last executing test programs: 6m18.660468703s ago: executing program 32 (id=93): syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@textreal={0x8, &(0x7f0000000240)="26670fae4d0065260f01cf363e0fc73f3edf94dcfbd9eb2e660fc7b59c6a0f20d86635080000000f22d80f38008100800fc7ad0900baf80c66b8fa59ef8366efbafc0cb8f3ffef", 0x47}], 0x1, 0x0, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000240), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r2, 0x0) r3 = dup(r1) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0xd000}) ioctl$KVM_NMI(r4, 0xae9a) ioctl$KVM_RUN(r4, 0xae80, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x10, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 6m18.012976302s ago: executing program 33 (id=91): syz_usb_connect$uac1(0x0, 0xb4, &(0x7f0000000940)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902a20003010070000904000000010100000a24010800000201020d2406000003080000000000000c24020601010608000010000c24020800000300000000000924060506010100000924030000000005000c240206ff010302060033050904010000010200000904010101010200000905010900004000000725010000800009040200000102000009040201010102000009058209400009210007250180028100"], 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) setsockopt(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000000700)="02000000097effff", 0x8) mlockall(0x7) migrate_pages(0x0, 0x7, &(0x7f00000005c0)=0x3, &(0x7f0000000680)=0x1) socket$alg(0x26, 0x5, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000140)={0x0, 0xfffffffe, 0x7, 0x200, 0xff, "00009200000000000000000000000058bb00"}) ioctl$TCSETAF(r0, 0x5408, &(0x7f0000000200)={0xb, 0x2, 0x2, 0xbd08, 0x1a, "20000100"}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000380), &(0x7f0000ff0000), 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f000079f000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, &(0x7f0000000040)="c4020906a2a07b000066baa000b80f000000ef0f01308f0978d7bf00000000b805000000b9090000000f01c1c744240053917cccc744240201000000c7442406000000000f011c2448b84402b36c000000000f23c00f21f835030006000f23f866b80f000f00d0c4216b5f8dbe690000c462b8f5d0", 0x75}], 0x1, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r5 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r5, 0x40045532, &(0x7f0000000100)) r6 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0), 0x88602, 0x0) ioctl$SNDCTL_DSP_GETODELAY(r6, 0x80045017, 0x0) r7 = syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x0, 0xa2c65) ioctl$SNDRV_PCM_IOCTL_READI_FRAMES(r7, 0x80184151, &(0x7f0000000000)={0x0, 0x0}) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000d00)={'batadv_slave_1\x00', 0x0}) sendmsg$ETHTOOL_MSG_FEATURES_SET(r8, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000480)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="010000000000000200000c000000528914000380080d0200010000badf0c2c7405ac6e00040004000400", @ANYRES32=r10, @ANYBLOB], 0x34}}, 0x0) ioctl$KVM_SET_VAPIC_ADDR(r3, 0x4008ae93, &(0x7f0000000640)=0x1) ioctl$KVM_RUN(r3, 0xae80, 0x0) syz_open_pts(r0, 0x2500) 5m31.048342967s ago: executing program 34 (id=167): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/kexec_crash_size', 0x40402, 0x100) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000340)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x40, @mcast2, 0x6}, {0xa, 0x0, 0xfffffffe, @local}}}, 0x48) r1 = io_uring_setup(0x4e5, &(0x7f00000001c0)={0x0, 0x2258, 0x1000, 0x3, 0x29a, 0x0, r0}) r2 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r2, &(0x7f0000000080), 0xc) read(r2, &(0x7f0000000180)=""/52, 0xfffffdef) close_range(r1, 0xffffffffffffffff, 0x0) syz_usb_connect(0x0, 0x34, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000076e9d4080d055a846b63010203010902220001000000000904e700017ca1ac000905000000000000000705a3f6d2fb5bf3f711483a"], 0x0) 5m13.286551926s ago: executing program 35 (id=185): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet6(0xa, 0x0, 0xedb) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, 0x0, 0x80) (async) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, 0x0, 0x80) rt_sigprocmask(0x0, &(0x7f0000000400)={[0xfffff7feffff7ffc]}, 0x0, 0x8) gettid() (async) r1 = gettid() prlimit64(r1, 0xb, &(0x7f0000000080), 0x0) tkill(r1, 0x12) pselect6(0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x3938700}, &(0x7f0000000240)={&(0x7f0000000200)={[0x100000001]}, 0x8}) (async) pselect6(0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x3938700}, &(0x7f0000000240)={&(0x7f0000000200)={[0x100000001]}, 0x8}) creat(&(0x7f0000000380)='./file0\x00', 0x0) (async) r2 = creat(&(0x7f0000000380)='./file0\x00', 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000440)={{{@in, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in6=@remote}}, &(0x7f0000000240)=0xe8) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) (async) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_MP_STATE(r6, 0x4004ae99, &(0x7f0000000040)=0x4) ioctl$KVM_RUN(r6, 0x8004ae98, 0x0) quotactl$Q_QUOTAON(0xffffffff80000200, &(0x7f0000000000)=@loop={'/dev/loop', 0x0}, r3, &(0x7f0000000280)='./file0\x00') lsetxattr$system_posix_acl(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)='system.posix_acl_access\x00', &(0x7f0000000080)=ANY=[@ANYBLOB="020000000100200000000000040000000000000010000000000000002000000000000000838841817784a8948a2d33dea6a9c12906c0bcc81d0e1ed5d0ef75367bae58cd7e793f8ab12058976ecefaed8d2533f9c74e9a3f2a7b07a4d3f50fa920d40ce5f07259683ea61719bf4e04774a04abff9014955b6e17f598ba1c05904e1dc5e40f42bf3bd2"], 0x24, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) openat$binfmt(0xffffffffffffff9c, 0x0, 0x41, 0x1ff) (async) openat$binfmt(0xffffffffffffff9c, 0x0, 0x41, 0x1ff) sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r8 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r8, 0x10e, 0xc, &(0x7f0000000280)={0xffffffff}, 0x10) (async) setsockopt$netlink_NETLINK_TX_RING(r8, 0x10e, 0xc, &(0x7f0000000280)={0xffffffff}, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="240000001200010a000000000000000000020000100000800c00000000007dd15bbb00006cd207d2cba76390dff78ac2"], 0x24}}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)={{0x14}, [@NFT_MSG_NEWRULE={0xb0, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_OFFSET={0x8}, @NFTA_EXTHDR_OP={0x8, 0x6, 0x1, 0x0, 0x1}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x5c, 0x4, 0x0, 0x1, [{0x58, 0x1, 0x0, 0x1, @osf={{0x8}, @val={0x4c, 0x2, 0x0, 0x1, [@NFTA_OSF_TTL={0x5, 0x2, 0x7f}, @NFTA_OSF_TTL={0x5, 0x2, 0x8}, @NFTA_OSF_FLAGS={0x8}, @NFTA_OSF_DREG={0x8, 0x1, 0x1, 0x0, 0x12}, @NFTA_OSF_DREG={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_OSF_FLAGS={0x8}, @NFTA_OSF_FLAGS={0x8}, @NFTA_OSF_FLAGS={0x8}, @NFTA_OSF_FLAGS={0x8}]}}}]}]}], {0x14}}, 0xd8}}, 0x0) (async) sendmsg$NFT_BATCH(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)={{0x14}, [@NFT_MSG_NEWRULE={0xb0, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_OFFSET={0x8}, @NFTA_EXTHDR_OP={0x8, 0x6, 0x1, 0x0, 0x1}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x5c, 0x4, 0x0, 0x1, [{0x58, 0x1, 0x0, 0x1, @osf={{0x8}, @val={0x4c, 0x2, 0x0, 0x1, [@NFTA_OSF_TTL={0x5, 0x2, 0x7f}, @NFTA_OSF_TTL={0x5, 0x2, 0x8}, @NFTA_OSF_FLAGS={0x8}, @NFTA_OSF_DREG={0x8, 0x1, 0x1, 0x0, 0x12}, @NFTA_OSF_DREG={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_OSF_FLAGS={0x8}, @NFTA_OSF_FLAGS={0x8}, @NFTA_OSF_FLAGS={0x8}, @NFTA_OSF_FLAGS={0x8}]}}}]}]}], {0x14}}, 0xd8}}, 0x0) socket$pptp(0x18, 0x1, 0x2) (async) socket$pptp(0x18, 0x1, 0x2) ioctl$sock_inet6_SIOCSIFDSTADDR(r2, 0x8918, &(0x7f0000000140)={@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}, 0x51}) ioctl$TCXONC(0xffffffffffffffff, 0x5608, 0x2) syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5543, 0x81, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0xc, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x2}}}}]}}]}}, 0x0) 3m6.179663531s ago: executing program 6 (id=343): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01080000000000000000020000000900020073797a2a0000000008000440000000000900010073797a3000000000080003400000000a14000000110001"], 0x64}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[], 0x74}}, 0x0) 3m6.039853441s ago: executing program 6 (id=346): syz_usb_connect(0x5, 0x2d, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) syz_open_dev$video4linux(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xf, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000014c8002085000000040000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) unshare(0x68040200) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x3, &(0x7f0000000000)=@framed, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="5c0000000206050000000000000000000000000005000400000000000900020073797a32000000001400078008000640000000000800084000000000050005000a0000000500010006feff000d000300686173683a6e6574"], 0x5c}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) 2m55.058104712s ago: executing program 6 (id=352): r0 = socket$igmp6(0xa, 0x3, 0x2) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_DYING(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x14, 0x6, 0x1, 0x201, 0x0, 0x0, {0x0, 0x0, 0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x40040) syz_open_procfs(0x0, &(0x7f0000000000)='net/raw6\x00') ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000000)={'sit0\x00', &(0x7f00000002c0)={'syztnl1\x00', 0x0, 0x0, 0x7800, 0x0, 0x0, {{0x7, 0x4, 0x0, 0x3, 0x1c, 0x64, 0x0, 0x0, 0x0, 0x0, @broadcast, @rand_addr=0x64010100, {[@timestamp_prespec={0x44, 0x4, 0xc0}, @noop]}}}}}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000100)={0x26, 'aead\x00', 0x0, 0x0, 'authenc(streebog256-generic,pcbc(fcrypt-generic))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, 0x0, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000240), 0x208e24b) close(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r5, 0x0) r6 = dup(r3) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x1000, &(0x7f000006a000/0x1000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x10, 0x0, 0x0) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r8 = getpid() sched_setscheduler(r8, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xcb65000) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r9, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="8000000000010104000000000000000002000000240001801400018008000100e000000108000200e00000010c000280050001000000000024000280140001800800010000000000080002007f0000010c00028005000100000000000800074000000000080003400000100e140010800800014000000000f7e7024000000000386f63b071"], 0x80}}, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r3, 0x4010ae67, &(0x7f00000001c0)={0x0, 0xd000}) ioctl$KVM_NMI(r7, 0xae9a) 2m51.082412403s ago: executing program 6 (id=363): mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file1\x00', &(0x7f00000000c0)='pstore\x00', 0x0, 0x0) mkdir(&(0x7f0000000580)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000180)='./bus\x00', &(0x7f0000000100), 0x0, &(0x7f0000000000)={[{@xino_auto}, {@lowerdir={'lowerdir', 0x3d, './file1'}, 0x3a}], [], 0x2f}) r0 = syz_usb_connect$hid(0x4, 0x36, &(0x7f0000000080)=ANY=[@ANYRESOCT=0x0], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, &(0x7f0000000040)={0x0, 0x0, 0x5, {0x5, 0x0, "a7ea31"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 2m50.518822817s ago: executing program 6 (id=365): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xe, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="250a00000a0000006311230000000000180000000000000000000000000000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) (async) socket$inet6(0xa, 0x3, 0x8000000003c) (async) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x42880, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) (async, rerun: 64) write$tun(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="001c86dd0a00100000004000000060ec97000fc83c00fe8000000000000000000000000000aaff02000000000000000000000000000111"], 0xffe) (async, rerun: 64) socket$inet_smc(0x2b, 0x1, 0x0) (async) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) 2m40.50219959s ago: executing program 6 (id=372): prctl$PR_GET_ENDIAN(0x2a, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf5ffffff}, 0x0) sendmsg$tipc(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x18, &(0x7f00000000c0), 0x31}, 0x0) close(0xffffffffffffffff) r0 = getpid() setreuid(0xee00, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='tracefs\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$nbd(0xffffffffffffffff, 0x0, 0x8a) socket$inet_udp(0x2, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x2204c3b, &(0x7f0000001040)=ANY=[@ANYBLOB='gid=', @ANYRESHEX=0x0, @ANYBLOB=',uid=', @ANYRESHEX=0xee00]) r2 = syz_pidfd_open(r0, 0x0) setns(r2, 0x24020000) syz_clone3(&(0x7f0000000000)={0x15340180, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f00000002c0)=[r0], 0x1}, 0x58) 2m25.38337904s ago: executing program 36 (id=372): prctl$PR_GET_ENDIAN(0x2a, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf5ffffff}, 0x0) sendmsg$tipc(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x18, &(0x7f00000000c0), 0x31}, 0x0) close(0xffffffffffffffff) r0 = getpid() setreuid(0xee00, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='tracefs\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$nbd(0xffffffffffffffff, 0x0, 0x8a) socket$inet_udp(0x2, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x2204c3b, &(0x7f0000001040)=ANY=[@ANYBLOB='gid=', @ANYRESHEX=0x0, @ANYBLOB=',uid=', @ANYRESHEX=0xee00]) r2 = syz_pidfd_open(r0, 0x0) setns(r2, 0x24020000) syz_clone3(&(0x7f0000000000)={0x15340180, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f00000002c0)=[r0], 0x1}, 0x58) 2m9.789383066s ago: executing program 7 (id=398): io_uring_setup(0x79bb, &(0x7f0000000400)) r0 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) bind$llc(r0, &(0x7f0000000080), 0x10) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffefffff6, 0x20031, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x80001) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000000)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000140)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x4}) r2 = userfaultfd(0x80001) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000000)) ioctl$UFFDIO_REGISTER(r2, 0x8010aa01, &(0x7f0000000140)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}}) getdents(0xffffffffffffffff, 0x0, 0x0) getdents(0xffffffffffffffff, &(0x7f0000000480)=""/202, 0xca) ioctl$VHOST_SET_FEATURES(0xffffffffffffffff, 0x4008af00, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x9) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f00000000c0)={&(0x7f0000000040)=[0x0, 0x0, 0x0], 0x3, 0x0, 0x0, 0xffffffffffffffff}) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f0000000100)={0xaa, 0x390}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) move_mount(0xffffffffffffffff, 0x0, 0xffffffffffffff9c, &(0x7f0000001080)='./file0\x00', 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0}, 0x18) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_FLUSH(r6, 0x0, 0x80) dup(0xffffffffffffffff) listen(r0, 0x0) 2m9.741556315s ago: executing program 8 (id=399): r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_CONTEXT(r0, 0x84, 0xd, 0xfffffffffffffffe, &(0x7f0000000040)=0x28) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x0, 0x13, &(0x7f0000000140)=@ringbuf={{}, {}, {}, [@jmp, @kfunc, @map_idx_val], {{}, {}, {0x85, 0x0, 0x0, 0x1}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = socket$nl_route(0x10, 0x3, 0x0) (async) setsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(0xffffffffffffffff, 0x84, 0x8, &(0x7f00000001c0)=0x8, 0x4) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="480000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002800128009000100626f6e640000000018000280140008800800030001"], 0x48}}, 0x0) sendmmsg$inet(r1, &(0x7f0000005200)=[{{0x0, 0x4b, &(0x7f0000000000), 0x1}}], 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x18, 0xe, 0x0, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000040), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) r2 = socket$pppoe(0x18, 0x1, 0x0) ioctl$EXT4_IOC_GETSTATE(r2, 0x40046629, &(0x7f0000000180)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) (async) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) (async) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) socket$netlink(0x10, 0x3, 0x0) (async) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0) (async) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) (async) r4 = socket$inet_sctp(0x2, 0x5, 0x84) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0xb3}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x5}, @exit={0x95, 0x0, 0x33}], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xb8000000, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000080)=@assoc_value, &(0x7f00000000c0)=0x8) 2m9.416935973s ago: executing program 8 (id=401): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x20, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x20, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x25dfdbff, {}, [@NHA_OIF={0x8, 0x5, r4}]}, 0x20}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000004380)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@ipv6_newroute={0xc0, 0x18, 0x4, 0x70bd28, 0x25dfdbfd, {0xa, 0x0, 0x0, 0xb, 0xfd, 0x1, 0xfd, 0x1, 0x2000}, [@RTA_EXPIRES={0x8, 0x17, 0x3ff}, @RTA_PRIORITY={0x8, 0x6, 0x5}, @RTA_UID={0x8}, @RTA_METRICS={0x82, 0x8, 0x0, 0x1, "fd0d7e55285f5a045c4918ec15359fe9f102b2728cb730ab10ef5dffae2e8d3b2912af2116ebe7df00587853857eaaa9cc7a8ede0feb87580ca11f0887353a739a6785eb75a85a2d3224b780e8022dc65f5322ce5542b51bd4759830dbf98f59f43951b8b0e858d8796b0e138febc094e309ffdc424da5df9cd580ab90bc"}, @RTA_EXPIRES={0x8, 0x17, 0x7}]}, 0xc0}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000200)=ANY=[@ANYBLOB="20000000100037040000000000000000000000008d59ef4851dd408aa04f51a6e2c8ba3b90093601681906cbf3db", @ANYRES32=r4, @ANYBLOB="9201000000000000"], 0x20}}, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socket$netlink(0x10, 0x3, 0x6) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) socket$inet(0x2, 0x4000000000000001, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) capset(&(0x7f0000000340)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x5f22}) r5 = getpid() syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1e7d, 0x2cf6, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}}}]}}]}}, 0x0) syz_pidfd_open(r5, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.stat\x00', 0x26e1, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x26e1, 0x0) bpf$ITER_CREATE(0x21, &(0x7f0000000000)={r6}, 0x8) ioctl$SIOCSIFHWADDR(r6, 0x89f0, &(0x7f0000000900)={'dvmrp0\x00', @random="1448532a0b17"}) syz_usb_connect(0x0, 0x36, &(0x7f0000000280)={{0x12, 0x1, 0x0, 0x36, 0xa8, 0xdf, 0x40, 0x1385, 0x4251, 0x2cd4, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x28, 0xf9, 0xdb, 0x0, [], [{{0x9, 0x5, 0x7}}, {{0x9, 0x5, 0x1, 0x2}}]}}]}}]}}, 0x0) 2m8.698221031s ago: executing program 7 (id=403): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, 0x0, 0x0) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) sendmmsg$inet(r1, &(0x7f0000000d00)=[{{&(0x7f00000000c0)={0x2, 0x4e24, @local}, 0x10, 0x0}}], 0x1, 0x20000080) ioctl$SNDCTL_DSP_CHANNELS(0xffffffffffffffff, 0xc0045006, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x9b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='numa_maps\x00') sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000005c0)=@deltaction={0x10c, 0x31, 0x20, 0x70bd26, 0x25dfdbff, {}, [@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x19, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0xc, 0x6, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x6}}]}, @TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x1, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x5}}]}, @TCA_ACT_TAB={0x88, 0x1, [{0xc, 0x14, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x8}}, {0xc, 0xb, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ipt\x00'}}, {0xc, 0xc, 0x0, 0x0, @TCA_ACT_KIND={0x7, 0x1, 'xt\x00'}}, {0xc, 0x15, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xc7e}}, {0xc, 0xc, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x6}}, {0xc, 0x7, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x9076}}, {0xc, 0x14, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x8001}}, {0xc, 0x14, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xffff4abe}}, {0xc, 0xd, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ipt\x00'}}, {0xc, 0xe, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}, {0xc, 0xf, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x8001}}]}, @TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x19, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xe2}}]}, @TCA_ACT_TAB={0x20, 0x1, [{0x10, 0xe, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xffffffff}}]}, @TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x5, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'sample\x00'}}]}]}, 0x10c}}, 0x41) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0735d046953f6efced000200000014000180060001000200000008000300ac1414aa"], 0x28}}, 0x0) 2m7.534227522s ago: executing program 1 (id=407): r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000080)={@private0={0xfc, 0x0, '\x00', 0x8}, 0x8000000, 0x0, 0xff, 0x1}, 0x20) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r1, &(0x7f0000000240)={0x11, 0x10, 0xfa00, {0x0}}, 0x18) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000380)={@local, 0x8800000, 0x1, 0x0, 0x8, 0x7, 0x8}, 0x20) r2 = landlock_create_ruleset(&(0x7f0000000140)={0x2a55, 0x0, 0x3}, 0x18, 0x0) landlock_restrict_self(r2, 0x0) landlock_create_ruleset(&(0x7f0000000140)={0x895}, 0x10, 0x0) (async) r3 = landlock_create_ruleset(&(0x7f0000000140)={0x895}, 0x10, 0x0) landlock_restrict_self(r3, 0x0) (async) landlock_restrict_self(r3, 0x0) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r4, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) setsockopt$bt_BT_SECURITY(r4, 0x112, 0x4, 0x0, 0x0) epoll_create(0x1ff) (async) r5 = epoll_create(0x1ff) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f0000000080)) open(&(0x7f0000000280)='.\x00', 0x0, 0x0) (async) r6 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fcntl$notify(r6, 0x402, 0x14) symlink(&(0x7f0000001640)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/../file0\x00', &(0x7f0000000e40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 2m7.345786594s ago: executing program 1 (id=409): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000003b810100850000006d000000850000005000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, 0x0, 0x0, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="e80000006c00010029bd7000fcdbdf2500000000", @ANYRES32, @ANYBLOB="001000008000000008000f0020000000a0003500726f7365300000000000000000000000a40034801400350070696d367265673000000020000000001400350076657468305f6d614176746170000000140035006d61637674617030020000000000000014003500677265300000000000000000000000001400350076657468305f746f5f626174616476001400350001657468315f6d6163767461700000001400350067726530000000000000000000000000140035006261746164765f736c6176655f31000008000f"], 0xe8}}, 0x4004800) 2m7.301843446s ago: executing program 8 (id=410): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x80000, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000003b810100850000006d000000850000005000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000004f4b000000000000000000180100002020702000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000fdffffff850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) kcmp(r2, r2, 0x5, r0, r0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, 0x0, 0x0, 0x20) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="e80000006c00010029bd7000fcdbdf2500000000", @ANYRES32, @ANYBLOB="001000008000000008000f002000000014003500726f7365300000000000000000000000a40034801400350070696d367265673000000020000000001400350076657468305f6d614176746170000000140035006d61637674617030020000000000000014003500677265300000000000000000000000001400350076657468305f746f5f626174616476001400350001657468315f6d6163767461700000001400350067726530000000000000000000000000140035006261746164765f736c6176655f31000008000f"], 0xe8}}, 0x4004800) 2m5.058162159s ago: executing program 7 (id=415): socket(0xa, 0x3, 0x3a) (async) r0 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_DEL_MIF(r0, 0x29, 0xc8, 0x0, 0xc000000) setsockopt$MRT6_DEL_MFC(r0, 0x29, 0xd3, 0x0, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f0000000140), 0x8) bind$inet6(r1, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (async) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) sendmmsg(r3, &(0x7f00000005c0)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000480)="32b4986065efbf3271543fbf3828fa85a6f9cb47bae07636511923d5c5feca864e278d22dd422786716b20d234ff7b41b21ac478a7a204c2fe27d3aeef2301dba0b614b2929b09f0eebfe1131d19d9ae072f2104690c1798ae965fafd70dd3a7eb28c0dba6d43f7a383a8d54943ccf1e78d82e6e0edf7c04be2c533160aea249431dbd0bf12ea1f207e1a1bbfa9d549eb8e63f0bf53ea228a88e57f136", 0x9d}], 0x1}}], 0x1, 0x20004000) (async) sendmmsg(r3, &(0x7f00000005c0)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000480)="32b4986065efbf3271543fbf3828fa85a6f9cb47bae07636511923d5c5feca864e278d22dd422786716b20d234ff7b41b21ac478a7a204c2fe27d3aeef2301dba0b614b2929b09f0eebfe1131d19d9ae072f2104690c1798ae965fafd70dd3a7eb28c0dba6d43f7a383a8d54943ccf1e78d82e6e0edf7c04be2c533160aea249431dbd0bf12ea1f207e1a1bbfa9d549eb8e63f0bf53ea228a88e57f136", 0x9d}], 0x1}}], 0x1, 0x20004000) writev(r3, &(0x7f0000000000)=[{&(0x7f00000000c0)="14", 0x1f68}], 0x2) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r2, 0x0, 0x30, 0xe1515f8735398fb, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000002c0)=[0x45c], 0x0, 0x0, 0x1, 0x1}}, 0x3c) r4 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000001, 0x12, r4, 0x0) (async) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000001, 0x12, r4, 0x0) sendto$inet6(r1, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 2m3.882251611s ago: executing program 7 (id=416): r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r2, &(0x7f0000000280)=[{&(0x7f0000000040)="580000001500192340834b80040d8c560a067fbc45ff81054e220000000058000b480400945f64009400050038925a01000000000000008004000000ffe809000000fff5dd0000000800030006010000418e01400004fcff", 0x58}], 0x1) (async) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r1) (async) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x0, @dev}, 0x2}}, 0x2e) (async) socket$pppl2tp(0x18, 0x1, 0x1) socket$igmp(0x2, 0x3, 0x2) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f00000000c0)={'batadv_slave_0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8936, &(0x7f0000000000)={@dev, 0x78, r4}) r5 = socket(0xa, 0x1, 0x0) ioctl(r5, 0x8916, &(0x7f0000000000)) sendmsg$NL80211_CMD_SET_PMK(r2, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x90, r3, 0x10, 0x70bd25, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x3, 0x67}}}}, [@NL80211_ATTR_PMKR0_NAME={0x14, 0x102, "45b3f7a96cd294b50d46b067d172e23a"}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_PMKR0_NAME={0x14, 0x102, "117eb00daacd1ce123761b04d166bf87"}, @NL80211_ATTR_PMK={0x14, 0xfe, "7e5e28b29ffdf8f61f4412a127009681"}, @NL80211_ATTR_PMK={0x14, 0xfe, "7b8134c59209281768543e34d0a75bdd"}, @NL80211_ATTR_PMK={0x14, 0xfe, "fd91dfd2ed39f07c0e6bcb387c344ac6"}]}, 0x90}, 0x1, 0x0, 0x0, 0x4000000}, 0x40) (async) open$dir(&(0x7f00000002c0)='./file0\x00', 0x6201, 0x12) (async, rerun: 32) sendmsg$IPVS_CMD_NEW_SERVICE(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYRESDEC=r1, @ANYRESHEX=r1, @ANYRES64=r0], 0x4c}}, 0x892) (rerun: 32) 1m53.74083978s ago: executing program 1 (id=419): syz_usb_connect(0x5, 0x2d, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) syz_open_dev$video4linux(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xf, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000014c80020850000000400"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) unshare(0x68040200) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x3, &(0x7f0000000000)=@framed, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="5c0000000206050000000000000000000000000005000400000000000900020073797a32000000001400078008000640000000000800084000000000050005000a0000000500010006feff000d000300686173683a6e6574"], 0x5c}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) 1m53.731618503s ago: executing program 8 (id=420): syz_usb_connect(0x5, 0x2d, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) syz_open_dev$video4linux(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xf, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000014c80020850000000400"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) unshare(0x68040200) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x3, &(0x7f0000000000)=@framed, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="5c0000000206050000000000000000000000000005000400000000000900020073797a32000000001400078008000640000000000800084000000000050005000a0000000500010006feff000d000300686173683a6e6574"], 0x5c}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) 1m53.501893625s ago: executing program 7 (id=422): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x48) r2 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000080), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r2, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4) r3 = socket$kcm(0x10, 0x2, 0x0) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000600)={0x0, 0xfffffffe, &(0x7f0000000300)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73772cc9f1ba1f848430000005e140602000000000e000a0010000000028000001294", 0x2e}], 0x1}, 0x0) sendmsg$kcm(r3, &(0x7f0000000600)={0x0, 0x3, &(0x7f0000000040)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73772cc9f1ba1f848430000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x2, &(0x7f00000000c0)=0x7a, 0x4) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(r1, &(0x7f0000000cc0)=[{{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000000400)="029993440c7a0c95d3bb8cf353fd63c588ffa39f0ff0fced20927ea4b2a247d082247558bef6b2b2cd6a0dffece1b36526e9388c344fb7ac429e434ccb0330483c0604aaf296d8218e", 0x49}, {&(0x7f0000000e00)="ec75d081fcb7e79634ec1a1abfdebb6a38b0c57cc77b83d2eea81aad8f73b36abc2019cb08fcaaec9647a07d0a0965f0f1e39afd84e7e2523aaded5e09aa1e36fcc90c269ad6d38d57619127cee4253655c33b71054226c3b00b9ee6ae29f0b07bc6fe7981126ca804c1f64e6c19ba36b2778c5f4a1c58625fe19516af43c9870c5b8191e23778abe7df2280d459b1651686a53ca52dce9570444c153f9c2903ae4c868074e89477bf6ed2ab648b0498ac8c0f90844ed9a26675199d5ff9b391c1dec077b5099cf9aecd1a9d94e235a7", 0xd0}, {&(0x7f0000000f00)="397d5f2edc82d0337ae5ab9ee47dc3e798cf69cfebf169e77257f308227094d569a4326954e50ea185bc6fff0507c5dfd26676de9ddac4fe6db927cd4d03965f42d9c7513eff1631baa83e3daf514c600450374f6d76b8fcf2bc3eca29ce7538f85aa34b2bdcc17ecd080f0850377f771a4e8693703da4e347e0165f00872a21845e17030de0ff47bc869de32ee24ca05e6f805ec0a1d0257e0e6f90", 0x9c}, {&(0x7f0000000480)="4068745fc217775e9fca3477d3c929c1231d710ed7bb68bf2f127cb83703392703f53051ec7ebd4d519a9db1973eaeda928822aaa8d3a9677374a52305e2ad47d5802e40bd678517886e0c9ec4", 0x4d}], 0x4}}, {{0x0, 0x0, &(0x7f00000001c0)}}, {{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000300)="b5d3838236773268a73daecfa0fdc5beb5a7ac332a11523627b41db31da6be0055bf716aa2b23b97d43cc40c632f6b9850f364ba0831ed0d6f7157f204275aa850d992d81ba6ab984bd809254e847b644cf6459a8139c3ebba62168141343c853896523ffb04131b2786acc44a57f5b1bd33cdaef8dd3c0526b7454eefe5153c5778ce05c77e962fd6bf3a4b9eb05654e64f1867398e202b4920e9ebc08f6e6dc652a12e45445030e069f44b", 0xac}, {&(0x7f0000000b80)="8d75938ba9bc695806fede7eee392592a6014e55025d4c6612fbb793e3ed0100", 0x20}], 0x2}}], 0x3, 0xc0) pipe(0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$pptp(0x18, 0x1, 0x2) socket$pppl2tp(0x18, 0x1, 0x1) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2800001, 0xc3072, 0xffffffffffffffff, 0x0) ioperm(0x9, 0x400, 0x7fc) keyctl$chown(0x11, 0x0, 0x0, 0x0) 1m51.630303062s ago: executing program 0 (id=423): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) (async) timer_create(0x2, &(0x7f0000000000)={0x0, 0x0, 0x1}, &(0x7f0000000040)=0x0) timer_settime(0x0, 0x236bd4336e4642df, &(0x7f0000000300)={{0x0, 0x1}, {0x0, 0xe4c}}, 0x0) timer_gettime(r0, &(0x7f0000000140)) (async) r1 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r1, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) bind$tipc(r1, &(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x3, {0x43, 0x0, 0x1}}, 0x10) (async) bind$tipc(r1, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x169a82, 0x0) write$cgroup_subtree(r2, &(0x7f0000000000)={[{0x0, 'cpuset'}]}, 0x8) (async) socket$inet6_sctp(0xa, 0x1, 0x84) syz_open_procfs(0x0, &(0x7f0000000040)='ns\x00') prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x8, 0x6, &(0x7f0000000000)=@framed={{0xffffffb4, 0x8, 0x0, 0x0, 0x0, 0x73, 0x11, 0x3c}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0xb7}, @exit={0x95, 0x0, 0xc2}], {0x95, 0x0, 0x1200}}, 0x0, 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) (async) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) r6 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r6, &(0x7f0000001c80)=[{&(0x7f0000001bc0)=""/156, 0x9c}], 0x1, &(0x7f0000001d80)=[{&(0x7f0000001cc0)=""/116, 0x20001c34}], 0x1, 0x0) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) (async) openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) 1m51.579564971s ago: executing program 0 (id=424): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x9b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = syz_open_dev$sndctrl(&(0x7f0000000080), 0x0, 0x0) sendmsg$NL80211_CMD_SET_STATION(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)=ANY=[@ANYBLOB="8c6253e9ee8854a6f4216a6167a7c3780758103baae8c26d995d93846b593ff941153a631ccde6c6dd7b62802dd7af0e5eaed21d6397e1b04012349ad20b813384c6a56c95e7142a9f7477f862a7166a589a2ea529942de63fef08cc46a56ae26983a0b83404352b69fe0388d374c900ee93c4ded55afe965b58e9b28a2db27a19471c227b795634936fc8cb5a8ac95fb34aed18f57bc44326f3d034f910fa60cb2c30fda06dd3", @ANYRES16, @ANYBLOB="010000000000000000001200000008000300", @ANYRES32, @ANYBLOB="0a00060008021100000100000500e400010000000400ac000500c20081"], 0x3c}, 0x1, 0x0, 0x0, 0x4040}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)) ioctl$IOMMU_TEST_OP_ADD_RESERVED(0xffffffffffffffff, 0x3ba0, &(0x7f0000000240)={0x48}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(0xffffffffffffffff, 0x3ba0, &(0x7f0000000040)={0x48}) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r1, 0xc0045516, 0x0) r2 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f0000000040)={0x84, @multicast2, 0x4e20, 0x3, 'wrr\x00', 0x3, 0x4, 0x200072}, 0x2c) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r3, 0x0, 0x487, &(0x7f0000000000)={{0x84, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e21, 0x3, 'lblcr\x00', 0x31, 0x81, 0x5}, {@rand_addr=0x64010102, 0x4e23, 0x12d5f, 0xcb, 0x12d5f, 0x12d5c}}, 0x44) setsockopt$IP_VS_SO_SET_FLUSH(r2, 0x0, 0x485, 0x0, 0x0) 1m50.681790263s ago: executing program 1 (id=425): socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) prctl$PR_GET_ENDIAN(0x2a, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f00000000c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWRULE={0x78, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_MATCH_NAME={0x8, 0x1, 'udp\x00'}, @NFTA_MATCH_INFO={0xe, 0x3, "7acc6338a90000b03bd9"}, @NFTA_MATCH_REV={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_COMPAT={0x14, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_IPV4={0x6, 0x1, 0x1, 0x0, 0x88}, @NFTA_RULE_COMPAT_FLAGS={0x8}]}]}], {0x14}}, 0xa0}}, 0x0) recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x60ae0}], 0x1, 0x0, 0xd66, 0xf5ffffff}, 0x0) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0x18, &(0x7f00000000c0), 0x31}, 0x0) close(r0) r2 = getpid() setreuid(0xee00, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='tracefs\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) write$nbd(0xffffffffffffffff, 0x0, 0x8a) socket$inet_udp(0x2, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r4 = syz_pidfd_open(r2, 0x0) setns(r4, 0x24020000) syz_clone3(&(0x7f0000000000)={0x15340180, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f00000002c0)=[r2], 0x1}, 0x58) 1m50.620696362s ago: executing program 0 (id=426): capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffffffff}) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x802) r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', 0x0, 0x0) r2 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="7a0a00ff0000001036000000000095000000000000000000"], &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r3 = socket$inet6(0xa, 0x3, 0x3a) setsockopt$inet6_mreq(r3, 0x29, 0x14, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000940)=ANY=[@ANYBLOB="1e00000007000000ff0f00000300000092000000", @ANYRES32, @ANYBLOB="c0ffffff000000000000000000000000e0ffffff", @ANYRES32=0x0, @ANYRES32=r1, @ANYBLOB="04000000030000000b00"/28], 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000c00)=@base={0x1e, 0x0, 0x4, 0xff, 0x28000, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @value=r1, @void, @void, @value}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="1805000000000092fd8af9ae5b7100000000000000000095"], &(0x7f0000000100)='GPL\x00', 0x6dbd, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x100000000000000, &(0x7f00000004c0)=ANY=[@ANYBLOB="0a00000016000000b30000007f00000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000000000000000da898f127d235a"], 0x48) ioctl$VIDIOC_S_SELECTION(r1, 0xc040565f, &(0x7f0000000200)={0x8, 0x3, 0x1, {0x1, 0x6, 0x2, 0x4}}) syz_open_dev$audion(&(0x7f0000000240), 0x4, 0x2b8003) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c01803001d000b63d25a80648c2594f90124fc60100c030002000000053582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1, 0x0, 0x0, 0x4000}, 0x3500000000000000) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000740)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0}) ioctl$BTRFS_IOC_WAIT_SYNC(r4, 0x40089416, &(0x7f0000000240)=r5) ioctl$BTRFS_IOC_WAIT_SYNC(0xffffffffffffffff, 0x40089416, &(0x7f0000000080)=r5) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000340)={"b9b862c5bfaeeb26deb1910a0300", 0x0, 0x0, {0x8, 0x6}, {0x7f, 0x4}, 0x1, [0x7fffffff, 0x5, 0xfffffffffffffff8, 0x4, 0x100, 0x1, 0x9, 0xd487, 0x7095, 0x40, 0x6, 0x1000, 0x5ae, 0xd9, 0xffffffffffffffff, 0x8]}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f00000009c0)=ANY=[@ANYBLOB="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"], 0x0, 0x47, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) r6 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000700), 0x452100, 0x0) ioctl$SOUND_MIXER_WRITE_VOLUME(r6, 0xc0040d07, &(0x7f0000000040)=0x1b) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000c80)={0x12, 0x4, &(0x7f0000000d40)=ANY=[@ANYRESHEX=r4], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000e40)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES64=r0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYRES16=r2], 0x48) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r7, &(0x7f0000000e80)="354f5078e5a2fd77bfdde940b3711f0cfe4121ce1a906697d0ffe5406d6c4b4ae072eed15915427a0b21ae2a668ca07b37e154683a54d831dda850f19c2d9c91572e5300898ff7546bad85c216eecba890ba15edd017d3121d94c0f5ce7659a41ed2c9b3d5886e9bb5086b2f8f3345675333362bd7b19164a117a0445c2b54997b4c1580e85b1891a9d1d2a246b5d17c557d024539975b5e5a056486e087ca18f3f107e482ac7f43757e24064b11514c305e1136193ff15b59079fb0f0ab152b3c848582795a", &(0x7f0000000540)=""/64}, 0x20) r8 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r8, &(0x7f0000000040)=[{&(0x7f0000000280)="580000001400192340834b80040d8c560a0677bc45ff810500000000000058000b480400945f64009400050028925a01000000000000008000f0fffeffe809000000fff5dd0000001000014001080800418e00000004fcff", 0x58}], 0x1) 1m50.56613703s ago: executing program 8 (id=427): socket$inet_udp(0x2, 0x2, 0x0) socket$kcm(0x10, 0x2, 0x0) pipe(&(0x7f00000000c0)) socket$packet(0x11, 0x3, 0x300) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000100)={'batadv_slave_1\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{0x0}], 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="9000000010000305000000000000000000000700", @ANYRES32=0x0, @ANYBLOB="996e06004d4c0700540012800800010068737200480002800500030008000000050003000500000005000300fd00000008000200", @ANYRES32=r2, @ANYBLOB="08000100", @ANYRES32=r3], 0x90}}, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_TID_CONFIG(r5, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000004fc0)={0x2c, r4, 0x10ada85e65c25349, 0x0, 0x0, {{0x67}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_TID_CONFIG={0x4, 0x142}]}, 0x2c}}, 0x0) sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0x0) 1m49.805753273s ago: executing program 0 (id=428): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="e80000006c00010029", @ANYRES32, @ANYBLOB="001000008000000008000f002000"], 0xe8}}, 0x4004800) 1m49.803216963s ago: executing program 7 (id=429): r0 = syz_usb_connect(0x2, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100007e3dc410cd0621013ddd0102030109021b000100094000090485000189fe1f000905820220"], 0x0) syz_usb_control_io$cdc_ecm(r0, &(0x7f0000000300)={0x14, 0x0, &(0x7f00000002c0)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x10, &(0x7f0000000080)=ANY=[@ANYBLOB="0900004e5530f067597d88712b000000c7c302c7d0d3cea8ce3b1a87f0fcc900b1fd00f402d7bbd3c5696ba4f8d37e22ad387e73501904101ca6fa5944f4755576078e58c8ae4e782a4e873c70eb7a3394af7cdd8a00000dbe00007dbdefdc7d47a881b6b9ad0293b70b140e79a6794c5d181b41cff7d5229c9f4ce16b09970feb4c3cc98665b89ebb694ed3342fd43da5d3"]) 1m49.734827094s ago: executing program 1 (id=430): r0 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000300)={0x43, 0x3, 0x3, 0x3}, 0x10) r1 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) close(r1) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="1801000001ffffeb00000000eb658e0d850000007b00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r3) r5 = dup3(r2, r2, 0x0) sendmsg$NL80211_CMD_SET_POWER_SAVE(r5, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000080)={&(0x7f0000000300)={0x60, r4, 0x0, 0x70bd28, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x417, 0x3f}}}}, [@NL80211_ATTR_PS_STATE={0x8}, @NL80211_ATTR_PS_STATE={0x8}, @NL80211_ATTR_PS_STATE={0x8}, @NL80211_ATTR_PS_STATE={0x8}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}]}, 0x60}, 0x1, 0x0, 0x0, 0x4001011}, 0x800) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000380)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000400)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000003c0)={&(0x7f00000004c0)={0x164, r4, 0x8, 0x70bd26, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_DONT_WAIT_FOR_ACK={0x4}, @NL80211_ATTR_FRAME={0x13e, 0x33, @reassoc_resp={{{0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1}, {0x9}, @broadcast, @device_b, @random="89af24a57a41", {0x8, 0x8}}, 0x0, 0x37, @random=0x7, @val={0x1, 0x3, [{0x1}, {0xc, 0x1}, {0x1b, 0x1}]}, @void, [{0xdd, 0x2b, "30c207189f86efa6bfeb094ec4c72d50045f57101c0ebf67801e77c801a8a6796ad8bedc851d55485283cc"}, {0xdd, 0x12, "0c6634deab35d21ff3cea42d6c63f0455bf6"}, {0xdd, 0x59, "ca772cfc70f7a72c81ee85753f4ef547a08b770340081bc25fe62f6879c79ad2088640c0d6c7039c09226d80d4ef9fbbc0a905e730cf0d1d537747897db19f4671c3272f2beff34872c4a3f4e43c9c3f83e179aebacdb5c1a4"}, {0xdd, 0x79, "b59a302a17e5e194158ca8751729745edac37d523f740613063c243f6393eacf1395ebf738c845585fadf2ae4afc13ae57ad42dbf3b96c45394182463b94a08b1d9894f21e3ab0cf7380a647d4785803a4d46e31c3c80f6d9ca735ad1b127e7d38939dbf42b0947625af865fd3144f332df4c3af41ed8b1001"}]}}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}]}, 0x164}, 0x1, 0x0, 0x0, 0x400c8c0}, 0x20000804) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x1c, r4, 0x9c3fa077fa966179, 0x0, 0x0, {{0x7e}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) 1m49.634325083s ago: executing program 0 (id=432): io_uring_setup(0x79ba, &(0x7f0000000400)) r0 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) bind$llc(r0, &(0x7f0000000080), 0x10) getdents(0xffffffffffffffff, 0x0, 0x0) getdents(0xffffffffffffffff, &(0x7f0000001fc0)=""/184, 0xb8) ioctl$VHOST_SET_FEATURES(0xffffffffffffffff, 0x4008af00, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x9) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r1 = socket$packet(0x11, 0x3, 0x300) r2 = dup(r1) r3 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$int_in(r3, 0x40000000af01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000200)={0x1, 0x0, 0x0, &(0x7f0000000140)=""/41, 0x0}) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r3, 0x4008af03, &(0x7f0000000080)) r5 = dup(r4) ioctl$VHOST_NET_SET_BACKEND(r3, 0x4008af30, &(0x7f0000000000)={0x1, r5}) ioctl$VHOST_SET_FEATURES(r3, 0x4008af00, &(0x7f00000001c0)=0x304008000) ioctl$VHOST_NET_SET_BACKEND(r3, 0x4008af30, &(0x7f00000003c0)={0x1, r2}) r6 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x24, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5, 0xffff}}}, 0x15}}, 0x0) r7 = io_uring_setup(0x789e, &(0x7f0000000080)={0x0, 0x0, 0x1000, 0xfffffffe, 0x4000125}) io_uring_register$IORING_REGISTER_BUFFERS(r7, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r7, 0x10, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000300)=""/225, 0xe1}, {0x0, 0xfffffffffffffecf}], 0x0, 0x11a}, 0x20) r8 = syz_open_dev$I2C(&(0x7f0000000040), 0x0, 0x80) ioctl$I2C_PEC(r8, 0x708, 0x2) 1m49.19041313s ago: executing program 0 (id=434): r0 = syz_usb_connect$cdc_ncm(0x0, 0x76, &(0x7f0000000180)={{0x12, 0x1, 0x310, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x64, 0x2, 0x1, 0x50, 0x80, 0x3, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x9, 0x24, 0x6, 0x0, 0x1, "6fe7bb03"}, {0x5, 0x24, 0x0, 0x6}, {0xd, 0x24, 0xf, 0x1, 0xffffffec, 0x7, 0x2, 0xf3}, {0x6, 0x24, 0x1a, 0xc69b}, [@acm={0x4}]}, {{0x9, 0x5, 0x81, 0x3, 0x8, 0x7, 0x1, 0xee}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x3ff, 0x4c, 0x5, 0x18}}, {{0x9, 0x5, 0x3, 0x2, 0x20, 0x1, 0x40, 0x42}}}}}}}]}}, &(0x7f0000000380)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x201, 0x6b, 0x1, 0x7, 0xff, 0x7}, 0x31, &(0x7f0000000100)={0x5, 0xf, 0x31, 0x4, [@ext_cap={0x7, 0x10, 0x2, 0x2, 0x9, 0x2, 0xfd}, @ss_container_id={0x14, 0x10, 0x4, 0x0, "30a90c0a58089caff9b50c8333105478"}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x2, 0x11, 0x4, 0xffff}, @ext_cap={0x7, 0x10, 0x2, 0xb9399056cba0949d, 0x0, 0xc, 0x1}]}, 0x3, [{0x40, &(0x7f0000000200)=@string={0x40, 0x3, "d66aeb8699b8316c2bb4d11b7b086e353816326159273340022b466887029d0f852fb4f1d9f999d305af50259628646f4dd211af833bd861320cefa932db"}}, {0xaf, &(0x7f00000002c0)=@string={0xaf, 0x3, "2eb876459afc9e64c9218e758a2cb7c4e7b338b679bcbb33f8e7e82304d83f1ce3a11020a0ff0730a877e90c3280271839d8b0e15c047f48eac98157ce8a1b5d9f0347a65e6c709b05a4c2b8fb7abe275f36732d5dd35b3b12a0146e96fd1b548a127b2e1f02c66e2a0e076826fc29cd2acf4b15bd31ebc17d9705d5404cedb765855c36a252d7c9bf234c1aef96b4757e3b0feaa4ecc71cc612b09980563232e9a97bf5309c5e9cb1b72bb2a7"}}, {0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0xc01}}]}) syz_usb_control_io$cdc_ncm(r0, &(0x7f00000004c0)={0x14, &(0x7f00000003c0)={0x0, 0xe, 0x9f, {0x9f, 0x7, "06bd29e94c1dff75d40f17842bc0fc973d896e623549fa265596695a5d2b2b1b70da03989a14e95e986a92c491e66c851ef4cc71b266d16989b27c190d5066899913b99b97ec9949e08f54ce9b16737a6719835c5a90911ddeae2f9d17ecdb6a12ad491b9d8c425b93788cdd31ae4882ef529d46c74b165c4aa7c9c0cd4687c31a7d27c07ba473f2e51ff204f0a08eb8fa9643b20d6b76e4c1a6e6e910"}}, &(0x7f0000000480)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f00000007c0)={0x44, &(0x7f0000000500)={0x8fa88c3719138f8f, 0x12, 0xf4, "09e4a979e4e2ba4b5cd9b9290008af55684957c8153ba03db2854d66417a281e4e7c2e3a642b0cf3a6adffeac5480c55d75fa94375b81ad83787e423526db3787e8faeef8f127e0d4cffd42c46b95d057f2f88566096c37b5c44805fa1367e1b9972f33eddfc87acc75a935828577e70bf113a38442fa89102c3020c7d5ecdcb4cac39e7090117fc03b046fbfdf3b76ee4f9cb860fce79ce95235eae9615b7e245a480de7495c31fda33894f91aa99b6fa405534cea4e692cd5578d699005316c461ff71140eab15d89083248fdf6a19a841cf0aa7e255f401ee6c5e737acc9879da6f51825f244c8a166aae80f2a0964b21bc67"}, &(0x7f0000000600)={0x0, 0xa, 0x1, 0x50}, &(0x7f0000000640)={0x0, 0x8, 0x1, 0xfb}, &(0x7f0000000680)={0x20, 0x80, 0x1c, {0xa, 0x1ef, 0x5, 0x5, 0x8, 0x89, 0xc, 0x1, 0x6, 0x5, 0x7ff}}, &(0x7f00000006c0)={0x20, 0x85, 0x4, 0x5bf9}, &(0x7f0000000700)={0x20, 0x83, 0x2, 0x1}, &(0x7f0000000740)={0x20, 0x87, 0x2, 0x4}, &(0x7f0000000780)={0x20, 0x89, 0x2}}) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000280)) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0200ff000000000001000058000b4824ca945f64009400ff0325010ebc000000000000008004f0fffeffe809005300fff5dd000000100001000d0c10000000000000000000", 0x58}], 0x1) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r2, 0x40047438, 0x20001400) r3 = fcntl$getown(r2, 0x9) capset(&(0x7f0000000840)={0x20071026, r3}, &(0x7f0000000880)={0x1, 0x7, 0x0, 0x4, 0x40, 0x3c69}) 1m48.644392378s ago: executing program 1 (id=435): r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0xb3, 0x7f, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f0000000080)=@framed={{0x18, 0x3}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r0}, @generic={0x66}, @initr0, @exit, @alu={0x4, 0x0, 0x0, 0x3}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r1, 0xc0a85320, &(0x7f00000001c0)={{0x6, 0xff}, 'port1\x00', 0x6a, 0x6102a, 0xfffffff8, 0x9, 0x800, 0x101, 0x3fff8, 0x0, 0x2, 0x9}) syz_usb_connect(0x0, 0x2d, &(0x7f0000000640)=ANY=[@ANYBLOB="120100005dbafc40fd0b0c01162d0102030109021b000100000000090400000121efb00009058302"], 0x0) 1m48.49484984s ago: executing program 8 (id=436): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x9b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = syz_open_dev$sndctrl(&(0x7f0000000080), 0x0, 0x0) sendmsg$NL80211_CMD_SET_STATION(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)=ANY=[@ANYBLOB="8c6253e9ee8854a6f4216a6167a7c3780758103baae8c26d995d93846b593ff941153a631ccde6c6dd7b62802dd7af0e5eaed21d6397e1b04012349ad20b813384c6a56c95e7142a9f7477f862a7166a589a2ea529942de63fef08cc46a56ae26983a0b83404352b69fe0388d374c900ee93c4ded55afe965b58e9b28a2db27a19471c227b795634936fc8cb5a8ac95fb34aed18f57bc44326f3d034f910fa60cb2c30fda06dd3", @ANYRES16, @ANYBLOB="010000000000000000001200000008000300", @ANYBLOB="0a00060008021100000100000500e400010000000400ac000500c2008100"], 0x3c}, 0x1, 0x0, 0x0, 0x4040}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)) ioctl$IOMMU_TEST_OP_ADD_RESERVED(0xffffffffffffffff, 0x3ba0, &(0x7f0000000240)={0x48}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(0xffffffffffffffff, 0x3ba0, &(0x7f0000000040)={0x48}) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r1, 0xc0045516, 0x0) r2 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f0000000040)={0x84, @multicast2, 0x4e20, 0x3, 'wrr\x00', 0x3, 0x4, 0x200072}, 0x2c) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r3, 0x0, 0x487, &(0x7f0000000000)={{0x84, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e21, 0x3, 'lblcr\x00', 0x31, 0x81, 0x5}, {@rand_addr=0x64010102, 0x4e23, 0x12d5f, 0xcb, 0x12d5f, 0x12d5c}}, 0x44) setsockopt$IP_VS_SO_SET_FLUSH(r2, 0x0, 0x485, 0x0, 0x0) 1m33.549089279s ago: executing program 37 (id=434): r0 = syz_usb_connect$cdc_ncm(0x0, 0x76, &(0x7f0000000180)={{0x12, 0x1, 0x310, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x64, 0x2, 0x1, 0x50, 0x80, 0x3, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x9, 0x24, 0x6, 0x0, 0x1, "6fe7bb03"}, {0x5, 0x24, 0x0, 0x6}, {0xd, 0x24, 0xf, 0x1, 0xffffffec, 0x7, 0x2, 0xf3}, {0x6, 0x24, 0x1a, 0xc69b}, [@acm={0x4}]}, {{0x9, 0x5, 0x81, 0x3, 0x8, 0x7, 0x1, 0xee}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x3ff, 0x4c, 0x5, 0x18}}, {{0x9, 0x5, 0x3, 0x2, 0x20, 0x1, 0x40, 0x42}}}}}}}]}}, &(0x7f0000000380)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x201, 0x6b, 0x1, 0x7, 0xff, 0x7}, 0x31, &(0x7f0000000100)={0x5, 0xf, 0x31, 0x4, [@ext_cap={0x7, 0x10, 0x2, 0x2, 0x9, 0x2, 0xfd}, @ss_container_id={0x14, 0x10, 0x4, 0x0, "30a90c0a58089caff9b50c8333105478"}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x2, 0x11, 0x4, 0xffff}, @ext_cap={0x7, 0x10, 0x2, 0xb9399056cba0949d, 0x0, 0xc, 0x1}]}, 0x3, [{0x40, &(0x7f0000000200)=@string={0x40, 0x3, "d66aeb8699b8316c2bb4d11b7b086e353816326159273340022b466887029d0f852fb4f1d9f999d305af50259628646f4dd211af833bd861320cefa932db"}}, {0xaf, &(0x7f00000002c0)=@string={0xaf, 0x3, "2eb876459afc9e64c9218e758a2cb7c4e7b338b679bcbb33f8e7e82304d83f1ce3a11020a0ff0730a877e90c3280271839d8b0e15c047f48eac98157ce8a1b5d9f0347a65e6c709b05a4c2b8fb7abe275f36732d5dd35b3b12a0146e96fd1b548a127b2e1f02c66e2a0e076826fc29cd2acf4b15bd31ebc17d9705d5404cedb765855c36a252d7c9bf234c1aef96b4757e3b0feaa4ecc71cc612b09980563232e9a97bf5309c5e9cb1b72bb2a7"}}, {0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0xc01}}]}) syz_usb_control_io$cdc_ncm(r0, &(0x7f00000004c0)={0x14, &(0x7f00000003c0)={0x0, 0xe, 0x9f, {0x9f, 0x7, "06bd29e94c1dff75d40f17842bc0fc973d896e623549fa265596695a5d2b2b1b70da03989a14e95e986a92c491e66c851ef4cc71b266d16989b27c190d5066899913b99b97ec9949e08f54ce9b16737a6719835c5a90911ddeae2f9d17ecdb6a12ad491b9d8c425b93788cdd31ae4882ef529d46c74b165c4aa7c9c0cd4687c31a7d27c07ba473f2e51ff204f0a08eb8fa9643b20d6b76e4c1a6e6e910"}}, &(0x7f0000000480)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f00000007c0)={0x44, &(0x7f0000000500)={0x8fa88c3719138f8f, 0x12, 0xf4, "09e4a979e4e2ba4b5cd9b9290008af55684957c8153ba03db2854d66417a281e4e7c2e3a642b0cf3a6adffeac5480c55d75fa94375b81ad83787e423526db3787e8faeef8f127e0d4cffd42c46b95d057f2f88566096c37b5c44805fa1367e1b9972f33eddfc87acc75a935828577e70bf113a38442fa89102c3020c7d5ecdcb4cac39e7090117fc03b046fbfdf3b76ee4f9cb860fce79ce95235eae9615b7e245a480de7495c31fda33894f91aa99b6fa405534cea4e692cd5578d699005316c461ff71140eab15d89083248fdf6a19a841cf0aa7e255f401ee6c5e737acc9879da6f51825f244c8a166aae80f2a0964b21bc67"}, &(0x7f0000000600)={0x0, 0xa, 0x1, 0x50}, &(0x7f0000000640)={0x0, 0x8, 0x1, 0xfb}, &(0x7f0000000680)={0x20, 0x80, 0x1c, {0xa, 0x1ef, 0x5, 0x5, 0x8, 0x89, 0xc, 0x1, 0x6, 0x5, 0x7ff}}, &(0x7f00000006c0)={0x20, 0x85, 0x4, 0x5bf9}, &(0x7f0000000700)={0x20, 0x83, 0x2, 0x1}, &(0x7f0000000740)={0x20, 0x87, 0x2, 0x4}, &(0x7f0000000780)={0x20, 0x89, 0x2}}) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000280)) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0200ff000000000001000058000b4824ca945f64009400ff0325010ebc000000000000008004f0fffeffe809005300fff5dd000000100001000d0c10000000000000000000", 0x58}], 0x1) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r2, 0x40047438, 0x20001400) r3 = fcntl$getown(r2, 0x9) capset(&(0x7f0000000840)={0x20071026, r3}, &(0x7f0000000880)={0x1, 0x7, 0x0, 0x4, 0x40, 0x3c69}) 1m33.448403899s ago: executing program 38 (id=435): r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0xb3, 0x7f, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f0000000080)=@framed={{0x18, 0x3}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r0}, @generic={0x66}, @initr0, @exit, @alu={0x4, 0x0, 0x0, 0x3}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r1, 0xc0a85320, &(0x7f00000001c0)={{0x6, 0xff}, 'port1\x00', 0x6a, 0x6102a, 0xfffffff8, 0x9, 0x800, 0x101, 0x3fff8, 0x0, 0x2, 0x9}) syz_usb_connect(0x0, 0x2d, &(0x7f0000000640)=ANY=[@ANYBLOB="120100005dbafc40fd0b0c01162d0102030109021b000100000000090400000121efb00009058302"], 0x0) 1m33.387987129s ago: executing program 39 (id=429): r0 = syz_usb_connect(0x2, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100007e3dc410cd0621013ddd0102030109021b000100094000090485000189fe1f000905820220"], 0x0) syz_usb_control_io$cdc_ecm(r0, &(0x7f0000000300)={0x14, 0x0, &(0x7f00000002c0)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x10, &(0x7f0000000080)=ANY=[@ANYBLOB="0900004e5530f067597d88712b000000c7c302c7d0d3cea8ce3b1a87f0fcc900b1fd00f402d7bbd3c5696ba4f8d37e22ad387e73501904101ca6fa5944f4755576078e58c8ae4e782a4e873c70eb7a3394af7cdd8a00000dbe00007dbdefdc7d47a881b6b9ad0293b70b140e79a6794c5d181b41cff7d5229c9f4ce16b09970feb4c3cc98665b89ebb694ed3342fd43da5d3"]) 1m33.296174092s ago: executing program 40 (id=436): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x9b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = syz_open_dev$sndctrl(&(0x7f0000000080), 0x0, 0x0) sendmsg$NL80211_CMD_SET_STATION(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)=ANY=[@ANYBLOB="8c6253e9ee8854a6f4216a6167a7c3780758103baae8c26d995d93846b593ff941153a631ccde6c6dd7b62802dd7af0e5eaed21d6397e1b04012349ad20b813384c6a56c95e7142a9f7477f862a7166a589a2ea529942de63fef08cc46a56ae26983a0b83404352b69fe0388d374c900ee93c4ded55afe965b58e9b28a2db27a19471c227b795634936fc8cb5a8ac95fb34aed18f57bc44326f3d034f910fa60cb2c30fda06dd3", @ANYRES16, @ANYBLOB="010000000000000000001200000008000300", @ANYBLOB="0a00060008021100000100000500e400010000000400ac000500c2008100"], 0x3c}, 0x1, 0x0, 0x0, 0x4040}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)) ioctl$IOMMU_TEST_OP_ADD_RESERVED(0xffffffffffffffff, 0x3ba0, &(0x7f0000000240)={0x48}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(0xffffffffffffffff, 0x3ba0, &(0x7f0000000040)={0x48}) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r1, 0xc0045516, 0x0) r2 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f0000000040)={0x84, @multicast2, 0x4e20, 0x3, 'wrr\x00', 0x3, 0x4, 0x200072}, 0x2c) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r3, 0x0, 0x487, &(0x7f0000000000)={{0x84, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e21, 0x3, 'lblcr\x00', 0x31, 0x81, 0x5}, {@rand_addr=0x64010102, 0x4e23, 0x12d5f, 0xcb, 0x12d5f, 0x12d5c}}, 0x44) setsockopt$IP_VS_SO_SET_FLUSH(r2, 0x0, 0x485, 0x0, 0x0) 14.074761207s ago: executing program 4 (id=550): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async) r0 = userfaultfd(0x80001) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000280)={&(0x7f00007aa000/0x2000)=nil, &(0x7f00004e3000/0x2000)=nil, 0x2000, 0x1}) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x19}) (async) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000100)={{&(0x7f0000010000/0x1000)=nil, 0x1000}, 0x5}) (async) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f0000000000)={0x0, 0xa5b9}, &(0x7f0000000240)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f00000001c0)={r2, 0x1c, &(0x7f0000000340)=[@in6={0xa, 0x4e23, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}, &(0x7f0000000200)=0xfffffffffffffe13) (async) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000001340)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000880), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x49) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={r3, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) r5 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000000c0)={r4}, 0x4) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000840)={r5, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffd6e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x4) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="01000000a8db0000040000000100000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=r6], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{r7, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000080)=r5}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r8}, &(0x7f0000000380), &(0x7f00000003c0)}, 0x20) (async) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000680)={r7, &(0x7f0000000600)}, 0x20) (async) getsockopt$sock_buf(r1, 0x1, 0x1c, 0x0, &(0x7f0000000040)=0x1c) (async) madvise(&(0x7f0000e6a000/0x3000)=nil, 0x3000, 0x13) open_by_handle_at(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="080000000100000002000000020000007503bf552bca85291f079fc9a14de2b20aea6812c0bc18af2933faa93f1badc2b06ce7c6db8cb736e12a408cae3ab34f0774dfefd2b5fd33a5"], 0x90040) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x300000a, 0x80010, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_FSGETXATTR(r1, 0x801c581f, &(0x7f0000000080)={0x80000001, 0x80, 0x2, 0x1, 0x3}) (async) close(r0) 13.226298459s ago: executing program 4 (id=552): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x48) r2 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000080), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r2, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4) r3 = socket$kcm(0x10, 0x2, 0x0) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000600)={0x0, 0xfffffffe, &(0x7f0000000300)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73772cc9f1ba1f848430000005e140602000000000e000a0010000000028000001294", 0x2e}], 0x1}, 0x0) sendmsg$kcm(r3, &(0x7f0000000600)={0x0, 0x3, &(0x7f0000000040)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73772cc9f1ba1f848430000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x2, &(0x7f00000000c0)=0x7a, 0x4) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(r1, &(0x7f0000000cc0)=[{{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000000400)="029993440c7a0c95d3bb8cf353fd63c588ffa39f0ff0fced20927ea4b2a247d082247558bef6b2b2cd6a0dffece1b36526e9388c344fb7ac429e434ccb0330483c0604aaf296d8218e", 0x49}, {&(0x7f0000000e00)="ec75d081fcb7e79634ec1a1abfdebb6a38b0c57cc77b83d2eea81aad8f73b36abc2019cb08fcaaec9647a07d0a0965f0f1e39afd84e7e2523aaded5e09aa1e36fcc90c269ad6d38d57619127cee4253655c33b71054226c3b00b9ee6ae29f0b07bc6fe7981126ca804c1f64e6c19ba36b2778c5f4a1c58625fe19516af43c9870c5b8191e23778abe7df2280d459b1651686a53ca52dce9570444c153f9c2903ae4c868074e89477bf6ed2ab648b0498ac8c0f90844ed9a26675199d5ff9b391c1dec077b5099cf9aecd1a9d94e235a7", 0xd0}, {&(0x7f0000000f00)="397d5f2edc82d0337ae5ab9ee47dc3e798cf69cfebf169e77257f308227094d569a4326954e50ea185bc6fff0507c5dfd26676de9ddac4fe6db927cd4d03965f42d9c7513eff1631baa83e3daf514c600450374f6d76b8fcf2bc3eca29ce7538f85aa34b2bdcc17ecd080f0850377f771a4e8693703da4e347e0165f00872a21845e17030de0ff47bc869de32ee24ca05e6f805ec0a1d0257e0e6f90", 0x9c}, {&(0x7f0000000480)="4068745fc217775e9fca3477d3c929c1231d710ed7bb68bf2f127cb83703392703f53051ec7ebd4d519a9db1973eaeda928822aaa8d3a9677374a52305e2ad47d5802e40bd678517886e0c9ec4", 0x4d}], 0x4}}, {{0x0, 0x0, &(0x7f00000001c0)}}, {{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000300)="b5d3838236773268a73daecfa0fdc5beb5a7ac332a11523627b41db31da6be0055bf716aa2b23b97d43cc40c632f6b9850f364ba0831ed0d6f7157f204275aa850d992d81ba6ab984bd809254e847b644cf6459a8139c3ebba62168141343c853896523ffb04131b2786acc44a57f5b1bd33cdaef8dd3c0526b7454eefe5153c5778ce05c77e962fd6bf3a4b9eb05654e64f1867398e202b4920e9ebc08f6e6dc652a12e45445030e069f44b", 0xac}, {&(0x7f0000000b80)="8d75938ba9bc695806fede7eee392592a6014e55025d4c6612fbb793e3ed0100", 0x20}], 0x2}}], 0x3, 0xc0) pipe(0x0) socket$inet_udp(0x2, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$pptp(0x18, 0x1, 0x2) socket$pppl2tp(0x18, 0x1, 0x1) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2800001, 0xc3072, 0xffffffffffffffff, 0x0) keyctl$chown(0x11, 0x0, 0x0, 0x0) 12.621447592s ago: executing program 5 (id=555): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000001afc180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b703000000090000850000000400000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() pipe2$watch_queue(&(0x7f0000000240), 0x80) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL802154_CMD_DEL_SEC_DEV(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x38, r4, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_SEC_DEVICE={0x10, 0x2e, 0x0, 0x1, {0xc}}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x38}}, 0x0) 11.833221351s ago: executing program 4 (id=557): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000030a20000000000a03000000000000000000010000000900010073797a30000000002c000000030a01020000000000000000010000000900010073797a30000000000900030073797a320000000050000000060a010400000000000000000100000008000b400000000028000480240001800b0001007470726f78790000140002800800034000fdff03080001400000000a0900010073797a3000"], 0xc4}}, 0x0) 11.541755107s ago: executing program 4 (id=560): r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/sync_ports\x00', 0x2, 0x0) write$cgroup_int(r0, &(0x7f0000000340)=0x4, 0x12) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYRESOCT], 0x0, 0x3e, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000d80)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb01001800000000000000000c00000002000000002000000000001304000080"], 0x0, 0x26, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) r1 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8936, &(0x7f0000000000)={'nicvf0\x00', 0x0}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x5, 0x1000087}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) r2 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000200), 0x1093c0, 0x0) getsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f00000002c0)={@rand_addr, 0x0}, &(0x7f0000000380)=0x14) r4 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000080)={0x0, 0x0}, &(0x7f00000000c0)=0xc) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@ipv4_newrule={0x28, 0x20, 0x301, 0x0, 0xfffffffc, {0x2, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x8}, [@FRA_GENERIC_POLICY=@FRA_UID_RANGE={0xc, 0x14, {r5, r5}}]}, 0x28}}, 0x0) sendmsg$nl_xfrm(r2, &(0x7f00000004c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000480)={&(0x7f00000003c0)=@newpolicy={0xc0, 0x13, 0x800, 0x70bd29, 0x25dfdbfb, {{@in6=@loopback, @in=@broadcast, 0x4e20, 0x0, 0x4e24, 0x0, 0x0, 0x80, 0xa0, 0x0, r3, r5}, {0x40, 0x3ff, 0x1, 0xcc, 0x4, 0x0, 0xe00000000000, 0x5}, {0x4, 0x80000000, 0x1, 0x87}, 0x7, 0x6e6bbf, 0x0, 0x1, 0x2, 0x3}, [@tfcpad={0x8, 0x16, 0x100000}]}, 0xc0}, 0x1, 0x0, 0x0, 0x40}, 0x95) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000002700)=""/102392, 0x18ff8) openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0) r7 = gettid() timer_create(0x1, &(0x7f0000000300)={0x0, 0x21, 0x800000000004, @tid=r7}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r8 = openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0x22242, 0x0) read(r8, &(0x7f0000000100)=""/85, 0x55) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0x15) bind$xdp(0xffffffffffffffff, &(0x7f0000000000)={0x2}, 0x10) ioctl$TCFLSH(r1, 0x404c4701, 0x20000000) ioctl$TIOCSTI(r1, 0x5412, &(0x7f00000000c0)=0xf9) ioctl$TIOCSTI(r1, 0x5412, &(0x7f00000001c0)=0xfc) 10.84787068s ago: executing program 3 (id=561): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r1, 0x4000000) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000001140), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r3) r6 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_DV_TIMINGS(r6, 0xc0945662, &(0x7f0000000300)={0xdfe0, 0x0, '\x00', {0x0, @reserved}}) r7 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r7, 0x10e, 0xc, &(0x7f00000004c0)={0xfffffff8, 0x3ff, 0x3fe}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r8 = getpid() sched_setscheduler(r8, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r9, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r10, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r9, &(0x7f00000000c0), 0x10106, 0x2, 0x0) write(r7, &(0x7f00000000c0)="240000001e005f0214fffffffffffff807000000b800000000000000080008000d000000", 0x24) socket(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000002c0)={'wlan0\x00'}) sendmsg$ETHTOOL_MSG_FEATURES_GET(r3, &(0x7f00000017c0)={0x0, 0x0, &(0x7f0000001780)={&(0x7f00000015c0)={0x2c, r4, 0x1, 0x70bd25, 0x25dfdbfe, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan1\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4044000}, 0x20004004) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r11 = accept(r0, 0x0, 0x0) sendmsg$IPSET_CMD_PROTOCOL(r11, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1400000001062106000000000000000000000006"], 0x14}, 0x1, 0x0, 0x0, 0x840}, 0x1000) 9.638049244s ago: executing program 3 (id=562): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) unshare(0x20040600) (async) unshare(0x20040600) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) (async) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = userfaultfd(0x1) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000440)={{&(0x7f0000fff000/0x1000)=nil, 0x1000}, 0x1}) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)) (async) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0xa) (async) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0xa) sendmsg$nl_route_sched(r2, &(0x7f0000006280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=@newtaction={0x68, 0x30, 0xb, 0x0, 0x0, {0x0, 0x0, 0x6a00}, [{0x54, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{}, 0x4, r5}}]}, {0x4, 0xa}, {0xc, 0x7, {0x1, 0x1}}, {0xc}}}]}]}, 0x68}}, 0x0) (async) sendmsg$nl_route_sched(r2, &(0x7f0000006280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=@newtaction={0x68, 0x30, 0xb, 0x0, 0x0, {0x0, 0x0, 0x6a00}, [{0x54, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{}, 0x4, r5}}]}, {0x4, 0xa}, {0xc, 0x7, {0x1, 0x1}}, {0xc}}}]}]}, 0x68}}, 0x0) syz_open_dev$audion(&(0x7f0000000380), 0x100, 0x44000) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000003c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', r5, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x8, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r6}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x5}}, {}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x2, 0xfff0}, {0x6, 0x0, 0xd, 0x9, 0x0, 0x8}, {0x3, 0x0, 0x6, 0xa, 0x9, 0xfff0, 0xe1}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x8, 0x2, 0x0, r1}, {}, {0x15, 0x0, 0x0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8, 0x0, 0x0, 0x1000000}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_BIND_MAP(0x23, &(0x7f00000000c0)={r7, r1}, 0xc) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) (async) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) eventfd(0x0) (async) r8 = eventfd(0x0) socket$caif_seqpacket(0x25, 0x5, 0x2) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, 0x0, &(0x7f00000002c0)=""/138, 0x0}) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r8) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r8}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000600)) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x20000) syz_usb_connect(0x0, 0x5d, &(0x7f0000000180)=ANY=[@ANYRES16=0x0, @ANYRES32=r0], 0x0) 9.636953111s ago: executing program 4 (id=563): r0 = socket$pppl2tp(0x18, 0x1, 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) unshare(0x2c060000) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1c, 0x8, &(0x7f0000001c40)=ANY=[@ANYBLOB="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"/3590], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x4}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r2 = getpid() sched_setscheduler(r2, 0x0, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000380)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) r6 = dup(r5) write$UHID_INPUT(r6, &(0x7f0000002100)={0x18, {"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", 0x1000}}, 0x1006) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000340)=@IORING_OP_WRITE={0x17, 0xd, 0x2004, @fd, 0x325d, 0x0, 0x0, 0x14, 0x1}) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) syz_open_dev$video4linux(&(0x7f0000000000), 0x8, 0x2) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000340)={0x24, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0022050000"], 0x0}, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r7) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r7, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000000)=ANY=[@ANYBLOB="98030000", @ANYRES16=r8, @ANYBLOB="010028057000fcdbdf253b00000008000300", @ANYRES32=r9, @ANYBLOB="04008e00080057001b0a000004006c000500190107000000080026006c0900005603330080b0c000ffffffffffff0802110000010569ea7fa08e8df3d0edd086922799ded6be01d09a95b66d3d"], 0x398}}, 0x0) r10 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r10, {0x2, 0x0, @dev}, 0x2}}, 0x2e) 9.5932033s ago: executing program 9 (id=564): setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000000)=[@in={0x2, 0xfffc, @empty}], 0x10) socket$inet6_sctp(0xa, 0x5, 0x84) r0 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000180)=@assoc_value, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000140), 0x200000, 0x0) r2 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$sock_SIOCADDRT(r2, 0x890b, 0x0) r3 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x275a, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f00009a4000/0x2000)=nil, 0x2000, 0xb635773f06ebbee6, 0x810, r3, 0xffffd000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) flock(0xffffffffffffffff, 0xa422928b49da8f69) ioctl$VIDIOC_G_TUNER(r4, 0xc054561d, &(0x7f00000000c0)={0x0, "13f20afd86c17f9dfa507069d57c6684154bc7ec29052b9ec48e707a4f251dd9", 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}) r8 = openat$smackfs_cipsonum(0xffffffffffffff9c, &(0x7f0000000080)='/sys/fs/smackfs/doi\x00', 0x2, 0x0) writev(r8, &(0x7f0000002680)=[{&(0x7f00000025c0)='8', 0x1}], 0x1) r9 = socket$phonet_pipe(0x23, 0x5, 0x2) ioctl$sock_SIOCETHTOOL(r9, 0x8946, 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000380)='{\x00', &(0x7f00000003c0)='%\x00', 0x0) syz_emit_vhci(&(0x7f0000000440)=ANY=[@ANYBLOB="043e1d1904c90075bd35ed50d9a62c5640a9540500037f090006ff070200"], 0x20) r10 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYRESOCT=0x0], 0x0) setsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x3f, &(0x7f00000001c0)=0x9, 0x4) syz_usb_control_io$cdc_ecm(r10, 0x0, 0x0) 9.139365089s ago: executing program 3 (id=565): ioperm(0x9, 0x400, 0x7fc) r0 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffff8) r1 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000100)={'syz', 0x2}, 0x0, 0x0, r0) mkdir(&(0x7f0000000240)='./file0\x00', 0x84) add_key$keyring(&(0x7f0000000180), &(0x7f0000000140)={'syz', 0x2}, 0x0, 0x0, r1) socket$inet(0x2, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) creat(0x0, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000040), 0x1a73, 0x8001) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r3, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r4}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc00c642d, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01080000000000000000020000000900020073797a2a0000000008000440000000000900010073797a3000000000080003400000000a14000000110001"], 0x64}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[], 0x74}}, 0x0) 8.279394114s ago: executing program 3 (id=567): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x3, 0x0, 0x0, 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x15, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000240)={0x3, 0x4, 0x3, 0x6}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x17, @void, @value}, 0x94) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0), 0xc102, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000001000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc000}, 0x810) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0xb5, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0xc}, [@initr0]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) 7.93822602s ago: executing program 5 (id=568): openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'authencesn(poly1305,ctr-twofish-avx)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="beef915d564c90c25fee0000000000001300000000000000", 0x18) r1 = gettid() socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r2, 0x5452, &(0x7f0000000180)=0xffffffffffffffff) read(r3, &(0x7f00000002c0)=""/219, 0xdb) rt_sigprocmask(0x0, &(0x7f0000000200)={[0xfffff7feffff7ffd]}, 0x0, 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000980)='sys_exit\x00', r4}, 0x10) fcntl$setsig(r2, 0xa, 0x12) dup2(r2, r3) fcntl$setown(r3, 0x8, r1) tkill(r1, 0x13) 7.208197316s ago: executing program 2 (id=569): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000004d40), 0xffffffffffffffff) r2 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="28ec68d63093b028cdb7a291c241799745cc80808ae728f449390204709a563c620643d3206ee8d586729412b3384accea58ed5388c12fdd23f7f94838d4122709eb5ffd16c97909ea9e6ce612fc514353203a2c63f52b366d32f91d363f72b958b94ae711f19cfca2a3105060fcbcbfe1a9ffe3c8d26aec002199863e27c4000000000000"], 0x18}, 0x1, 0x0, 0x0, 0x800}, 0x20000001) (async) getpeername$packet(0xffffffffffffffff, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0x14) bind$bt_hci(r3, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) (async) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) (async) socket$netlink(0x10, 0x3, 0x12) r5 = syz_open_dev$vcsu(0x0, 0x9, 0x2000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x3, '\x00', 0x0, 0x0, r5, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f0000000340)=[{0x0, 0x1, 0xa, 0x5}, {0x9, 0x5, 0xd, 0x9}], 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r6 = getpid() fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) (async) sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x4) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f00000005c0)=@abs={0x1, 0x0, 0x4e20}, 0x6e) (async) sendmmsg$unix(r8, &(0x7f00000bd000), 0x318, 0x0) (async) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0x1f2f, 0xa, 0x0, &(0x7f00000007c0)="9f449487219195806840", 0x0, 0x241, 0x0, 0xaf, 0x0, &(0x7f0000000700)="389ceff69d08b0af1cc71b6262d50660bbaf31a7f8cd6a6f911beb65d5fe6b54bf21a66489121f24fefd198059288c9b735e1898e77a7469489a249292c02a72bc193a3008ebdbf4e9dd4ee8fcceef55402c913c8dd0ebece1330aaa93ece835c5044a246a5967e3acd7c950b3b19f351830e545eb9bc3a9c6dd22ce97f1f857cfe8b68a2370b69ea336006b589368f92deb68f3dfc6f2bfee09f8342da437fce5dcdf658e453e3132bb4206757531"}, 0x50) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x1, 0x5, 0x9fd, 0x84, 0x105, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x800, r9}, 0x38) bpf$MAP_LOOKUP_BATCH(0x19, 0x0, 0x0) write(r3, &(0x7f0000000100)="520003000100b8", 0x7) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) (async) connect$802154_dgram(r2, &(0x7f0000000040)={0x24, @long={0x3, 0x2}}, 0x14) (async) sendmsg$DEVLINK_CMD_RATE_GET(r0, &(0x7f0000004e40)={0x0, 0x0, &(0x7f0000004e00)={&(0x7f00000000c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000300000000004a0000000e0001006e65746465767369657464657673696d300000878d0300008000"/54], 0x3c}}, 0x0) 7.138294596s ago: executing program 5 (id=570): r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) timer_create(0x3, 0x0, &(0x7f00000002c0)) r2 = syz_open_dev$dri(0x0, 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r2, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r2, 0xc01064b5, &(0x7f0000000580)={0x0}) r3 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r5, &(0x7f0000000040)={0x2, 0x4e22, @empty}, 0x67) setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, &(0x7f00000005c0)='syz_tun\x00', 0x10) sendto$inet(r5, 0x0, 0x0, 0x20000800, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_emit_ethernet(0x3a, &(0x7f0000000100)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x3, 0x2c, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x6, 0x10, 0x0, 0x0, 0x0, {[@fastopen={0x22, 0x2}]}}}}}}}, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) ioctl$KVM_SET_PIT2(r4, 0xaea2, &(0x7f0000000040)={[{0x2, 0x81, 0x0, 0x3, 0x0, 0xc6, 0x70, 0x0, 0x7, 0xc, 0xda, 0xf8, 0x804}, {0x0, 0xf3f, 0x2, 0x7d, 0x8, 0x7, 0x2, 0x4, 0x0, 0x7, 0xd, 0x41, 0x6}, {0x4, 0x9, 0x13, 0xfc, 0x5, 0x7, 0x1, 0x10, 0x2, 0xf4, 0x55, 0xe, 0xffffffffffffffb5}]}) ioctl$KVM_RUN(r6, 0xae80, 0x0) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x1) gettid() timer_create(0x0, 0x0, &(0x7f0000bbdffc)=0x0) timer_settime(r7, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) timer_settime(r7, 0x1, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x989680}}, &(0x7f0000000140)={{0x0}}) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) r11 = ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x0) r12 = dup(r11) ioctl$KVM_SET_MSRS(r12, 0x4048aecb, &(0x7f00000000c0)=ANY=[@ANYRES64=r8, @ANYRES64]) close_range(r1, 0xffffffffffffffff, 0x2) 7.030408525s ago: executing program 2 (id=571): ioctl$BTRFS_IOC_QGROUP_CREATE(0xffffffffffffffff, 0x4010942a, &(0x7f0000000040)={0x0, 0x40}) pipe2$9p(0x0, 0x0) write$P9_RVERSION(0xffffffffffffffff, &(0x7f00000002c0)=ANY=[], 0x15) r0 = dup(0xffffffffffffffff) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x20000023896) read(0xffffffffffffffff, &(0x7f00000004c0)=""/152, 0x98) add_key$fscrypt_provisioning(0x0, 0x0, 0x0, 0x48, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x6) syz_init_net_socket$rose(0xb, 0x5, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000001140)='net/ptype\x00') lseek(r2, 0xfffffffffffffff7, 0x1) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_GET_DAEMON(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000002c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r3, @ANYBLOB="6f03c07308700c40c84b040000"], 0x14}}, 0x0) read$FUSE(r0, &(0x7f0000001180)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_DIRENT(r2, &(0x7f00000000c0)={0x58, 0x0, r5, [{0x0, 0x9, 0xf, 0x8, '/dev/cpu/#/msr\x00'}, {0x3, 0xc5ed, 0x4, 0x200, '\xda^{,'}]}, 0x58) 6.398546325s ago: executing program 2 (id=572): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_FLUSH(r0, 0x0, 0xd4, 0x0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, 0x0, 0x0) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(0xffffffffffffffff, 0xc02c564a, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x53, &(0x7f0000000180)=0x1400200bd2) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000002700)=""/102392, 0x18ff8) kexec_load(0x0, 0x0, 0x0, 0x0) r3 = syz_io_uring_setup(0x82e, &(0x7f0000000300)={0x0, 0x0, 0x10100}, &(0x7f0000000100)=0x0, &(0x7f0000000080)=0x0) io_uring_register$IORING_REGISTER_PBUF_RING(r3, 0x16, &(0x7f0000000380)={&(0x7f0000001000)={[{0x0}, {0x0}, {0x0}, {0x0}]}, 0x4}, 0x1) r6 = socket(0x10, 0x3, 0x0) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="1c050000", @ANYRES16, @ANYBLOB="0500000000000000000001000000b00408805000008024000100dbffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff0600050005000000200004000a004e"], 0x51c}}, 0x0) syz_io_uring_submit(r4, r5, &(0x7f00000003c0)=@IORING_OP_SEND={0x1a, 0x20, 0x0, r6, 0x0, 0x0, 0x0, 0x200440c0, 0x1}) io_uring_enter(r3, 0x27e2, 0x0, 0x0, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) write$binfmt_elf32(r1, 0x0, 0x46b) r7 = socket$inet_mptcp(0x2, 0x1, 0x106) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x8) bind$inet(r7, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r7, &(0x7f00000009c0)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) writev(r7, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x1) shutdown(r7, 0x1) 6.388549025s ago: executing program 9 (id=573): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000002400000024000000020000000000000001000084040000000000000002"], 0x0, 0x3e, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000d80)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb01001800000000000000000c00000002000000002000000000001304000080"], 0x0, 0x26, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8936, &(0x7f0000000000)={'nicvf0\x00', 0x0}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) bind$xdp(0xffffffffffffffff, &(0x7f0000000000)={0x2}, 0x10) ioctl$TCFLSH(r0, 0x404c4701, 0x20000000) ioctl$TIOCSTI(r0, 0x5412, &(0x7f00000000c0)=0xf9) ioctl$TIOCSTI(r0, 0x5412, &(0x7f00000001c0)=0xfc) 5.618213604s ago: executing program 2 (id=574): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x2000000000000065, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000003b810100850000006d000000850000005000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) mmap(&(0x7f000080c000/0x11000)=nil, 0x11000, 0x0, 0x80010, r1, 0x50417000) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000004f4b000000000000000000180100002020702000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000fdffffff850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, 0x0, 0x0, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="e80000006c00010029bd7000fcdbdf2500000000", @ANYRES32, @ANYBLOB="001000008000000008000f002000000014003500726f7365300000000000000000000000a40034801400350070696d367265673000000020000000001400350076657468305f6d614176746170000000140035006d61637674617030020000000000000014003500677265300000000000000000000000001400350076657468305f746f5f626174616476001400350001657468315f6d6163767461700000001400350067726530000000000000000000000000140035006261746164765f736c6176655f31000008000f"], 0xe8}}, 0x4004800) 5.346296787s ago: executing program 5 (id=575): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, 0x0, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) capset(&(0x7f0000000140)={0x20080522}, &(0x7f00000000c0)={0x0, 0x0, 0x5, 0x4, 0x5}) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) lsetxattr$security_ima(&(0x7f00000002c0)='./bus\x00', &(0x7f0000000180), 0x0, 0x0, 0x0) r2 = dup(r1) write$UHID_INPUT(r2, &(0x7f0000003300)={0xd, {"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", 0x1000}}, 0x1006) recvmmsg(r0, 0x0, 0x0, 0x10000, &(0x7f0000002f40)={0x77359400}) ioctl$TIOCL_SCROLLCONSOLE(r1, 0x541c, &(0x7f0000000040)={0xd, 0x7fffffff}) 4.916126534s ago: executing program 4 (id=576): mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000080)={0xd, 0xb, &(0x7f0000000280)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x5, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x87f, @void, @value}, 0x94) pipe(&(0x7f0000000080)) pipe(&(0x7f0000000000)={0xffffffffffffffff}) tee(r1, 0xffffffffffffffff, 0x6, 0xc) read$FUSE(r0, &(0x7f0000002380)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) openat$vnet(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f00000044c0)) sched_setscheduler(r3, 0x3, &(0x7f0000002240)=0x13) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) futex(&(0x7f0000000000), 0x5, 0x0, 0x0, &(0x7f00000000c0), 0xfffffffe) quotactl$Q_QUOTAOFF(0xffffffff80000301, &(0x7f0000000000)=@nullb, r2, 0x0) read$FUSE(r0, &(0x7f0000000200)={0x2020, 0x0, 0x0}, 0x2020) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x200000, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x4, 0x4, &(0x7f0000004540)=ANY=[@ANYBLOB="18020000eb0000000000000000000000850000002200000095000000000000006f9e2661bea2d90e981cc97b6cd170306d232973ef1fdefe4da4022ff84f0aea7c34cb99e3657bca94c959eecef3eb62c8d2db4fb649886baab1b0f4e0774ea1d9b7593c29a632e51364576670fde3f3bc8104a66f11b2a24bab3a3439af56148d9ff661087e2088a5fa780f9f31825e699119adaf4fc18eee2f51e11f805b230faa0914534dbd6ec21d0a0c975a97d72f799437c46185dde7d72bc5229f5d52bd94c57e091b1bea375cbe754cec7dc12833227e537911421f204a63f7a28cac93fef30513f4ea9f5bd1dcaac4acac"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000600)={r8, 0x0, 0xe, 0x0, &(0x7f0000000900)="e02742e8680d85ff97e3752f86dd", 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) write$FUSE_INIT(r0, &(0x7f0000002300)={0x50, 0x0, r7, {0x7, 0x9, 0x9, 0x8695c3813a9bd78d, 0x0, 0x0, 0x7fffffff}}, 0x50) r9 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r9, 0x0, 0xca, &(0x7f00000002c0)={0x5, 0x1, 0x0, 0x0, @vifc_lcl_addr=@broadcast, @loopback}, 0x10) syz_usb_connect$uac1(0x0, 0xad, &(0x7f0000000300)=ANY=[@ANYBLOB="12010000000000106b1d010140000102030109029b0003010000000904000000010100000a2401000000020102092408000000004c58062404000052072405000053f10b24050000133b9bda531c092405fc0596efc359090401000001020000090401010101020000090501090000000000072501000600000904020000010200000904020101010200000b2402017f0200018b7e8e072401000000000905820910000000000725"], 0x0) setsockopt$MRT_ADD_VIF(r9, 0x0, 0xca, &(0x7f0000000080)={0x0, 0x4, 0x4, 0x9, @vifc_lcl_addr=@multicast1, @multicast2}, 0x10) 4.880247988s ago: executing program 5 (id=577): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="120100001517ee40f00a057a0000010203010902120001000000000904000000ff054900f46843c8db35b4c91e1f1afd7f906b6c7323a173aafe396e74b25ea8a2c02622d6000f097513eb18db3671478e8f6991cbbbf488ea5f1f7d4bb2"], 0x0) fsopen(&(0x7f0000000040)='efs\x00', 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) syz_clone(0x4020440, &(0x7f0000001900), 0x0, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600700, 0x19) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) rseq(&(0x7f0000000040)={0x0, 0x0, 0x0, 0x5}, 0x20, 0x0, 0x0) add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) syz_usb_control_io(r0, 0x0, &(0x7f0000000700)={0x84, &(0x7f0000000100)=ANY=[@ANYBLOB="00311100000006"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 4.570201593s ago: executing program 9 (id=578): r0 = openat$vcs(0xffffffffffffff9c, 0x0, 0x8000, 0x0) r1 = dup(0xffffffffffffffff) r2 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), r3) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r5 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYRES8=r4], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='sched_switch\x00', r8}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x1, 0x4, 0x7fe2, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) openat$smackfs_change_rule(0xffffff9c, &(0x7f0000002300), 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) write$smackfs_change_rule(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="626174616476301a202126292da07774626c026c77425851", @ANYRESHEX=r1], 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x8, 0x8, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000000000000000000000000005600200000000007200000000000000184000000200000000000000000000000500fcff0000000095"], &(0x7f00000004c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000002100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000002140)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_STATION(r10, &(0x7f0000002240)={0x0, 0x0, &(0x7f0000002200)={&(0x7f00000005c0)={0x24, r11, 0xa29, 0x0, 0x0, {{}, {@val={0x8, 0x3, r12}, @void}}, [@NL80211_ATTR_MGMT_SUBTYPE={0x5, 0x29, 0xa}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_NEW_INTERFACE(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000340)=ANY=[@ANYBLOB="14000000", @ANYRES16=r11, @ANYBLOB="000201000080df2507000000"], 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x90) sendmsg$nl_route(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="240000001a0001000000fb02"], 0x24}}, 0x0) 4.535964053s ago: executing program 3 (id=579): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x3, &(0x7f00000000c0)=0x4) pivot_root(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) getpid() sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r2, 0x4020565a, &(0x7f0000000100)={0x2, 0x5}) socket(0x10, 0x3, 0x0) r3 = syz_clone(0x4b300111, 0x0, 0x0, 0x0, 0x0, 0x0) landlock_restrict_self(0xffffffffffffffff, 0x0) move_pages(r3, 0x0, 0x0, 0x0, 0x0, 0x0) 3.252403095s ago: executing program 9 (id=580): openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'authencesn(poly1305,ctr-twofish-avx)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="beef915d564c90c25fee0000000000001300000000000000", 0x18) r1 = gettid() socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r2, 0x5452, &(0x7f0000000180)=0xffffffffffffffff) read(r3, &(0x7f00000002c0)=""/219, 0xdb) rt_sigprocmask(0x0, &(0x7f0000000200)={[0xfffff7feffff7ffd]}, 0x0, 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000980)='sys_exit\x00', r4}, 0x10) fcntl$setsig(r2, 0xa, 0x12) dup2(r2, r3) fcntl$setown(r3, 0x8, r1) tkill(r1, 0x13) 3.074351233s ago: executing program 2 (id=581): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x3f) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a74000000060a0b040000000000d4f1284ab30000000200000048000480440001800b0001006578746864720000340002800800044000000000ffacb1e05946b47556c8ea0800074000000000080006400000000105000200000000000800034000000000561bc9a2c47f467ddfd856ff03b42808000540000000000900010073797a300000000009"], 0x9c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYRES16=r1, @ANYRESOCT=r1, @ANYBLOB="eb8aa1371cf93ab70e2407796d86e6f230e838e9cd26"], 0x34}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) ioctl$VIDIOC_ENUMINPUT(0xffffffffffffffff, 0xc050561a, &(0x7f0000000600)={0x3, "09057ac7fd65b35c59c21ccf2fd9606b18ef771a774885455524f57c8666040d", 0x1, 0x81, 0x2, 0xff, 0x400, 0x8}) r5 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r5, 0xc1105518, 0x0) sendmsg$nl_route(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000005c0)=@newlink={0x3c, 0x10, 0x413, 0xffa1, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x244}, [@IFLA_IFNAME={0x14, 0x3, 'netdevsim0\x00'}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x3c}}, 0x0) 2.891614858s ago: executing program 2 (id=582): r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000000)={'xfrm0\x00', {0x2, 0x0, @private}}) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r1, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f00000004c0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r2, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001540)={&(0x7f0000000500)=ANY=[@ANYBLOB="d268426e", @ANYRES16=r3, @ANYBLOB], 0x14}}, 0x0) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r1, 0x84, 0x15, &(0x7f0000000080), 0x1) sendto$inet6(r1, &(0x7f0000000480)='l', 0x1, 0x0, &(0x7f0000000100)={0xa, 0x4e23, 0x0, @empty}, 0x1c) sendto$inet6(r1, &(0x7f00000003c0)="1a", 0x1, 0x8000, 0x0, 0x0) shutdown(r1, 0x1) r4 = syz_usb_connect(0x2, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="120100010902120001000090000904000000d3e9ba00"], 0x0) syz_usb_control_io(r4, 0x0, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = gettid() timer_create(0x0, &(0x7f0000000100)={0x0, 0x21, 0x4, @tid=r6}, &(0x7f0000000080)) sched_setaffinity(r6, 0x8, &(0x7f0000000040)=0x20004000) syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), r2) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="a800000000010104000000000000040000000000000001802c000180140003000000000000000000000000000000000014000400ff0100000000000000000000000000010c00028005000100000000003c0002802c00018014000300fe8000000000000000000000000000aa14000400000000000000000000000000000000000c000280050001000000000008000740000000001400164000009f620000"], 0xa8}}, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000280)={{0x1, 0x1, 0x18, r5, {0xb91b}}, './file0\x00'}) sendmsg$DEVLINK_CMD_RATE_DEL(r7, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000380)={&(0x7f0000000540)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="02002abd70e5fcdbdf254d00000008000300007f00000000000000657464650100696d0000000f0002006e657464657673696d300000b9f166dd50a6647b1a9ed91bbe45bb278884e9c29a1f6c45438684e5a7f23c8db40b9b9faa7f4332f6530b8f9534176e7328040857bce687fd04f23a872e2d0064d441dfa2cc96118e99e6a0a9d9d324cca87ee7836b114629823d0185acb3657ee43fb11a73b82891468db0e51118ea72161532128ffa382bf8bc7226e3eb0f5dab00eef3a0aa0f2df14f82f37f3b746ac20febe49105e343ea225751b58f"], 0x3c}, 0x1, 0x0, 0x0, 0x20000000}, 0x4004080) setsockopt$inet6_buf(r5, 0x29, 0x20, &(0x7f00000000c0)="0bbb268dd6ffa80800000000000000000000210d0000aaa8fa017242ba9380d418000000000000002900000002000000", 0xfe60) r8 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101001, 0x0) ioctl$FS_IOC_FSSETXATTR(r8, 0x401c5820, &(0x7f0000000b40)) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IPVS_CMD_ZERO(r10, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)={0x18, r11, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x4}]}, 0x18}}, 0x0) sendmsg$IPVS_CMD_GET_INFO(r9, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x64, r11, 0x20, 0x70bd26, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_SERVICE={0x40, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@loopback}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x4d}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e24}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x2}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x8}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x9}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x8}]}, 0x64}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 1.831296668s ago: executing program 9 (id=583): ioctl$BTRFS_IOC_QGROUP_CREATE(0xffffffffffffffff, 0x4010942a, &(0x7f0000000040)={0x0, 0x40}) pipe2$9p(0x0, 0x0) write$P9_RVERSION(0xffffffffffffffff, &(0x7f00000002c0)=ANY=[], 0x15) dup(0xffffffffffffffff) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x20000023896) add_key$fscrypt_provisioning(0x0, 0x0, 0x0, 0x48, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x6) syz_init_net_socket$rose(0xb, 0x5, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x801, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x38, 0x3, 0xa, 0x3, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELCHAIN={0x2c, 0x5, 0xa, 0x201, 0x0, 0x0, {0x0, 0x0, 0x2}, [@NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14}}, 0xac}}, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = fcntl$getown(r0, 0x9) prctl$PR_SCHED_CORE(0x3e, 0x3, r2, 0x3, 0x0) syz_open_procfs(0x0, &(0x7f0000001140)='net/ptype\x00') socket$nl_generic(0x10, 0x3, 0x10) socket$inet_udplite(0x2, 0x2, 0x88) prlimit64(0x0, 0xe, &(0x7f0000000440)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) 1.510386536s ago: executing program 3 (id=584): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000002400000024000000020000000000000001000084040000000000000002"], 0x0, 0x3e, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000d80)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb01001800000000000000000c00000002000000002000000000001304000080"], 0x0, 0x26, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8936, &(0x7f0000000000)={'nicvf0\x00', 0x0}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) bind$xdp(0xffffffffffffffff, &(0x7f0000000000)={0x2}, 0x10) ioctl$TCFLSH(r0, 0x404c4701, 0x20000000) ioctl$TIOCSTI(r0, 0x5412, &(0x7f00000000c0)=0xf9) ioctl$TIOCSTI(r0, 0x5412, &(0x7f00000001c0)=0xfc) (fail_nth: 3) 118.543531ms ago: executing program 9 (id=585): ioperm(0x9, 0x400, 0x7fc) r0 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffff8) r1 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000100)={'syz', 0x2}, 0x0, 0x0, r0) mkdir(&(0x7f0000000240)='./file0\x00', 0x84) add_key$keyring(&(0x7f0000000180), &(0x7f0000000140)={'syz', 0x2}, 0x0, 0x0, r1) socket$inet(0x2, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) creat(0x0, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000040), 0x1a73, 0x8001) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc00c642d, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01080000000000000000020000000900020073797a2a0000000008000440000000000900010073797a3000000000080003400000000a14000000110001"], 0x64}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[], 0x74}}, 0x0) 0s ago: executing program 5 (id=586): socket$nl_route(0x10, 0x3, 0x0) r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f00000001c0)=@ipv6_newrule={0x74, 0x20, 0x1, 0xffffffff, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x12}, [@FRA_SRC={0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0xb9, 0x0}}, @FRA_DST={0x14, 0x1, @rand_addr=' \x01\x00'}, @FIB_RULE_POLICY=@FRA_FWMARK={0x8, 0xa, 0x7fffffff}, @FRA_SRC={0x14, 0x2, @ipv4={'\x00', '\xff\xff', @empty}}, @FRA_DST={0x14, 0x1, @private0={0xfc, 0x0, '\x00', 0x1}}]}, 0x74}, 0x1, 0x0, 0x0, 0x10}, 0x20000000) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f00000006c0)={0x0, 0x0, 0x5, {0x80, 0x1}, {0x4d, 0x2}, @period={0x59, 0x0, 0x0, 0x6, 0x0, {0x20, 0x1, 0x0, 0x800f}, 0x0, 0x0}}) r1 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x822b01) write$char_usb(r1, &(0x7f0000000040)="e2", 0x12d8) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) ioctl$KVM_CREATE_PIT2(r3, 0x4040ae77, &(0x7f0000000040)) add_key$fscrypt_v1(&(0x7f0000000040), 0x0, 0x0, 0x0, 0xfffffffffffffffd) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000400007b8af8ff00000000bfa200000000000007020000fcffffffb703000008000000b70400000000000085000000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sendmsg$ETHTOOL_MSG_PAUSE_GET(0xffffffffffffffff, &(0x7f0000000f40)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000f00)={&(0x7f0000000c80)=ANY=[@ANYBLOB="7402", @ANYRES16=0x0, @ANYBLOB="000228bd7000fbdbdf251500000074000180140002006970365f76746930000000000000000008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="080003000200000008000100", @ANYRES32=0x0, @ANYBLOB, @ANYRES32=0x0, @ANYBLOB="080003000200000008000300000000001400", @ANYRES32=0x0, @ANYBLOB="140002006c6f0000000000000000000000000000340001801400020073797a6b616c6c65", @ANYRES32=0x0, @ANYBLOB, @ANYRES32=0x0, @ANYBLOB="140002006873723000000000000000000000000008000100", @ANYRES32=0x0, @ANYBLOB="080003000000000008000100", @ANYRES32=0x0, @ANYBLOB="0000fd2ae5e986600300018014000200626f50645f73fbacfa7c5f30000000000800030001000000000000000000000000080000", @ANYRES32=0x0, @ANYBLOB="08000300020000001400020073797a6b616c6c6572300000000000001400020069703667726530000000000000000000"], 0x274}, 0x1, 0x0, 0x0, 0x8010}, 0x8080) read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8) r7 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r7, &(0x7f00000001c0)={0x2, 0x1, @remote}, 0x10) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="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"], 0x124}}, 0x0) connect$inet(r7, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) kernel console output (not intermixed with test programs): ld solve the problem. [ 162.872093][ T7065] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 162.898155][ T7065] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 162.909292][ T7065] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 162.944558][ T7065] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 163.017211][ T7065] hsr_slave_0: entered promiscuous mode [ 163.027945][ T7065] hsr_slave_1: entered promiscuous mode [ 163.038396][ T7065] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 163.050382][ T7065] Cannot create hsr debugfs directory [ 163.410129][ T7065] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 163.427879][ T7065] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 163.448694][ T1313] hsr_slave_0: left promiscuous mode [ 163.455532][ T1313] hsr_slave_1: left promiscuous mode [ 163.461761][ T1313] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 163.471970][ T1313] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 163.475810][ T54] Bluetooth: hci1: command tx timeout [ 163.485628][ T1313] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 163.493835][ T1313] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 163.521065][ T1313] veth1_macvtap: left promiscuous mode [ 163.533466][ T1313] veth0_macvtap: left promiscuous mode [ 163.539108][ T1313] veth1_vlan: left promiscuous mode [ 163.551417][ T1313] veth0_vlan: left promiscuous mode [ 164.051604][ T1313] team0 (unregistering): Port device team_slave_1 removed [ 164.091722][ T1313] team0 (unregistering): Port device team_slave_0 removed [ 164.441626][ T7065] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 164.465972][ T7065] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 164.566081][ T7065] 8021q: adding VLAN 0 to HW filter on device bond0 [ 164.586306][ T7065] 8021q: adding VLAN 0 to HW filter on device team0 [ 164.611964][ T52] bridge0: port 1(bridge_slave_0) entered blocking state [ 164.619148][ T52] bridge0: port 1(bridge_slave_0) entered forwarding state [ 164.658475][ T52] bridge0: port 2(bridge_slave_1) entered blocking state [ 164.665651][ T52] bridge0: port 2(bridge_slave_1) entered forwarding state [ 164.940784][ T7065] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 165.181875][ T7065] veth0_vlan: entered promiscuous mode [ 165.199890][ T7065] veth1_vlan: entered promiscuous mode [ 165.227990][ T7065] veth0_macvtap: entered promiscuous mode [ 165.239800][ T7065] veth1_macvtap: entered promiscuous mode [ 165.260810][ T7065] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 165.279617][ T7065] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 165.291522][ T7065] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 165.308387][ T7065] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 165.320199][ T7065] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 165.330949][ T7065] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 165.341906][ T7065] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 165.352669][ T7065] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 165.367672][ T7065] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 165.382685][ T7065] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 165.393446][ T7065] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 165.403833][ T7065] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 165.414669][ T7065] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 165.424639][ T7065] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 165.435380][ T7065] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 165.446764][ T7065] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 165.457523][ T7065] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 165.469635][ T7065] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 165.486292][ T7065] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 165.500407][ T7065] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 165.509713][ T7065] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 165.519101][ T7065] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 165.553633][ T54] Bluetooth: hci1: command tx timeout [ 165.615019][ T52] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 165.631588][ T52] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 165.667082][ T52] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 165.681446][ T52] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 167.632515][ T54] Bluetooth: hci1: command tx timeout [ 174.013129][ T7237] team_slave_0: entered allmulticast mode [ 174.032314][ T7269] netlink: 4 bytes leftover after parsing attributes in process `syz.6.178'. [ 174.047215][ T5893] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 174.060615][ T7263] netlink: 12 bytes leftover after parsing attributes in process `syz.1.179'. [ 174.091441][ T7261] bridge_slave_0: left allmulticast mode [ 174.097260][ T7261] bridge_slave_0: left promiscuous mode [ 174.103099][ T7261] bridge0: port 1(bridge_slave_0) entered disabled state [ 174.137102][ T7261] bridge_slave_1: left allmulticast mode [ 174.176596][ T7261] bridge_slave_1: left promiscuous mode [ 174.219725][ T7261] bridge0: port 2(bridge_slave_1) entered disabled state [ 174.228285][ T5893] usb 8-1: device descriptor read/64, error -71 [ 174.378262][ T7261] bond0: (slave bond_slave_0): Releasing backup interface [ 174.557461][ T5893] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 174.616167][ T7261] bond0: (slave bond_slave_1): Releasing backup interface [ 174.639824][ T7261] team0: Port device team_slave_0 removed [ 174.654648][ T7261] team0: Port device team_slave_1 removed [ 174.670476][ T7261] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 174.680020][ T7277] fuse: Bad value for 'fd' [ 174.688990][ T7261] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 174.704791][ T7261] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 174.713004][ T7261] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 174.713133][ T5893] usb 8-1: device descriptor read/64, error -71 [ 174.903364][ T5893] usb usb8-port1: attempt power cycle [ 175.338013][ T5893] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 175.417689][ T5893] usb 8-1: device descriptor read/8, error -71 [ 175.563880][ T7279] netlink: 'syz.6.182': attribute type 1 has an invalid length. [ 175.567828][ T7282] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 175.599214][ T7282] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 175.922408][ T5893] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 176.009926][ T11] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 176.078998][ T5893] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 176.133871][ T5893] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 176.161832][ T5893] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 176.188135][ T5893] usb 8-1: New USB device found, idVendor=046d, idProduct=c219, bcdDevice= 0.00 [ 176.215111][ T5893] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 176.267698][ T5893] usb 8-1: config 0 descriptor?? [ 176.315640][ T11] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 176.656779][ T11] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 176.882361][ T5893] usbhid 8-1:0.0: can't add hid device: -71 [ 176.888434][ T5893] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 177.711138][ T5149] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 177.732135][ T5893] usb 8-1: USB disconnect, device number 5 [ 177.900735][ T5149] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 177.911267][ T11] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 177.922098][ T5149] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 177.938250][ T5149] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 177.947390][ T5149] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 177.955020][ T5149] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 178.157313][ T11] bridge_slave_1: left allmulticast mode [ 178.163154][ T11] bridge_slave_1: left promiscuous mode [ 178.168950][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 178.189891][ T11] bridge_slave_0: left allmulticast mode [ 178.196063][ T11] bridge_slave_0: left promiscuous mode [ 178.205011][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 178.590360][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 178.602393][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 178.612152][ T11] bond0 (unregistering): Released all slaves [ 178.703431][ T7301] chnl_net:caif_netlink_parms(): no params data found [ 178.864276][ T7301] bridge0: port 1(bridge_slave_0) entered blocking state [ 178.871423][ T7301] bridge0: port 1(bridge_slave_0) entered disabled state [ 178.901675][ T7301] bridge_slave_0: entered allmulticast mode [ 178.922704][ T7301] bridge_slave_0: entered promiscuous mode [ 178.967923][ T7301] bridge0: port 2(bridge_slave_1) entered blocking state [ 178.977745][ T7301] bridge0: port 2(bridge_slave_1) entered disabled state [ 178.989460][ T7301] bridge_slave_1: entered allmulticast mode [ 179.010078][ T7301] bridge_slave_1: entered promiscuous mode [ 179.048339][ T11] hsr_slave_0: left promiscuous mode [ 179.055712][ T11] hsr_slave_1: left promiscuous mode [ 179.063612][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 179.071044][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 179.080269][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 179.088009][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 179.107427][ T11] veth1_macvtap: left promiscuous mode [ 179.113118][ T11] veth0_macvtap: left promiscuous mode [ 179.118724][ T11] veth1_vlan: left promiscuous mode [ 179.124648][ T11] veth0_vlan: left promiscuous mode [ 179.496510][ T11] team0 (unregistering): Port device team_slave_1 removed [ 179.535151][ T11] team0 (unregistering): Port device team_slave_0 removed [ 179.909823][ T7301] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 179.932468][ T7301] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 180.012037][ T7301] team0: Port device team_slave_0 added [ 180.026721][ T7301] team0: Port device team_slave_1 added [ 180.032686][ T5149] Bluetooth: hci2: command tx timeout [ 180.113458][ T7301] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 180.123317][ T7301] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 180.150218][ T7301] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 180.171198][ T7301] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 180.186669][ T7301] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 180.213537][ T7301] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 180.278290][ T7301] hsr_slave_0: entered promiscuous mode [ 180.286706][ T7301] hsr_slave_1: entered promiscuous mode [ 180.421854][ T7301] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 180.434711][ T7301] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 180.445755][ T7301] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 180.455838][ T7301] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 180.539217][ T7301] 8021q: adding VLAN 0 to HW filter on device bond0 [ 180.569349][ T7301] 8021q: adding VLAN 0 to HW filter on device team0 [ 180.581821][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 180.589017][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 180.604761][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 180.611869][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 180.830438][ T7301] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 181.060775][ T7301] veth0_vlan: entered promiscuous mode [ 181.078449][ T7301] veth1_vlan: entered promiscuous mode [ 181.114137][ T7301] veth0_macvtap: entered promiscuous mode [ 181.125305][ T7301] veth1_macvtap: entered promiscuous mode [ 181.142123][ T7301] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 181.155210][ T7301] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 181.165358][ T7301] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 181.176118][ T7301] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 181.186087][ T7301] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 181.196904][ T7301] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 181.208206][ T7301] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 181.230491][ T7301] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 181.241652][ T7301] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 181.261781][ T7301] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 181.278183][ T7301] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 181.288959][ T7301] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 181.299815][ T7301] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 181.311141][ T7301] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 181.328639][ T7301] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 181.338135][ T7301] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 181.347164][ T7301] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 181.357058][ T7301] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 181.449825][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 181.476122][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 181.517071][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 181.526829][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 182.123733][ T5149] Bluetooth: hci2: command tx timeout [ 184.192342][ T5149] Bluetooth: hci2: command tx timeout [ 186.272935][ T5842] Bluetooth: hci2: command tx timeout [ 186.352585][ T5842] Bluetooth: hci0: command 0x0406 tx timeout [ 186.358764][ T5844] Bluetooth: hci3: command 0x0406 tx timeout [ 187.758386][ T7577] fuse: Bad value for 'user_id' [ 187.790561][ T7577] fuse: Bad value for 'user_id' [ 187.842786][ T7581] netlink: 12 bytes leftover after parsing attributes in process `syz.1.194'. [ 187.912576][ T7580] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 189.782385][ T5897] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 190.052466][ T5897] usb 2-1: Using ep0 maxpacket: 8 [ 190.222059][ T5897] usb 2-1: New USB device found, idVendor=fd6d, idProduct=09ff, bcdDevice=66.9e [ 190.231688][ T5897] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 190.248169][ T5897] usb 2-1: Product: syz [ 190.253718][ T5897] usb 2-1: Manufacturer: syz [ 190.258773][ T5897] usb 2-1: SerialNumber: syz [ 190.266605][ T5897] usb 2-1: config 0 descriptor?? [ 192.126524][ T5956] usb 2-1: USB disconnect, device number 6 [ 194.521663][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.529099][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 208.258393][ T7743] netlink: 12 bytes leftover after parsing attributes in process `syz.7.204'. [ 208.347239][ T7741] Cannot find del_set index 2 as target [ 208.447125][ T7750] syz.6.206 (7750): /proc/7750/oom_adj is deprecated, please use /proc/7750/oom_score_adj instead. [ 209.440208][ T7748] fuse: Unknown parameter 'T01 [ 209.440208][ T7748] x0000000000000008' [ 210.381977][ T7757] netdevsim netdevsim6 netdevsim0: set [1, 1] type 2 family 0 port 54534 - 0 [ 210.402573][ T7757] netdevsim netdevsim6 netdevsim1: set [1, 1] type 2 family 0 port 54534 - 0 [ 210.411909][ T7757] netdevsim netdevsim6 netdevsim2: set [1, 1] type 2 family 0 port 54534 - 0 [ 210.421218][ T7757] netdevsim netdevsim6 netdevsim3: set [1, 1] type 2 family 0 port 54534 - 0 [ 210.433403][ T7757] netdevsim netdevsim6 netdevsim0: set [1, 2] type 2 family 0 port 34232 - 0 [ 210.442685][ T7757] netdevsim netdevsim6 netdevsim1: set [1, 2] type 2 family 0 port 34232 - 0 [ 210.451741][ T7757] netdevsim netdevsim6 netdevsim2: set [1, 2] type 2 family 0 port 34232 - 0 [ 210.460980][ T7757] netdevsim netdevsim6 netdevsim3: set [1, 2] type 2 family 0 port 34232 - 0 [ 211.463264][ T5897] usb 8-1: new full-speed USB device number 6 using dummy_hcd [ 211.668157][ T5897] usb 8-1: config index 0 descriptor too short (expected 45, got 37) [ 211.678112][ T5897] usb 8-1: config 0 descriptor has 1 excess byte, ignoring [ 211.707504][ T5897] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 212.477998][ T5897] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 212.489071][ T5897] usb 8-1: config 0 interface 0 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 212.502222][ T5897] usb 8-1: config 0 interface 0 has no altsetting 0 [ 212.511640][ T5897] usb 8-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00 [ 212.522268][ T5897] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 212.612017][ T5897] usb 8-1: config 0 descriptor?? [ 212.752957][ T7766] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 217.890575][ T5897] usbhid 8-1:0.0: can't add hid device: -32 [ 217.896730][ T5897] usbhid 8-1:0.0: probe with driver usbhid failed with error -32 [ 223.074486][ T9] usb 8-1: USB disconnect, device number 6 [ 223.484143][ T7796] netlink: 12 bytes leftover after parsing attributes in process `syz.6.219'. [ 224.624384][ T7815] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 225.033766][ T9] IPVS: starting estimator thread 0... [ 225.142521][ T7816] IPVS: using max 39 ests per chain, 93600 per kthread [ 225.435274][ T7820] netlink: 48 bytes leftover after parsing attributes in process `syz.7.223'. [ 225.908573][ T7828] hpfs: Bad magic ... probably not HPFS [ 226.835858][ T7832] random: crng reseeded on system resumption [ 228.112627][ T9] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 228.262564][ T9] usb 7-1: Using ep0 maxpacket: 8 [ 228.276772][ T9] usb 7-1: config 1 interface 0 altsetting 183 bulk endpoint 0x82 has invalid maxpacket 16 [ 228.291790][ T9] usb 7-1: config 1 interface 0 altsetting 183 bulk endpoint 0x3 has invalid maxpacket 64 [ 228.306635][ T9] usb 7-1: config 1 interface 0 has no altsetting 0 [ 228.321880][ T9] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 228.334794][ T9] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 228.345211][ T9] usb 7-1: Product: ꦔ࢔⛼ᑓᣦ⡒騿杢鎖鉶◽⦗욆愠榭唹焏贇ሴ斷㳉䒪⊱㓛㡓伂砠⣔ඵ䞏킇ꭘᯁ蜤事᳅涍㢉즺쇂ࢇ셐퐠튳﯀貣ᔭӁ [ 228.366945][ T9] usb 7-1: Manufacturer: 䲦⧬䮵䧚靋益٣샋땅淕␩ҫ僇⇇ਚ끾묊쩝䧶ᡝ䑃瓱痮裝剬딫૩ [ 228.382537][ T9] usb 7-1: SerialNumber: 埏獔곽憱혀܎쀣$잳᳊亹㋘礐鵜쎴ख़䗡뒡当쎲᜔纨饕ꨪ亮㬅ࢳ൅聮幵挃筦溑毾㦞鑄葈剼ӟ얖ꌝↂ鱞鮚뢃ꉩ徿⵴繒휢䴫э뮷蒸d [ 228.406205][ T7837] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 228.413938][ T7837] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 233.501110][ T9] usb 7-1: bad CDC descriptors [ 237.562568][ T54] Bluetooth: hci6: command 0x0406 tx timeout [ 238.229728][ T5956] usb 7-1: USB disconnect, device number 3 [ 238.345876][ T54] Bluetooth: hci1: unexpected event 0x06 length: 4 > 3 [ 239.294047][ T7884] netlink: 'syz.0.241': attribute type 1 has an invalid length. [ 239.733641][ T5897] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 240.355068][ T5149] Bluetooth: hci1: command tx timeout [ 240.372396][ T5897] usb 7-1: Using ep0 maxpacket: 8 [ 240.399725][ T7895] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 240.407456][ T5897] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 240.504637][ T5897] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 240.504676][ T5956] IPVS: starting estimator thread 0... [ 240.564733][ T5897] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 240.577626][ T5897] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 240.590928][ T5897] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 240.608384][ T5897] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 240.622567][ T7899] IPVS: using max 21 ests per chain, 50400 per kthread [ 240.875723][ T7904] netlink: 'syz.7.247': attribute type 10 has an invalid length. [ 240.905451][ T7904] team0: Failed to send options change via netlink (err -105) [ 240.914102][ T7904] team0: Port device netdevsim0 added [ 240.921274][ T5897] usb 7-1: GET_CAPABILITIES returned 0 [ 240.927458][ T5897] usbtmc 7-1:16.0: can't read capabilities [ 240.963095][ T35] team0: Failed to send port change of device netdevsim0 via netlink (err -105) [ 241.132049][ T7886] usb 7-1: usbtmc_ioctl_clear_in_halt returned -32 [ 241.144089][ T5897] usb 7-1: USB disconnect, device number 4 [ 241.590615][ T7924] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 241.802427][ T9] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 242.103015][ T7936] netlink: 28 bytes leftover after parsing attributes in process `syz.1.255'. [ 242.112025][ T7936] netlink: 28 bytes leftover after parsing attributes in process `syz.1.255'. [ 242.713536][ T54] Bluetooth: hci1: command 0x0406 tx timeout [ 242.769440][ T9] usb 8-1: Using ep0 maxpacket: 16 [ 242.863737][ T9] usb 8-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 242.882937][ T9] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 243.025040][ T9] usb 8-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 243.284447][ T9] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 243.367566][ T9] usb 8-1: Product: syz [ 243.371798][ T9] usb 8-1: Manufacturer: syz [ 243.387282][ T9] usb 8-1: SerialNumber: syz [ 243.394530][ T9] usb 8-1: config 0 descriptor?? [ 243.413510][ T9] em28xx 8-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 243.423149][ T9] em28xx 8-1:0.0: Audio interface 0 found (Vendor Class) [ 244.033978][ T9] em28xx 8-1:0.0: unknown em28xx chip ID (0) [ 244.058061][ T9] em28xx 8-1:0.0: Config register raw data: 0xfffffffb [ 244.283679][ T9] em28xx 8-1:0.0: AC97 chip type couldn't be determined [ 244.291149][ T9] em28xx 8-1:0.0: No AC97 audio processor [ 244.841615][ T9] usb 8-1: USB disconnect, device number 7 [ 244.849986][ T9] em28xx 8-1:0.0: Disconnecting em28xx [ 244.864340][ T9] em28xx 8-1:0.0: Freeing device [ 253.398514][ T7958] fuse: Bad value for 'group_id' [ 253.405593][ T7959] fuse: Bad value for 'group_id' [ 253.410597][ T7959] fuse: Bad value for 'group_id' [ 253.416577][ T7958] fuse: Bad value for 'group_id' [ 253.491690][ T7958] fuse: Unknown parameter '017777777777777777777770x0000000000000005' [ 255.412554][ T5895] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 255.549397][ T7985] FAULT_INJECTION: forcing a failure. [ 255.549397][ T7985] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 255.594863][ T7985] CPU: 1 UID: 0 PID: 7985 Comm: syz.7.265 Not tainted 6.12.0-syzkaller-09073-g9f16d5e6f220 #0 [ 255.605163][ T7985] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 255.615256][ T7985] Call Trace: [ 255.618564][ T7985] [ 255.621515][ T7985] dump_stack_lvl+0x241/0x360 [ 255.626249][ T7985] ? __pfx_dump_stack_lvl+0x10/0x10 [ 255.631480][ T7985] ? __pfx__printk+0x10/0x10 [ 255.634655][ T7988] netlink: 12 bytes leftover after parsing attributes in process `syz.1.271'. [ 255.636085][ T7985] ? snprintf+0xda/0x120 [ 255.649187][ T7985] should_fail_ex+0x3b0/0x4e0 [ 255.653897][ T7985] _copy_to_user+0x31/0xb0 [ 255.658342][ T7985] simple_read_from_buffer+0xca/0x150 [ 255.663752][ T7985] proc_fail_nth_read+0x1e9/0x250 [ 255.668799][ T7985] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 255.674359][ T7985] ? rw_verify_area+0x55e/0x6f0 [ 255.679205][ T7985] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 255.684757][ T7985] vfs_read+0x1fc/0xb70 [ 255.688910][ T7985] ? __pfx___mutex_lock+0x10/0x10 [ 255.693922][ T7985] ? __pfx_vfs_read+0x10/0x10 [ 255.698590][ T7985] ? __fget_files+0x2a/0x410 [ 255.703187][ T7985] ? __fget_files+0x395/0x410 [ 255.707879][ T7985] ? __fget_files+0x2a/0x410 [ 255.712467][ T7985] ksys_read+0x18f/0x2b0 [ 255.716707][ T7985] ? __pfx_ksys_read+0x10/0x10 [ 255.721463][ T7985] ? do_syscall_64+0x100/0x230 [ 255.726222][ T7985] ? do_syscall_64+0xb6/0x230 [ 255.730887][ T7985] do_syscall_64+0xf3/0x230 [ 255.735376][ T7985] ? clear_bhb_loop+0x35/0x90 [ 255.740043][ T7985] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 255.745929][ T7985] RIP: 0033:0x7f557cd7d25c [ 255.750342][ T7985] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 69 8e 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 bf 8e 02 00 48 [ 255.769948][ T7985] RSP: 002b:00007f557dbf7030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 255.778577][ T7985] RAX: ffffffffffffffda RBX: 00007f557cf36160 RCX: 00007f557cd7d25c [ 255.786549][ T7985] RDX: 000000000000000f RSI: 00007f557dbf70a0 RDI: 0000000000000008 [ 255.794522][ T7985] RBP: 00007f557dbf7090 R08: 0000000000000000 R09: 0000000000000000 [ 255.802517][ T7985] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 255.810502][ T7985] R13: 0000000000000000 R14: 00007f557cf36160 R15: 00007fff62ad1a78 [ 255.818516][ T7985] [ 255.957625][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.968759][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.006536][ T5895] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 256.033617][ T5895] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 256.053903][ T5895] usb 7-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 256.065386][ T5895] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 256.149966][ T5895] usb 7-1: config 0 descriptor?? [ 256.770400][ T5895] usbhid 7-1:0.0: can't add hid device: -71 [ 256.782436][ T5895] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 256.802055][ T5895] usb 7-1: USB disconnect, device number 5 [ 257.226063][ T5895] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 257.242480][ T46] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 257.354713][ T8017] overlay: ./file1 is not a directory [ 258.012409][ T46] usb 9-1: device descriptor read/64, error -71 [ 258.032896][ T5895] usb 7-1: too many configurations: 58, using maximum allowed: 8 [ 258.064035][ T5895] usb 7-1: unable to read config index 0 descriptor/start: -61 [ 258.072448][ T5895] usb 7-1: can't read configurations, error -61 [ 258.202426][ T5895] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 258.262417][ T46] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 258.366379][ T5895] usb 7-1: too many configurations: 58, using maximum allowed: 8 [ 258.381885][ T5895] usb 7-1: unable to read config index 0 descriptor/start: -61 [ 258.401230][ T5895] usb 7-1: can't read configurations, error -61 [ 258.411184][ T5895] usb usb7-port1: attempt power cycle [ 258.417337][ T46] usb 9-1: device descriptor read/64, error -71 [ 258.534535][ T46] usb usb9-port1: attempt power cycle [ 258.772563][ T5895] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 258.834619][ T5895] usb 7-1: too many configurations: 58, using maximum allowed: 8 [ 258.844721][ T5895] usb 7-1: unable to read config index 0 descriptor/start: -61 [ 258.853019][ T5895] usb 7-1: can't read configurations, error -61 [ 258.882435][ T46] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 258.903037][ T46] usb 9-1: device descriptor read/8, error -71 [ 258.982555][ T5895] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 259.014480][ T5895] usb 7-1: too many configurations: 58, using maximum allowed: 8 [ 259.023612][ T5895] usb 7-1: unable to read config index 0 descriptor/start: -61 [ 259.031219][ T5895] usb 7-1: can't read configurations, error -61 [ 259.038934][ T5895] usb usb7-port1: unable to enumerate USB device [ 259.142438][ T46] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 259.162810][ T46] usb 9-1: device descriptor read/8, error -71 [ 259.273919][ T46] usb usb9-port1: unable to enumerate USB device [ 271.641333][ T8065] FAULT_INJECTION: forcing a failure. [ 271.641333][ T8065] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 271.667767][ T8065] CPU: 1 UID: 0 PID: 8065 Comm: syz.0.288 Not tainted 6.12.0-syzkaller-09073-g9f16d5e6f220 #0 [ 271.678062][ T8065] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 271.688133][ T8065] Call Trace: [ 271.691407][ T8065] [ 271.694330][ T8065] dump_stack_lvl+0x241/0x360 [ 271.699027][ T8065] ? __pfx_dump_stack_lvl+0x10/0x10 [ 271.704218][ T8065] ? __pfx__printk+0x10/0x10 [ 271.708807][ T8065] ? __pfx_lock_release+0x10/0x10 [ 271.713825][ T8065] should_fail_ex+0x3b0/0x4e0 [ 271.718492][ T8065] _copy_from_iter+0x21f/0x1e70 [ 271.723353][ T8065] ? __virt_addr_valid+0x183/0x530 [ 271.728491][ T8065] ? __pfx_lock_release+0x10/0x10 [ 271.733559][ T8065] ? __alloc_skb+0x28f/0x440 [ 271.738173][ T8065] ? __pfx__copy_from_iter+0x10/0x10 [ 271.743490][ T8065] ? __virt_addr_valid+0x183/0x530 [ 271.748618][ T8065] ? __virt_addr_valid+0x183/0x530 [ 271.753745][ T8065] ? __virt_addr_valid+0x45f/0x530 [ 271.758877][ T8065] ? __check_object_size+0x48e/0x900 [ 271.764193][ T8065] netlink_sendmsg+0x73d/0xcb0 [ 271.768990][ T8065] ? __pfx_netlink_sendmsg+0x10/0x10 [ 271.774309][ T8065] ? __pfx_netlink_sendmsg+0x10/0x10 [ 271.779614][ T8065] __sock_sendmsg+0x221/0x270 [ 271.784581][ T8065] ____sys_sendmsg+0x52a/0x7e0 [ 271.789372][ T8065] ? __pfx_____sys_sendmsg+0x10/0x10 [ 271.794685][ T8065] ? __fget_files+0x2a/0x410 [ 271.799295][ T8065] ? __fget_files+0x2a/0x410 [ 271.803915][ T8065] __sys_sendmsg+0x269/0x350 [ 271.808533][ T8065] ? __pfx_lock_release+0x10/0x10 [ 271.813589][ T8065] ? __pfx___sys_sendmsg+0x10/0x10 [ 271.818728][ T8065] ? __pfx_vfs_write+0x10/0x10 [ 271.823543][ T8065] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 271.829958][ T8065] ? do_syscall_64+0x100/0x230 [ 271.834746][ T8065] ? do_syscall_64+0xb6/0x230 [ 271.839457][ T8065] do_syscall_64+0xf3/0x230 [ 271.843989][ T8065] ? clear_bhb_loop+0x35/0x90 [ 271.848691][ T8065] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 271.854635][ T8065] RIP: 0033:0x7f1c6097e819 [ 271.859071][ T8065] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 271.878714][ T8065] RSP: 002b:00007f1c616d3038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 271.887231][ T8065] RAX: ffffffffffffffda RBX: 00007f1c60b36080 RCX: 00007f1c6097e819 [ 271.895235][ T8065] RDX: 0000000004004800 RSI: 0000000020000140 RDI: 0000000000000008 [ 271.903249][ T8065] RBP: 00007f1c616d3090 R08: 0000000000000000 R09: 0000000000000000 [ 271.911271][ T8065] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 271.919288][ T8065] R13: 0000000000000000 R14: 00007f1c60b36080 R15: 00007ffeb882e8b8 [ 271.927314][ T8065] [ 283.667050][ T5149] Bluetooth: hci1: command 0x0406 tx timeout [ 285.807263][ T8137] netlink: 8 bytes leftover after parsing attributes in process `syz.1.310'. [ 286.232727][ T8152] netlink: 36 bytes leftover after parsing attributes in process `syz.8.314'. [ 286.781917][ T8120] netlink: 'syz.7.306': attribute type 32 has an invalid length. [ 288.069892][ T8175] FAULT_INJECTION: forcing a failure. [ 288.069892][ T8175] name failslab, interval 1, probability 0, space 0, times 1 [ 288.084974][ T8175] CPU: 1 UID: 0 PID: 8175 Comm: syz.6.319 Not tainted 6.12.0-syzkaller-09073-g9f16d5e6f220 #0 [ 288.085006][ T8175] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 288.085020][ T8175] Call Trace: [ 288.085029][ T8175] [ 288.085039][ T8175] dump_stack_lvl+0x241/0x360 [ 288.085067][ T8175] ? __pfx_dump_stack_lvl+0x10/0x10 [ 288.085088][ T8175] ? __pfx__printk+0x10/0x10 [ 288.085117][ T8175] ? __kmalloc_cache_noprof+0x44/0x2c0 [ 288.085138][ T8175] ? __pfx___might_resched+0x10/0x10 [ 288.085169][ T8175] should_fail_ex+0x3b0/0x4e0 [ 288.085195][ T8175] should_failslab+0xac/0x100 [ 288.085215][ T8175] ? netdev_name_node_alt_create+0x125/0x360 [ 288.085239][ T8175] __kmalloc_cache_noprof+0x6c/0x2c0 [ 288.085258][ T8175] ? trace_kmalloc+0x1f/0xd0 [ 288.085275][ T8175] ? full_name_hash+0xb1/0xe0 [ 288.085301][ T8175] netdev_name_node_alt_create+0x125/0x360 [ 288.085330][ T8175] rtnl_linkprop+0x4e4/0x8b0 [ 288.085349][ T8175] ? __lock_acquire+0x1397/0x2100 [ 288.085374][ T8175] ? __pfx_rtnl_linkprop+0x10/0x10 [ 288.085481][ T8175] ? __pfx_rtnl_newlinkprop+0x10/0x10 [ 288.085508][ T8175] rtnetlink_rcv_msg+0x73f/0xcf0 [ 288.085531][ T8175] ? rtnetlink_rcv_msg+0x1a7/0xcf0 [ 288.085560][ T8175] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 288.085591][ T8175] ? ref_tracker_free+0x643/0x7e0 [ 288.085655][ T8175] netlink_rcv_skb+0x1e3/0x430 [ 288.085696][ T8175] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 288.085723][ T8175] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 288.085766][ T8175] ? netlink_deliver_tap+0x2e/0x1b0 [ 288.085790][ T8175] netlink_unicast+0x7f6/0x990 [ 288.085818][ T8175] ? __pfx_netlink_unicast+0x10/0x10 [ 288.085835][ T8175] ? __virt_addr_valid+0x183/0x530 [ 288.085873][ T8175] ? __check_object_size+0x48e/0x900 [ 288.085895][ T8175] netlink_sendmsg+0x8e4/0xcb0 [ 288.085924][ T8175] ? __pfx_netlink_sendmsg+0x10/0x10 [ 288.085959][ T8175] ? __pfx_netlink_sendmsg+0x10/0x10 [ 288.085979][ T8175] __sock_sendmsg+0x221/0x270 [ 288.086009][ T8175] ____sys_sendmsg+0x52a/0x7e0 [ 288.086045][ T8175] ? __pfx_____sys_sendmsg+0x10/0x10 [ 288.086065][ T8175] ? __fget_files+0x2a/0x410 [ 288.086090][ T8175] ? __fget_files+0x2a/0x410 [ 288.086120][ T8175] __sys_sendmsg+0x269/0x350 [ 288.086143][ T8175] ? __pfx_lock_release+0x10/0x10 [ 288.086165][ T8175] ? __pfx___sys_sendmsg+0x10/0x10 [ 288.086204][ T8175] ? __pfx_vfs_write+0x10/0x10 [ 288.086254][ T8175] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 288.086276][ T8175] ? do_syscall_64+0x100/0x230 [ 288.086299][ T8175] ? do_syscall_64+0xb6/0x230 [ 288.086321][ T8175] do_syscall_64+0xf3/0x230 [ 288.086341][ T8175] ? clear_bhb_loop+0x35/0x90 [ 288.086376][ T8175] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 288.086403][ T8175] RIP: 0033:0x7f0e1e17e819 [ 288.086425][ T8175] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 288.086442][ T8175] RSP: 002b:00007f0e1f034038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 288.086465][ T8175] RAX: ffffffffffffffda RBX: 00007f0e1e336080 RCX: 00007f0e1e17e819 [ 288.086486][ T8175] RDX: 0000000004004800 RSI: 0000000020000140 RDI: 0000000000000008 [ 288.086500][ T8175] RBP: 00007f0e1f034090 R08: 0000000000000000 R09: 0000000000000000 [ 288.086513][ T8175] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 288.086526][ T8175] R13: 0000000000000000 R14: 00007f0e1e336080 R15: 00007ffe8da70088 [ 288.086556][ T8175] [ 299.322819][ T8201] 9pnet_fd: Insufficient options for proto=fd [ 300.962774][ T5956] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 301.156831][ T8230] IPv6: sit1: Disabled Multicast RS [ 301.166603][ T8230] sit1: entered allmulticast mode [ 301.435438][ T5956] usb 8-1: Using ep0 maxpacket: 16 [ 301.494616][ T5956] usb 8-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 301.507048][ T5956] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 301.521194][ T5956] usb 8-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 301.531643][ T5956] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 301.651238][ T5956] usb 8-1: Product: syz [ 301.655734][ T5956] usb 8-1: Manufacturer: syz [ 301.660362][ T5956] usb 8-1: SerialNumber: syz [ 301.842410][ T5956] usb 8-1: config 0 descriptor?? [ 301.871443][ T5956] em28xx 8-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 301.961738][ T5956] em28xx 8-1:0.0: Audio interface 0 found (Vendor Class) [ 302.089883][ T8242] netlink: 4 bytes leftover after parsing attributes in process `syz.0.337'. [ 302.568839][ T8250] Cannot find del_set index 2 as target [ 303.217592][ T8255] FAULT_INJECTION: forcing a failure. [ 303.217592][ T8255] name failslab, interval 1, probability 0, space 0, times 0 [ 303.230650][ T8255] CPU: 1 UID: 0 PID: 8255 Comm: syz.8.342 Not tainted 6.12.0-syzkaller-09073-g9f16d5e6f220 #0 [ 303.240931][ T8255] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 303.251027][ T8255] Call Trace: [ 303.254329][ T8255] [ 303.257274][ T8255] dump_stack_lvl+0x241/0x360 [ 303.261980][ T8255] ? __pfx_dump_stack_lvl+0x10/0x10 [ 303.267207][ T8255] ? __pfx__printk+0x10/0x10 [ 303.271829][ T8255] ? fs_reclaim_acquire+0x93/0x130 [ 303.276970][ T8255] ? __pfx___might_resched+0x10/0x10 [ 303.282294][ T8255] should_fail_ex+0x3b0/0x4e0 [ 303.287007][ T8255] ? tomoyo_realpath_from_path+0xcf/0x5e0 [ 303.292756][ T8255] should_failslab+0xac/0x100 [ 303.297458][ T8255] ? tomoyo_realpath_from_path+0xcf/0x5e0 [ 303.303203][ T8255] __kmalloc_noprof+0xd8/0x400 [ 303.307996][ T8255] tomoyo_realpath_from_path+0xcf/0x5e0 [ 303.313585][ T8255] tomoyo_path_number_perm+0x236/0x860 [ 303.319076][ T8255] ? __lock_acquire+0x1397/0x2100 [ 303.324132][ T8255] ? tomoyo_path_number_perm+0x206/0x860 [ 303.329791][ T8255] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 303.335843][ T8255] ? __fget_files+0x2a/0x410 [ 303.340463][ T8255] ? __fget_files+0x2a/0x410 [ 303.345083][ T8255] security_file_ioctl+0xc6/0x2a0 [ 303.350136][ T8255] __se_sys_ioctl+0x46/0x170 [ 303.354771][ T8255] do_syscall_64+0xf3/0x230 [ 303.359294][ T8255] ? clear_bhb_loop+0x35/0x90 [ 303.363990][ T8255] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 303.369907][ T8255] RIP: 0033:0x7f0d2817e819 [ 303.374350][ T8255] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 303.394074][ T8255] RSP: 002b:00007f0d29054038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 303.402531][ T8255] RAX: ffffffffffffffda RBX: 00007f0d28335fa0 RCX: 00007f0d2817e819 [ 303.410527][ T8255] RDX: 0000000020000040 RSI: 0000000000008927 RDI: 0000000000000003 [ 303.418514][ T8255] RBP: 00007f0d29054090 R08: 0000000000000000 R09: 0000000000000000 [ 303.426506][ T8255] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 303.434500][ T8255] R13: 0000000000000000 R14: 00007f0d28335fa0 R15: 00007ffe76361d88 [ 303.442516][ T8255] [ 303.473274][ T5956] em28xx 8-1:0.0: unknown em28xx chip ID (0) [ 303.481593][ T5956] em28xx 8-1:0.0: Config register raw data: 0xfffffffb [ 303.484560][ T8260] netlink: 4 bytes leftover after parsing attributes in process `syz.6.343'. [ 303.489523][ T5956] em28xx 8-1:0.0: AC97 chip type couldn't be determined [ 303.502037][ T8260] netlink: 4 bytes leftover after parsing attributes in process `syz.6.343'. [ 303.505020][ T5956] em28xx 8-1:0.0: No AC97 audio processor [ 303.530267][ T8255] ERROR: Out of memory at tomoyo_realpath_from_path. [ 304.112520][ T5149] Bluetooth: hci2: command 0x0406 tx timeout [ 304.783283][ T5893] usb 8-1: USB disconnect, device number 8 [ 304.789911][ T5893] em28xx 8-1:0.0: Disconnecting em28xx [ 304.816809][ T5893] em28xx 8-1:0.0: Freeing device [ 314.342142][ T8280] netlink: 'syz.0.350': attribute type 10 has an invalid length. [ 314.414981][ T8280] team0: Failed to send options change via netlink (err -105) [ 314.422589][ T8280] team0: Port device netdevsim0 added [ 314.559075][ T52] team0: Failed to send port change of device netdevsim0 via netlink (err -105) [ 314.587730][ T8280] netlink: 'syz.0.350': attribute type 10 has an invalid length. [ 314.667622][ T8280] team0: Failed to send options change via netlink (err -105) [ 314.675460][ T8280] team0: Failed to send port change of device netdevsim0 via netlink (err -105) [ 314.685339][ T8280] team0: Port device netdevsim0 removed [ 314.694401][ T8280] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 316.508344][ T8306] FAULT_INJECTION: forcing a failure. [ 316.508344][ T8306] name failslab, interval 1, probability 0, space 0, times 0 [ 316.521384][ T8306] CPU: 1 UID: 0 PID: 8306 Comm: syz.0.355 Not tainted 6.12.0-syzkaller-09073-g9f16d5e6f220 #0 [ 316.531660][ T8306] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 316.541728][ T8306] Call Trace: [ 316.545017][ T8306] [ 316.547964][ T8306] dump_stack_lvl+0x241/0x360 [ 316.552669][ T8306] ? __pfx_dump_stack_lvl+0x10/0x10 [ 316.557881][ T8306] ? __pfx__printk+0x10/0x10 [ 316.562489][ T8306] ? fs_reclaim_acquire+0x93/0x130 [ 316.567618][ T8306] ? __pfx___might_resched+0x10/0x10 [ 316.572918][ T8306] ? dynamic_dname+0x141/0x1b0 [ 316.577696][ T8306] should_fail_ex+0x3b0/0x4e0 [ 316.582376][ T8306] ? tomoyo_encode+0x26f/0x540 [ 316.587147][ T8306] should_failslab+0xac/0x100 [ 316.591822][ T8306] ? tomoyo_encode+0x26f/0x540 [ 316.596584][ T8306] __kmalloc_noprof+0xd8/0x400 [ 316.601348][ T8306] tomoyo_encode+0x26f/0x540 [ 316.605938][ T8306] ? __pfx_sockfs_dname+0x10/0x10 [ 316.610956][ T8306] tomoyo_realpath_from_path+0x59e/0x5e0 [ 316.616593][ T8306] tomoyo_path_number_perm+0x236/0x860 [ 316.622044][ T8306] ? __lock_acquire+0x1397/0x2100 [ 316.627066][ T8306] ? tomoyo_path_number_perm+0x206/0x860 [ 316.632702][ T8306] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 316.638707][ T8306] ? __fget_files+0x2a/0x410 [ 316.643292][ T8306] ? __fget_files+0x2a/0x410 [ 316.648143][ T8306] security_file_ioctl+0xc6/0x2a0 [ 316.653167][ T8306] __se_sys_ioctl+0x46/0x170 [ 316.657757][ T8306] do_syscall_64+0xf3/0x230 [ 316.662271][ T8306] ? clear_bhb_loop+0x35/0x90 [ 316.666943][ T8306] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 316.672835][ T8306] RIP: 0033:0x7f1c6097e819 [ 316.677243][ T8306] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 316.696863][ T8306] RSP: 002b:00007f1c616f4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 316.705288][ T8306] RAX: ffffffffffffffda RBX: 00007f1c60b35fa0 RCX: 00007f1c6097e819 [ 316.713266][ T8306] RDX: 0000000020000040 RSI: 0000000000008927 RDI: 0000000000000003 [ 316.721234][ T8306] RBP: 00007f1c616f4090 R08: 0000000000000000 R09: 0000000000000000 [ 316.729201][ T8306] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 316.737168][ T8306] R13: 0000000000000000 R14: 00007f1c60b35fa0 R15: 00007ffeb882e8b8 [ 316.745148][ T8306] [ 316.756125][ T8306] ERROR: Out of memory at tomoyo_realpath_from_path. [ 316.901202][ T8310] netlink: 4 bytes leftover after parsing attributes in process `syz.1.356'. [ 316.914551][ T8310] netlink: 4 bytes leftover after parsing attributes in process `syz.1.356'. [ 317.017451][ T8290] netlink: 8 bytes leftover after parsing attributes in process `syz.6.352'. [ 317.362537][ T8330] netlink: 'syz.8.361': attribute type 10 has an invalid length. [ 317.397197][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.404488][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.454634][ T8332] netlink: 'syz.8.361': attribute type 10 has an invalid length. [ 317.528704][ T5893] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 317.847153][ T8330] team0: Failed to send options change via netlink (err -105) [ 317.855029][ T8330] team0: Port device netdevsim0 added [ 317.942938][ T8332] team0: Failed to send port change of device netdevsim0 via netlink (err -105) [ 318.043891][ T5893] usb 2-1: config 0 has no interfaces? [ 318.075283][ T5893] usb 2-1: New USB device found, idVendor=abcd, idProduct=cdee, bcdDevice= 5.b9 [ 318.472362][ T5893] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 318.492718][ T8332] team0: Failed to send options change via netlink (err -105) [ 318.500527][ T8332] team0: Failed to send port change of device netdevsim0 via netlink (err -105) [ 318.512054][ T5893] usb 2-1: config 0 descriptor?? [ 318.516267][ T8332] team0: Port device netdevsim0 removed [ 318.527164][ T8332] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 318.601617][ T8339] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 318.841473][ T8] usb 2-1: USB disconnect, device number 7 [ 329.989088][ T8366] netlink: 4 bytes leftover after parsing attributes in process `syz.1.371'. [ 330.000272][ T8366] netlink: 4 bytes leftover after parsing attributes in process `syz.1.371'. [ 330.279245][ T8373] openvswitch: netlink: Missing key (keys=40, expected=80) [ 330.290772][ T8374] openvswitch: netlink: Missing key (keys=40, expected=80) [ 333.043931][ T8384] netlink: 8 bytes leftover after parsing attributes in process `syz.0.377'. [ 333.272449][ T5893] usb 8-1: new full-speed USB device number 9 using dummy_hcd [ 333.664180][ T5893] usb 8-1: device descriptor read/64, error -71 [ 334.582509][ T5893] usb 8-1: new full-speed USB device number 10 using dummy_hcd [ 334.762484][ T5893] usb 8-1: device descriptor read/64, error -71 [ 334.873571][ T5893] usb usb8-port1: attempt power cycle [ 335.212388][ T5893] usb 8-1: new full-speed USB device number 11 using dummy_hcd [ 335.232862][ T5893] usb 8-1: device descriptor read/8, error -71 [ 335.472503][ T5893] usb 8-1: new full-speed USB device number 12 using dummy_hcd [ 335.503031][ T5893] usb 8-1: device descriptor read/8, error -71 [ 335.616620][ T5893] usb usb8-port1: unable to enumerate USB device [ 344.403671][ T8402] netlink: 48 bytes leftover after parsing attributes in process `syz.7.381'. [ 344.912486][ T5956] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 345.676863][ T5956] usb 1-1: device descriptor read/64, error -71 [ 345.962450][ T5956] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 346.179199][ T5149] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 346.225430][ T5149] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 346.234524][ T5956] usb 1-1: device descriptor read/64, error -71 [ 346.255702][ T5149] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 346.278214][ T5149] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 346.306096][ T8426] sp0: Synchronizing with TNC [ 346.315214][ T5149] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 346.323277][ T5149] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 346.342957][ T5956] usb usb1-port1: attempt power cycle [ 346.395549][ T8428] batadv1: entered promiscuous mode [ 346.401951][ T8428] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 346.516962][ T8426] Falling back ldisc for ttyS3. [ 347.472410][ T5956] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 347.635005][ T5956] usb 1-1: device descriptor read/8, error -71 [ 348.172841][ T5956] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 348.300636][ T5956] usb 1-1: Using ep0 maxpacket: 8 [ 348.356828][ T5149] Bluetooth: hci4: command tx timeout [ 348.373659][ T5956] usb 1-1: config 179 has an invalid interface number: 65 but max is 0 [ 348.381690][ T5896] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 348.389851][ T5956] usb 1-1: config 179 has no interface number 0 [ 348.396987][ T5956] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 348.408778][ T5956] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 348.409805][ T5896] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 348.420884][ T5956] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 348.428613][ T8449] Bluetooth: MGMT ver 1.23 [ 348.441521][ T5956] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 348.457139][ T5956] usb 1-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 348.478103][ T8423] chnl_net:caif_netlink_parms(): no params data found [ 348.568439][ T5956] usb 1-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 348.577619][ T5956] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 348.592652][ T5896] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 348.647277][ T8441] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 348.654947][ T5896] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 348.702650][ T5896] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 348.734565][ T5896] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 348.742670][ T5896] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 348.751304][ T5896] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 348.759121][ T5896] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 348.767158][ T5896] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 348.774962][ T5896] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 348.782951][ T5896] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 348.790372][ T5896] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 348.798027][ T5896] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 348.805601][ T5896] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 348.813088][ T5896] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 348.820496][ T5896] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 348.828395][ T5896] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 348.835859][ T5896] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 348.843911][ T5896] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 348.851333][ T5896] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 348.859341][ T5896] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 348.866922][ T5896] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 348.874394][ T5896] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 348.881804][ T5896] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 348.899222][ T5896] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 348.926991][ T5896] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 348.947297][ T5896] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 348.980733][ T8461] QAT: Stopping all acceleration devices. [ 348.988456][ T5896] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 349.027472][ T5896] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 349.075309][ T5956] usb 1-1: USB disconnect, device number 13 [ 349.075376][ C1] xpad 1-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 349.075453][ C1] xpad 1-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 349.092296][ T5896] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 349.620052][ T5896] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 349.815310][ T5896] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 349.889614][ T8423] bridge0: port 1(bridge_slave_0) entered blocking state [ 349.904236][ T5896] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 349.920310][ T8423] bridge0: port 1(bridge_slave_0) entered disabled state [ 349.936553][ T5896] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 349.948528][ T8423] bridge_slave_0: entered allmulticast mode [ 349.957542][ T5896] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 349.957699][ T8423] bridge_slave_0: entered promiscuous mode [ 349.971357][ T5896] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 349.971392][ T5896] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 349.988999][ T8423] bridge0: port 2(bridge_slave_1) entered blocking state [ 349.996379][ T8423] bridge0: port 2(bridge_slave_1) entered disabled state [ 349.997801][ T5896] hid-generic 0000:0000:0000.0004: hidraw0: HID v0.00 Device [syz0] on syz0 [ 350.003697][ T8423] bridge_slave_1: entered allmulticast mode [ 350.021843][ T8423] bridge_slave_1: entered promiscuous mode [ 350.107486][ T8423] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 350.119500][ T8423] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 350.155476][ T8423] team0: Port device team_slave_0 added [ 350.164804][ T8423] team0: Port device team_slave_1 added [ 350.190238][ T8423] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 350.198204][ T8423] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 350.224614][ T8423] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 350.237926][ T8423] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 350.245360][ T8423] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 350.271704][ T8423] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 350.324675][ T8423] hsr_slave_0: entered promiscuous mode [ 350.330944][ T8423] hsr_slave_1: entered promiscuous mode [ 350.337407][ T8423] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 350.345516][ T8423] Cannot create hsr debugfs directory [ 350.443149][ T5149] Bluetooth: hci4: command tx timeout [ 350.469440][ T8423] 8021q: adding VLAN 0 to HW filter on device bond0 [ 350.496909][ T8423] 8021q: adding VLAN 0 to HW filter on device team0 [ 350.511240][ T1086] bridge0: port 1(bridge_slave_0) entered blocking state [ 350.518375][ T1086] bridge0: port 1(bridge_slave_0) entered forwarding state [ 350.535254][ T1086] bridge0: port 2(bridge_slave_1) entered blocking state [ 350.542457][ T1086] bridge0: port 2(bridge_slave_1) entered forwarding state [ 350.683264][ T8423] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 350.846562][ T8423] veth0_vlan: entered promiscuous mode [ 350.859549][ T8423] veth1_vlan: entered promiscuous mode [ 350.886003][ T8423] veth0_macvtap: entered promiscuous mode [ 350.899339][ T8423] veth1_macvtap: entered promiscuous mode [ 350.915550][ T8423] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 350.926960][ T8423] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 350.936926][ T8423] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 350.947550][ T8423] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 350.957538][ T8423] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 350.968319][ T8423] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 350.978421][ T8423] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 350.990025][ T8423] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 351.001912][ T8423] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 351.015926][ T8423] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 351.029510][ T8423] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 351.041066][ T8423] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 351.052471][ T8423] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 351.063079][ T8423] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 351.073949][ T8423] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 351.085439][ T8423] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 351.097889][ T8423] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 351.109204][ T8423] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 351.183008][ T1313] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 351.206657][ T1313] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 351.227630][ T5966] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 351.236355][ T5966] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 352.522509][ T5149] Bluetooth: hci4: command tx timeout [ 354.592376][ T5149] Bluetooth: hci4: command tx timeout [ 360.115835][ T8495] (unnamed net_device) (uninitialized): ARP target 1.0.0.0 is already present [ 360.142404][ T8495] (unnamed net_device) (uninitialized): option arp_ip_target: invalid value (1) [ 360.794232][ T8510] Cannot find del_set index 2 as target [ 360.842579][ T5893] usb 9-1: new high-speed USB device number 6 using dummy_hcd [ 361.022368][ T5893] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 361.052393][ T5893] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 361.203878][ T5893] usb 9-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 361.331056][ T5893] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 361.374861][ T5893] usb 9-1: config 0 descriptor?? [ 361.615448][ T8505] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 361.650937][ T8505] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 361.753210][ T5893] usbhid 9-1:0.0: can't add hid device: -71 [ 361.789388][ T5893] usbhid 9-1:0.0: probe with driver usbhid failed with error -71 [ 361.808875][ T5893] usb 9-1: USB disconnect, device number 6 [ 361.913514][ T9] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 362.147452][ T9] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 362.241201][ T9] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 362.267607][ T9] usb 1-1: config 1 has no interface number 0 [ 362.300109][ T9] usb 1-1: config 1 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 362.336900][ T9] usb 1-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping [ 362.822525][ T9] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 362.847339][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 362.886222][ T9] usb 1-1: Product: syz [ 362.905707][ T9] usb 1-1: Manufacturer: syz [ 362.917215][ T9] usb 1-1: SerialNumber: syz [ 364.221199][ T9] cdc_ncm 1-1:1.1: bind() failure [ 364.250400][ T9] usb 1-1: USB disconnect, device number 14 [ 376.562318][ T8578] Cannot find del_set index 2 as target [ 376.747630][ T8585] netlink: 'syz.7.422': attribute type 10 has an invalid length. [ 376.812560][ T8586] netlink: 'syz.7.422': attribute type 10 has an invalid length. [ 377.704050][ T8586] team0: Port device netdevsim0 removed [ 377.731002][ T8586] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 378.175517][ T25] IPVS: starting estimator thread 0... [ 378.262313][ T8606] IPVS: using max 22 ests per chain, 52800 per kthread [ 378.839358][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.846039][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.131715][ T8610] netlink: 'syz.0.426': attribute type 3 has an invalid length. [ 379.144842][ T8610] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.426'. [ 379.162848][ T8612] netlink: 28 bytes leftover after parsing attributes in process `syz.8.427'. [ 379.173597][ T8612] netlink: 28 bytes leftover after parsing attributes in process `syz.8.427'. [ 379.279495][ T8612] syz_tun: entered promiscuous mode [ 379.288225][ T8612] batadv_slave_1: entered promiscuous mode [ 379.301071][ T8616] netlink: 'syz.8.427': attribute type 322 has an invalid length. [ 379.999997][ T8619] netlink: 200 bytes leftover after parsing attributes in process `syz.0.428'. [ 380.163375][ T8622] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 380.189027][ T8622] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 380.282891][ T5893] usb 8-1: new full-speed USB device number 13 using dummy_hcd [ 380.449722][ T5893] usb 8-1: config 0 has an invalid interface number: 133 but max is 0 [ 380.467979][ T5893] usb 8-1: config 0 has no interface number 0 [ 380.497299][ T5893] usb 8-1: New USB device found, idVendor=06cd, idProduct=0121, bcdDevice=dd.3d [ 380.502562][ T8637] Cannot find del_set index 2 as target [ 380.532575][ T5893] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 380.562451][ T5893] usb 8-1: Product: syz [ 380.572123][ T5893] usb 8-1: Manufacturer: syz [ 380.581618][ T5893] usb 8-1: SerialNumber: syz [ 380.599368][ T5893] usb 8-1: config 0 descriptor?? [ 380.782456][ T46] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 380.814290][ T5893] keyspan 8-1:0.133: Keyspan 1 port adapter converter detected [ 380.944075][ T46] usb 1-1: Using ep0 maxpacket: 32 [ 380.954723][ T46] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1023 [ 380.955003][ T5893] keyspan 8-1:0.133: found no endpoint descriptor for endpoint 81 [ 380.968903][ T46] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 32 [ 381.004155][ T8612] netlink: 28 bytes leftover after parsing attributes in process `syz.8.427'. [ 381.017367][ T8612] netlink: 52 bytes leftover after parsing attributes in process `syz.8.427'. [ 381.038084][ T5893] keyspan 8-1:0.133: found no endpoint descriptor for endpoint 1 [ 381.121592][ T5893] keyspan 8-1:0.133: found no endpoint descriptor for endpoint 2 [ 381.162010][ T5893] usb 8-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 381.322787][ T5893] usb 8-1: USB disconnect, device number 13 [ 381.368556][ T5893] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 381.382794][ T5893] keyspan 8-1:0.133: device disconnected [ 383.558645][ T46] usb 1-1: string descriptor 0 read error: -71 [ 383.575969][ T46] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 383.585474][ T46] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 383.597434][ T46] usb 1-1: can't set config #1, error -71 [ 383.605291][ T46] usb 1-1: USB disconnect, device number 15 [ 396.502334][ T46] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 396.730353][ T46] usb 10-1: Using ep0 maxpacket: 16 [ 396.737269][ T46] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 396.749654][ T46] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 396.760411][ T46] usb 10-1: New USB device found, idVendor=05ac, idProduct=8241, bcdDevice= 0.00 [ 396.782347][ T46] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 396.833371][ T46] usb 10-1: config 0 descriptor?? [ 397.098426][ T54] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 397.200812][ T5842] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 397.236852][ T5844] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 397.255139][ T8660] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 397.263861][ T8660] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 397.276897][ T8662] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 397.279243][ T8660] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 397.287392][ T8646] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 397.295667][ T8660] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 397.317352][ T8660] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 397.328993][ T8660] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 397.343943][ T8664] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 397.351089][ T8662] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 397.354890][ T8664] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 397.379141][ T8662] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 397.387519][ T8664] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 397.391652][ T8660] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 397.397464][ T8664] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 397.408781][ T8660] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 397.409048][ T8665] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 397.427770][ T46] input: HID 05ac:8241 as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.0/0003:05AC:8241.0005/input/input13 [ 397.441398][ T8664] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 397.442068][ T8665] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 397.448563][ T8662] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 397.464083][ T8664] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 397.464359][ T8660] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 397.599412][ T7301] syz_tun (unregistering): left promiscuous mode [ 397.617273][ T46] appleir 0003:05AC:8241.0005: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 05ac:8241] on usb-dummy_hcd.9-1/input0 [ 397.801281][ T1313] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 397.884410][ T1313] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 397.949375][ T1313] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 398.011700][ T1313] bond0: (slave netdevsim0): Releasing backup interface [ 398.020669][ T1313] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 398.225904][ T8651] chnl_net:caif_netlink_parms(): no params data found [ 398.243635][ T8659] chnl_net:caif_netlink_parms(): no params data found [ 398.364216][ T1313] bridge_slave_1: left allmulticast mode [ 398.369995][ T1313] bridge_slave_1: left promiscuous mode [ 398.375924][ T1313] bridge0: port 2(bridge_slave_1) entered disabled state [ 398.406850][ T970] usb 10-1: USB disconnect, device number 2 [ 398.419699][ T1313] bridge_slave_0: left allmulticast mode [ 398.427930][ T1313] bridge_slave_0: left promiscuous mode [ 398.433994][ T1313] bridge0: port 1(bridge_slave_0) entered disabled state [ 398.798900][ T1313] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 398.811413][ T1313] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 398.821768][ T1313] bond0 (unregistering): Released all slaves [ 398.837179][ T8654] chnl_net:caif_netlink_parms(): no params data found [ 398.981911][ T8652] chnl_net:caif_netlink_parms(): no params data found [ 399.029973][ T8659] bridge0: port 1(bridge_slave_0) entered blocking state [ 399.037985][ T8659] bridge0: port 1(bridge_slave_0) entered disabled state [ 399.045827][ T8659] bridge_slave_0: entered allmulticast mode [ 399.057074][ T8659] bridge_slave_0: entered promiscuous mode [ 399.086598][ T8687] netlink: 200 bytes leftover after parsing attributes in process `syz.9.442'. [ 399.102617][ T8659] bridge0: port 2(bridge_slave_1) entered blocking state [ 399.109753][ T8659] bridge0: port 2(bridge_slave_1) entered disabled state [ 399.140026][ T8659] bridge_slave_1: entered allmulticast mode [ 399.148045][ T8659] bridge_slave_1: entered promiscuous mode [ 399.258635][ T8659] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 399.418421][ T8651] bridge0: port 1(bridge_slave_0) entered blocking state [ 399.465322][ T8651] bridge0: port 1(bridge_slave_0) entered disabled state [ 399.512612][ T8651] bridge_slave_0: entered allmulticast mode [ 399.528790][ T8651] bridge_slave_0: entered promiscuous mode [ 399.552788][ T5844] Bluetooth: hci6: command tx timeout [ 399.555100][ T54] Bluetooth: hci3: command tx timeout [ 399.558638][ T8664] Bluetooth: hci0: command tx timeout [ 399.564945][ T8660] Bluetooth: hci5: command tx timeout [ 399.600497][ T8659] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 399.690918][ T1313] batadv_slave_1: left promiscuous mode [ 399.732378][ T1313] hsr_slave_0: left promiscuous mode [ 399.740459][ T1313] hsr_slave_1: left promiscuous mode [ 399.752990][ T1313] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 399.770947][ T1313] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 399.781617][ T1313] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 399.790378][ T1313] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 399.813417][ T1313] veth1_macvtap: left promiscuous mode [ 399.818993][ T1313] veth0_macvtap: left promiscuous mode [ 399.824931][ T1313] veth1_vlan: left promiscuous mode [ 399.830217][ T1313] veth0_vlan: left promiscuous mode [ 399.932499][ T8] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 400.093152][ T8] usb 10-1: too many configurations: 241, using maximum allowed: 8 [ 400.116001][ T8] usb 10-1: config 1 has an invalid descriptor of length 9, skipping remainder of the config [ 400.140940][ T8] usb 10-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 6 [ 400.166338][ T8] usb 10-1: config 1 has an invalid descriptor of length 9, skipping remainder of the config [ 400.181931][ T8] usb 10-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 6 [ 400.204803][ T8] usb 10-1: config 1 has an invalid descriptor of length 9, skipping remainder of the config [ 400.226970][ T8] usb 10-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 6 [ 400.252749][ T8] usb 10-1: config 1 has an invalid descriptor of length 9, skipping remainder of the config [ 400.263959][ T8] usb 10-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 6 [ 400.282773][ T8] usb 10-1: config 1 has an invalid descriptor of length 9, skipping remainder of the config [ 400.305737][ T8] usb 10-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 6 [ 400.325201][ T8] usb 10-1: config 1 has an invalid descriptor of length 9, skipping remainder of the config [ 400.337208][ T8] usb 10-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 6 [ 400.355230][ T8] usb 10-1: config 1 has an invalid descriptor of length 9, skipping remainder of the config [ 400.365644][ T8] usb 10-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 6 [ 400.380278][ T8] usb 10-1: config 1 has an invalid descriptor of length 9, skipping remainder of the config [ 400.390764][ T8] usb 10-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 6 [ 400.407203][ T8] usb 10-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 400.427587][ T1313] team0 (unregistering): Port device team_slave_1 removed [ 400.434203][ T8] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 400.448038][ T8] usb 10-1: Product: syz [ 400.464106][ T8] usb 10-1: Manufacturer: syz [ 400.468873][ T8] usb 10-1: SerialNumber: syz [ 400.482099][ T8] usb 10-1: ath9k_htc: Device endpoint numbers are not the expected ones [ 400.502525][ T1313] team0 (unregistering): Port device team_slave_0 removed [ 400.945563][ T8651] bridge0: port 2(bridge_slave_1) entered blocking state [ 400.953133][ T8651] bridge0: port 2(bridge_slave_1) entered disabled state [ 400.961265][ T8651] bridge_slave_1: entered allmulticast mode [ 400.969385][ T8651] bridge_slave_1: entered promiscuous mode [ 401.096058][ T8659] team0: Port device team_slave_0 added [ 401.107446][ T8659] team0: Port device team_slave_1 added [ 401.115909][ T8651] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 401.126235][ T8654] bridge0: port 1(bridge_slave_0) entered blocking state [ 401.134378][ T8654] bridge0: port 1(bridge_slave_0) entered disabled state [ 401.141563][ T8654] bridge_slave_0: entered allmulticast mode [ 401.148437][ T8654] bridge_slave_0: entered promiscuous mode [ 401.155694][ T8652] bridge0: port 1(bridge_slave_0) entered blocking state [ 401.163075][ T8652] bridge0: port 1(bridge_slave_0) entered disabled state [ 401.171605][ T8652] bridge_slave_0: entered allmulticast mode [ 401.179137][ T8652] bridge_slave_0: entered promiscuous mode [ 401.200446][ T8651] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 401.239610][ T8654] bridge0: port 2(bridge_slave_1) entered blocking state [ 401.247198][ T8654] bridge0: port 2(bridge_slave_1) entered disabled state [ 401.254843][ T8654] bridge_slave_1: entered allmulticast mode [ 401.261527][ T8654] bridge_slave_1: entered promiscuous mode [ 401.272708][ T8652] bridge0: port 2(bridge_slave_1) entered blocking state [ 401.279814][ T8652] bridge0: port 2(bridge_slave_1) entered disabled state [ 401.287192][ T8652] bridge_slave_1: entered allmulticast mode [ 401.294399][ T8652] bridge_slave_1: entered promiscuous mode [ 401.308689][ T8659] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 401.316203][ T8659] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 401.342610][ T8659] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 401.397515][ T8651] team0: Port device team_slave_0 added [ 401.438847][ T8659] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 401.448497][ T8659] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 401.476229][ T8659] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 401.489957][ T8651] team0: Port device team_slave_1 added [ 401.507261][ T8654] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 401.518613][ T8652] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 401.530387][ T8652] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 401.566321][ T8654] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 401.617556][ T8651] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 401.624897][ T8651] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 401.638858][ T8660] Bluetooth: hci5: command tx timeout [ 401.651501][ T5844] Bluetooth: hci6: command tx timeout [ 401.656686][ T54] Bluetooth: hci3: command tx timeout [ 401.664146][ T8664] Bluetooth: hci0: command tx timeout [ 401.675939][ T8651] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 401.701948][ T8654] team0: Port device team_slave_0 added [ 401.715165][ T8652] team0: Port device team_slave_0 added [ 401.724541][ T8654] team0: Port device team_slave_1 added [ 401.733340][ T8659] hsr_slave_0: entered promiscuous mode [ 401.739715][ T8659] hsr_slave_1: entered promiscuous mode [ 401.749238][ T8651] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 401.756697][ T8651] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 401.783868][ T8651] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 401.826015][ T8652] team0: Port device team_slave_1 added [ 401.863530][ T1313] IPVS: stop unused estimator thread 0... [ 401.869367][ T8651] hsr_slave_0: entered promiscuous mode [ 401.877324][ T8651] hsr_slave_1: entered promiscuous mode [ 401.885020][ T8651] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 401.893450][ T8651] Cannot create hsr debugfs directory [ 401.909348][ T8652] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 401.916580][ T8652] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 401.943103][ T8652] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 401.956189][ T8652] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 401.963581][ T8652] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 401.991630][ T8652] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 402.004871][ T8654] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 402.011843][ T8654] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 402.038571][ T8654] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 402.051211][ T8654] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 402.058413][ T8654] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 402.084693][ T8654] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 402.257157][ T8652] hsr_slave_0: entered promiscuous mode [ 402.264854][ T8652] hsr_slave_1: entered promiscuous mode [ 402.271049][ T8652] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 402.279915][ T8652] Cannot create hsr debugfs directory [ 402.370315][ T8654] hsr_slave_0: entered promiscuous mode [ 402.380450][ T8654] hsr_slave_1: entered promiscuous mode [ 402.387175][ T8654] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 402.397676][ T8654] Cannot create hsr debugfs directory [ 402.708486][ T5893] usb 10-1: USB disconnect, device number 3 [ 403.003994][ T8651] 8021q: adding VLAN 0 to HW filter on device bond0 [ 403.026580][ T8654] 8021q: adding VLAN 0 to HW filter on device bond0 [ 403.056535][ T8659] 8021q: adding VLAN 0 to HW filter on device bond0 [ 403.067713][ T8652] 8021q: adding VLAN 0 to HW filter on device bond0 [ 403.110379][ T8651] 8021q: adding VLAN 0 to HW filter on device team0 [ 403.141892][ T8654] 8021q: adding VLAN 0 to HW filter on device team0 [ 403.187161][ T8047] bridge0: port 1(bridge_slave_0) entered blocking state [ 403.194348][ T8047] bridge0: port 1(bridge_slave_0) entered forwarding state [ 403.227729][ T8659] 8021q: adding VLAN 0 to HW filter on device team0 [ 403.259957][ T8047] bridge0: port 1(bridge_slave_0) entered blocking state [ 403.267147][ T8047] bridge0: port 1(bridge_slave_0) entered forwarding state [ 403.298332][ T8047] bridge0: port 2(bridge_slave_1) entered blocking state [ 403.305511][ T8047] bridge0: port 2(bridge_slave_1) entered forwarding state [ 403.321811][ T8047] bridge0: port 1(bridge_slave_0) entered blocking state [ 403.328987][ T8047] bridge0: port 1(bridge_slave_0) entered forwarding state [ 403.350519][ T8652] 8021q: adding VLAN 0 to HW filter on device team0 [ 403.388265][ T7591] bridge0: port 2(bridge_slave_1) entered blocking state [ 403.395438][ T7591] bridge0: port 2(bridge_slave_1) entered forwarding state [ 403.416042][ T7591] bridge0: port 2(bridge_slave_1) entered blocking state [ 403.423249][ T7591] bridge0: port 2(bridge_slave_1) entered forwarding state [ 403.488958][ T8047] bridge0: port 1(bridge_slave_0) entered blocking state [ 403.496149][ T8047] bridge0: port 1(bridge_slave_0) entered forwarding state [ 403.576074][ T1313] bridge0: port 2(bridge_slave_1) entered blocking state [ 403.583268][ T1313] bridge0: port 2(bridge_slave_1) entered forwarding state [ 403.617578][ T8654] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 403.713513][ T5844] Bluetooth: hci6: command tx timeout [ 403.718971][ T5844] Bluetooth: hci3: command tx timeout [ 403.731482][ T8664] Bluetooth: hci0: command tx timeout [ 403.731807][ T54] Bluetooth: hci5: command tx timeout [ 404.016283][ T8654] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 404.074724][ T8659] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 404.085299][ T8651] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 404.237056][ T8652] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 404.586402][ T8651] veth0_vlan: entered promiscuous mode [ 404.634825][ T8651] veth1_vlan: entered promiscuous mode [ 404.744134][ T8651] veth0_macvtap: entered promiscuous mode [ 404.795722][ T8651] veth1_macvtap: entered promiscuous mode [ 404.820614][ T8651] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 404.831199][ T8651] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 404.846576][ T8651] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 404.858723][ T8651] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 404.868761][ T8651] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 404.880538][ T8651] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 404.890583][ T8651] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 404.901249][ T8651] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 404.914809][ T8651] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 404.968112][ T8651] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 404.979287][ T8651] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 404.989342][ T8651] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 404.999953][ T8651] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 405.010219][ T8651] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 405.020930][ T8651] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 405.030911][ T8651] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 405.041428][ T8651] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 405.053790][ T8651] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 405.099999][ T8654] veth0_vlan: entered promiscuous mode [ 405.127261][ T8652] veth0_vlan: entered promiscuous mode [ 405.136605][ T8654] veth1_vlan: entered promiscuous mode [ 405.189539][ T8652] veth1_vlan: entered promiscuous mode [ 405.216126][ T8654] veth0_macvtap: entered promiscuous mode [ 405.243839][ T8659] veth0_vlan: entered promiscuous mode [ 405.265777][ T8654] veth1_macvtap: entered promiscuous mode [ 405.328973][ T8659] veth1_vlan: entered promiscuous mode [ 405.350008][ T8652] veth0_macvtap: entered promiscuous mode [ 405.375300][ T8654] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 405.411465][ T8654] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 405.434893][ T8654] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 405.452512][ T8654] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 405.474549][ T8654] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 405.492320][ T8654] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 405.512323][ T8654] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 405.531961][ T8654] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 405.554231][ T8654] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 405.577482][ T8654] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 405.593364][ T8654] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 405.628711][ T8652] veth1_macvtap: entered promiscuous mode [ 405.641589][ T5966] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 405.663653][ T5966] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 405.700629][ T52] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 405.710554][ T52] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 405.717062][ T8654] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 405.730439][ T8654] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 405.741506][ T8654] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 405.752545][ T8654] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 405.762619][ T8654] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 405.774004][ T8654] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 405.784039][ T8654] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 405.792515][ T54] Bluetooth: hci5: command tx timeout [ 405.795006][ T8660] Bluetooth: hci3: command tx timeout [ 405.799841][ T54] Bluetooth: hci0: command tx timeout [ 405.805678][ T5844] Bluetooth: hci6: command tx timeout [ 405.811649][ T8654] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 405.826667][ T8654] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 405.837975][ T8654] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 405.853655][ T8654] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 405.890081][ T8659] veth0_macvtap: entered promiscuous mode [ 405.900505][ T8659] veth1_macvtap: entered promiscuous mode [ 405.910237][ T8652] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 405.921478][ T8652] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 405.931831][ T8652] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 405.943158][ T8652] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 405.953541][ T8652] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 405.964108][ T8652] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 405.974023][ T8652] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 405.986105][ T8652] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 405.996044][ T8652] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 406.006645][ T8652] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 406.016527][ T8652] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 406.027145][ T8652] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 406.038809][ T8652] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 406.070503][ T8652] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 406.082609][ T8652] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 406.093146][ T8652] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 406.104998][ T8652] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 406.116598][ T8652] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 406.127098][ T8652] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 406.137139][ T8652] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 406.147698][ T8652] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 406.157699][ T8652] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 406.168271][ T8652] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 406.178217][ T8652] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 406.189696][ T8652] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 406.201609][ T8652] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 406.215673][ T8659] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 406.226608][ T8659] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 406.237941][ T8659] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 406.248770][ T8659] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 406.259048][ T8659] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 406.269527][ T8659] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 406.280027][ T8659] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 406.291745][ T8659] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 406.301957][ T8659] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 406.314162][ T8659] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 406.324286][ T8659] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 406.334873][ T8659] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 406.344737][ T8659] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 406.355926][ T8659] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 406.367111][ T8659] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 406.400090][ T8659] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 406.411366][ T8659] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 406.424537][ T8659] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 406.435659][ T8659] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 406.446928][ T8659] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 406.457436][ T8659] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 406.467706][ T8659] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 406.478313][ T8659] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 406.488423][ T8659] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 406.501115][ T8659] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 406.511581][ T8659] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 406.522298][ T8659] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 406.532286][ T8659] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 406.543020][ T8659] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 406.555950][ T8659] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 406.602098][ T8047] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 406.612584][ T8047] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 406.649700][ T7591] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 406.664423][ T7591] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 406.807775][ T8047] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 406.831694][ T8047] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 406.840083][ T52] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 406.854024][ T52] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 406.897042][ T8047] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 406.909291][ T78] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 406.917337][ T8047] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 406.929048][ T78] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 413.873238][ T8909] kAFS: Can only specify source 'none' with -o dyn [ 414.306480][ T29] kauditd_printk_skb: 17 callbacks suppressed [ 414.306499][ T29] audit: type=1326 audit(1732495301.246:260): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8917 comm="syz.4.452" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d4157e819 code=0x7ffc0000 [ 414.335855][ T29] audit: type=1326 audit(1732495301.246:261): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8917 comm="syz.4.452" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d4157e819 code=0x7ffc0000 [ 414.464166][ T8915] netlink: 'syz.9.450': attribute type 10 has an invalid length. [ 414.493252][ T8918] netlink: 8 bytes leftover after parsing attributes in process `syz.4.452'. [ 414.536994][ T8922] netlink: 'syz.9.450': attribute type 10 has an invalid length. [ 414.890562][ T8915] team0: Failed to send port change of device wlan0 via netlink (err -105) [ 414.911550][ T8915] team0: Failed to send options change via netlink (err -105) [ 414.920473][ T8915] team0: Port device wlan0 added [ 414.999017][ T8922] team0: Failed to send port change of device wlan0 via netlink (err -105) [ 415.013636][ T8922] team0: Failed to send options change via netlink (err -105) [ 415.033808][ T8938] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=531714 (1063428 ns) > initial count (432 ns). Using initial count to start timer. [ 415.037945][ T8922] team0: Failed to send port change of device wlan0 via netlink (err -105) [ 415.061403][ T8922] team0: Port device wlan0 removed [ 415.086149][ T8922] bond0: (slave wlan0): Enslaving as an active interface with an up link [ 415.119956][ T8927] netlink: 'syz.4.453': attribute type 7 has an invalid length. [ 415.871597][ T8937] [U]  [ 416.908183][ T8955] FAULT_INJECTION: forcing a failure. [ 416.908183][ T8955] name failslab, interval 1, probability 0, space 0, times 0 [ 416.921152][ T8955] CPU: 1 UID: 0 PID: 8955 Comm: syz.5.459 Not tainted 6.12.0-syzkaller-09073-g9f16d5e6f220 #0 [ 416.931434][ T8955] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 416.941520][ T8955] Call Trace: [ 416.944825][ T8955] [ 416.947780][ T8955] dump_stack_lvl+0x241/0x360 [ 416.952493][ T8955] ? __pfx_dump_stack_lvl+0x10/0x10 [ 416.957795][ T8955] ? __pfx__printk+0x10/0x10 [ 416.962420][ T8955] ? kmem_cache_alloc_noprof+0x44/0x2a0 [ 416.967993][ T8955] ? __pfx___might_resched+0x10/0x10 [ 416.973319][ T8955] should_fail_ex+0x3b0/0x4e0 [ 416.978039][ T8955] ? ioctx_alloc+0x10c/0x7b0 [ 416.982636][ T8955] should_failslab+0xac/0x100 [ 416.987315][ T8955] ? ioctx_alloc+0x10c/0x7b0 [ 416.991905][ T8955] kmem_cache_alloc_noprof+0x6c/0x2a0 [ 416.997279][ T8955] ioctx_alloc+0x10c/0x7b0 [ 417.001700][ T8955] ? __might_fault+0xaa/0x120 [ 417.006383][ T8955] ? __might_fault+0xc6/0x120 [ 417.011060][ T8955] __se_sys_io_setup+0x7b/0x1a0 [ 417.015916][ T8955] do_syscall_64+0xf3/0x230 [ 417.020419][ T8955] ? clear_bhb_loop+0x35/0x90 [ 417.025128][ T8955] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 417.031068][ T8955] RIP: 0033:0x7fd25937e819 [ 417.035500][ T8955] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 417.055213][ T8955] RSP: 002b:00007fd25a0f1038 EFLAGS: 00000246 ORIG_RAX: 00000000000000ce [ 417.063636][ T8955] RAX: ffffffffffffffda RBX: 00007fd259535fa0 RCX: 00007fd25937e819 [ 417.071604][ T8955] RDX: 0000000000000000 RSI: 0000000020000300 RDI: 0000000000010000 [ 417.079573][ T8955] RBP: 00007fd25a0f1090 R08: 0000000000000000 R09: 0000000000000000 [ 417.087541][ T8955] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 417.095510][ T8955] R13: 0000000000000000 R14: 00007fd259535fa0 R15: 00007ffd34537758 [ 417.103509][ T8955] [ 417.282601][ T8657] usb 10-1: new high-speed USB device number 4 using dummy_hcd [ 417.414133][ T5896] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 417.464396][ T8657] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 417.477806][ T8657] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 417.490110][ T8657] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 417.504549][ T8657] usb 10-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 417.514943][ T8657] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 417.540277][ T8968] netlink: 'syz.2.461': attribute type 10 has an invalid length. [ 417.541152][ T8657] usb 10-1: config 0 descriptor?? [ 417.582735][ T8951] raw-gadget.1 gadget.9: fail, usb_ep_enable returned -22 [ 417.612252][ T8969] netlink: 'syz.2.461': attribute type 10 has an invalid length. [ 417.624468][ T5896] usb 4-1: config 8 has an invalid interface number: 177 but max is 0 [ 417.657737][ T5896] usb 4-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 417.722320][ T5896] usb 4-1: config 8 has no interface number 0 [ 417.731364][ T5896] usb 4-1: config 8 interface 177 altsetting 9 has an endpoint descriptor with address 0xBF, changing to 0x8F [ 417.822796][ T5896] usb 4-1: config 8 interface 177 altsetting 9 endpoint 0x8F has invalid wMaxPacketSize 0 [ 417.854338][ T5896] usb 4-1: config 8 interface 177 altsetting 9 bulk endpoint 0x8F has invalid maxpacket 0 [ 417.909919][ T5896] usb 4-1: config 8 interface 177 altsetting 9 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 417.961145][ T5896] usb 4-1: config 8 interface 177 has no altsetting 0 [ 417.968846][ T8968] team0: Failed to send port change of device wlan0 via netlink (err -105) [ 417.980607][ T5896] usb 4-1: New USB device found, idVendor=04d8, idProduct=fd08, bcdDevice=59.b1 [ 418.013299][ T8968] team0: Failed to send options change via netlink (err -105) [ 418.035578][ T5896] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 418.127806][ T8968] team0: Port device wlan0 added [ 418.128020][ T8657] usbhid 10-1:0.0: can't add hid device: -71 [ 418.139930][ T8657] usbhid 10-1:0.0: probe with driver usbhid failed with error -71 [ 418.159073][ T8657] usb 10-1: USB disconnect, device number 4 [ 418.868982][ T8969] team0: Port device wlan0 removed [ 418.945183][ T8969] bond0: (slave wlan0): Enslaving as an active interface with an up link [ 419.415278][ T5896] usb 4-1: string descriptor 0 read error: -71 [ 419.424814][ T5896] ir_toy 4-1:8.177: required endpoints not found [ 419.542592][ T5896] usb 4-1: USB disconnect, device number 3 [ 420.702311][ T5893] IPVS: starting estimator thread 0... [ 420.738547][ T9006] overlayfs: failed to resolve './file1': -2 [ 420.771014][ T9002] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 420.835380][ T9008] IPVS: using max 24 ests per chain, 57600 per kthread [ 421.041094][ T9022] netlink: 'syz.2.467': attribute type 2 has an invalid length. [ 421.049011][ T9022] netlink: 'syz.2.467': attribute type 1 has an invalid length. [ 421.056875][ T9022] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.467'. [ 432.513851][ T9144] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 433.415326][ T5893] IPVS: starting estimator thread 0... [ 433.651323][ T9149] IPVS: using max 21 ests per chain, 50400 per kthread [ 435.821518][ T9192] x_tables: duplicate underflow at hook 3 [ 436.204753][ T9194] option changes via remount are deprecated (pid=9193 comm=syz.4.492) [ 436.217317][ T9194] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 436.233420][ T9194] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 436.276136][ T970] usb 6-1: new full-speed USB device number 3 using dummy_hcd [ 436.312309][ T25] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 436.528920][ T970] usb 6-1: descriptor type invalid, skip [ 436.534950][ T970] usb 6-1: descriptor type invalid, skip [ 436.542251][ T970] usb 6-1: too many configurations: 64, using maximum allowed: 8 [ 436.551845][ T970] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 436.559754][ T970] usb 6-1: can't read configurations, error -61 [ 436.977508][ T970] usb 6-1: new full-speed USB device number 4 using dummy_hcd [ 437.216001][ T970] usb 6-1: descriptor type invalid, skip [ 437.221974][ T970] usb 6-1: descriptor type invalid, skip [ 437.422969][ T970] usb 6-1: too many configurations: 64, using maximum allowed: 8 [ 437.832684][ T970] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 437.840339][ T970] usb 6-1: can't read configurations, error -61 [ 437.849376][ T970] usb usb6-port1: attempt power cycle [ 438.212584][ T970] usb 6-1: new full-speed USB device number 5 using dummy_hcd [ 438.244866][ T970] usb 6-1: descriptor type invalid, skip [ 438.250571][ T970] usb 6-1: descriptor type invalid, skip [ 438.258535][ T970] usb 6-1: too many configurations: 64, using maximum allowed: 8 [ 438.269901][ T970] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 438.277997][ T970] usb 6-1: can't read configurations, error -61 [ 438.412415][ T970] usb 6-1: new full-speed USB device number 6 using dummy_hcd [ 438.434708][ T970] usb 6-1: descriptor type invalid, skip [ 438.441819][ T970] usb 6-1: descriptor type invalid, skip [ 438.449381][ T970] usb 6-1: too many configurations: 64, using maximum allowed: 8 [ 438.459761][ T970] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 438.467416][ T970] usb 6-1: can't read configurations, error -61 [ 438.474224][ T970] usb usb6-port1: unable to enumerate USB device [ 440.275655][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.283486][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 447.549997][ T9239] netlink: 'syz.3.505': attribute type 10 has an invalid length. [ 448.449615][ T9245] netlink: 'syz.3.505': attribute type 10 has an invalid length. [ 449.544488][ T9239] team0: Failed to send port change of device wlan0 via netlink (err -105) [ 449.563887][ T9239] team0: Failed to send options change via netlink (err -105) [ 449.583480][ T9239] team0: Port device wlan0 added [ 449.671082][ T9245] team0: Failed to send port change of device wlan0 via netlink (err -105) [ 449.684100][ T9255] FAULT_INJECTION: forcing a failure. [ 449.684100][ T9255] name failslab, interval 1, probability 0, space 0, times 0 [ 449.704904][ T9255] CPU: 0 UID: 0 PID: 9255 Comm: syz.5.510 Not tainted 6.12.0-syzkaller-09073-g9f16d5e6f220 #0 [ 449.715181][ T9255] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 449.725233][ T9255] Call Trace: [ 449.728502][ T9255] [ 449.731421][ T9255] dump_stack_lvl+0x241/0x360 [ 449.736115][ T9255] ? __pfx_dump_stack_lvl+0x10/0x10 [ 449.741307][ T9255] ? __pfx__printk+0x10/0x10 [ 449.745898][ T9255] ? __kmalloc_noprof+0xb0/0x400 [ 449.750848][ T9255] ? __pfx___might_resched+0x10/0x10 [ 449.756201][ T9255] should_fail_ex+0x3b0/0x4e0 [ 449.760886][ T9255] ? nla_strdup+0x9c/0x140 [ 449.765311][ T9255] should_failslab+0xac/0x100 [ 449.769982][ T9255] ? nla_strdup+0x9c/0x140 [ 449.774397][ T9255] __kmalloc_noprof+0xd8/0x400 [ 449.779177][ T9255] ? __kasan_kmalloc+0x98/0xb0 [ 449.783963][ T9255] nla_strdup+0x9c/0x140 [ 449.788220][ T9255] nf_tables_newchain+0x2102/0x3310 [ 449.793427][ T9255] ? __pfx_lock_release+0x10/0x10 [ 449.798476][ T9255] ? __pfx_nf_tables_newchain+0x10/0x10 [ 449.804029][ T9255] ? __pfx_lock_acquire+0x10/0x10 [ 449.809142][ T9255] ? nfnl_pernet+0x23/0x240 [ 449.813648][ T9255] ? __pfx_lock_release+0x10/0x10 [ 449.818673][ T9255] ? __nla_parse+0x40/0x60 [ 449.823112][ T9255] nfnetlink_rcv+0x14e3/0x2ab0 [ 449.827892][ T9255] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 449.833020][ T9255] ? netlink_deliver_tap+0x2e/0x1b0 [ 449.838214][ T9255] ? skb_clone+0x240/0x390 [ 449.842631][ T9255] ? __pfx_lock_release+0x10/0x10 [ 449.847684][ T9255] ? netlink_deliver_tap+0x2e/0x1b0 [ 449.852880][ T9255] netlink_unicast+0x7f6/0x990 [ 449.857641][ T9255] ? __pfx_netlink_unicast+0x10/0x10 [ 449.862914][ T9255] ? __virt_addr_valid+0x183/0x530 [ 449.868028][ T9255] ? __check_object_size+0x48e/0x900 [ 449.873320][ T9255] netlink_sendmsg+0x8e4/0xcb0 [ 449.878090][ T9255] ? __pfx_netlink_sendmsg+0x10/0x10 [ 449.883378][ T9255] ? __pfx_netlink_sendmsg+0x10/0x10 [ 449.888660][ T9255] __sock_sendmsg+0x221/0x270 [ 449.893340][ T9255] ____sys_sendmsg+0x52a/0x7e0 [ 449.898103][ T9255] ? __pfx_____sys_sendmsg+0x10/0x10 [ 449.903416][ T9255] ? __fget_files+0x2a/0x410 [ 449.908032][ T9255] ? __fget_files+0x2a/0x410 [ 449.912650][ T9255] __sys_sendmsg+0x269/0x350 [ 449.917236][ T9255] ? __pfx_lock_release+0x10/0x10 [ 449.922281][ T9255] ? __pfx___sys_sendmsg+0x10/0x10 [ 449.927445][ T9255] ? __pfx_vfs_write+0x10/0x10 [ 449.932268][ T9255] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 449.938640][ T9255] ? do_syscall_64+0x100/0x230 [ 449.943407][ T9255] ? do_syscall_64+0xb6/0x230 [ 449.948078][ T9255] do_syscall_64+0xf3/0x230 [ 449.952574][ T9255] ? clear_bhb_loop+0x35/0x90 [ 449.957242][ T9255] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 449.963133][ T9255] RIP: 0033:0x7fd25937e819 [ 449.967544][ T9255] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 449.987238][ T9255] RSP: 002b:00007fd25a0f1038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 449.995668][ T9255] RAX: ffffffffffffffda RBX: 00007fd259535fa0 RCX: 00007fd25937e819 [ 450.003643][ T9255] RDX: 0000000000000000 RSI: 00000000200000c0 RDI: 0000000000000003 [ 450.011616][ T9255] RBP: 00007fd25a0f1090 R08: 0000000000000000 R09: 0000000000000000 [ 450.019591][ T9255] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 450.027572][ T9255] R13: 0000000000000000 R14: 00007fd259535fa0 R15: 00007ffd34537758 [ 450.035560][ T9255] [ 450.071758][ T9245] team0: Failed to send options change via netlink (err -105) [ 450.109893][ T9245] team0: Port device wlan0 removed [ 450.127885][ T9245] bond0: (slave wlan0): Enslaving as an active interface with an up link [ 450.783486][ T9264] netlink: 4 bytes leftover after parsing attributes in process `syz.2.516'. [ 450.823966][ T9264] netlink: 4 bytes leftover after parsing attributes in process `syz.2.516'. [ 452.257805][ T9282] netlink: 4 bytes leftover after parsing attributes in process `syz.4.517'. [ 462.673095][ T9298] libceph: resolve 'cQ}' (ret=-3): failed [ 463.115911][ T970] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 463.507594][ T970] usb 6-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 463.549609][ T970] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 463.607437][ T970] usb 6-1: config 0 descriptor?? [ 463.673301][ T970] cp210x 6-1:0.0: cp210x converter detected [ 463.865368][ T970] usb 6-1: cp210x converter now attached to ttyUSB0 [ 464.154073][ T9323] netlink: 'syz.2.528': attribute type 10 has an invalid length. [ 464.338986][ T9325] netlink: 'syz.2.528': attribute type 10 has an invalid length. [ 464.542344][ T9323] bond0: (slave wlan0): Releasing backup interface [ 464.621476][ T9323] team0: Failed to send options change via netlink (err -105) [ 464.716694][ T9323] team0: Port device wlan0 added [ 465.112424][ T9333] netlink: 4 bytes leftover after parsing attributes in process `syz.3.530'. [ 465.143462][ T9333] netlink: 4 bytes leftover after parsing attributes in process `syz.3.530'. [ 465.314005][ T9325] team0: Failed to send options change via netlink (err -105) [ 465.323489][ T9325] team0: Failed to send port change of device wlan0 via netlink (err -105) [ 465.524169][ T9325] team0: Port device wlan0 removed [ 465.554830][ T9325] bond0: (slave wlan0): Enslaving as an active interface with an up link [ 465.594589][ T970] usb 6-1: USB disconnect, device number 7 [ 465.608335][ T970] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 465.627061][ T970] cp210x 6-1:0.0: device disconnected [ 465.815165][ T9343] erofs (device erofs): cannot find valid erofs superblock [ 466.329700][ T9356] netlink: 'syz.4.534': attribute type 10 has an invalid length. [ 466.947790][ T9356] team0: Failed to send port change of device wlan0 via netlink (err -105) [ 466.973261][ T9356] team0: Failed to send options change via netlink (err -105) [ 466.980922][ T9356] team0: Port device wlan0 added [ 473.846429][ T9390] netlink: 4 bytes leftover after parsing attributes in process `syz.5.543'. [ 473.899475][ T9390] netlink: 4 bytes leftover after parsing attributes in process `syz.5.543'. [ 473.992295][ T5897] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 474.007198][ T9392] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 474.056413][ T9392] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 474.152328][ T5897] usb 4-1: Using ep0 maxpacket: 8 [ 474.178140][ T5897] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 474.202568][ T5897] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 474.231762][ T5897] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 474.252564][ T970] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 474.273050][ T5897] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 474.314505][ T5897] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 474.336468][ T5897] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 474.392805][ T970] usb 3-1: device descriptor read/64, error -71 [ 474.568018][ T5897] usb 4-1: GET_CAPABILITIES returned 0 [ 474.574037][ T5897] usbtmc 4-1:16.0: can't read capabilities [ 474.652414][ T970] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 474.769359][ T5897] usb 4-1: USB disconnect, device number 4 [ 474.848236][ T970] usb 3-1: device descriptor read/64, error -71 [ 475.167228][ T970] usb usb3-port1: attempt power cycle [ 475.493238][ T9404] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 475.732447][ T970] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 475.752882][ T970] usb 3-1: device descriptor read/8, error -71 [ 476.012367][ T970] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 476.063564][ T970] usb 3-1: device descriptor read/8, error -71 [ 476.183407][ T970] usb usb3-port1: unable to enumerate USB device [ 476.522333][ T9423] netlink: 'syz.4.552': attribute type 10 has an invalid length. [ 476.604823][ T9425] netlink: 'syz.4.552': attribute type 10 has an invalid length. [ 476.709371][ T9425] team0: Port device wlan0 removed [ 476.731451][ T9425] bond0: (slave wlan0): Enslaving as an active interface with an up link [ 476.814569][ T9427] FAULT_INJECTION: forcing a failure. [ 476.814569][ T9427] name failslab, interval 1, probability 0, space 0, times 0 [ 476.932638][ T9427] CPU: 0 UID: 0 PID: 9427 Comm: syz.9.553 Not tainted 6.12.0-syzkaller-09073-g9f16d5e6f220 #0 [ 476.942946][ T9427] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 476.953029][ T9427] Call Trace: [ 476.956323][ T9427] [ 476.959263][ T9427] dump_stack_lvl+0x241/0x360 [ 476.963966][ T9427] ? __pfx_dump_stack_lvl+0x10/0x10 [ 476.969186][ T9427] ? __pfx__printk+0x10/0x10 [ 476.973798][ T9427] ? fs_reclaim_acquire+0x93/0x130 [ 476.978931][ T9427] ? __pfx___might_resched+0x10/0x10 [ 476.984242][ T9427] should_fail_ex+0x3b0/0x4e0 [ 476.988969][ T9427] ? tomoyo_realpath_from_path+0xcf/0x5e0 [ 476.994744][ T9427] should_failslab+0xac/0x100 [ 476.999437][ T9427] ? tomoyo_realpath_from_path+0xcf/0x5e0 [ 477.005178][ T9427] __kmalloc_noprof+0xd8/0x400 [ 477.009965][ T9427] tomoyo_realpath_from_path+0xcf/0x5e0 [ 477.015561][ T9427] tomoyo_path_number_perm+0x236/0x860 [ 477.021044][ T9427] ? __lock_acquire+0x1397/0x2100 [ 477.026088][ T9427] ? tomoyo_path_number_perm+0x206/0x860 [ 477.031744][ T9427] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 477.037771][ T9427] ? __fget_files+0x2a/0x410 [ 477.042366][ T9427] ? __fget_files+0x2a/0x410 [ 477.046984][ T9427] security_file_ioctl+0xc6/0x2a0 [ 477.052178][ T9427] __se_sys_ioctl+0x46/0x170 [ 477.056795][ T9427] do_syscall_64+0xf3/0x230 [ 477.061283][ T9427] ? clear_bhb_loop+0x35/0x90 [ 477.065949][ T9427] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 477.071831][ T9427] RIP: 0033:0x7f22ba57e819 [ 477.076256][ T9427] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 477.095855][ T9427] RSP: 002b:00007f22b83f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 477.104263][ T9427] RAX: ffffffffffffffda RBX: 00007f22ba736080 RCX: 00007f22ba57e819 [ 477.112228][ T9427] RDX: 00000000200001c0 RSI: 0000000000005412 RDI: 0000000000000003 [ 477.120186][ T9427] RBP: 00007f22b83f6090 R08: 0000000000000000 R09: 0000000000000000 [ 477.128147][ T9427] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 477.136125][ T9427] R13: 0000000000000000 R14: 00007f22ba736080 R15: 00007ffc133f24a8 [ 477.144125][ T9427] [ 477.147211][ C0] vkms_vblank_simulate: vblank timer overrun [ 477.791301][ T9423] syz.4.552 (9423) used greatest stack depth: 18768 bytes left [ 477.800780][ T9427] ERROR: Out of memory at tomoyo_realpath_from_path. [ 480.054538][ T5895] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 480.339645][ T9470] syz.9.564(9470): Attempt to set a LOCK_MAND lock via flock(2). This support has been removed and the request ignored. [ 480.458521][ T5895] usb 3-1: device descriptor read/64, error -71 [ 480.465723][ T8660] Bluetooth: hci4: Invalid connection link type handle 0x00c9 [ 480.712712][ T9] usb 10-1: new high-speed USB device number 5 using dummy_hcd [ 480.722443][ T5895] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 480.981925][ T9475] netlink: 4 bytes leftover after parsing attributes in process `syz.3.565'. [ 480.982685][ T5895] usb 3-1: device descriptor read/64, error -71 [ 481.006283][ T9] usb 10-1: device descriptor read/64, error -71 [ 481.086852][ T9476] netlink: 4 bytes leftover after parsing attributes in process `syz.3.565'. [ 481.094645][ T5895] usb usb3-port1: attempt power cycle [ 481.302311][ T9] usb 10-1: new high-speed USB device number 6 using dummy_hcd [ 481.364182][ T9477] netlink: 4 bytes leftover after parsing attributes in process `syz.4.563'. [ 481.432835][ T9] usb 10-1: device descriptor read/64, error -71 [ 481.542633][ T9] usb usb10-port1: attempt power cycle [ 481.882334][ T9] usb 10-1: new high-speed USB device number 7 using dummy_hcd [ 481.912928][ T9] usb 10-1: device descriptor read/8, error -71 [ 482.332333][ T9] usb 10-1: new high-speed USB device number 8 using dummy_hcd [ 482.353924][ T9] usb 10-1: device descriptor read/8, error -71 [ 482.503287][ T9] usb usb10-port1: unable to enumerate USB device [ 485.403897][ T9519] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 486.365540][ T9538] futex_wake_op: syz.4.576 tries to shift op by -1; fix this program [ 486.460042][ T9538] dvmrp5: entered allmulticast mode [ 486.604335][ T9540] netlink: 96 bytes leftover after parsing attributes in process `syz.2.581'. [ 486.692311][ T9519] usb 6-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00 [ 486.701565][ T9519] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 486.712348][ T5851] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 486.732602][ T9519] usb 6-1: Product: syz [ 486.736817][ T9519] usb 6-1: Manufacturer: syz [ 486.768906][ T9519] usb 6-1: SerialNumber: syz [ 486.829872][ T9519] usb 6-1: config 0 descriptor?? [ 486.873671][ T5851] usb 5-1: Using ep0 maxpacket: 16 [ 486.881525][ T5851] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 486.905754][ T5851] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 486.926080][ T5851] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 486.950423][ T5851] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 486.969943][ T5851] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 486.992311][ T5851] usb 5-1: Product: syz [ 486.996616][ T5851] usb 5-1: Manufacturer: syz [ 487.001237][ T5851] usb 5-1: SerialNumber: syz [ 487.092736][ T8657] usb 3-1: new full-speed USB device number 14 using dummy_hcd [ 487.269979][ T9536] pimreg: entered allmulticast mode [ 487.576960][ T8657] usb 3-1: device descriptor read/64, error -71 [ 488.154097][ T9519] hso 6-1:0.0: Failed to find BULK IN ep [ 488.163728][ T9519] usb-storage 6-1:0.0: USB Mass Storage device detected [ 488.286218][ T9574] FAULT_INJECTION: forcing a failure. [ 488.286218][ T9574] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 488.308364][ T8657] usb 3-1: new full-speed USB device number 15 using dummy_hcd [ 488.309837][ T9574] CPU: 0 UID: 0 PID: 9574 Comm: syz.3.584 Not tainted 6.12.0-syzkaller-09073-g9f16d5e6f220 #0 [ 488.326298][ T9574] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 488.336468][ T9574] Call Trace: [ 488.339762][ T9574] [ 488.342707][ T9574] dump_stack_lvl+0x241/0x360 [ 488.347412][ T9574] ? __pfx_dump_stack_lvl+0x10/0x10 [ 488.352637][ T9574] ? __pfx__printk+0x10/0x10 [ 488.357270][ T9574] ? snprintf+0xda/0x120 [ 488.361545][ T9574] should_fail_ex+0x3b0/0x4e0 [ 488.366257][ T9574] _copy_to_user+0x31/0xb0 [ 488.370698][ T9574] simple_read_from_buffer+0xca/0x150 [ 488.376103][ T9574] proc_fail_nth_read+0x1e9/0x250 [ 488.381154][ T9574] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 488.386728][ T9574] ? rw_verify_area+0x55e/0x6f0 [ 488.391608][ T9574] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 488.397183][ T9574] vfs_read+0x1fc/0xb70 [ 488.401383][ T9574] ? __pfx___mutex_lock+0x10/0x10 [ 488.406426][ T9574] ? __pfx_vfs_read+0x10/0x10 [ 488.411132][ T9574] ? __fget_files+0x2a/0x410 [ 488.415749][ T9574] ? __fget_files+0x395/0x410 [ 488.420449][ T9574] ? __fget_files+0x2a/0x410 [ 488.425066][ T9574] ksys_read+0x18f/0x2b0 [ 488.429336][ T9574] ? __pfx_ksys_read+0x10/0x10 [ 488.434132][ T9574] ? do_syscall_64+0x100/0x230 [ 488.438925][ T9574] ? do_syscall_64+0xb6/0x230 [ 488.443627][ T9574] do_syscall_64+0xf3/0x230 [ 488.448169][ T9574] ? clear_bhb_loop+0x35/0x90 [ 488.452879][ T9574] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 488.458806][ T9574] RIP: 0033:0x7f9983d7d25c [ 488.463252][ T9574] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 69 8e 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 bf 8e 02 00 48 [ 488.482881][ T9574] RSP: 002b:00007f9984bd5030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 488.491319][ T9574] RAX: ffffffffffffffda RBX: 00007f9983f36080 RCX: 00007f9983d7d25c [ 488.499316][ T9574] RDX: 000000000000000f RSI: 00007f9984bd50a0 RDI: 0000000000000004 [ 488.507314][ T9574] RBP: 00007f9984bd5090 R08: 0000000000000000 R09: 0000000000000000 [ 488.515306][ T9574] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 488.523302][ T9574] R13: 0000000000000000 R14: 00007f9983f36080 R15: 00007fff64ca3148 [ 488.531321][ T9574] [ 488.617187][ T5844] Bluetooth: hci4: command 0x0406 tx timeout [ 488.784936][ T8657] usb 3-1: device descriptor read/64, error -71 [ 488.958521][ T8657] usb usb3-port1: attempt power cycle [ 489.297952][ T9519] usb 6-1: USB disconnect, device number 8 [ 489.483762][ T8657] usb 3-1: new full-speed USB device number 16 using dummy_hcd [ 489.524528][ T8657] usb 3-1: device descriptor read/8, error -71 [ 489.535615][ T5851] usb 5-1: 2:1 : no or invalid class specific endpoint descriptor [ 489.545014][ T5851] usb 5-1: 2:1 : format type 0 is detected, processed as PCM [ 489.644271][ T5851] usb 5-1: USB disconnect, device number 10 [ 489.777026][ T8657] usb 3-1: new full-speed USB device number 17 using dummy_hcd [ 489.821080][ T8657] usb 3-1: device descriptor read/8, error -71 [ 489.895710][ T9441] udevd[9441]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 489.942587][ T8657] usb usb3-port1: unable to enumerate USB device [ 501.714648][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.721054][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 524.283896][ T5842] Bluetooth: hci3: command 0x0406 tx timeout [ 524.289964][ T5842] Bluetooth: hci5: command 0x0406 tx timeout [ 524.293614][ T5149] Bluetooth: hci6: command 0x0406 tx timeout [ 524.297431][ T8662] Bluetooth: hci0: command 0x0406 tx timeout [ 563.155150][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.161500][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.595981][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.603648][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 649.552578][ T30] INFO: task kworker/u8:2:35 blocked for more than 143 seconds. [ 649.560274][ T30] Not tainted 6.12.0-syzkaller-09073-g9f16d5e6f220 #0 [ 649.567880][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 649.576753][ T30] task:kworker/u8:2 state:D stack:18488 pid:35 tgid:35 ppid:2 flags:0x00004000 [ 649.587049][ T30] Workqueue: writeback wb_workfn (flush-8:0) [ 649.594292][ T30] Call Trace: [ 649.597599][ T30] [ 649.600554][ T30] __schedule+0x17fb/0x4be0 [ 649.605204][ T30] ? __pfx___schedule+0x10/0x10 [ 649.610099][ T30] ? __blk_flush_plug+0x449/0x500 [ 649.615199][ T30] ? __pfx_lock_release+0x10/0x10 [ 649.620255][ T30] ? __blk_flush_plug+0x449/0x500 [ 649.625447][ T30] ? kthread_data+0x52/0xd0 [ 649.629981][ T30] ? schedule+0x90/0x320 [ 649.634413][ T30] ? wq_worker_sleeping+0x66/0x240 [ 649.639582][ T30] ? schedule+0x90/0x320 [ 649.643944][ T30] schedule+0x14b/0x320 [ 649.648134][ T30] io_schedule+0x8d/0x110 [ 649.652551][ T30] bit_wait_io+0x12/0xd0 [ 649.656909][ T30] __wait_on_bit+0xb0/0x2f0 [ 649.661437][ T30] ? __pfx_bit_wait_io+0x10/0x10 [ 649.666547][ T30] out_of_line_wait_on_bit+0x1d5/0x260 [ 649.672045][ T30] ? __pfx_bit_wait_io+0x10/0x10 [ 649.677069][ T30] ? __pfx_out_of_line_wait_on_bit+0x10/0x10 [ 649.683140][ T30] ? __pfx_wake_bit_function+0x10/0x10 [ 649.688621][ T30] ? do_raw_spin_unlock+0x13c/0x8b0 [ 649.697038][ T30] ? jbd2_write_access_granted+0x71/0x310 [ 649.711817][ T30] do_get_write_access+0x121/0xe60 [ 649.719014][ T30] jbd2_journal_get_write_access+0x1ee/0x240 [ 649.725864][ T30] __ext4_journal_get_write_access+0x1c8/0x680 [ 649.732067][ T30] ? __pfx___ext4_journal_get_write_access+0x10/0x10 [ 649.739133][ T30] ? __lock_acquire+0x1397/0x2100 [ 649.744369][ T30] ext4_reserve_inode_write+0x271/0x360 [ 649.749957][ T30] ? __pfx_ext4_reserve_inode_write+0x10/0x10 [ 649.756430][ T30] __ext4_mark_inode_dirty+0x1ec/0x880 [ 649.761937][ T30] ? __pfx___ext4_mark_inode_dirty+0x10/0x10 [ 649.768127][ T30] ? __ext4_journal_start_sb+0x239/0x600 [ 649.773975][ T30] ext4_dirty_inode+0xce/0x110 [ 649.778772][ T30] ? __pfx_ext4_dirty_inode+0x10/0x10 [ 649.784343][ T30] __mark_inode_dirty+0x2ee/0xe90 [ 649.789663][ T30] ext4_da_update_reserve_space+0x283/0x730 [ 649.797005][ T30] ext4_es_insert_extent+0x2916/0x3370 [ 649.802687][ T30] ? __pfx_ext4_es_insert_extent+0x10/0x10 [ 649.808511][ T30] ? rcu_is_watching+0x15/0xb0 [ 649.813481][ T30] ? ext4_es_lookup_extent+0x61a/0xa90 [ 649.818974][ T30] ext4_map_blocks+0xc34/0x1990 [ 649.824279][ T30] ? __pfx_ext4_map_blocks+0x10/0x10 [ 649.829589][ T30] ? ext4_alloc_io_end_vec+0x2b/0x160 [ 649.835117][ T30] ? rcu_is_watching+0x15/0xb0 [ 649.839902][ T30] ? ext4_inode_journal_mode+0x3a4/0x460 [ 649.845717][ T30] ext4_do_writepages+0x20ef/0x3d10 [ 649.850973][ T30] ? __pfx_ext4_do_writepages+0x10/0x10 [ 649.856757][ T30] ? validate_chain+0x11e/0x5920 [ 649.861760][ T30] ? rcu_read_lock_any_held+0xb7/0x160 [ 649.867433][ T30] ext4_writepages+0x213/0x3c0 [ 649.880543][ T30] ? __pfx_ext4_writepages+0x10/0x10 [ 649.886063][ T30] ? do_raw_spin_unlock+0x13c/0x8b0 [ 649.891302][ T30] ? __pfx_ext4_writepages+0x10/0x10 [ 649.897604][ T30] do_writepages+0x35f/0x880 [ 649.902421][ T30] ? __pfx_do_writepages+0x10/0x10 [ 649.907591][ T30] ? __pfx_lock_acquire+0x10/0x10 [ 649.912824][ T30] ? writeback_sb_inodes+0x595/0x1370 [ 649.918226][ T30] ? __pfx_lock_release+0x10/0x10 [ 649.923429][ T30] ? do_raw_spin_lock+0x14f/0x370 [ 649.928483][ T30] __writeback_single_inode+0x14f/0x10d0 [ 649.934513][ T30] ? wbc_attach_and_unlock_inode+0x561/0x580 [ 649.940523][ T30] writeback_sb_inodes+0x80c/0x1370 [ 649.945882][ T30] ? mark_lock+0x9a/0x360 [ 649.950250][ T30] ? __lock_acquire+0x1397/0x2100 [ 649.955725][ T30] ? __pfx_writeback_sb_inodes+0x10/0x10 [ 649.961413][ T30] ? __pfx_move_expired_inodes+0x10/0x10 [ 649.967289][ T30] ? do_raw_spin_lock+0x14f/0x370 [ 649.972523][ T30] __writeback_inodes_wb+0x11b/0x260 [ 649.977846][ T30] wb_writeback+0x427/0xbc0 [ 649.982582][ T30] ? queue_io+0x311/0x5a0 [ 649.986957][ T30] ? __pfx_wb_writeback+0x10/0x10 [ 649.992023][ T30] wb_workfn+0xba1/0x1090 [ 649.996569][ T30] ? __pfx_wb_workfn+0x10/0x10 [ 650.002122][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 650.008321][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 650.014840][ T30] ? process_scheduled_works+0x976/0x1850 [ 650.020585][ T30] process_scheduled_works+0xa63/0x1850 [ 650.026335][ T30] ? __pfx_process_scheduled_works+0x10/0x10 [ 650.032829][ T30] ? assign_work+0x364/0x3d0 [ 650.037473][ T30] worker_thread+0x870/0xd30 [ 650.042096][ T30] ? __kthread_parkme+0x169/0x1d0 [ 650.047598][ T30] ? __pfx_worker_thread+0x10/0x10 [ 650.052901][ T30] kthread+0x2f0/0x390 [ 650.056997][ T30] ? __pfx_worker_thread+0x10/0x10 [ 650.062104][ T30] ? __pfx_kthread+0x10/0x10 [ 650.066881][ T30] ret_from_fork+0x4b/0x80 [ 650.071317][ T30] ? __pfx_kthread+0x10/0x10 [ 650.076048][ T30] ret_from_fork_asm+0x1a/0x30 [ 650.080843][ T30] [ 650.084171][ T30] INFO: task jbd2/sda1-8:5173 blocked for more than 143 seconds. [ 650.091922][ T30] Not tainted 6.12.0-syzkaller-09073-g9f16d5e6f220 #0 [ 650.099386][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 650.108904][ T30] task:jbd2/sda1-8 state:D stack:24816 pid:5173 tgid:5173 ppid:2 flags:0x00004000 [ 650.119510][ T30] Call Trace: [ 650.122943][ T30] [ 650.125900][ T30] __schedule+0x17fb/0x4be0 [ 650.130449][ T30] ? __pfx___schedule+0x10/0x10 [ 650.135777][ T30] ? __pfx_lock_release+0x10/0x10 [ 650.140839][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 650.147172][ T30] ? schedule+0x90/0x320 [ 650.151436][ T30] schedule+0x14b/0x320 [ 650.156196][ T30] io_schedule+0x8d/0x110 [ 650.160550][ T30] bit_wait_io+0x12/0xd0 [ 650.165102][ T30] __wait_on_bit+0xb0/0x2f0 [ 650.169646][ T30] ? __pfx_bit_wait_io+0x10/0x10 [ 650.174986][ T30] out_of_line_wait_on_bit+0x1d5/0x260 [ 650.180485][ T30] ? __pfx_bit_wait_io+0x10/0x10 [ 650.185777][ T30] ? __pfx_out_of_line_wait_on_bit+0x10/0x10 [ 650.191826][ T30] ? __pfx_wake_bit_function+0x10/0x10 [ 650.200462][ T30] ? _raw_read_unlock+0x28/0x50 [ 650.209976][ T30] jbd2_journal_commit_transaction+0x34cb/0x66d0 [ 650.216510][ T30] ? __pfx_jbd2_journal_commit_transaction+0x10/0x10 [ 650.223318][ T30] ? lockdep_hardirqs_on+0x99/0x150 [ 650.228549][ T30] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 650.234762][ T30] ? __try_to_del_timer_sync+0x2ad/0x340 [ 650.240451][ T30] ? __pfx___timer_delete_sync+0x10/0x10 [ 650.246177][ T30] ? __pfx_do_raw_write_lock+0x10/0x10 [ 650.251666][ T30] kjournald2+0x41c/0x7b0 [ 650.256142][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 650.262614][ T30] ? __pfx_kjournald2+0x10/0x10 [ 650.267500][ T30] ? __pfx_autoremove_wake_function+0x10/0x10 [ 650.274913][ T30] ? __kthread_parkme+0x169/0x1d0 [ 650.279984][ T30] ? __pfx_kjournald2+0x10/0x10 [ 650.285222][ T30] kthread+0x2f0/0x390 [ 650.289329][ T30] ? __pfx_kjournald2+0x10/0x10 [ 650.294703][ T30] ? __pfx_kthread+0x10/0x10 [ 650.299328][ T30] ret_from_fork+0x4b/0x80 [ 650.303893][ T30] ? __pfx_kthread+0x10/0x10 [ 650.310133][ T30] ret_from_fork_asm+0x1a/0x30 [ 650.315292][ T30] [ 650.318366][ T30] INFO: task syz-executor:5829 blocked for more than 144 seconds. [ 650.326453][ T30] Not tainted 6.12.0-syzkaller-09073-g9f16d5e6f220 #0 [ 650.333848][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 650.343932][ T30] task:syz-executor state:D stack:20432 pid:5829 tgid:5829 ppid:5827 flags:0x00000002 [ 650.354424][ T30] Call Trace: [ 650.357805][ T30] [ 650.360734][ T30] __schedule+0x17fb/0x4be0 [ 650.365529][ T30] ? __pfx___schedule+0x10/0x10 [ 650.370418][ T30] ? __pfx_lock_release+0x10/0x10 [ 650.375909][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 650.381918][ T30] ? schedule+0x90/0x320 [ 650.386303][ T30] schedule+0x14b/0x320 [ 650.390486][ T30] io_schedule+0x8d/0x110 [ 650.395032][ T30] bit_wait_io+0x12/0xd0 [ 650.399306][ T30] __wait_on_bit+0xb0/0x2f0 [ 650.403970][ T30] ? __pfx_bit_wait_io+0x10/0x10 [ 650.409814][ T30] out_of_line_wait_on_bit+0x1d5/0x260 [ 650.415492][ T30] ? __pfx_bit_wait_io+0x10/0x10 [ 650.420443][ T30] ? __pfx_out_of_line_wait_on_bit+0x10/0x10 [ 650.426615][ T30] ? __pfx_wake_bit_function+0x10/0x10 [ 650.432094][ T30] ? do_raw_spin_unlock+0x13c/0x8b0 [ 650.437483][ T30] ? jbd2_write_access_granted+0x71/0x310 [ 650.443485][ T30] do_get_write_access+0x121/0xe60 [ 650.448623][ T30] jbd2_journal_get_write_access+0x1ee/0x240 [ 650.454808][ T30] __ext4_journal_get_write_access+0x1c8/0x680 [ 650.460983][ T30] ? __pfx___ext4_journal_get_write_access+0x10/0x10 [ 650.467821][ T30] ? __pfx_start_this_handle+0x10/0x10 [ 650.473541][ T30] ext4_reserve_inode_write+0x271/0x360 [ 650.479110][ T30] ? __pfx_ext4_reserve_inode_write+0x10/0x10 [ 650.485547][ T30] __ext4_mark_inode_dirty+0x1ec/0x880 [ 650.491028][ T30] ? __pfx___ext4_mark_inode_dirty+0x10/0x10 [ 650.497214][ T30] ? trace_jbd2_handle_start+0x9c/0x250 [ 650.502926][ T30] ? jbd2__journal_start+0x3b8/0x5d0 [ 650.508245][ T30] ? __ext4_journal_start_sb+0x239/0x600 [ 650.514992][ T30] ext4_dirty_inode+0xce/0x110 [ 650.519788][ T30] ? __pfx_ext4_dirty_inode+0x10/0x10 [ 650.525321][ T30] __mark_inode_dirty+0x2ee/0xe90 [ 650.530376][ T30] file_update_time+0x3d2/0x450 [ 650.535942][ T30] ext4_page_mkwrite+0x206/0xdf0 [ 650.540929][ T30] ? do_wp_page+0x71c/0x5160 [ 650.545675][ T30] ? do_wp_page+0x2273/0x5160 [ 650.550372][ T30] ? __pfx_ext4_page_mkwrite+0x10/0x10 [ 650.556041][ T30] do_page_mkwrite+0x198/0x480 [ 650.560828][ T30] do_wp_page+0x2352/0x5160 [ 650.565462][ T30] ? __pfx_do_wp_page+0x10/0x10 [ 650.570328][ T30] ? __pfx_lock_acquire+0x10/0x10 [ 650.575413][ T30] ? rcu_is_watching+0x15/0xb0 [ 650.580191][ T30] ? do_raw_spin_lock+0x14f/0x370 [ 650.585368][ T30] ? __pfx___pte_offset_map+0x10/0x10 [ 650.590767][ T30] handle_pte_fault+0x111e/0x68a0 [ 650.596049][ T30] ? rcu_read_lock_any_held+0xb7/0x160 [ 650.601550][ T30] ? rcu_is_watching+0x15/0xb0 [ 650.606400][ T30] ? mark_lock+0x9a/0x360 [ 650.610742][ T30] ? touch_atime+0x521/0x690 [ 650.616917][ T30] ? __pfx_handle_pte_fault+0x10/0x10 [ 650.622375][ T30] ? __lock_acquire+0x1397/0x2100 [ 650.627465][ T30] ? reacquire_held_locks+0x3eb/0x690 [ 650.633033][ T30] ? lock_vma_under_rcu+0x34b/0x790 [ 650.638272][ T30] ? __pfx_reacquire_held_locks+0x10/0x10 [ 650.644401][ T30] handle_mm_fault+0x1053/0x1ad0 [ 650.649401][ T30] ? __pfx_handle_mm_fault+0x10/0x10 [ 650.654780][ T30] ? lock_vma_under_rcu+0x602/0x790 [ 650.660004][ T30] ? lock_vma_under_rcu+0x1dd/0x790 [ 650.665331][ T30] ? exc_page_fault+0x113/0x8c0 [ 650.670206][ T30] exc_page_fault+0x459/0x8c0 [ 650.675159][ T30] asm_exc_page_fault+0x26/0x30 [ 650.680147][ T30] RIP: 0033:0x7f62a4456465 [ 650.684640][ T30] RSP: 002b:00007fff0427a8a0 EFLAGS: 00010202 [ 650.690721][ T30] RAX: 00007f62a05e450c RBX: 00007fff0427a9b0 RCX: 0000000000000000 [ 650.698775][ T30] RDX: 00007f62a05e4508 RSI: 0000000000000008 RDI: 00007fff0427a9b0 [ 650.706842][ T30] RBP: 00000000000003e6 R08: 0000000000000000 R09: 0000000000000000 [ 650.716575][ T30] R10: 00007fff0427a990 R11: 0000000000000000 R12: 0000000000000000 [ 650.724907][ T30] R13: 000000000001baf4 R14: fffffffffffe450c R15: 000000000001baf4 [ 650.733167][ T30] [ 650.736281][ T30] INFO: task syz.9.585:9580 blocked for more than 144 seconds. [ 650.744337][ T30] Not tainted 6.12.0-syzkaller-09073-g9f16d5e6f220 #0 [ 650.751630][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 650.760631][ T30] task:syz.9.585 state:D stack:26736 pid:9580 tgid:9580 ppid:8423 flags:0x00000004 [ 650.771161][ T30] Call Trace: [ 650.774866][ T30] [ 650.777831][ T30] __schedule+0x17fb/0x4be0 [ 650.783647][ T30] ? __pfx___schedule+0x10/0x10 [ 650.788535][ T30] ? __pfx_lock_release+0x10/0x10 [ 650.793710][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 650.799716][ T30] ? schedule+0x90/0x320 [ 650.804778][ T30] schedule+0x14b/0x320 [ 650.808980][ T30] io_schedule+0x8d/0x110 [ 650.814355][ T30] bit_wait_io+0x12/0xd0 [ 650.819528][ T30] __wait_on_bit+0xb0/0x2f0 [ 650.824498][ T30] ? __pfx_bit_wait_io+0x10/0x10 [ 650.829468][ T30] out_of_line_wait_on_bit+0x1d5/0x260 [ 650.835213][ T30] ? __pfx_bit_wait_io+0x10/0x10 [ 650.840182][ T30] ? __pfx_out_of_line_wait_on_bit+0x10/0x10 [ 650.846377][ T30] ? __pfx_wake_bit_function+0x10/0x10 [ 650.851872][ T30] ? do_raw_spin_unlock+0x13c/0x8b0 [ 650.857293][ T30] ? jbd2_write_access_granted+0x71/0x310 [ 650.863094][ T30] do_get_write_access+0x121/0xe60 [ 650.868259][ T30] jbd2_journal_get_write_access+0x1ee/0x240 [ 650.874481][ T30] __ext4_journal_get_write_access+0x1c8/0x680 [ 650.880671][ T30] ? __pfx___ext4_journal_get_write_access+0x10/0x10 [ 650.887406][ T30] ? __pfx_start_this_handle+0x10/0x10 [ 650.893107][ T30] ext4_reserve_inode_write+0x271/0x360 [ 650.898699][ T30] ? __pfx_ext4_reserve_inode_write+0x10/0x10 [ 650.904887][ T30] __ext4_mark_inode_dirty+0x1ec/0x880 [ 650.910379][ T30] ? __pfx___ext4_mark_inode_dirty+0x10/0x10 [ 650.917242][ T30] ? trace_jbd2_handle_start+0x9c/0x250 [ 650.925262][ T30] ? jbd2__journal_start+0x3b8/0x5d0 [ 650.930593][ T30] ? __ext4_journal_start_sb+0x239/0x600 [ 650.936474][ T30] ext4_dirty_inode+0xce/0x110 [ 650.941274][ T30] ? __pfx_ext4_dirty_inode+0x10/0x10 [ 650.946755][ T30] __mark_inode_dirty+0x2ee/0xe90 [ 650.951822][ T30] file_update_time+0x3d2/0x450 [ 650.956883][ T30] ext4_page_mkwrite+0x206/0xdf0 [ 650.961857][ T30] ? __pfx_filemap_fault+0x10/0x10 [ 650.967017][ T30] ? __pfx_ext4_page_mkwrite+0x10/0x10 [ 650.972688][ T30] do_page_mkwrite+0x198/0x480 [ 650.977478][ T30] handle_pte_fault+0x1235/0x68a0 [ 650.982639][ T30] ? __pfx_handle_pte_fault+0x10/0x10 [ 650.988046][ T30] ? __pfx_lock_acquire+0x10/0x10 [ 650.993342][ T30] ? __pmd_alloc+0x54c/0x670 [ 650.997960][ T30] ? __pfx_lock_release+0x10/0x10 [ 651.003064][ T30] ? do_raw_spin_lock+0x14f/0x370 [ 651.008129][ T30] ? do_raw_spin_unlock+0x13c/0x8b0 [ 651.013577][ T30] ? __thp_vma_allowable_orders+0x8ff/0x9c0 [ 651.019494][ T30] ? __pfx___pmd_alloc+0x10/0x10 [ 651.025318][ T30] handle_mm_fault+0x1053/0x1ad0 [ 651.030338][ T30] ? __pfx_handle_mm_fault+0x10/0x10 [ 651.036015][ T30] ? lock_vma_under_rcu+0x602/0x790 [ 651.041266][ T30] ? lock_vma_under_rcu+0x1dd/0x790 [ 651.047271][ T30] ? exc_page_fault+0x113/0x8c0 [ 651.053094][ T30] exc_page_fault+0x459/0x8c0 [ 651.057812][ T30] asm_exc_page_fault+0x26/0x30 [ 651.062734][ T30] RIP: 0033:0x7f22ba451c11 [ 651.067181][ T30] RSP: 002b:00007ffc133f2610 EFLAGS: 00010246 [ 651.073519][ T30] RAX: 00000000003ffdf0 RBX: 0000000000000000 RCX: 0000000000000000 [ 651.081515][ T30] RDX: 0000001b30a20000 RSI: 0000000000400000 RDI: 00007f22ba672290 [ 651.089600][ T30] RBP: 00007ffc133f286c R08: 0000000000000004 R09: 0000000000040000 [ 651.097832][ T30] R10: 0000000000000011 R11: 0000000000000293 R12: 0000000000000032 [ 651.105917][ T30] R13: 0000000000077664 R14: 0000000000077203 R15: 00007ffc133f28c0 [ 651.114422][ T30] [ 651.117474][ T30] INFO: task syz.5.586:9581 blocked for more than 144 seconds. [ 651.125886][ T30] Not tainted 6.12.0-syzkaller-09073-g9f16d5e6f220 #0 [ 651.133429][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 651.142118][ T30] task:syz.5.586 state:D stack:26736 pid:9581 tgid:9581 ppid:8654 flags:0x00000004 [ 651.153231][ T30] Call Trace: [ 651.156534][ T30] [ 651.159467][ T30] __schedule+0x17fb/0x4be0 [ 651.164102][ T30] ? __pfx___schedule+0x10/0x10 [ 651.168981][ T30] ? __pfx_lock_release+0x10/0x10 [ 651.174243][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 651.180247][ T30] ? schedule+0x90/0x320 [ 651.184560][ T30] schedule+0x14b/0x320 [ 651.188753][ T30] io_schedule+0x8d/0x110 [ 651.193309][ T30] bit_wait_io+0x12/0xd0 [ 651.197579][ T30] __wait_on_bit+0xb0/0x2f0 [ 651.202099][ T30] ? __pfx_bit_wait_io+0x10/0x10 [ 651.207136][ T30] out_of_line_wait_on_bit+0x1d5/0x260 [ 651.212806][ T30] ? __pfx_bit_wait_io+0x10/0x10 [ 651.217761][ T30] ? __pfx_out_of_line_wait_on_bit+0x10/0x10 [ 651.223804][ T30] ? __pfx_wake_bit_function+0x10/0x10 [ 651.230079][ T30] ? do_raw_spin_unlock+0x13c/0x8b0 [ 651.235521][ T30] ? jbd2_write_access_granted+0x71/0x310 [ 651.241262][ T30] do_get_write_access+0x121/0xe60 [ 651.246446][ T30] jbd2_journal_get_write_access+0x1ee/0x240 [ 651.252841][ T30] __ext4_journal_get_write_access+0x1c8/0x680 [ 651.259039][ T30] ? __pfx___ext4_journal_get_write_access+0x10/0x10 [ 651.265789][ T30] ? __pfx_start_this_handle+0x10/0x10 [ 651.271270][ T30] ext4_reserve_inode_write+0x271/0x360 [ 651.277011][ T30] ? __pfx_ext4_reserve_inode_write+0x10/0x10 [ 651.283161][ T30] __ext4_mark_inode_dirty+0x1ec/0x880 [ 651.288655][ T30] ? __pfx___ext4_mark_inode_dirty+0x10/0x10 [ 651.294837][ T30] ? trace_jbd2_handle_start+0x9c/0x250 [ 651.300400][ T30] ? jbd2__journal_start+0x3b8/0x5d0 [ 651.305766][ T30] ? __ext4_journal_start_sb+0x239/0x600 [ 651.311417][ T30] ext4_dirty_inode+0xce/0x110 [ 651.316431][ T30] ? __pfx_ext4_dirty_inode+0x10/0x10 [ 651.321832][ T30] __mark_inode_dirty+0x2ee/0xe90 [ 651.326973][ T30] file_update_time+0x3d2/0x450 [ 651.332849][ T30] ext4_page_mkwrite+0x206/0xdf0 [ 651.337843][ T30] ? __pfx_filemap_fault+0x10/0x10 [ 651.343041][ T30] ? __pfx_ext4_page_mkwrite+0x10/0x10 [ 651.348522][ T30] do_page_mkwrite+0x198/0x480 [ 651.353495][ T30] handle_pte_fault+0x1235/0x68a0 [ 651.358551][ T30] ? __pfx_handle_pte_fault+0x10/0x10 [ 651.364275][ T30] ? __pfx_lock_acquire+0x10/0x10 [ 651.369322][ T30] ? __pmd_alloc+0x54c/0x670 [ 651.374131][ T30] ? __pfx_lock_release+0x10/0x10 [ 651.379187][ T30] ? do_raw_spin_lock+0x14f/0x370 [ 651.384312][ T30] ? do_raw_spin_unlock+0x13c/0x8b0 [ 651.389535][ T30] ? __thp_vma_allowable_orders+0x8ff/0x9c0 [ 651.395644][ T30] ? __pfx___pmd_alloc+0x10/0x10 [ 651.400610][ T30] handle_mm_fault+0x1053/0x1ad0 [ 651.405694][ T30] ? __pfx_handle_mm_fault+0x10/0x10 [ 651.410994][ T30] ? lock_vma_under_rcu+0x602/0x790 [ 651.416406][ T30] ? lock_vma_under_rcu+0x1dd/0x790 [ 651.421644][ T30] ? exc_page_fault+0x113/0x8c0 [ 651.426580][ T30] exc_page_fault+0x459/0x8c0 [ 651.431990][ T30] asm_exc_page_fault+0x26/0x30 [ 651.437052][ T30] RIP: 0033:0x7fd259251c11 [ 651.441483][ T30] RSP: 002b:00007ffd345378c0 EFLAGS: 00010246 [ 651.447769][ T30] RAX: 00000000003ffdf0 RBX: 0000000000000000 RCX: 0000000000000000 [ 651.456040][ T30] RDX: 0000001b30620000 RSI: 0000000000400000 RDI: 00007fd259472290 [ 651.464102][ T30] RBP: 00007ffd34537b1c R08: 0000000000000004 R09: 0000000000040000 [ 651.472108][ T30] R10: 0000000000000011 R11: 0000000000000293 R12: 0000000000000029 [ 651.480446][ T30] R13: 00000000000772ed R14: 0000000000076613 R15: 00007ffd34537b70 [ 651.491061][ T30] [ 651.494297][ T30] [ 651.494297][ T30] Showing all locks held in the system: [ 651.502059][ T30] 1 lock held by khungtaskd/30: [ 651.507054][ T30] #0: ffffffff8e93c520 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x55/0x2a0 [ 651.517157][ T30] 6 locks held by kworker/u8:2/35: [ 651.522360][ T30] #0: ffff8880202ab148 ((wq_completion)writeback){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 651.534927][ T30] #1: ffffc90000ab7d00 ((work_completion)(&(&wb->dwork)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 651.547498][ T30] #2: ffff8880359380e0 (&type->s_umount_key#30){++++}-{4:4}, at: super_trylock_shared+0x22/0xf0 [ 651.558706][ T30] #3: ffff88803593ab98 (&sbi->s_writepages_rwsem){++++}-{0:0}, at: ext4_writepages+0x1bf/0x3c0 [ 651.569350][ T30] #4: ffff88803593c958 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0x1e94/0x2110 [ 651.579142][ T30] #5: ffff88807e3b6598 (&ei->i_data_sem){++++}-{4:4}, at: ext4_map_blocks+0x7a6/0x1990 [ 651.589049][ T30] 5 locks held by kworker/u8:5/1086: [ 651.594600][ T30] 2 locks held by getty/5593: [ 651.599326][ T30] #0: ffff88803121e0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 651.609239][ T30] #1: ffffc90002fd62f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x6a6/0x1e00 [ 651.619432][ T30] 3 locks held by syz-executor/5829: [ 651.624863][ T30] #0: ffff888031052d18 (&vma->vm_lock->lock){++++}-{4:4}, at: lock_vma_under_rcu+0x34b/0x790 [ 651.635445][ T30] #1: ffff888035938518 (sb_pagefaults){.+.+}-{0:0}, at: ext4_page_mkwrite+0x1ef/0xdf0 [ 651.646338][ T30] #2: ffff88803593c958 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0x1e94/0x2110 [ 651.656114][ T30] 3 locks held by syz.9.585/9580: [ 651.661123][ T30] #0: ffff88807d8c5808 (&vma->vm_lock->lock){++++}-{4:4}, at: lock_vma_under_rcu+0x34b/0x790 [ 651.671524][ T30] #1: ffff888035938518 (sb_pagefaults){.+.+}-{0:0}, at: ext4_page_mkwrite+0x1ef/0xdf0 [ 651.681395][ T30] #2: ffff88803593c958 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0x1e94/0x2110 [ 651.691141][ T30] 3 locks held by syz.5.586/9581: [ 651.696229][ T30] #0: ffff888049ad7c40 (&vma->vm_lock->lock){++++}-{4:4}, at: lock_vma_under_rcu+0x34b/0x790 [ 651.706586][ T30] #1: ffff888035938518 (sb_pagefaults){.+.+}-{0:0}, at: ext4_page_mkwrite+0x1ef/0xdf0 [ 651.716450][ T30] #2: ffff88803593c958 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0x1e94/0x2110 [ 651.726223][ T30] [ 651.728567][ T30] ============================================= [ 651.728567][ T30] [ 651.737046][ T30] NMI backtrace for cpu 1 [ 651.741377][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.12.0-syzkaller-09073-g9f16d5e6f220 #0 [ 651.751523][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 651.761577][ T30] Call Trace: [ 651.764861][ T30] [ 651.767802][ T30] dump_stack_lvl+0x241/0x360 [ 651.772505][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 651.777710][ T30] ? __pfx__printk+0x10/0x10 [ 651.782319][ T30] nmi_cpu_backtrace+0x49c/0x4d0 [ 651.787283][ T30] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 651.792759][ T30] ? _printk+0xd5/0x120 [ 651.796926][ T30] ? __pfx__printk+0x10/0x10 [ 651.801502][ T30] ? __wake_up_klogd+0xcc/0x110 [ 651.806356][ T30] ? __pfx__printk+0x10/0x10 [ 651.810970][ T30] ? __rcu_read_unlock+0xa1/0x110 [ 651.815999][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 651.821998][ T30] nmi_trigger_cpumask_backtrace+0x198/0x320 [ 651.827981][ T30] watchdog+0xff4/0x1040 [ 651.832242][ T30] ? watchdog+0x1ea/0x1040 [ 651.836695][ T30] ? __pfx_watchdog+0x10/0x10 [ 651.841380][ T30] kthread+0x2f0/0x390 [ 651.845467][ T30] ? __pfx_watchdog+0x10/0x10 [ 651.850149][ T30] ? __pfx_kthread+0x10/0x10 [ 651.854748][ T30] ret_from_fork+0x4b/0x80 [ 651.859241][ T30] ? __pfx_kthread+0x10/0x10 [ 651.863848][ T30] ret_from_fork_asm+0x1a/0x30 [ 651.868631][ T30] [ 651.872953][ T30] Sending NMI from CPU 1 to CPUs 0: [ 651.878218][ C0] NMI backtrace for cpu 0 [ 651.878231][ C0] CPU: 0 UID: 0 PID: 6329 Comm: kworker/u8:9 Not tainted 6.12.0-syzkaller-09073-g9f16d5e6f220 #0 [ 651.878250][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 651.878262][ C0] Workqueue: bat_events batadv_nc_worker [ 651.878285][ C0] RIP: 0010:kasan_check_range+0x5/0x290 [ 651.878304][ C0] Code: 8e e8 cf 0d e2 ff 90 0f 0b 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 66 0f 1f 00 55 <41> 57 41 56 41 54 53 b0 01 48 85 f6 0f 84 a0 01 00 00 4c 8d 04 37 [ 651.878318][ C0] RSP: 0018:ffffc900052df8e0 EFLAGS: 00000046 [ 651.878332][ C0] RAX: 0000000000000000 RBX: 0000000000000021 RCX: ffffffff81712eb6 [ 651.878343][ C0] RDX: 0000000000000000 RSI: 0000000000000008 RDI: ffffffff942b8880 [ 651.878354][ C0] RBP: 3772edba39b4c8c6 R08: ffffffff942b896f R09: 1ffffffff285712d [ 651.878366][ C0] R10: dffffc0000000000 R11: fffffbfff285712e R12: ffff88802ee60000 [ 651.878385][ C0] R13: ffff88802ee60000 R14: 1ffff11005dcc16a R15: 0000000000000000 [ 651.878396][ C0] FS: 0000000000000000(0000) GS:ffff8880b8600000(0000) knlGS:0000000000000000 [ 651.878410][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 651.878421][ C0] CR2: 0000555b9cb47d88 CR3: 000000000e738000 CR4: 00000000003526f0 [ 651.878436][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 651.878446][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 651.878456][ C0] Call Trace: [ 651.878462][ C0] [ 651.878469][ C0] ? nmi_cpu_backtrace+0x3c2/0x4d0 [ 651.878488][ C0] ? __pfx_lock_acquire+0x10/0x10 [ 651.878506][ C0] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 651.878530][ C0] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 651.878552][ C0] ? nmi_handle+0x14f/0x5a0 [ 651.878569][ C0] ? nmi_handle+0x2a/0x5a0 [ 651.878586][ C0] ? kasan_check_range+0x5/0x290 [ 651.878601][ C0] ? default_do_nmi+0x63/0x160 [ 651.878621][ C0] ? exc_nmi+0x123/0x1f0 [ 651.878639][ C0] ? end_repeat_nmi+0xf/0x53 [ 651.878657][ C0] ? __lock_acquire+0x12b6/0x2100 [ 651.878674][ C0] ? kasan_check_range+0x5/0x290 [ 651.878689][ C0] ? kasan_check_range+0x5/0x290 [ 651.878704][ C0] ? kasan_check_range+0x5/0x290 [ 651.878720][ C0] [ 651.878725][ C0] [ 651.878730][ C0] __lock_acquire+0x12b6/0x2100 [ 651.878752][ C0] lock_acquire+0x1ed/0x550 [ 651.878767][ C0] ? batadv_nc_worker+0xcb/0x610 [ 651.878788][ C0] ? __pfx_lock_acquire+0x10/0x10 [ 651.878805][ C0] ? batadv_nc_worker+0xcb/0x610 [ 651.878822][ C0] ? __pfx_lock_release+0x10/0x10 [ 651.878839][ C0] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 651.878858][ C0] batadv_nc_worker+0xec/0x610 [ 651.878875][ C0] ? batadv_nc_worker+0xcb/0x610 [ 651.878892][ C0] ? batadv_nc_worker+0xcb/0x610 [ 651.878910][ C0] ? process_scheduled_works+0x976/0x1850 [ 651.878934][ C0] process_scheduled_works+0xa63/0x1850 [ 651.878966][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 651.878991][ C0] ? assign_work+0x364/0x3d0 [ 651.879014][ C0] worker_thread+0x870/0xd30 [ 651.879034][ C0] ? __kthread_parkme+0x169/0x1d0 [ 651.879050][ C0] ? __pfx_worker_thread+0x10/0x10 [ 651.879065][ C0] kthread+0x2f0/0x390 [ 651.879080][ C0] ? __pfx_worker_thread+0x10/0x10 [ 651.879094][ C0] ? __pfx_kthread+0x10/0x10 [ 651.879111][ C0] ret_from_fork+0x4b/0x80 [ 651.879125][ C0] ? __pfx_kthread+0x10/0x10 [ 651.879141][ C0] ret_from_fork_asm+0x1a/0x30 [ 651.879167][ C0] [ 651.886149][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 651.886167][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.12.0-syzkaller-09073-g9f16d5e6f220 #0 [ 651.886189][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 651.886201][ T30] Call Trace: [ 651.886208][ T30] [ 651.886217][ T30] dump_stack_lvl+0x241/0x360 [ 651.886249][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 651.886268][ T30] ? __pfx__printk+0x10/0x10 [ 651.886290][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 651.886316][ T30] ? vscnprintf+0x5d/0x90 [ 651.886339][ T30] panic+0x349/0x880 [ 651.886363][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 651.886392][ T30] ? __pfx_panic+0x10/0x10 [ 651.886414][ T30] ? tick_nohz_tick_stopped+0x82/0xb0 [ 651.886438][ T30] ? __irq_work_queue_local+0x137/0x410 [ 651.886459][ T30] ? preempt_schedule_thunk+0x1a/0x30 [ 651.886478][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 651.886498][ T30] ? nmi_trigger_cpumask_backtrace+0x2d4/0x320 [ 652.320794][ T30] ? nmi_trigger_cpumask_backtrace+0x2d9/0x320 [ 652.326961][ T30] watchdog+0x1033/0x1040 [ 652.331296][ T30] ? watchdog+0x1ea/0x1040 [ 652.335717][ T30] ? __pfx_watchdog+0x10/0x10 [ 652.340385][ T30] kthread+0x2f0/0x390 [ 652.344534][ T30] ? __pfx_watchdog+0x10/0x10 [ 652.349205][ T30] ? __pfx_kthread+0x10/0x10 [ 652.353790][ T30] ret_from_fork+0x4b/0x80 [ 652.358203][ T30] ? __pfx_kthread+0x10/0x10 [ 652.362789][ T30] ret_from_fork_asm+0x1a/0x30 [ 652.367558][ T30] [ 652.370835][ T30] Kernel Offset: disabled [ 652.375256][ T30] Rebooting in 86400 seconds..