1: new high-speed USB device number 54 using dummy_hcd [ 1402.985427][ T9652] usb 3-1: Using ep0 maxpacket: 8 [ 1402.998368][ T9652] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1403.025395][ T9652] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1403.068403][ T9652] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1403.099004][ T9652] usb 3-1: New USB device found, idVendor=046d, idProduct=c71b, bcdDevice= 0.40 [ 1403.114472][ T9652] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1403.117905][ T8469] usb 1-1: config 0 has an invalid interface number: 41 but max is 0 [ 1403.131859][ T9652] usb 3-1: Product: syz [ 1403.136813][ T9652] usb 3-1: Manufacturer: syz [ 1403.141695][ T9652] usb 3-1: SerialNumber: syz [ 1403.141952][ T8469] usb 1-1: config 0 has an invalid descriptor of length 19, skipping remainder of the config [ 1403.157392][ T8469] usb 1-1: config 0 has no interface number 0 [ 1403.179645][ T8469] usb 1-1: New USB device found, idVendor=04d8, idProduct=0083, bcdDevice=83.9c [ 1403.189127][ T8469] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1403.218719][ T8469] usb 1-1: Product: syz [ 1403.234648][ T8469] usb 1-1: Manufacturer: syz [ 1403.245516][ T8469] usb 1-1: SerialNumber: syz [ 1403.266248][ T8469] usb 1-1: config 0 descriptor?? [ 1403.284135][ T8469] ims_pcu 1-1:0.41: Missing CDC union descriptor [ 1403.303172][ T8469] ims_pcu 1-1:0.41: probe with driver ims_pcu failed with error -22 [ 1403.383058][ T9652] usbhid 3-1:1.0: can't add hid device: -22 [ 1403.401189][ T9652] usbhid 3-1:1.0: probe with driver usbhid failed with error -22 [ 1403.513988][ T8469] usb 1-1: USB disconnect, device number 54 [ 1403.588523][T16991] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1403.656211][T16991] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1403.817245][T14995] usb 3-1: USB disconnect, device number 63 [ 1403.875967][T16855] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1403.961541][T16855] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1404.096769][T16855] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1404.162582][T16855] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1408.149586][T16855] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1408.231971][T16855] 8021q: adding VLAN 0 to HW filter on device team0 [ 1408.292932][ T9652] bridge0: port 1(bridge_slave_0) entered blocking state [ 1408.300200][ T9652] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1408.335379][ T9652] bridge0: port 2(bridge_slave_1) entered blocking state [ 1408.342575][ T9652] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1411.188102][T17051] gfs2: path_lookup on c::: returned error -2 [ 1411.504193][T16855] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1411.619709][T16855] veth0_vlan: entered promiscuous mode [ 1411.653556][T16855] veth1_vlan: entered promiscuous mode [ 1411.759739][T16855] veth0_macvtap: entered promiscuous mode [ 1411.786197][T16855] veth1_macvtap: entered promiscuous mode [ 1412.081213][T16855] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1412.081243][T16855] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1412.081260][T16855] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1412.081278][T16855] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1412.081293][T16855] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1412.081311][T16855] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1412.081326][T16855] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1412.081344][T16855] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1412.090354][T16855] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1412.103689][T16855] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1412.103719][T16855] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1412.103736][T16855] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1412.103762][T16855] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1412.103777][T16855] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1412.103795][T16855] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1412.103811][T16855] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1412.103828][T16855] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1412.149472][T16855] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1412.153629][T16855] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1412.153676][T16855] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1412.153711][T16855] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1412.153745][T16855] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1412.553580][T12958] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1412.553611][T12958] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1412.779633][T15797] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1412.779664][T15797] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1418.681827][T17129] fuse: Bad value for 'fd' [ 1419.482361][T17127] ceph: No mds server is up or the cluster is laggy [ 1419.655622][T17138] netlink: 'syz.2.2543': attribute type 1 has an invalid length. [ 1422.047260][T17172] overlay: Unknown parameter 'obj_user' [ 1423.283972][ T1268] ieee802154 phy0 wpan0: encryption failed: -22 [ 1423.295754][ T1268] ieee802154 phy1 wpan1: encryption failed: -22 [ 1426.170062][T17205] fuse: Bad value for 'fd' [ 1428.532509][T17238] ptm ptm0: ldisc open failed (-12), clearing slot 0 [ 1429.145904][T17249] bridge: RTM_NEWNEIGH with invalid ether address [ 1429.185555][ T8] usb 5-1: new high-speed USB device number 80 using dummy_hcd [ 1429.388208][ T8] usb 5-1: Using ep0 maxpacket: 32 [ 1429.434866][ T8] usb 5-1: New USB device found, idVendor=2c42, idProduct=16f8, bcdDevice=ba.e3 [ 1429.481481][ T8] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1429.517261][ T8] usb 5-1: Product: syz [ 1429.539098][ T8] usb 5-1: Manufacturer: syz [ 1429.559965][ T8] usb 5-1: SerialNumber: syz [ 1429.592089][ T8] usb 5-1: config 0 descriptor?? [ 1430.042920][T17245] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1430.096210][T17245] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1430.172249][ T8] usb 5-1: USB disconnect, device number 80 [ 1430.225601][ T8] f81534a_ctrl 5-1:0.0: failed to set register 0x116: -19 [ 1430.256864][ T8] f81534a_ctrl 5-1:0.0: failed to enable ports: -19 [ 1430.460451][T17257] FAULT_INJECTION: forcing a failure. [ 1430.460451][T17257] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1430.518597][T17257] CPU: 0 UID: 0 PID: 17257 Comm: syz.1.2567 Not tainted 6.11.0-rc1-syzkaller-00004-gdc1c8034e31b #0 [ 1430.529517][T17257] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 1430.539619][T17257] Call Trace: [ 1430.542924][T17257] [ 1430.545882][T17257] dump_stack_lvl+0x241/0x360 [ 1430.550611][T17257] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1430.555851][T17257] ? __pfx__printk+0x10/0x10 [ 1430.560493][T17257] ? snprintf+0xda/0x120 [ 1430.564787][T17257] should_fail_ex+0x3b0/0x4e0 [ 1430.569515][T17257] _copy_to_user+0x2f/0xb0 [ 1430.573973][T17257] simple_read_from_buffer+0xca/0x150 [ 1430.579392][T17257] proc_fail_nth_read+0x1e9/0x250 [ 1430.584472][T17257] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1430.590066][T17257] ? rw_verify_area+0x520/0x6b0 [ 1430.595030][T17257] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1430.600619][T17257] vfs_read+0x204/0xbc0 [ 1430.604804][T17257] ? __pfx_lock_release+0x10/0x10 [ 1430.609877][T17257] ? __pfx_vfs_read+0x10/0x10 [ 1430.614584][T17257] ? __fget_files+0x29/0x470 [ 1430.619209][T17257] ? __fget_files+0x3f6/0x470 [ 1430.623935][T17257] ksys_read+0x1a0/0x2c0 [ 1430.628215][T17257] ? __pfx_ksys_read+0x10/0x10 [ 1430.633013][T17257] ? do_syscall_64+0x100/0x230 [ 1430.637820][T17257] ? do_syscall_64+0xb6/0x230 [ 1430.642539][T17257] do_syscall_64+0xf3/0x230 [ 1430.647090][T17257] ? clear_bhb_loop+0x35/0x90 [ 1430.651815][T17257] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1430.657749][T17257] RIP: 0033:0x7faabdd75d7c [ 1430.662192][T17257] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 c9 8c 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 1f 8d 02 00 48 [ 1430.681831][T17257] RSP: 002b:00007faabd7ff040 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1430.690282][T17257] RAX: ffffffffffffffda RBX: 00007faabdf05f80 RCX: 00007faabdd75d7c [ 1430.698293][T17257] RDX: 000000000000000f RSI: 00007faabd7ff0b0 RDI: 0000000000000004 [ 1430.706478][T17257] RBP: 00007faabd7ff0a0 R08: 0000000000000000 R09: 0000000000000000 [ 1430.714497][T17257] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1430.722511][T17257] R13: 000000000000000b R14: 00007faabdf05f80 R15: 00007ffca6947c78 [ 1430.730549][T17257] [ 1431.585485][ T8] usb 2-1: new high-speed USB device number 64 using dummy_hcd [ 1431.735505][T17274] 9pnet_fd: Insufficient options for proto=fd [ 1431.744710][T17274] syzkaller1: entered promiscuous mode [ 1431.744740][T17274] syzkaller1: entered allmulticast mode [ 1431.775745][ T8] usb 2-1: Using ep0 maxpacket: 8 [ 1431.778215][ T8] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 1431.778276][ T8] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1431.778305][ T8] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1431.778336][ T8] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1431.778366][ T8] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1431.778423][ T8] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1431.778453][ T8] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1431.993365][ T8] usb 2-1: usb_control_msg returned -32 [ 1431.993424][ T8] usbtmc 2-1:16.0: can't read capabilities [ 1434.195531][T17288] bridge: RTM_NEWNEIGH with invalid ether address [ 1434.682267][ T8] usb 2-1: USB disconnect, device number 64 [ 1435.895521][T14334] usb 5-1: new high-speed USB device number 81 using dummy_hcd [ 1436.005506][T14995] usb 4-1: new high-speed USB device number 54 using dummy_hcd [ 1436.101357][T14334] usb 5-1: Using ep0 maxpacket: 32 [ 1436.121603][T14334] usb 5-1: New USB device found, idVendor=2c42, idProduct=16f8, bcdDevice=ba.e3 [ 1436.143729][T14334] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1436.165462][T14334] usb 5-1: Product: syz [ 1436.169692][T14334] usb 5-1: Manufacturer: syz [ 1436.180754][T14334] usb 5-1: SerialNumber: syz [ 1436.189629][T14334] usb 5-1: config 0 descriptor?? [ 1436.235709][T14995] usb 4-1: Using ep0 maxpacket: 32 [ 1436.271323][T14995] usb 4-1: New USB device found, idVendor=2c42, idProduct=16f8, bcdDevice=ba.e3 [ 1436.292599][T14995] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1436.340761][T14995] usb 4-1: Product: syz [ 1436.352405][T14995] usb 4-1: Manufacturer: syz [ 1436.369313][T14995] usb 4-1: SerialNumber: syz [ 1436.380336][T14995] usb 4-1: config 0 descriptor?? [ 1436.637999][T17305] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1436.686177][T17305] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1436.790080][ T25] usb 5-1: USB disconnect, device number 81 [ 1436.831176][ T25] f81534a_ctrl 5-1:0.0: failed to set register 0x116: -19 [ 1436.903172][ T25] f81534a_ctrl 5-1:0.0: failed to enable ports: -19 [ 1437.106003][T17307] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1437.152952][T17307] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1437.218689][T14334] usb 4-1: USB disconnect, device number 54 [ 1437.225997][T14334] f81534a_ctrl 4-1:0.0: failed to set register 0x116: -19 [ 1437.249351][T14334] f81534a_ctrl 4-1:0.0: failed to enable ports: -19 [ 1438.077298][T17343] FAULT_INJECTION: forcing a failure. [ 1438.077298][T17343] name failslab, interval 1, probability 0, space 0, times 0 [ 1438.077337][T17343] CPU: 1 UID: 0 PID: 17343 Comm: syz.3.2592 Not tainted 6.11.0-rc1-syzkaller-00004-gdc1c8034e31b #0 [ 1438.077365][T17343] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 1438.077381][T17343] Call Trace: [ 1438.077391][T17343] [ 1438.077402][T17343] dump_stack_lvl+0x241/0x360 [ 1438.077448][T17343] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1438.077482][T17343] ? __pfx__printk+0x10/0x10 [ 1438.077516][T17343] ? kmem_cache_alloc_node_noprof+0x49/0x320 [ 1438.077553][T17343] ? __pfx___might_resched+0x10/0x10 [ 1438.077592][T17343] should_fail_ex+0x3b0/0x4e0 [ 1438.077624][T17343] should_failslab+0xac/0x100 [ 1438.077654][T17343] ? __alloc_skb+0x1c3/0x440 [ 1438.077689][T17343] kmem_cache_alloc_node_noprof+0x71/0x320 [ 1438.077731][T17343] __alloc_skb+0x1c3/0x440 [ 1438.077773][T17343] ? __pfx___alloc_skb+0x10/0x10 [ 1438.077817][T17343] ? netlink_ack_tlv_len+0x6e/0x200 [ 1438.077852][T17343] netlink_ack+0x13f/0xa30 [ 1438.077882][T17343] ? __pfx_lock_acquire+0x10/0x10 [ 1438.077915][T17343] ? __pfx_nl80211_external_auth+0x10/0x10 [ 1438.077956][T17343] ? __pfx_nl80211_post_doit+0x10/0x10 [ 1438.078001][T17343] netlink_rcv_skb+0x262/0x430 [ 1438.078036][T17343] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1438.078065][T17343] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1438.078114][T17343] ? __netlink_deliver_tap+0x77e/0x7c0 [ 1438.078165][T17343] genl_rcv+0x28/0x40 [ 1438.078188][T17343] netlink_unicast+0x7f0/0x990 [ 1438.078229][T17343] ? __pfx_netlink_unicast+0x10/0x10 [ 1438.078257][T17343] ? __virt_addr_valid+0x183/0x530 [ 1438.078285][T17343] ? __check_object_size+0x49c/0x900 [ 1438.078316][T17343] ? bpf_lsm_netlink_send+0x9/0x10 [ 1438.078351][T17343] netlink_sendmsg+0x8e4/0xcb0 [ 1438.078399][T17343] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1438.078436][T17343] ? __import_iovec+0x536/0x820 [ 1438.078471][T17343] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 1438.078502][T17343] ? security_socket_sendmsg+0x87/0xb0 [ 1438.078534][T17343] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1438.078566][T17343] __sock_sendmsg+0x221/0x270 [ 1438.078603][T17343] ____sys_sendmsg+0x525/0x7d0 [ 1438.078639][T17343] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1438.078686][T17343] __sys_sendmsg+0x2b0/0x3a0 [ 1438.078716][T17343] ? __pfx___sys_sendmsg+0x10/0x10 [ 1438.078740][T17343] ? vfs_write+0x7c4/0xc90 [ 1438.078816][T17343] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 1438.078851][T17343] ? do_syscall_64+0x100/0x230 [ 1438.078887][T17343] ? do_syscall_64+0xb6/0x230 [ 1438.078922][T17343] do_syscall_64+0xf3/0x230 [ 1438.078960][T17343] ? clear_bhb_loop+0x35/0x90 [ 1438.078999][T17343] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1438.079032][T17343] RIP: 0033:0x7fecb5d77299 [ 1438.079054][T17343] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1438.079076][T17343] RSP: 002b:00007fecb6aa2048 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1438.079104][T17343] RAX: ffffffffffffffda RBX: 00007fecb5f05f80 RCX: 00007fecb5d77299 [ 1438.079123][T17343] RDX: 0000000000000000 RSI: 0000000020000340 RDI: 0000000000000003 [ 1438.079139][T17343] RBP: 00007fecb6aa20a0 R08: 0000000000000000 R09: 0000000000000000 [ 1438.079156][T17343] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1438.079172][T17343] R13: 000000000000000b R14: 00007fecb5f05f80 R15: 00007ffda8a189e8 [ 1438.079210][T17343] [ 1438.126281][ T25] usb 3-1: new high-speed USB device number 64 using dummy_hcd [ 1438.315507][ T25] usb 3-1: Using ep0 maxpacket: 16 [ 1438.317339][ T25] usb 3-1: config 3 has an invalid interface number: 216 but max is 0 [ 1438.317376][ T25] usb 3-1: config 3 has 2 interfaces, different from the descriptor's value: 1 [ 1438.317394][ T25] usb 3-1: config 3 has no interface number 1 [ 1438.317434][ T25] usb 3-1: config 3 interface 216 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1438.317457][ T25] usb 3-1: too many endpoints for config 3 interface 0 altsetting 0: 198, using maximum allowed: 30 [ 1438.317490][ T25] usb 3-1: config 3 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 198 [ 1438.334024][ T25] usb 3-1: New USB device found, idVendor=07af, idProduct=0004, bcdDevice= 1.01 [ 1438.334053][ T25] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1438.334070][ T25] usb 3-1: Product: syz [ 1438.334083][ T25] usb 3-1: Manufacturer: syz [ 1438.334095][ T25] usb 3-1: SerialNumber: syz [ 1438.343989][ T25] usb-storage 3-1:3.216: USB Mass Storage device detected [ 1439.148236][ T25] usb-storage 3-1:3.216: Quirks match for vid 07af pid 0004: 4 [ 1439.238439][ T25] usb-storage 3-1:3.0: USB Mass Storage device detected [ 1439.264220][ T25] usb-storage 3-1:3.0: Quirks match for vid 07af pid 0004: 4 [ 1439.359525][ T8469] usb 2-1: new high-speed USB device number 65 using dummy_hcd [ 1439.362546][ T25] usb 3-1: USB disconnect, device number 64 [ 1439.545448][ T8469] usb 2-1: Using ep0 maxpacket: 32 [ 1439.547667][ T8469] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1439.547707][ T8469] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 1439.547742][ T8469] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1439.547793][ T8469] usb 2-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 1439.547823][ T8469] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1439.550894][ T8469] usb 2-1: config 0 descriptor?? [ 1439.551867][T17351] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1439.554045][ T8469] hub 2-1:0.0: USB hub found [ 1439.762804][ T8469] hub 2-1:0.0: 2 ports detected [ 1440.675504][T17366] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1440.681540][T17366] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 1440.886921][T14334] usb 2-1: USB disconnect, device number 65 [ 1441.105598][ T8] usb 5-1: new high-speed USB device number 82 using dummy_hcd [ 1441.305525][ T8] usb 5-1: Using ep0 maxpacket: 32 [ 1441.322351][ T8] usb 5-1: New USB device found, idVendor=2c42, idProduct=16f8, bcdDevice=ba.e3 [ 1441.332051][ T8] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1441.340237][ T8] usb 5-1: Product: syz [ 1441.344691][ T8] usb 5-1: Manufacturer: syz [ 1441.349687][ T8] usb 5-1: SerialNumber: syz [ 1441.367165][ T8] usb 5-1: config 0 descriptor?? [ 1441.445434][ T8469] usb 1-1: new high-speed USB device number 55 using dummy_hcd [ 1441.527265][T17381] FAULT_INJECTION: forcing a failure. [ 1441.527265][T17381] name failslab, interval 1, probability 0, space 0, times 0 [ 1441.545995][T17381] CPU: 1 UID: 0 PID: 17381 Comm: syz.1.2604 Not tainted 6.11.0-rc1-syzkaller-00004-gdc1c8034e31b #0 [ 1441.556827][T17381] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 1441.566905][T17381] Call Trace: [ 1441.570203][T17381] [ 1441.573139][T17381] dump_stack_lvl+0x241/0x360 [ 1441.577845][T17381] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1441.583057][T17381] ? __pfx__printk+0x10/0x10 [ 1441.587674][T17381] ? fs_reclaim_acquire+0x93/0x140 [ 1441.592803][T17381] ? __pfx___might_resched+0x10/0x10 [ 1441.598109][T17381] ? dynamic_dname+0x141/0x1b0 [ 1441.602898][T17381] should_fail_ex+0x3b0/0x4e0 [ 1441.607590][T17381] ? tomoyo_encode+0x26f/0x540 [ 1441.612379][T17381] should_failslab+0xac/0x100 [ 1441.617070][T17381] ? tomoyo_encode+0x26f/0x540 [ 1441.621848][T17381] __kmalloc_noprof+0xd8/0x400 [ 1441.626731][T17381] tomoyo_encode+0x26f/0x540 [ 1441.631366][T17381] ? __pfx_anon_inodefs_dname+0x10/0x10 [ 1441.636941][T17381] tomoyo_realpath_from_path+0x59e/0x5e0 [ 1441.642607][T17381] tomoyo_path_number_perm+0x23a/0x880 [ 1441.648087][T17381] ? tomoyo_path_number_perm+0x208/0x880 [ 1441.653735][T17381] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1441.659773][T17381] ? __fget_files+0x29/0x470 [ 1441.664476][T17381] ? __fget_files+0x3f6/0x470 [ 1441.669165][T17381] ? __fget_files+0x29/0x470 [ 1441.673777][T17381] security_file_ioctl+0x75/0xb0 [ 1441.678745][T17381] __se_sys_ioctl+0x47/0x170 [ 1441.683370][T17381] do_syscall_64+0xf3/0x230 [ 1441.687914][T17381] ? clear_bhb_loop+0x35/0x90 [ 1441.692626][T17381] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1441.698547][T17381] RIP: 0033:0x7faabdd77299 [ 1441.702979][T17381] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1441.722683][T17381] RSP: 002b:00007faabd7ff048 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1441.731111][T17381] RAX: ffffffffffffffda RBX: 00007faabdf05f80 RCX: 00007faabdd77299 [ 1441.739094][T17381] RDX: 0000000020000100 RSI: 000000008010aa02 RDI: 0000000000000003 [ 1441.747075][T17381] RBP: 00007faabd7ff0a0 R08: 0000000000000000 R09: 0000000000000000 [ 1441.755054][T17381] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1441.763036][T17381] R13: 000000000000000b R14: 00007faabdf05f80 R15: 00007ffca6947c78 [ 1441.771033][T17381] [ 1441.774114][ C1] vkms_vblank_simulate: vblank timer overrun [ 1441.774163][ T9652] usb 3-1: new high-speed USB device number 65 using dummy_hcd [ 1441.803710][T17381] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1441.889717][ T8469] usb 1-1: Using ep0 maxpacket: 32 [ 1442.019836][T17372] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1442.028522][ T9652] usb 3-1: Using ep0 maxpacket: 8 [ 1442.040606][ T9652] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1442.052768][T17372] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1442.079446][ T9652] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1442.113093][ T8] usb 5-1: USB disconnect, device number 82 [ 1442.122223][ T8] f81534a_ctrl 5-1:0.0: failed to set register 0x116: -19 [ 1442.142058][ T9652] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1442.185552][ T8] f81534a_ctrl 5-1:0.0: failed to enable ports: -19 [ 1442.207434][ T8469] usb 1-1: New USB device found, idVendor=2c42, idProduct=16f8, bcdDevice=ba.e3 [ 1442.216679][ T8469] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1442.224747][ T8469] usb 1-1: Product: syz [ 1442.227471][ T9652] usb 3-1: New USB device found, idVendor=046d, idProduct=c71b, bcdDevice= 0.40 [ 1442.235419][ T8469] usb 1-1: Manufacturer: syz [ 1442.252807][ T8469] usb 1-1: SerialNumber: syz [ 1442.260398][ T8469] usb 1-1: config 0 descriptor?? [ 1442.269951][ T9652] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1442.296696][ T9652] usb 3-1: Product: syz [ 1442.305585][ T9652] usb 3-1: Manufacturer: syz [ 1442.310238][ T9652] usb 3-1: SerialNumber: syz [ 1442.549640][ T9652] usbhid 3-1:1.0: can't add hid device: -22 [ 1442.556000][ T9652] usbhid 3-1:1.0: probe with driver usbhid failed with error -22 [ 1442.708553][T17375] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1442.717542][T17375] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1442.737098][ T8469] usb 1-1: USB disconnect, device number 55 [ 1442.743742][ T8469] f81534a_ctrl 1-1:0.0: failed to set register 0x116: -19 [ 1442.756749][ T25] usb 2-1: new high-speed USB device number 66 using dummy_hcd [ 1442.766497][ T8469] f81534a_ctrl 1-1:0.0: failed to enable ports: -19 [ 1442.783216][T17379] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1442.829318][T17379] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1442.851291][ T9652] usb 3-1: USB disconnect, device number 65 [ 1442.895501][ T8] usb 4-1: new high-speed USB device number 55 using dummy_hcd [ 1442.965862][ T25] usb 2-1: Using ep0 maxpacket: 16 [ 1442.969118][ T25] usb 2-1: New USB device found, idVendor=23a7, idProduct=fedc, bcdDevice=e0.0b [ 1442.969146][ T25] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1442.969163][ T25] usb 2-1: Product: syz [ 1442.969176][ T25] usb 2-1: Manufacturer: syz [ 1442.969189][ T25] usb 2-1: SerialNumber: syz [ 1442.971422][ T25] usb 2-1: config 0 descriptor?? [ 1443.076493][ T8] usb 4-1: Using ep0 maxpacket: 8 [ 1443.078972][ T8] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1443.080319][ T8] usb 4-1: New USB device found, idVendor=05ac, idProduct=8501, bcdDevice=20.9d [ 1443.080354][ T8] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=105 [ 1443.080381][ T8] usb 4-1: SerialNumber: syz [ 1443.091148][ T8] usb 4-1: config 0 descriptor?? [ 1443.099146][ T8] usb 4-1: Found UVC 0.00 device (05ac:8501) [ 1443.145442][ T8] usb 4-1: Failed to create links for entity 255 [ 1443.145556][ T8] usb 4-1: Failed to register entities (-22). [ 1443.209854][T17389] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1443.210224][T17389] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1443.316754][ T8469] usb 4-1: USB disconnect, device number 55 [ 1443.450106][ T25] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 1443.450201][ T25] usb 2-1: MIDIStreaming interface descriptor not found [ 1443.928891][ T8] usb 2-1: USB disconnect, device number 66 [ 1444.689683][ C0] Oops: general protection fault, probably for non-canonical address 0xe000010000000000: 0000 [#1] PREEMPT SMP KASAN PTI [ 1444.702339][ C0] KASAN: probably user-memory-access in range [0x0000280000000000-0x0000280000000007] [ 1444.712029][ C0] CPU: 0 UID: 255 PID: 17412 Comm: syz.1.2614 Not tainted 6.11.0-rc1-syzkaller-00004-gdc1c8034e31b #0 [ 1444.723102][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 1444.733201][ C0] RIP: 0010:__dev_flush+0x5b/0x160 [ 1444.738377][ C0] Code: 48 89 ef e8 17 9e 3b 00 48 8b 5d 00 48 39 eb 0f 84 ff 00 00 00 48 89 2c 24 49 89 dd 49 c1 ed 03 48 b8 00 00 00 00 00 fc ff df <41> 80 7c 05 00 00 74 08 48 89 df e8 e5 9d 3b 00 48 8b 03 48 89 44 [ 1444.758018][ C0] RSP: 0018:ffffc90000007b90 EFLAGS: 00010207 [ 1444.764091][ C0] RAX: dffffc0000000000 RBX: 0000280000000004 RCX: ffff88806d7b9e00 [ 1444.772154][ C0] RDX: 0000000000000101 RSI: 0000000000000010 RDI: ffffc90004167810 [ 1444.780128][ C0] RBP: ffffc90004167810 R08: ffffffff8985908a R09: 1ffffffff1feced5 [ 1444.788103][ C0] R10: dffffc0000000000 R11: fffffbfff1feced6 R12: 0000000000000000 [ 1444.796075][ C0] R13: 0000050000000000 R14: 0000000000000010 R15: ffffc90004167810 [ 1444.804064][ C0] FS: 00007faabd7ff6c0(0000) GS:ffff8880b9200000(0000) knlGS:0000000000000000 [ 1444.813028][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1444.819674][ C0] CR2: 0000000020009200 CR3: 000000005a190000 CR4: 00000000003506f0 [ 1444.827928][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1444.835909][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1444.844322][ C0] Call Trace: [ 1444.847610][ C0] [ 1444.850459][ C0] ? __die_body+0x88/0xe0 [ 1444.854803][ C0] ? die_addr+0x108/0x140 [ 1444.859149][ C0] ? exc_general_protection+0x3dd/0x5d0 [ 1444.864723][ C0] ? asm_exc_general_protection+0x26/0x30 [ 1444.870488][ C0] ? xdp_do_check_flushed+0x10a/0x240 [ 1444.875871][ C0] ? __dev_flush+0x5b/0x160 [ 1444.880393][ C0] xdp_do_check_flushed+0x129/0x240 [ 1444.885625][ C0] __napi_poll+0xe4/0x490 [ 1444.889982][ C0] net_rx_action+0x89b/0x1240 [ 1444.894682][ C0] ? __pfx_net_rx_action+0x10/0x10 [ 1444.899816][ C0] ? sched_clock+0x4a/0x70 [ 1444.904248][ C0] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 1444.910620][ C0] handle_softirqs+0x2c4/0x970 [ 1444.915424][ C0] ? do_softirq+0x11b/0x1e0 [ 1444.919939][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 1444.925331][ C0] do_softirq+0x11b/0x1e0 [ 1444.929670][ C0] [ 1444.932599][ C0] [ 1444.935530][ C0] ? __pfx_do_softirq+0x10/0x10 [ 1444.940391][ C0] ? __pfx_lockdep_softirqs_on+0x10/0x10 [ 1444.946077][ C0] ? rcu_is_watching+0x15/0xb0 [ 1444.950971][ C0] __local_bh_enable_ip+0x1bb/0x200 [ 1444.956201][ C0] ? dev_hard_start_xmit+0x773/0x7e0 [ 1444.961503][ C0] ? __dev_queue_xmit+0x2da/0x3e90 [ 1444.966628][ C0] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 1444.972633][ C0] ? __dev_queue_xmit+0x2da/0x3e90 [ 1444.977756][ C0] __dev_queue_xmit+0x1763/0x3e90 [ 1444.982806][ C0] ? __local_bh_enable_ip+0x168/0x200 [ 1444.988254][ C0] ? __dev_queue_xmit+0x2da/0x3e90 [ 1444.993656][ C0] ? __pfx___dev_queue_xmit+0x10/0x10 [ 1444.999048][ C0] ? mark_lock+0x9a/0x350 [ 1445.003395][ C0] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 1445.009408][ C0] ? ip_finish_output2+0xa14/0x1390 [ 1445.014623][ C0] ? ip_finish_output2+0x45f/0x1390 [ 1445.019849][ C0] ip_finish_output2+0xd41/0x1390 [ 1445.024899][ C0] ? ip_finish_output2+0x45f/0x1390 [ 1445.030119][ C0] ? __pfx_ip_finish_output2+0x10/0x10 [ 1445.035592][ C0] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 1445.041588][ C0] ? ip_fast_csum+0x1f0/0x2b0 [ 1445.046450][ C0] ? ip_skb_dst_mtu+0x6ba/0x9b0 [ 1445.051328][ C0] ? __ip_finish_output+0x349/0x400 [ 1445.056536][ C0] __ip_queue_xmit+0x118c/0x1b80 [ 1445.061492][ C0] ? __ip_queue_xmit+0x5f/0x1b80 [ 1445.066438][ C0] sctp_packet_transmit+0x26af/0x2ca0 [ 1445.071839][ C0] sctp_packet_singleton+0x22c/0x320 [ 1445.077224][ C0] ? __pfx_sctp_packet_singleton+0x10/0x10 [ 1445.083046][ C0] ? sctp_outq_select_transport+0x474/0x580 [ 1445.089035][ C0] ? sctp_transport_burst_limited+0x18c/0x270 [ 1445.095115][ C0] sctp_outq_flush+0x6d5/0x3e20 [ 1445.099975][ C0] ? rcu_is_watching+0x15/0xb0 [ 1445.104762][ C0] ? __pfx_sctp_outq_flush+0x10/0x10 [ 1445.110145][ C0] ? sctp_outq_tail+0x67a/0x930 [ 1445.115007][ C0] ? sctp_outq_uncork+0x4f/0xb0 [ 1445.119872][ C0] sctp_do_sm+0x59cc/0x60c0 [ 1445.124408][ C0] ? __pfx_sctp_do_sm+0x10/0x10 [ 1445.129375][ C0] ? sctp_assoc_set_id+0xc9/0x360 [ 1445.134408][ C0] ? sctp_assoc_set_id+0x9f/0x360 [ 1445.139535][ C0] sctp_primitive_ASSOCIATE+0x95/0xc0 [ 1445.144921][ C0] __sctp_connect+0x9cd/0xe30 [ 1445.149804][ C0] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 1445.155792][ C0] ? __pfx___sctp_connect+0x10/0x10 [ 1445.160993][ C0] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 1445.167357][ C0] ? bpf_lsm_sctp_bind_connect+0x9/0x10 [ 1445.172917][ C0] ? security_sctp_bind_connect+0x90/0xb0 [ 1445.178651][ C0] sctp_setsockopt_connectx+0x184/0x2a0 [ 1445.184208][ C0] ? __pfx_sctp_setsockopt_connectx+0x10/0x10 [ 1445.190287][ C0] ? do_raw_spin_unlock+0x13c/0x8b0 [ 1445.195506][ C0] sctp_setsockopt+0x709/0x11c0 [ 1445.200463][ C0] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 1445.206389][ C0] do_sock_setsockopt+0x3af/0x720 [ 1445.211514][ C0] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 1445.217066][ C0] ? __fget_files+0x29/0x470 [ 1445.221925][ C0] ? __fget_files+0x3f6/0x470 [ 1445.226615][ C0] __sys_setsockopt+0x1ae/0x250 [ 1445.231498][ C0] __x64_sys_setsockopt+0xb5/0xd0 [ 1445.236601][ C0] do_syscall_64+0xf3/0x230 [ 1445.241131][ C0] ? clear_bhb_loop+0x35/0x90 [ 1445.245835][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1445.251762][ C0] RIP: 0033:0x7faabdd77299 [ 1445.256208][ C0] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1445.275832][ C0] RSP: 002b:00007faabd7ff048 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 1445.284532][ C0] RAX: ffffffffffffffda RBX: 00007faabdf05f80 RCX: 00007faabdd77299 [ 1445.292594][ C0] RDX: 000000000000006e RSI: 0000000000000084 RDI: 000000000000000b [ 1445.300566][ C0] RBP: 00007faabdde48e6 R08: 0000000000000010 R09: 0000000000000000 [ 1445.308549][ C0] R10: 0000000020009200 R11: 0000000000000246 R12: 0000000000000000 [ 1445.316522][ C0] R13: 000000000000000b R14: 00007faabdf05f80 R15: 00007ffca6947c78 [ 1445.324598][ C0] [ 1445.327618][ C0] Modules linked in: [ 1445.332057][ C0] ---[ end trace 0000000000000000 ]--- [ 1445.337773][ C0] RIP: 0010:__dev_flush+0x5b/0x160 [ 1445.342964][ C0] Code: 48 89 ef e8 17 9e 3b 00 48 8b 5d 00 48 39 eb 0f 84 ff 00 00 00 48 89 2c 24 49 89 dd 49 c1 ed 03 48 b8 00 00 00 00 00 fc ff df <41> 80 7c 05 00 00 74 08 48 89 df e8 e5 9d 3b 00 48 8b 03 48 89 44 [ 1445.362698][ C0] RSP: 0018:ffffc90000007b90 EFLAGS: 00010207 [ 1445.369049][ C0] RAX: dffffc0000000000 RBX: 0000280000000004 RCX: ffff88806d7b9e00 [ 1445.377041][ C0] RDX: 0000000000000101 RSI: 0000000000000010 RDI: ffffc90004167810 [ 1445.386312][ C0] RBP: ffffc90004167810 R08: ffffffff8985908a R09: 1ffffffff1feced5 [ 1445.394542][ C0] R10: dffffc0000000000 R11: fffffbfff1feced6 R12: 0000000000000000 [ 1445.402606][ C0] R13: 0000050000000000 R14: 0000000000000010 R15: ffffc90004167810 [ 1445.410622][ C0] FS: 00007faabd7ff6c0(0000) GS:ffff8880b9200000(0000) knlGS:0000000000000000 [ 1445.419657][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1445.426255][ C0] CR2: 0000000020009200 CR3: 000000005a190000 CR4: 00000000003506f0 [ 1445.434226][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1445.442222][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1445.450267][ C0] Kernel panic - not syncing: Fatal exception in interrupt [ 1445.457786][ C0] Kernel Offset: disabled [ 1445.462113][ C0] Rebooting in 86400 seconds..