last executing test programs: 3m40.82561823s ago: executing program 2 (id=280): socket$inet6(0xa, 0x2, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) waitid(0x2, 0x0, 0xfffffffffffffffe, 0x8, 0x0) write$binfmt_script(r2, &(0x7f0000000340), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[], 0x24}, 0x1, 0x0, 0x0, 0x4004}, 0xa2ed738033520b3a) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000faffffff0000000000000000850000006300000085000000760000009500000000000000"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000480)=""/124, 0x7c}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan0\x00'}) ioctl$KVM_RUN(r3, 0xae80, 0x0) socket$tipc(0x1e, 0x2, 0x0) getsockopt$EBT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x81, 0x0, 0x0) unshare(0x68060200) r4 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r4, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x20) syz_emit_ethernet(0x46, &(0x7f0000000440)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd60f91e2e00107300fc040000000000000000000000000000ff020000000000"], 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x8031, 0xffffffffffffffff, 0x0) r5 = socket$inet_sctp(0x2, 0x1, 0x84) r6 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt$EBT_SO_SET_COUNTERS(r6, 0x0, 0x81, &(0x7f0000000380)={'nat\x00', 0x0, 0x0, 0x0, [0x800000000000f, 0x2, 0x9, 0xe2ba, 0x40, 0x1], 0x0, 0x0}, 0x78) setsockopt$EBT_SO_SET_COUNTERS(r5, 0x0, 0x81, &(0x7f0000000240)={'nat\x00', 0x0, 0x0, 0x0, [0x0, 0x100, 0xffffffffffffffff, 0x0, 0x0, 0x2], 0x1, 0x0, 0x0, [{}]}, 0x88) r7 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r7, &(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x4, 0x10000000}}, 0x10) bind$tipc(r7, &(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x1, {0x2, 0x2, 0x2}}, 0x10) 3m39.492686271s ago: executing program 2 (id=283): unshare(0x8000000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x13, 0x7, 0xc, 0x22, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r3, &(0x7f0000000000), 0xd) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x0, &(0x7f0000000300)='usrquota') r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) quotactl_fd$Q_SETQUOTA(r4, 0x80000300, 0x0, 0x0) 3m38.332712341s ago: executing program 2 (id=285): syz_emit_ethernet(0xbe, &(0x7f00000000c0)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e22, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "0000000000000000000000000000000000000000000000000000009400"}}}}}}, 0x0) syz_emit_ethernet(0x9e, &(0x7f0000000180)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x90, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e22, 0x7c, 0x0, @wg=@data={0x4, 0x0, 0x0, '\x00'/100}}}}}}, 0x0) 3m37.566971819s ago: executing program 2 (id=288): ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) io_submit(0x0, 0x0, 0x0) mkdirat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs2\x00', 0x1ff) socket$nl_generic(0x10, 0x3, 0x10) umount2(&(0x7f00000001c0)='./file0\x00', 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a010100000000000000000500000009000100ee797a300000000014000000020a0103000000000000000000000000140000001100010000000000000000002000000a76e54a8d3397d7c8a18dfa869960f0bd426c95e0c0b8158dffd781544cf54890313cfe52e3dd67b597c39c62e61a4febc77762492bcaccff05"], 0x5c}}, 0x0) r4 = syz_open_dev$video(&(0x7f0000000040), 0xa7, 0x0) write$binfmt_aout(0xffffffffffffffff, 0x0, 0x0) ioctl$VIDIOC_S_FMT(r4, 0xc0d05605, &(0x7f0000000180)={0x1, @pix={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfeedcafe, 0x3, 0x0, 0x2}}) r5 = openat$dsp(0xffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$SOUND_MIXER_WRITE_RECSRC(r5, 0xc0044dff, &(0x7f00000000c0)=0x33) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000000)="240000001a005f0414f9f407000901000aff8000034000030000000008001d0001000000", 0x24) 3m36.252078828s ago: executing program 2 (id=290): r0 = syz_io_uring_setup(0x5169, &(0x7f0000000500)={0x0, 0x0, 0x10100}, &(0x7f0000000400), &(0x7f00000004c0)=0x0) r2 = syz_io_uring_setup(0x2d5b, &(0x7f0000000140)={0x0, 0xeb68, 0x60, 0x100, 0x4000, 0x0, r0}, &(0x7f0000000480)=0x0, &(0x7f00000005c0)) syz_io_uring_submit(r3, r1, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, 0x30}) r4 = socket$netlink(0x10, 0x3, 0xb) bind$netlink(r4, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r4, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0xfffffffffffffe00) r5 = socket$kcm(0x10, 0x2, 0x0) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000003c0)="2e00020010007d9c239ade51f81957847177d33e468188e6b60200005e140602000000000e000a0010000000028000001294", 0x32}], 0x1}, 0x0) sendmsg$kcm(r5, &(0x7f0000000600)={0x0, 0x3, &(0x7f0000000040)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73772cc9f1ba1f848430000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) io_uring_enter(r0, 0x79dc, 0x0, 0x0, 0x0, 0x0) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r7, &(0x7f0000000000)={0x1f, 0x0, 0x1}, 0x3) r8 = socket$inet_udplite(0x2, 0x2, 0x88) r9 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) r10 = syz_io_uring_setup(0x24a9, &(0x7f0000000200)={0x0, 0x0, 0x10100}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r11, r12, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x12, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r10, 0x2def, 0x0, 0x0, 0x0, 0x0) r13 = syz_io_uring_setup(0x24f9, &(0x7f0000000080)={0x0, 0x80000, 0x20, 0x40000000}, &(0x7f0000000040)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r14, r15, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r13, 0x4624, 0x0, 0x0, 0x0, 0x0) write$P9_RSTATu(r9, &(0x7f00000003c0)=ANY=[@ANYBLOB="3402000002000000058000000000000001000000000000000000000008"], 0x234) clock_gettime(0x0, &(0x7f00000002c0)={0x0, 0x0}) ppoll(&(0x7f00000000c0)=[{r2, 0x2000}, {r4, 0x63a}, {r8, 0x2}, {r0, 0x8}, {r6, 0x20c9}, {r7, 0xa041}], 0x6, &(0x7f0000000340)={r16, r17+60000000}, &(0x7f0000000380)={[0x81]}, 0x8) r18 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r18, 0xae03, 0x42) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r8, 0x8933, &(0x7f0000002280)={'batadv_slave_1\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x3, 0x3, &(0x7f0000000bc0)=ANY=[@ANYBLOB="180000000000000000000000d48c7323782d586700000000"], &(0x7f0000000440)='syzkaller\x00', 0x200, 0x0, 0x0, 0x0, 0x0, '\x00', r19, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) getsockname(r7, 0x0, &(0x7f0000000280)) 3m35.199782057s ago: executing program 2 (id=294): r0 = socket$inet6(0xa, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x12, 0x80, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000feffffff140000000000000000000000000000009500000000"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @cgroup_sock_addr=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$F2FS_IOC_START_ATOMIC_WRITE(r0, 0xf501, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = syz_open_dev$MSR(&(0x7f0000000380), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8954, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000fc0)={0x6, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"/675], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x10, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0xa, 0xfffffffe}, 0x8, 0x10, &(0x7f0000000340), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) timerfd_settime(0xffffffffffffffff, 0x3, 0x0, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'sha256-avx\x00'}, 0x58) r4 = accept4(r3, 0x0, 0x0, 0x0) sendmsg$alg(r4, &(0x7f0000002a80)={0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000440)="a7", 0x1}], 0x1}, 0x8dff) sendto$inet(r4, 0x0, 0x0, 0x200007fd, 0x0, 0x0) clock_adjtime(0x0, &(0x7f0000000000)={0x3ff, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x8001, 0x3, 0x0, 0x3}) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan0\x00'}) 3m20.111595142s ago: executing program 32 (id=294): r0 = socket$inet6(0xa, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x12, 0x80, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000feffffff140000000000000000000000000000009500000000"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @cgroup_sock_addr=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$F2FS_IOC_START_ATOMIC_WRITE(r0, 0xf501, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = syz_open_dev$MSR(&(0x7f0000000380), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8954, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000fc0)={0x6, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"/675], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x10, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0xa, 0xfffffffe}, 0x8, 0x10, &(0x7f0000000340), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) timerfd_settime(0xffffffffffffffff, 0x3, 0x0, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'sha256-avx\x00'}, 0x58) r4 = accept4(r3, 0x0, 0x0, 0x0) sendmsg$alg(r4, &(0x7f0000002a80)={0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000440)="a7", 0x1}], 0x1}, 0x8dff) sendto$inet(r4, 0x0, 0x0, 0x200007fd, 0x0, 0x0) clock_adjtime(0x0, &(0x7f0000000000)={0x3ff, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x8001, 0x3, 0x0, 0x3}) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan0\x00'}) 1m18.876167853s ago: executing program 1 (id=646): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000380), r0) unshare(0x2a020400) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x0, 0x0) unshare(0x2000400) close(r2) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000000)={0x3c, r1, 0x201, 0x0, 0x0, {}, [@IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x2}]}, 0x3c}}, 0x0) 1m18.0855358s ago: executing program 1 (id=649): openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="1500000065ffff"], 0x15) openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB, @ANYRESHEX, @ANYBLOB="2c005dc6555732"]) socket$inet(0x2, 0x2, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r0 = socket$vsock_stream(0x28, 0x1, 0x0) getsockopt(r0, 0x28, 0x0, &(0x7f00000012c0)=""/4096, &(0x7f0000000080)=0x1000) socket$inet6(0xa, 0x1, 0x8) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000120da7400e08852000"/28], 0x48) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)=ANY=[], 0x60}}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x800000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) fanotify_init(0x0, 0x101000) ioctl$VIDIOC_G_AUDIO(0xffffffffffffffff, 0x80345621, 0x0) socket$packet(0x11, 0x2, 0x300) r3 = getpid() capget(&(0x7f0000000100)={0x19980330, r3}, &(0x7f0000000280)={0x99, 0x69df, 0x8, 0x401, 0x5}) ptrace$ARCH_SHSTK_STATUS(0x1e, r3, &(0x7f00000002c0), 0x5005) r4 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_S_SELECTION(r4, 0xc040565f, &(0x7f0000000200)={0x2, 0x0, 0x7, {0xe7ff, 0x4000, 0x4, 0x240}}) 1m14.114128173s ago: executing program 1 (id=656): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000002140)={'wlan0\x00', 0x0}) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)={0x30, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x80}, @NL80211_ATTR_MESH_ID={0xa}]}, 0x30}, 0x1, 0x0, 0x0, 0x4040}, 0x4000040) sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(r0, &(0x7f00000004c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYRES32=r1, @ANYRES16=r2, @ANYRESHEX=r2], 0x64}, 0x1, 0x0, 0x0, 0x20000040}, 0x40000) r5 = socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000680)=@newqdisc={0x24, 0x24, 0x4, 0x0, 0x4, {0x0, 0x0, 0x0, 0x0, {}, {}, {0x3, 0xe}}}, 0x24}}, 0x0) getsockname$packet(r5, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000540)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000006c0)=@newtfilter={0x54, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0x7}, {}, {0x2}}, [@filter_kind_options=@f_flow={{0x9}, {0x24, 0x2, [@TCA_FLOW_EMATCHES={0x10, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x4}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x6}}]}, @TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_DIVISOR={0x8, 0x8, 0x5}]}}]}, 0x54}}, 0x801) r7 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r7, &(0x7f00000002c0), 0x40000000000009f, 0x0) write(0xffffffffffffffff, &(0x7f00000002c0)="09f8000001", 0x5) r8 = socket$netlink(0x10, 0x3, 0x0) r9 = socket$inet_tcp(0x2, 0x1, 0x0) sendmsg$NL80211_CMD_ADD_TX_TS(r0, 0xffffffffffffffff, 0x24000000) bind$inet(r9, &(0x7f0000000380)={0x2, 0x4e22, @empty}, 0x10) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r10, 0x29, 0x1a, &(0x7f0000000100)=0x401, 0x4) sendto$inet6(r10, 0x0, 0x0, 0x20000000, &(0x7f0000000080)={0xa, 0x4e20, 0xfffffffe, @loopback}, 0x1c) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000001c00110c0000001400000f0007000000", @ANYRES32=r11, @ANYBLOB="800202000a000200577f0000aabb000020000e80050001008f000000050001000100000004000200050001"], 0x48}}, 0x0) r12 = syz_open_procfs$pagemap(0x0, &(0x7f0000000000)) ioctl$PAGEMAP_SCAN(r12, 0xc0606610, &(0x7f0000000300)={0x60, 0x1, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x6, &(0x7f0000000040)=[{0x10000000000, 0x6, 0xffffffffffffffff}, {0x8, 0x3, 0x2}], 0x2, 0x8fe, 0x14, 0x0, 0x80, 0x68}) r13 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[], 0x48}}, 0x0) sendmmsg$alg(r13, &(0x7f00000000c0), 0x492492492492627, 0x0) 1m13.04191199s ago: executing program 1 (id=660): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={0x0, &(0x7f0000000640)=""/4086, 0x0, 0xff6, 0x0, 0x3, 0x0, @void, @value}, 0x28) r0 = openat$vimc0(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VHOST_NET_SET_BACKEND(0xffffffffffffffff, 0x4008af30, &(0x7f0000000000)={0x1}) ioctl$VIDIOC_S_PRIORITY(r0, 0x40045644, 0x20000000) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = dup(r1) r3 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$int_in(r3, 0x40000000af01, 0x0) close_range(r2, r2, 0x2) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000200)=@framed, &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000140)='contention_end\x00', r4}, 0x10) r5 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="1400000035000b63d25a80648c2594f90724fc60", 0x14}], 0x1}, 0x0) ioctl$VHOST_SET_MEM_TABLE(r3, 0x4008af03, &(0x7f0000000b00)) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000380), 0x4) ioctl$VHOST_NET_SET_BACKEND(r3, 0x4008af30, &(0x7f00000003c0)={0x1, r2}) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={&(0x7f0000000040)="8007e8779b024e10aa5a0212750539a4d2652a15f363db251c3e91fa41f90617d15346f6c82c572c2fabe57521d0cea41de262389af6534dfd22494ebf", &(0x7f0000000080)=""/46, &(0x7f00000001c0)="bcc7e895dae597301ce963a5209bd42e070f89d8bf3111163137aa6e225a4fa4ccd9fb46cf7cb041981bb1c0bd28c76066e663aa94f454e203856ee0e9dcbcbcab9e78a3e15d71216bdef837244513b03f", &(0x7f0000000240)="2eb453c58a568e7c26dd9980fa08aecc07c6b961188b04a800feb4f2a105a7733da77fffb23106f5ac5f5fa687ac7959a82b42f8f81d720c78a58521d0e7057e9538d29163d06033da235ae31333f2b612dfaa51c4643b7a9a0eb5e841dc8a8bbbdfe839e83bafe59fff8c919e3ee0c9a4681ecb733ddb77ba8808575a4120cf996365c1497641", 0x0, r2, 0x4}, 0x38) ioctl$VIDIOC_ENCODER_CMD(r0, 0xc028564d, &(0x7f0000000140)={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5]}) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r7 = socket$igmp6(0xa, 0x3, 0x2) r8 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r7, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00'}) write$tun(r6, &(0x7f0000000100)=ANY=[@ANYBLOB="06000000bbbbbbbbbbbbaaaaaaaaaabb88f5"], 0xfdef) 1m12.54391526s ago: executing program 1 (id=661): socket$inet6(0xa, 0x6, 0x2) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x800000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB], 0x50) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) fanotify_init(0x0, 0x101000) ioctl$VIDIOC_G_AUDIO(0xffffffffffffffff, 0x80345621, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) capget(&(0x7f0000000100)={0x19980330, r2}, &(0x7f0000000280)={0x99, 0x69df, 0x8, 0x401, 0x5}) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x169802, 0x0) r4 = dup(r3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x13, r4, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newlink={0x48, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_OFLAGS={0x6, 0x3, 0x80}, @IFLA_GRE_ENCAP_TYPE={0x6, 0xe, 0x2}]}}}]}, 0x48}}, 0x0) ioctl$USBDEVFS_ALLOW_SUSPEND(r4, 0x5522) ptrace$ARCH_SHSTK_STATUS(0x1e, r2, &(0x7f00000002c0), 0x5005) r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x242, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r7 = syz_genetlink_get_family_id$gtp(&(0x7f0000000680), 0xffffffffffffffff) sendmsg$GTP_CMD_DELPDP(0xffffffffffffffff, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000002100)={0x2c, r7, 0x101, 0x0, 0x0, {}, [@GTPA_NET_NS_FD={0x8, 0x7, r6}, @GTPA_LINK={0x8}, @GTPA_VERSION={0x8}]}, 0x2c}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x19, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000791200000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sockopt=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r8 = accept4$packet(r1, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f00000000c0)=0x14, 0x80800) setsockopt$packet_int(r8, 0x107, 0x8, &(0x7f0000000300)=0x2a1, 0x4) 1m11.548685611s ago: executing program 1 (id=662): r0 = socket$inet6(0xa, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x12, 0x80, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000feffffff140000000000000000000000000000009500000000"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @cgroup_sock_addr=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$F2FS_IOC_START_ATOMIC_WRITE(r0, 0xf501, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = syz_open_dev$MSR(&(0x7f0000000380), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = socket$inet(0x2, 0x800, 0x0) ioctl$sock_inet_SIOCSARP(r3, 0x8954, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000fc0)={0x6, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"/675], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x10, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0xa, 0xfffffffe}, 0x8, 0x10, &(0x7f0000000340), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) dup3(r4, r5, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r5, 0x18000000000002a0, 0xdc0, 0x6000002c, &(0x7f0000000100)="b9ff03316844268cb89e14f0080048e0050000310000003377fbac141416e000000183070403b180008903040000845013f2325f003901050b038da1880b25181aa59d943be3f4aed50ea5a6b8686731cb89ef77123c899b699eeaa8eaa0073461119663906400f30c0600000000000059b6d3296e8ca31bce1d8392078b72f24996ae17dffc2e43c8174b54b620636894aaacf28ff62616363c70a440aec4014c0000c0adc043084617d7ecf41effff38cae870b9a1df48b238190da450296b0ac01496ace23eefc9d4246dd14afbf79a2283a0bb7e1d235f3df126c3acc240d7da058f6efa6d1f5f7ff400"/254, 0x0, 0xfe, 0x60000000, 0x0, 0xfffffffe}, 0x2c) bind$alg(0xffffffffffffffff, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'sha256-avx\x00'}, 0x58) r6 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$alg(r6, &(0x7f0000002a80)={0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000440)="a7", 0x1}], 0x1}, 0x8dff) sendto$inet(r6, 0x0, 0x0, 0x200007fd, 0x0, 0x0) clock_adjtime(0x0, &(0x7f0000000000)={0x3ff, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x8001, 0x3, 0x0, 0x3}) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan0\x00'}) 55.392292811s ago: executing program 33 (id=662): r0 = socket$inet6(0xa, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x12, 0x80, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000feffffff140000000000000000000000000000009500000000"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @cgroup_sock_addr=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$F2FS_IOC_START_ATOMIC_WRITE(r0, 0xf501, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = syz_open_dev$MSR(&(0x7f0000000380), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = socket$inet(0x2, 0x800, 0x0) ioctl$sock_inet_SIOCSARP(r3, 0x8954, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000fc0)={0x6, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"/675], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x10, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0xa, 0xfffffffe}, 0x8, 0x10, &(0x7f0000000340), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) dup3(r4, r5, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r5, 0x18000000000002a0, 0xdc0, 0x6000002c, &(0x7f0000000100)="b9ff03316844268cb89e14f0080048e0050000310000003377fbac141416e000000183070403b180008903040000845013f2325f003901050b038da1880b25181aa59d943be3f4aed50ea5a6b8686731cb89ef77123c899b699eeaa8eaa0073461119663906400f30c0600000000000059b6d3296e8ca31bce1d8392078b72f24996ae17dffc2e43c8174b54b620636894aaacf28ff62616363c70a440aec4014c0000c0adc043084617d7ecf41effff38cae870b9a1df48b238190da450296b0ac01496ace23eefc9d4246dd14afbf79a2283a0bb7e1d235f3df126c3acc240d7da058f6efa6d1f5f7ff400"/254, 0x0, 0xfe, 0x60000000, 0x0, 0xfffffffe}, 0x2c) bind$alg(0xffffffffffffffff, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'sha256-avx\x00'}, 0x58) r6 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$alg(r6, &(0x7f0000002a80)={0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000440)="a7", 0x1}], 0x1}, 0x8dff) sendto$inet(r6, 0x0, 0x0, 0x200007fd, 0x0, 0x0) clock_adjtime(0x0, &(0x7f0000000000)={0x3ff, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x8001, 0x3, 0x0, 0x3}) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan0\x00'}) 21.128170617s ago: executing program 5 (id=774): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="340000003b0007015005068a00000000047c0000040000000c00018006000600800a0000100002800c0006"], 0x34}}, 0xc000) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb5d07081196f37538e486dd6372ce22667f2b00dbf6e97158b33d4fec877f1b6d76745b686158bbcfe8875afdef00010000000006"], 0x66) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) close(r1) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) (async) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) (async) bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="340000003b0007015005068a00000000047c0000040000000c00018006000600800a0000100002800c0006"], 0x34}}, 0xc000) (async) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb5d07081196f37538e486dd6372ce22667f2b00dbf6e97158b33d4fec877f1b6d76745b686158bbcfe8875afdef00010000000006"], 0x66) (async) 12.715507022s ago: executing program 5 (id=787): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000202300800000000000000000850000007b00000095"], &(0x7f00000001c0)='GPL\x00', 0x4, 0x93, &(0x7f00000003c0)=""/147, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = socket(0x200000100000011, 0x803, 0x0) setsockopt$packet_tx_ring(r2, 0x107, 0xd, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r2, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x21008}, 0xc, &(0x7f0000000200)={0x0, 0x38}, 0x1, 0x0, 0x0, 0x24000}, 0x4) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x120, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c20000000800450000eb00000000003e907800000000e000000100004e20009c907802000000000000000000000082d18160f7d8cda36479a6b179161b4bbff2d0508977b3928ebd2dee05607d170194bd7b1b0303c5ba7f602606a285b330da2d58da817f8a5f77a23de36a21643b33cfa231a427159c7b9f0eceb155f0"], 0x0) syz_emit_ethernet(0xbe, &(0x7f0000000640)={@multicast, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @private, @broadcast}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "cf84587f4b49769e23b85caea7367c9d1706df8d52187b612feb598e0a31087d", "9396823fd111daf19c418280f7a60f44a931e0798222bae9f45e4fffdfa0d709cd69603e362c831ebd59fcdb58514804", "890c188ca3b77e98a805af3867ce4b96b45f09787727afd5d8e97d9c", {"92e1f5ebb7dca9eac4fa2cb0e472125d", "82afb5eacccbd6bc9cf434d3b4ef5f88"}}}}}}}, 0x0) recvfrom(r1, 0x0, 0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = getpid() r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000200)=@delnexthop={0x18, 0x2a, 0x503}, 0x18}}, 0x0) sched_setscheduler(r3, 0x1, &(0x7f0000000100)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) accept4$inet6(0xffffffffffffffff, 0x0, 0x0, 0x80800) unshare(0x62040200) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@bloom_filter={0x1e, 0x0, 0xca, 0x3, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000f00)={0x11, 0xf, &(0x7f0000000100)=@ringbuf={{0x18, 0x2}, {{0x18, 0x1, 0x1, 0x0, r7}, {0x7, 0x0, 0x2}, {}, {0x85, 0x0, 0x0, 0x59}}}, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) 12.53356986s ago: executing program 0 (id=790): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) syz_open_dev$usbfs(0x0, 0x74, 0x101301) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$sock_SIOCBRDELBR(0xffffffffffffffff, 0x89a1, 0x0) openat$uinput(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x12, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000791240000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x9, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000003480)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=[@rthdr_2292={{0x18, 0x29, 0x39, {0x3b, 0x0, 0x1, 0x4f}}}], 0x18}}], 0x1, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) 10.827950066s ago: executing program 6 (id=791): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x8) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r3, 0x29, 0x17, &(0x7f0000000440)=0x9, 0x4) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdir(&(0x7f00000020c0)='./file0\x00', 0x0) openat$fb0(0xffffffffffffff9c, &(0x7f0000000240), 0x102, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) r4 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) capset(&(0x7f0000000100)={0x20071026}, &(0x7f0000000140)) fchown(r4, 0x0, 0xee00) sched_setscheduler(0x0, 0x0, &(0x7f0000000200)=0x4) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000011c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r5, &(0x7f0000000080)={0x5, 0x10, 0xfa00, {0xfffffffffffffffd}}, 0x18) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffc000/0x1000)=nil, 0x1000, &(0x7f00000000c0)='/dev/input/event#\x00') r6 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r6) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) r7 = inotify_init1(0x0) fcntl$setown(r7, 0x8, 0xffffffffffffffff) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r6) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000002c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_LEAVE_MESH(r6, &(0x7f00000003c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x1c, r8, 0x200, 0x70bd2d, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r9}, @void}}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x24000001) 10.504933344s ago: executing program 0 (id=794): r0 = socket$inet6(0xa, 0x80803, 0x87) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@empty, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x547b31180522e14c}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@broadcast}, 0x0, @in6=@private1}}, 0xe4) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @rand_addr, 0xfdff}, 0x1c) 8.774591277s ago: executing program 3 (id=795): socket$inet6(0xa, 0x6, 0x2) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x800000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB], 0x50) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) fanotify_init(0x0, 0x101000) ioctl$VIDIOC_G_AUDIO(0xffffffffffffffff, 0x80345621, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) capget(&(0x7f0000000100)={0x19980330, r2}, &(0x7f0000000280)={0x99, 0x69df, 0x8, 0x401, 0x5}) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x169802, 0x0) dup(r3) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newlink={0x48, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_OFLAGS={0x6, 0x3, 0x80}, @IFLA_GRE_ENCAP_TYPE={0x6, 0xe, 0x2}]}}}]}, 0x48}}, 0x0) ptrace$ARCH_SHSTK_STATUS(0x1e, r2, &(0x7f00000002c0), 0x5005) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x242, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$gtp(&(0x7f0000000680), 0xffffffffffffffff) sendmsg$GTP_CMD_DELPDP(r5, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000002100)={0x2c, r6, 0x101, 0x0, 0x0, {}, [@GTPA_NET_NS_FD={0x8, 0x7, r4}, @GTPA_LINK={0x8}, @GTPA_VERSION={0x8}]}, 0x2c}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x19, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000791200000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sockopt=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r7 = accept4$packet(r1, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f00000000c0)=0x14, 0x80800) setsockopt$packet_int(r7, 0x107, 0x8, &(0x7f0000000300)=0x2a1, 0x4) 8.568755155s ago: executing program 0 (id=797): setsockopt$MRT6_ADD_MIF(0xffffffffffffffff, 0x29, 0xca, 0x0, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000480)='./file7\x00', 0x4) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000940)=[{&(0x7f0000000300)="2e00000010008188040f80ec59acbc0413a181003100000000200000000000000e000a000f000000028002002d", 0x2d}, {&(0x7f00000009c0)="f8", 0x1}], 0x2}, 0x0) 8.495436217s ago: executing program 5 (id=798): mlockall(0x7) mlockall(0x3) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x402, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x38011, r0, 0x0) 7.879614709s ago: executing program 3 (id=799): unshare(0x8000000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sigaltstack(0x0, 0x0) write$FUSE_DIRENTPLUS(0xffffffffffffffff, &(0x7f0000000580)=ANY=[], 0xb0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000280)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0xffeffe00}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xfff3}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x10000004}]}, 0x38}}, 0x4000) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r8, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x13, 0x7, 0x1, 0x22, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r9 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r9, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r9, &(0x7f0000000000), 0xd) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x0, &(0x7f0000000300)='usrquota') r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='net_prio.prioidx\x00', 0x275a, 0x0) quotactl_fd$Q_SETQUOTA(r10, 0x80000300, 0x0, 0x0) 7.371553907s ago: executing program 0 (id=802): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000080)=0x8, 0x4) open(&(0x7f0000000000)='./bus\x00', 0x60942, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./bus\x00', &(0x7f0000000400), 0x200808, &(0x7f0000000600)=ANY=[@ANYBLOB="cc2712f01266df79cc71d570d4ce0f4ab601216b1d55b5404913af30bdefbceef42401c175406337219bed89b320bcee038112bd30602632b5815bb37eb5406d0a31c21973e89e9e109a9c54c4497d0680b5fa9586e8f7cf808470868a14e0e5addc4e83a83ff3fcd4af5a9a32438dec190403a21fbd3ae470345eb983098b14bfaa589f4ac7e643dfd2322e37a099a2fc1043000000", @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000010000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYRES16=0x0]) open(&(0x7f0000000000)='./bus\x00', 0x60142, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f00000005c0)=[{&(0x7f0000002700)=""/4095, 0xfff}], 0x1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x15) r2 = socket(0x40000000015, 0x5, 0x0) bind$inet(r2, &(0x7f0000000340)={0x2, 0x1, @loopback}, 0x10) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0xe22}, 0x1c) r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0) write$cgroup_int(r3, &(0x7f0000000080)=0x1, 0x12) r4 = socket$inet6(0xa, 0x2, 0x0) r5 = socket(0x23, 0x2, 0x0) r6 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000340), r5) setsockopt$sock_int(r4, 0x1, 0xf, &(0x7f0000000240)=0x9, 0x4) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x4, &(0x7f0000000040)=ANY=[@ANYRES16=0x0, @ANYRESHEX=r0, @ANYBLOB="1800000000000000000000000000000085000000a800000095", @ANYRESHEX, @ANYRES8=r6], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000006112000000000000950000000000000051fa7824c74186dc02ec0696c37b64e3b24da3180100000005345c0f63cdc2e82818254950ee03568b8809a1f04c7c4750eabfafcb9531b31e6a86827d1010c5a909ab98e00e19644a88e95ba26d1c9eecddb2d11c541418ceeb29b9b6829c6e433822bdb3cc85244aab66c1aae9314d7381fcfeb970bea672010000000000000043144648a07a975bd89dc398712376610faa54f12495b4659be8673086f6f3543205d4bc4ce05b8b961103673dff7f158052e62bfbdcddde6985f3f1ac5d9a94cc53207899762a07282a1914452d11858e795a3ca30a101af5574f9035f2b5f703e5be7e4acf8b78c2834ae5805fffee38a9a0033d520bcf6b08ede50899d4b9bdf85c71c5ed44039aab46419496362e54cfad05b4004ac71a003d7b85d07191bed4e5a8908263722d4146f7ed569985439baa355cf3d8731f5e7a237bc06d035a8d601f21746d880819f38b34a495040000000071c2f0cce8c93cc17e9afa314fcb2ba15d646c5b9f87d988c9fbd2b9d9b4e2d71753b1549fa734f0b2e5fcf9549804cddad721971637f9c9730a9cc384eed30345979db9c93e1c52f42cad0a4d4f9436d3f39b0ed09c395dc6e970366087a8e4daeeb1b017006f25caf0cbcefd13d68839893e39c588eb032905f91cafa4996dbf0cc8228d02a3092c0830b8f587a5624515298b2d4eb2bde6f9a2eb83d53f710c490ecd085d2811a7555c53030000007f00000000bfa6478eb96b079c277e2910b7ccdc3d672ed34aa65278c549e2abb549ad954884289130bc71cee2b7de62bf48129ae1af052a2d46a6165eb0954dac7265f1f425735acf6377793946b3229e861d8ea49806b3b533345d36ecef9df700000000f337b1ceb2d8a65dcdcd895d7ba37098d2593fdaaef445af5bee02019c000000aaae37f044bcadeb0f6846582b7653665aa336db9f0384d3c7ddf79c2e0000000000000000000000000000000000000000000000e154aa0d3e41986a668ee1e5ef93a8ceac75f44aae95e26742f895f287111f8ee86f7e3ffb63cfb0e345cf7fc63dd2b0d30977899c6f03640040af4db71f7452bfc79a05118d8bb42b63b195771e42f9942ec626bd4b5461b74324012164e8"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) r10 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000240)=ANY=[@ANYRES32=r10, @ANYRES32=r9, @ANYBLOB="0200000001"], 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r11 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000240)=ANY=[@ANYRES32=r11, @ANYRES32=r8, @ANYBLOB="020000d9e22ce00040000000", @ANYRES32, @ANYBLOB, @ANYRES64=0x0], 0x10) 7.080520707s ago: executing program 4 (id=803): bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0xe, 0x4, 0x4, 0x3, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r0 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) mknodat$loop(r0, &(0x7f0000000000)='./bus\x00', 0x0, 0x1) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$gtp(&(0x7f0000002700), r1) sendmsg$GTP_CMD_GETPDP(r1, &(0x7f0000002880)={0x0, 0x0, &(0x7f0000002840)={&(0x7f00000027c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r2, @ANYBLOB="010325bd70000080df2502"], 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x24008040) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) pipe2$watch_queue(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) sendmsg$GTP_CMD_ECHOREQ(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="abf157837f92c9dc3312160e48dac16d075f4e9bc36bdd58c801dfdb1192c492cc49976000c27512", @ANYRES16=r2, @ANYBLOB="000427bd7000fddbdf2503000000080002000100000008000100", @ANYRES32=r3, @ANYBLOB='\b\x00\a\x00', @ANYRES32=r4, @ANYBLOB="060006000000000014000c00fe8000000000000000000000000000bb14000c0000000000000000000000ffff7f0000010600060004000000"], 0x64}, 0x1, 0x0, 0x0, 0x20000805}, 0x8000) syz_usb_connect(0x0, 0x24, &(0x7f0000000300)={{0x12, 0x1, 0x0, 0x95, 0xf3, 0x12, 0x8, 0x423, 0xc, 0x14e5, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xbc, 0x40, 0xb9}}]}}]}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0xb, 0x9, &(0x7f00000001c0)=@raw=[@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2bb5}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x31, '\x00', 0x0, @fallback=0x31, 0x0, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 7.001801423s ago: executing program 6 (id=804): r0 = socket$inet6(0xa, 0x80803, 0x87) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@empty, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x547b31180522e14c}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@broadcast}, 0x0, @in6=@private1}}, 0xe4) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @rand_addr, 0xff87}, 0x1c) 6.937209329s ago: executing program 0 (id=805): r0 = syz_open_procfs(0x0, &(0x7f0000000440)='projid_map\x00') write$tcp_mem(r0, 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000140)={'syzkaller1\x00', 0xc201}) write$tun(r1, &(0x7f0000000400)={@val={0x0, 0x1c}, @val={0x1, 0x4, 0x1, 0x51a4, 0x16a, 0x10}, @mpls={[], @ipv6=@icmpv6={0x8, 0x6, "986a72", 0x18c, 0x3a, 0x1, @dev={0xfe, 0x80, '\x00', 0xd}, @loopback, {[@routing={0x32, 0x12, 0x0, 0x8d, 0x0, [@local, @private0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private0, @loopback, @remote, @mcast1, @empty, @mcast1]}, @srh={0x3b, 0x6, 0x4, 0x3, 0x9, 0x18, 0x7f, [@dev={0xfe, 0x80, '\x00', 0x17}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02']}, @routing={0x87, 0x2, 0x2, 0x7, 0x0, [@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01']}, @fragment={0x8, 0x0, 0x5, 0x0, 0x0, 0x10, 0x67}, @routing={0x73, 0x8, 0x1, 0x44, 0x0, [@ipv4={'\x00', '\xff\xff', @empty}, @empty, @mcast2, @mcast2]}, @routing={0x3b, 0x4, 0x2, 0x2, 0x0, [@private2, @local]}], @mlv2_query={0x82, 0x0, 0x0, 0x7, 0x4, @mcast1, 0x5, 0x0, 0x3, 0x8, 0x1, [@remote]}}}}}, 0x1c2) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r4 = dup(r3) ioctl$KVM_SET_MSRS(r4, 0xc008ae88, &(0x7f0000000040)=ANY=[@ANYBLOB="010000000008000048"]) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000300)={0x3, 0x7f, "36c954", 0x5, 0xc6}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="6000000010000d040400"/20, @ANYRES32=0x0, @ANYBLOB="00000000195000002c0012800c0001006d6163766c616e001c000280080009000100000006000200010000000800070000f0ffff140035006d6163766c616e30"], 0x60}, 0x1, 0x0, 0x0, 0x4}, 0x40040) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) r6 = syz_io_uring_setup(0x35d9, &(0x7f00000008c0)={0x0, 0x20, 0x10100}, &(0x7f0000000100)=0x0, &(0x7f0000000380)=0x0) io_uring_register$IORING_REGISTER_PBUF_RING(r6, 0x16, &(0x7f0000000000)={&(0x7f0000001000)={[{0x0}, {0x0}, {0x0}, {0x0}]}, 0x4}, 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xe, &(0x7f0000000a40)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r9 = syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) listxattr(&(0x7f0000000180)='./file0\x00', &(0x7f00000006c0)=""/248, 0xf8) syz_io_uring_submit(r7, r8, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x20, 0x0, r9, 0x0, &(0x7f00000002c0)={0x0, 0x0, 0x0}}) io_uring_enter(r6, 0x5b43, 0x0, 0x0, 0x0, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000340)={@ifindex, 0xffffffffffffffff, 0xa, 0x2015, 0xffffffffffffffff, @value}, 0x20) io_setup(0x3ff, &(0x7f0000000640)=0x0) io_destroy(r10) mount(&(0x7f0000000040)=@nullb, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='binfmt_misc\x00', 0x2120001, &(0x7f0000000100)='@') 6.935181713s ago: executing program 6 (id=806): r0 = socket(0x2, 0x2, 0x0) r1 = bpf$MAP_CREATE(0x100000000000000, 0x0, 0x48) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='freezer.state\x00', 0x275a, 0x0) fcntl$lock(r2, 0x26, &(0x7f0000000000)) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000000c0)={'geneve0\x00', 0x0}) sendto$packet(r3, &(0x7f0000000180)="0b032200e0ff25000200475400f6a13bb1000000080086dd4803", 0x10000, 0x0, &(0x7f0000000140)={0x11, 0x0, r4}, 0x14) fcntl$lock(r2, 0x25, &(0x7f00000000c0)={0x2, 0x0, 0x4004}) openat$udambuf(0xffffffffffffff9c, &(0x7f0000000280), 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) pipe(0x0) r8 = bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x6) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x34, &(0x7f00000000c0)=r8, 0x4) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) r9 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$F2FS_IOC_START_VOLATILE_WRITE(r9, 0x40186f40, 0x20000502) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r1}, &(0x7f0000000140), &(0x7f0000000180)=r0}, 0x20) 6.284947244s ago: executing program 0 (id=807): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000580)={'ipvlan1\x00', 0x0}) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x1) ioctl$KVM_SET_MSRS(r8, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="0100000000000000500200000000000000000077"]) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000780)=ANY=[@ANYBLOB="480000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="000000000000efff2800128008000100687372001c000280050007000100000008000200", @ANYRES32=r3, @ANYBLOB="08000100", @ANYRES32=r5], 0x48}}, 0x0) sendmsg$NL80211_CMD_SET_CQM(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000080)={&(0x7f00000003c0)={0x1bc, r1, 0x2, 0x70bd2b, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_CQM={0x38, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x10000}, @NL80211_ATTR_CQM_RSSI_THOLD={0x14, 0x1, [0x7ff, 0x2, 0x180, 0x8]}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x4f}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x3ff}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x673}]}, @NL80211_ATTR_CQM={0x2c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x28}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0xfffffff1}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x2}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x400}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x95}]}, @NL80211_ATTR_CQM={0x34, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x4}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x5a}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x3}, @NL80211_ATTR_CQM_RSSI_THOLD={0x8, 0x1, [0x9]}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x1dbd}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x5b1}]}, @NL80211_ATTR_CQM={0x40, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x200}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x3}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0xacbc}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0xa}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0xcd}, @NL80211_ATTR_CQM_RSSI_THOLD={0xc, 0x1, [0x2, 0xe]}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x5e80}]}, @NL80211_ATTR_CQM={0x24, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x10001}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x3}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x7e8}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x26c}]}, @NL80211_ATTR_CQM={0x14, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x5221f534}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x18}]}, @NL80211_ATTR_CQM={0x24, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x9}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x3}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x5}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x800}]}, @NL80211_ATTR_CQM={0x48, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x15b}, @NL80211_ATTR_CQM_TXE_INTVL={0x8}, @NL80211_ATTR_CQM_RSSI_THOLD={0x8, 0x1, [0x0]}, @NL80211_ATTR_CQM_RSSI_THOLD={0x24, 0x1, [0xe923, 0x5, 0x77, 0x7, 0x0, 0x5d, 0x2658, 0xffff]}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x2}]}, @NL80211_ATTR_CQM={0x2c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x4}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0xfffffffa}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x16f}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x401}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x14b}]}]}, 0x1bc}, 0x1, 0x0, 0x0, 0x4}, 0x80) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000740)={'wlan1\x00', 0x0}) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) r13 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_FRAME(r13, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000380)={0x24, r11, 0x1, 0x70bd25, 0x0, {{}, {@val={0x8, 0x3, r12}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x5, 0x5b, "f7"}]}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x0) r14 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_FRAME(r14, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000c80)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000003a00000008000300", @ANYRES32=r9, @ANYBLOB="05005b"], 0x24}}, 0x0) r15 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r15, 0x8933, &(0x7f0000000740)={'wlan1\x00'}) socket$nl_generic(0x10, 0x3, 0x10) 5.459807152s ago: executing program 6 (id=808): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={0x0, &(0x7f0000000640)=""/4086, 0x0, 0xff6, 0x0, 0x3, 0x0, @void, @value}, 0x28) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r1, 0x4) nanosleep(0x0, 0x0) syz_80211_inject_frame(0x0, 0x0, 0x1e) r2 = fsopen(&(0x7f0000000080)='sysfs\x00', 0x0) syz_usb_connect(0x0, 0x0, 0x0, 0x0) r3 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r3, &(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) bind$tipc(r3, 0x0, 0x0) r4 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r4, &(0x7f0000000240)=@nameseq={0x1e, 0x1, 0x2, {0x0, 0x4, 0x1}}, 0x10) bind$tipc(r4, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x3, 0x4}}, 0x10) bind$tipc(r4, &(0x7f0000000140)=@name={0x1e, 0x2, 0x3, {{0x42, 0x2}, 0x80}}, 0x10) bind$tipc(r3, &(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2, 0x3}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000040)={0x42, 0x2, 0x1}, 0x10) close_range(r2, 0xffffffffffffffff, 0x0) r5 = socket$netlink(0x10, 0x3, 0x4) writev(r5, &(0x7f00000000c0)=[{&(0x7f0000000300)="580000001500add427323b470c45b45602067fffffff81004e22030d00ff0028925aa80020ffffffffffffffffffe7ee000000000000000002000000000000000000000000000000ec39759e74a9fa137c0dbca840740285", 0x58}], 0x1) r6 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_int(r6, 0x0, 0xa, 0x0, &(0x7f0000000340)) r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r7, 0x29, 0x3, 0x0, 0x0) sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r7, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00-\x00\x00\x00\b'], 0x1c}}, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00'}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000100)=ANY=[@ANYRES8, @ANYRES32, @ANYBLOB="0000000000000000400012800c0001"], 0x68}}, 0x0) socket$igmp6(0xa, 0x3, 0x2) socket$kcm(0x2, 0x2, 0x2) 5.435191775s ago: executing program 5 (id=809): r0 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581", @ANYBLOB="f7", @ANYRESOCT], 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000680)={&(0x7f0000000580)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x5, [@func={0x3, 0x0, 0x0, 0xc, 0x4}]}, {0x0, [0x0, 0x61, 0x61]}}, 0x0, 0x29, 0x0, 0x1, 0x61, 0x0, @void, @value}, 0x28) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x20000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0xc000}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) openat$iommufd(0xffffffffffffff9c, 0x0, 0x317300, 0x0) socket$alg(0x26, 0x5, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x800005, 0x11, 0xffffffffffffffff, 0x0) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) getsockopt$bt_BT_SECURITY(r3, 0x112, 0x4, 0x0, 0xf0ff1f00000000) r4 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r4, 0x6, 0x23, &(0x7f0000000300)={&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000080)=0x40) r5 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_int(r5, 0x10d, 0xb2, &(0x7f0000000000), &(0x7f0000000240)=0x4) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x42901, 0x0) r6 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) r7 = socket$caif_stream(0x25, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r7, 0x1, 0x19, &(0x7f0000001700)='team_slave_1\x00', 0x10) connect$caif(r7, &(0x7f0000000080)=@rfm={0x25, 0x0, "423e650059ef6c664b6dff801d261cd8"}, 0x18) write$char_usb(r6, 0x0, 0x0) close(r6) syz_usb_disconnect(r0) 5.079688461s ago: executing program 3 (id=810): r0 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={0x0, r2}, 0x18) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r5, 0xc04064a0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000002440), 0x0}) waitid(0x1, r1, &(0x7f00000010c0), 0x8, &(0x7f0000001140)) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r5, 0xc05064a7, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000002c0), &(0x7f0000000340)}) ioctl$DRM_IOCTL_MODE_SETPROPERTY(r5, 0xc01064ab, &(0x7f0000000380)) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r6 = fsmount(r0, 0x0, 0x0) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/address_bits', 0x20400, 0x0) io_setup(0x20, &(0x7f0000001140)=0x0) io_submit(r8, 0x1, &(0x7f0000000500)=[&(0x7f0000000000)={0xf, 0x400000000000, 0x25, 0x1, 0x0, r7, 0x0, 0x0, 0x0, 0x0, 0x2}]) r9 = openat$cgroup_int(r6, &(0x7f0000000040)='cgroup.max.depth\x00', 0x2, 0x0) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x5c, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x10, 0x3, 'hash:ip,mac\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8}, @IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0xfc}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x5c}}, 0x0) write$UHID_INPUT(0xffffffffffffffff, &(0x7f00000001c0)={0xd, {"08c39ee52f329f1698b1c4865f8b0a0a5eee9f496a0809c3d21c25867b6edda88489ab4c09fe0a7f1e8640aa8e344f412df0d69475a5d6570e21f31fac7dfb4aa7ade0e851582d5c1abdd809580cb34c9e48576b1c73ed76013256fca058ada3db47d86cc75b33cf762b67fe61f152618c49a40858f68794a4fc484ab73ccd254ba3d147f5feddaf91dacc238c0a8096f79597ca1e6da781fcf37a0141a335c6a7577d2d53c6e552a7be208381bb31d1d3e0e92ea651655217535734b286d3f19780a4c720075a36a734151f8c00e651cb3a6bbe30e3f6aee48750436da6471e965e81f38134674fcb697108fb7345010bb8fa15fba9b33355d7858327171ab9c68f6c21b2ffbff4eb061dab80bc77a4a7769e7ff73bcd98790e09415bfc5978cf5af45c3ec9ef9c1a39f766c59d59590281038dbcb765580ba2b3f141d5bbfc40910a0894cd1f22d2a8b6d4e4778debef99438b54d44b4b7568de2777431a5b2f3e8d1a45a60a468f5e33e8ef534f803dfb6798c270f52edf031ecd996bb78c4e92961c63c079676d77412ebc6074e5f235417785e7a14b14ce7626b015071c154cc2bf8f4499b93293e9997c23df4c7a1498cf12414fb31eb873728e4f613b540d22e7ca718f18da5b82ed24995e4309c3af4a2e1097465bf09728082d09e71ea365522035eb9772b8e072f8454777ee304dacd59d3eb9f933f151fa14f8c38eadbeba04810a2dea7a66824f09235c13a45f07870210d0d310ce3ae6284577bd4e65f32700f6723727926cb52e4f27776a1dab0f6668327ab5cf1893879a635261f2e0d9923ccecbf5b80f10a8275c1515f47930d614e787f14c105d3a4f8faf8e7f738cf4eae4fc39ef3db3cb87794ace87f7239b69dc4ab4e5ae57cdfbd309e847d99600ef14b51faead01e8ade57d24270bc13a1787896096eeacb8ab1c93d31d93cfb244bb09ecfecf336362a5656db7df327cbb9aeb898f8af229c7bb9452805f2b4510c5df86b6d564e01f000000167ade5205331523a6392af2bea9e6db0ba5480cbf1b202714233289c4017cb66e83c0c8b6e88bedb922162d0ceecf6c5da173bbefe6781ab7720d2be6cca378db650c69d4228141ae190922fbbaddb86c7f0fe138b704e8305b3bcc7910b2280d96d71dafdbfa876b0013fc4de586f85d9ee077b6349becbdca8bd989a51c4c76ed8a8cc691a65078e0272a62edec8236a779f0cbffeda49dcdccd4def7064e0d77ae5a8c64f3057b4a3a0d4457d33f2bc6c112378315411baa4bb126fe540d750491fc58fbb66911ef82bce5ed76872dbcd8e05dea2f3f347a653aa39ab5d75e71671bfeb924e71476134dbf91e3f287fd853cc34bf81e717edd41aa04b6fbeb43cf2074f0c8fe5350401b6cff801c147a3b58b972aa5652629a9fd8b1df2852708ce958d4e9974ec4383aa5da4e3f75fdc85981e97b75863546f67a8703673b6fe2c26f0e9eeb8c45c26f673adac55fa5d69b82ae7d032fd3b26866047e8c029b90a62794a89c11398944b398b4177b2dcc5a743c16d4a5333b1e30af678d3db8df849c1753db067a6f94bab00c0dd3c7e94a8675924c89bda98ac09e10bcdf83f5114b9b466c413477a5cdc48c857230798934bcc1f0eb3a2d2944b139e459af32e515785f46ed4e97cdcb23c7e4dc7c4f91b5b5ca5228344aeb6652fffaf31325c7429bc70a5f6beaaa98ef190dffdeccc94bd814b3edfdd48243bf34291076ab5438ee00e924a827d5b453df42d24144fe1a45bb6c84fcbb2143d0a561c1e867c1279bdf0a47061ea77a84f36c720aff785f0db10eda84c767b5f3874f9455c0f026735ded32f0403ef7dbcf97d2233d59c670114ddf89314ba74fc248bcbdbf43c24e46304e229b3cf583aa410f4dfd119152495da8737518ee2a05a8ca1f004be3c551408f2e4013e444b63bf2bb26ddeae505642dffcc989ee241c48741181b506e22fdc4530319522780c74bf786852dc66ebbb51f8ecbb1e35de09ef7afe589bb8a31c5d63477db5d5e7174694ea04cfa98057d39127a4e5eedb4897a491c6693acd0a036abf846f3b6f3006e5e5fd586f29a4a8a31abbccf732e4f1b88187a72d669c16302657e9cbbeb9322662e111edc7771526400b6123d0f8207bcaa38bee07043e36e223d418ac948d65e7acfe72cc3fdcf03a3e43ecfec8ae489ddba09126709c5c7968829e3504de8a5010c9372de09476a7b96b04d7aed2486d8f89f21f075321abe350024abe00a81f87df3dc372fc3206496776c26b6958243070bda4cace3e358da5d39a3945765c2ba4b002b06efd416af66f3343f218ed84550ea83f02f9a5c3fc677ea60987aa25f0406d6154081cfdc074814a2465accdfa102858f5a52c9eae293c56ddcaf8f6926d3dd0ccb51a30c960d6b7e473038ebd3702b5106f6bc040efdfd7169fd3f2dc42ff23de26a239e13b74278729fd7e843b38a35c55fd50181ac13a9cbbbfd8feb36afaeb1993349c0ac5a0c44ffd92919dfe272b0f8ed7df7198cd299715f021109a58dced4753d3c7ddd6e9ea01596f18b2fe7000000004ccfca57aed5b5cebdff65de480a56bd53f4c7f83ddef00d7c9686311d1fce76f320bb3222a11db30ba6ed31535d8fda61e694478ca9935d72719b8d6b9be88ae3df30b60ee251b919b4d1734b994c62accdf855488b351738331b462eccf27efdc5577d7a5548579dc90d227a42ac010f33a720dc3cf0a63454f8b07c775287495761a058ec1e28e6aaf8057241f4ef8b5de56e279355bb66630c4ddf35e7c2cfff26a4241b1df0379d2a1e9f959e46d3843f89844ead50aff44640fcbc4a1edb033afff7cc9e57c4f8d31900764233e11fa4c28e547788c1b00de4268df692ba3415a9ad90fa712f9618f5ecff57da32809380eeff040cd3b23f508614c72b303cec3bcd732708303b166193366a062b9cea536f28478c387e626744c6a611a8e7162d274efccc84eee8eb31d3310c86752777dd5b5ffe234e895c54909f19a4aabcf3c15b90c02170409e314fd90e766ec4ba93c8ec6321237a980ad3c32fb2fab69e57541ea7f5427a85c2c57d40f9ebe9de5572f46a4713fb28e0af42d0adef3e29195aa41a3ba318181512eebfadffede4e35ff7f975928edc5d4d9f2d931fb44b30e1df55e66c52e1648e9cdaf71221b57c6a6b087428ccc57ade5b1531341cba2be452b426c434c70fd8c493337d4995cbd76ea1dd545226e3eb59d5f94ffb5352f87a4a66cd7c5e88322404fd397c46e198646a9c819d0eb1f10e54d8a3ea912f1cb134ff1095aa7325287f6ea9af8c13b67d6abcbb70dbc06838ecb33e45b60f6cb832c3e72d1401770f66bd02f35a2d007815ab676099e31f5102000000c0e83d5e7107c8dc5830c9cddb9781185b94d7f2814c5058ba3ac54c268741c5728f4997a9628602c2a36090162379f3f37c47619b3e7c7397a5913b7060b51e0c7f7226ff1135444f866f89a4b74136cbd3acb7178bd63183b3fd9cd19fdeb6fcc6341910ad4605da76a9af4bfb8b75fcd666f8188902b380ae560d9aa04f8f9b0ac5c109d1824a470726e06a49d955f8f71c8a86081e75b13f62600deb941da181eaff544cd559c467d8dae432debd22e7a7b3e1ad731a5b9470f5f60423dda061ff899c07c79f3da34f38e1d8182d6ee0c36c602945509167be440382a8a8a759b20e41638fd57152029b190b5701d30a86f579e2d0cc53a2f809ca9bd3aba1eb2772a7acc35c4d983afa83a9baea35c0ed4931234719636cf8f5fe1884bde6cebbdf23bd62b1ebf0a5cb78c27295349bd7d5cf28c4ee4689497238fd3aa71a417914e6892667a56bd69dc2e5882cfb67df71494e9a9199e025892e4e7435f727636cd988cc7563d28db5133f649849c5b3973a3428de10ad39d96146b22acc50f50eee5a038876452b960686892de40efe30081ccdaa2bf64af78d5988026e529b36c62a21378ac42d220d0dd878010178e374e6dbb2b61206066d04e729ed03c6fd9a4e00547fe9304aec0925d85a0acd07fdc5d48c1a1cff656916f5d25952327792255e0d606a32517781cc3d737ec753eb95b5b5b95dabd8946907ab54cc85d05b475e2e5486c6fc070417198d3a50910e2949d20d3fa68fd327934cff5171224942b8f18d88947763a7c710d09c4b269bdf2d3e715329917fb70728a4a0530999b755ba8fc04deabf4bc4bcffc4d62d491538c65078122bf2c263ae0020af67cfc9cf19e5b929e086af281fb43d5504d728935c5cfac136eb81703d50fddb39a5a713b2914c6acd9b2d07819cf7bba495ac5734fe423e611d309b80eeafcf9053d51b0ab3c29d5ca5eb8861ffc1ebc4d53f361b8991baecb52860c15202f979e34054fcde869d018103ccd6d914a70f1840fc6aaf426beec975ddb980b19b0f4cc2ca393c0b9e6ebe5e7d1c9fc1ef7a1c91378f0b73262993fb80667ecf62bac3c47cbd002ae1b87b8dc3ec99d5c987765d778868eb55022cc3bed14b8f934a584bcc98fa0b4f6e6982ab8d8a2bb49f9074ef429dd7b8db332a96ccec6983a97be7c8634c02e7937ffc8d613b83aa375886bf40a87ec062090382f874bf2c8e5fbb58ac18a46c4d9e85af3ca21bdacb7755f49776b0eb3972ff682c84beb07d74cbe2764e378253e72128991b73d2730704a5448280e8a0fd8cc87d4cddcffbfe5525ae3d2304877a3988e33c8e12bf77793e753f25840e9af2ce56bdb999fc62623a2298b4244534f662eb398a2577c72f6cfd5174697dcee151d4f3a7293b11de3889c43744da4165aca4e4a1e926d37ae4d7471584a06f3641f2037a74a58c2397a594f29d142d59f91bb57e24e1a3f30f68c626033cc34895c1b16d62e3a375c3e09f5dbd9338cd3a500643143cd404b57019c648c3ec31d696233fe16efc3c4c84aca0830ca8b9fbf1144b98d82f41e4cf67631c74cdcf8d9c8b8556b876ff1592683ccac0b47a26cb3a2cb1b917f433bb54e0b53deae9ac4b1cd0594c1fa0e6744e7ed88fdac60901e3da989f3b0d7c12b140cc576fa1b0e8e705321d37c303691aafc9fed9c3dc419078d0925ead56455ea5f3cd57941e410c1c14c2e8972d7cca44fcaca1f64fc817f4a41b6d9fb237fed159cb09e788ae560726537f49cb64b9f60915d402e0931355c55ad792cde758548b1af54b196e414046d4af3579a6c30ceac3d68bbfd2adef309c064e759a9f0dd69d682a3880b8ff27b69abffaa45ee7e65d8f1f6e40c188f6249fdf72220b4c87243217ba0292b9e9b67ebeda4fb83406216a4d765812bafeff34cc57f7d2cd1608282079c076055b9cabffe5fa491b970291bc2672540ccc15ed877d7dbe3ef683724c715ace770905e48c2dc6a44e1fc095773676d070eac00ee3834b07590cba7093f56b678313870471c81599d34c53fc03ec6c913d8ba3f604ace8da12d2025cbb5000bc062f4db65a6feacaf3915206d1c15ce7e78c17dc2ea32cb57d6fab0a22d487c77118e75016006f812541ec8180a321287a2d57248d4ee4a19706a19d802c70e250c3b0fc400a0b5cdc06537d2f55fd5300be4eeeaab8cc481a84b6a5e17d8c47ec92fe40710d4ec3530a94ca16710ade2ec7562398106e0ddbb6c8af6412166afd99d45d29a3a967e58decd0d6fc5bebb98d639b5606efd358a43d635d50f0ccb8472197da604994e7fb700243d5f7e45700", 0x1000}}, 0xffffff5c) r11 = socket$inet_sctp(0x2, 0x1, 0x84) sendmsg$inet_sctp(r11, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="3000000000000000840000000100"/44, @ANYRES32=0x0, @ANYBLOB="180000000000000084000000050000"], 0x48}, 0x0) write$cgroup_int(r9, &(0x7f0000000000), 0x12) 4.72330204s ago: executing program 4 (id=811): socket$inet6(0xa, 0x2, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x800000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB], 0x50) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) fanotify_init(0x0, 0x101000) ioctl$VIDIOC_G_AUDIO(0xffffffffffffffff, 0x80345621, 0x0) r1 = syz_io_uring_setup(0x24fb, &(0x7f0000000280)={0x0, 0x0, 0x10100}, &(0x7f0000000100)=0x0, &(0x7f0000000180)=0x0) r4 = socket$inet6_dccp(0xa, 0x6, 0x0) bind$inet6(r4, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1, 0x4}, 0x1c) syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r4, 0x80, &(0x7f0000000200)=@in6={0xa, 0x0, 0x0, @dev}}) io_uring_enter(r1, 0x5b43, 0x0, 0x0, 0x0, 0x0) 3.999589188s ago: executing program 6 (id=812): r0 = syz_open_dev$vim2m(&(0x7f0000000040), 0x7, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x8, &(0x7f00000002c0)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x3}, @initr0, @exit, @alu={0x7, 0x1, 0xb, 0x0, 0xa, 0x1, 0x1}]}, &(0x7f0000000000)='GPL\x00', 0x9, 0xec, &(0x7f00000004c0)=""/236, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="18020000faffffff0000000000000000850000002c00000095"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r1, 0x27, 0x8, 0x0, &(0x7f0000000140)="f9ad48cc42cb29fc", 0x0, 0x1400, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0}, 0x50) clock_adjtime(0x0, &(0x7f0000000000)={0x3fe, 0x6000000000, 0x0, 0x8, 0x5, 0x0, 0x8000000000000, 0x0, 0x80000000, 0xfff, 0x0, 0x0, 0x0, 0x20000000000, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x10000000}) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000000)={0x42, 0x1, 0x2, "0088f2007f359d1300000000001000", 0x3032344d}) 3.815401213s ago: executing program 3 (id=813): r0 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x5) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x19) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000140)={'gre0\x00', &(0x7f0000000080)={'gre0\x00', 0x0, 0x1, 0x10, 0xe37e, 0x2ccc, {{0x1b, 0x4, 0x1, 0x3, 0x6c, 0x67, 0x0, 0x4, 0x29, 0x0, @broadcast, @multicast2, {[@generic={0x94, 0x2}, @timestamp_prespec={0x44, 0x54, 0x63, 0x3, 0x4, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0x401}, {@dev={0xac, 0x14, 0x14, 0x12}, 0xe15d}, {@dev={0xac, 0x14, 0x14, 0x42}, 0x1}, {@broadcast, 0x2}, {@loopback, 0x4}, {@multicast1, 0xfff}, {@multicast1, 0xf735}, {@empty, 0x1}, {@loopback, 0x80000000}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x80}]}]}}}}}) r3 = geteuid() sendmsg$nl_xfrm(r1, &(0x7f0000000380)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000340)={&(0x7f0000000180)=@allocspi={0x1bc, 0x16, 0x800, 0x70bd29, 0x25dfdbff, {{{@in6=@mcast1, @in6=@remote, 0x4e22, 0x101, 0x4e20, 0x7, 0x2, 0x80, 0x40, 0x6, r2, r3}, {@in6=@mcast2, 0x4d5, 0x32}, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', {0xc06, 0x10001, 0x7ff, 0x0, 0x7fffffffffffffff, 0x151e00, 0x8, 0x9}, {0x0, 0x8000000000000001, 0x8, 0xdf03}, {0x9, 0x6, 0xeb6}, 0x70bd29, 0x3501, 0xa, 0x4, 0x5, 0x8}, 0xff, 0x8c}, [@tmpl={0xc4, 0x5, [{{@in=@dev={0xac, 0x14, 0x14, 0x27}, 0x4d2, 0x3c}, 0x2, @in=@loopback, 0x3506, 0x4, 0x2, 0x9, 0x6, 0xff, 0x2}, {{@in6=@local, 0x4d6, 0x32}, 0xa, @in=@dev={0xac, 0x14, 0x14, 0x19}, 0x3503, 0x1, 0x1, 0x12, 0x8000, 0x0, 0x2}, {{@in=@dev={0xac, 0x14, 0x14, 0x3b}, 0x4d4, 0x33}, 0x2, @in6=@empty, 0x3500, 0x4, 0x1, 0x7, 0x3, 0x80e2, 0x1000}]}]}, 0x1bc}, 0x1, 0x0, 0x0, 0x1}, 0x40001) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000480)={{0x1}, &(0x7f00000003c0), &(0x7f0000000440)=r4}, 0x20) recvfrom$rxrpc(r4, &(0x7f00000004c0)=""/76, 0x4c, 0x2, 0x0, 0x0) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r4, 0x84, 0x1a, &(0x7f0000000540)={0x0, 0x1000, "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"}, &(0x7f0000001580)=0x1008) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r4, 0x84, 0xa, &(0x7f00000015c0)={0xfff, 0x718, 0x20a, 0x9, 0x100, 0x8, 0x8, 0xb282, r5}, 0x20) r6 = openat$smackfs_revoke_subject(0xffffffffffffff9c, &(0x7f0000001600), 0x2, 0x0) io_uring_register$IORING_REGISTER_FILES(r4, 0x2, &(0x7f0000001640)=[r1, r6, r1], 0x3) r7 = accept4(0xffffffffffffffff, &(0x7f0000001680)=@l2={0x1f, 0x0, @fixed}, &(0x7f0000001700)=0x80, 0x0) fcntl$setpipe(r7, 0x407, 0x0) ioctl$SIOCX25SCAUSEDIAG(r7, 0x89ec, &(0x7f0000001740)={0x8, 0x2}) r8 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000017c0)={r4, r2, 0x25, 0x10, @val=@netkit={@void, @value=r4}}, 0x1c) splice(r4, &(0x7f0000001780)=0x8000, r8, &(0x7f0000001800)=0x401, 0x5f3f8c2f, 0xe) socket$inet6(0xa, 0x4, 0x9) r9 = socket$inet6(0xa, 0x5, 0x7f) bind$inet6(r9, &(0x7f0000001840)={0xa, 0x4e21, 0xffffffff, @private1, 0x5}, 0x1c) ioctl$EVIOCREVOKE(r4, 0x40044591, &(0x7f0000001880)=0x9) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$batadv(&(0x7f0000001900), r4) sendmsg$BATADV_CMD_SET_MESH(r10, &(0x7f00000019c0)={&(0x7f00000018c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000001980)={&(0x7f0000001940)={0x1c, r11, 0x400, 0x70bd2c, 0x25dfdbfb, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4800}, 0x40055) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x40, &(0x7f0000001a40)=@raw={'raw\x00', 0x9, 0x3, 0x2f8, 0x0, 0xffffffff, 0xffffffff, 0x110, 0xffffffff, 0x228, 0xffffffff, 0xffffffff, 0x228, 0xffffffff, 0x3, &(0x7f0000001a00), {[{{@uncond, 0x0, 0xa8, 0x110}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0xb, 0x6, 0xd, 0x1, 'netbios-ns\x00', 'syz1\x00', {0x1ff}}}}, {{@uncond, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x4}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x80, 'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x358) r12 = syz_genetlink_get_family_id$team(&(0x7f0000001e00), r7) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000001e40)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r7, &(0x7f0000002200)={&(0x7f0000001dc0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000021c0)={&(0x7f0000001e80)={0x338, r12, 0x400, 0x70bd29, 0x25dfdbff, {}, [{{0x8, 0x1, r2}, {0x7c, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x3}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x80}}}]}}, {{0x8, 0x1, r2}, {0xbc, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xffff}}, {0x8, 0x6, r2}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0xc53c}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x200}}, {0x8, 0x6, r2}}}]}}, {{0x8, 0x1, r2}, {0xc8, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r2}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r2}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}]}}, {{0x8, 0x1, r2}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r2}}}]}}, {{0x8, 0x1, r2}, {0x4}}, {{0x8, 0x1, r13}, {0xb4, 0x2, 0x0, 0x1, [{0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r2}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0xfffffffb}}}]}}]}, 0x338}, 0x1, 0x0, 0x0, 0x5}, 0x10) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r4, &(0x7f00000023c0)={&(0x7f0000002240)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000002380)={&(0x7f0000002300)={0x64, 0x0, 0x300, 0x70bd28, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x0, 0x47}}}}, [@NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x70}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_MESH_CONFIG={0x2c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_PATH_TO_ROOT_TIMEOUT={0x8, 0x17, 0x5}, @NL80211_MESHCONF_HT_OPMODE={0x6, 0x16, 0x14}, @NL80211_MESHCONF_HWMP_CONFIRMATION_INTERVAL={0x6, 0x19, 0x24d4}, @NL80211_MESHCONF_AWAKE_WINDOW={0x6, 0x1b, 0xafa}, @NL80211_MESHCONF_HWMP_ACTIVE_PATH_TIMEOUT={0x8, 0xb, 0x10001}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x8000}, 0x10) 2.352386773s ago: executing program 4 (id=814): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000500)={'syztnl1\x00', 0x0}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0}, 0x18) r4 = landlock_create_ruleset(&(0x7f0000000080)={0x10, 0x2}, 0x18, 0x0) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="580000000002000000000000000000000000000010000180f7000280050001000000000030"], 0x58}}, 0x0) sendmsg$IPVS_CMD_SET_CONFIG(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000200)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000000000008000000000c0900001417038008000500ac141400080001"], 0x28}}, 0x0) r5 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_SET_CONFIG(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000200)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000000000000000000000c0000001400"], 0x28}}, 0x0) sendmsg$netlink(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)=ANY=[@ANYBLOB="d824000028000100020000080000000006"], 0x24d8}], 0x1}, 0x0) landlock_restrict_self(r4, 0x0) mknodat$loop(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0x6004, 0x1) r6 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_USER_AVC(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000008c0)={0x14, 0x453, 0x800, 0x70bd25, 0x25dfdbff, 'P'}, 0x14}, 0x1, 0x0, 0x0, 0x4004050}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={0x0, 0xc0}}, 0x0) socket(0x1e, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000a40)={'wlan1\x00'}) sendmsg$NFT_BATCH(r0, 0x0, 0x0) 2.267984903s ago: executing program 6 (id=815): r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/softnet_stat\x00') read$FUSE(r0, &(0x7f0000002d80)={0x2020}, 0x2025) lseek(r0, 0x328, 0x0) syz_usb_connect(0x0, 0x4f, &(0x7f0000000940)=ANY=[@ANYBLOB="12010000a6ff0540cdabeecdb9050000000109023d0c020000000009049c00030103510009050a0000000000000905031300000000000727010300000009050f"], 0x0) 1.192525636s ago: executing program 4 (id=816): bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="30803dbd180000000000007b9c8482001c"], 0x0, 0x36, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x0, 0x0, &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r0}, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000240)={&(0x7f00000003c0)=ANY=[@ANYBLOB="90b05646", @ANYRES16=0x0, @ANYBLOB="000426bd7000ffdbdf25140000000e0001006e657464657673696d0000000f0002006e657464657673696d300000080003000000000008000b00ff07000006001100100000000800150000080000080001007063690011000200303030303a30303a31302e3000000000080003000100000008000b00fbffffff06001100020000000800150040ff0000"], 0x90}, 0x1, 0x0, 0x0, 0x94}, 0x4000) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000918000/0x1000)=nil, 0x1000, 0xb635773f07ebbee7, 0x11, 0xffffffffffffffff, 0xffffc000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x0, 0x0) recvmmsg(r2, &(0x7f0000005ec0)=[{{&(0x7f0000000600)=@tipc, 0x80, &(0x7f0000000980)=[{&(0x7f0000000480)=""/22, 0x16}, {&(0x7f0000000700)=""/255, 0xff}, {&(0x7f0000000680)=""/33, 0x21}, {&(0x7f0000000800)=""/182, 0xb6}, {&(0x7f00000008c0)=""/23, 0x17}, {&(0x7f0000000900)=""/103, 0x67}], 0x6, &(0x7f0000000a00)=""/202, 0xca}, 0x10}, {{&(0x7f0000000b00)=@tipc, 0x80, &(0x7f0000000c80)=[{&(0x7f0000000b80)=""/95, 0x5f}, {&(0x7f0000000c00)=""/80, 0x50}], 0x2, &(0x7f0000000cc0)=""/155, 0x9b}, 0x400}, {{0x0, 0x0, &(0x7f0000000dc0)=[{&(0x7f0000000d80)=""/33, 0x21}], 0x1, &(0x7f0000000e00)=""/4096, 0x1000}, 0x3}, {{&(0x7f0000001e00)=@nl=@proc, 0x80, &(0x7f0000002200)=[{&(0x7f0000001e80)=""/237, 0xed}, {&(0x7f0000001f80)=""/37, 0x25}, {&(0x7f0000001fc0)=""/175, 0xaf}, {&(0x7f0000002080)=""/78, 0x4e}, {&(0x7f0000002100)=""/245, 0xf5}], 0x5, &(0x7f0000002280)=""/160, 0xa0}, 0x4}, {{0x0, 0x0, &(0x7f0000003400)=[{&(0x7f0000002340)=""/4096, 0x1000}, {&(0x7f0000003340)=""/55, 0x37}, {&(0x7f0000003380)=""/127, 0x7f}], 0x3, &(0x7f00000037c0)=""/4096, 0x1000}, 0xd}, {{&(0x7f0000003440)=@alg, 0x80, &(0x7f0000003700)=[{&(0x7f00000034c0)=""/127, 0x7f}, {&(0x7f0000003540)=""/21, 0x15}, {&(0x7f0000003580)=""/151, 0x97}, {&(0x7f0000003640)=""/185, 0xb9}], 0x4, &(0x7f00000047c0)=""/247, 0xf7}, 0x6}, {{&(0x7f00000048c0)=@generic, 0x80, &(0x7f0000003740)=[{&(0x7f0000004940)=""/67, 0x43}], 0x1}, 0xffffff27}, {{0x0, 0x0, &(0x7f0000005d40)=[{&(0x7f00000049c0)=""/200, 0xc8}, {&(0x7f0000004ac0)=""/214, 0xd6}, {&(0x7f0000004bc0)=""/4096, 0x1000}, {&(0x7f0000005bc0)=""/165, 0xa5}, {&(0x7f0000005c80)=""/98, 0x62}, {&(0x7f0000005d00)=""/5, 0x5}], 0x6, &(0x7f0000005dc0)=""/216, 0xd8}, 0x5}], 0x8, 0x162, 0x0) r4 = userfaultfd(0x1) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f00000004c0)) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000180)={{&(0x7f0000ffc000/0x3000)=nil, 0x3000}, 0x3}) ioctl$UFFDIO_COPY(r4, 0xc028aa03, &(0x7f00000005c0)={&(0x7f0000ffd000/0x1000)=nil, &(0x7f0000119000/0x1000)=nil, 0x1000, 0x3}) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000300)={@remote, 0x800, 0x0, 0x103, 0x1, 0xf7b2}, 0x20) sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0xa, 0x4e24, 0x0, @dev}, 0x1c, 0x0, 0x0, 0x0, 0x50}, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x79bf81) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000004c0)="d8000000180081064e81f782db4cb904021d0800fd007c05e8fe50a10a000400014002020c600e41b0000900ac00ac0701000000160012000a00ff150048035c3b61c1d67f6f94007134cf6efb8000a007a290457f01a7cee4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5ae24e25ccca9e00360db79826835d3a71d95667daffffffffff1f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5b7276505de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9000001008af26c8b7b55f4d2a6823a45", 0xd8}], 0x1}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x20c01, 0x0) io_setup(0x1fe, &(0x7f0000000200)) r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$bt_BT_VOICE(r5, 0x112, 0xb, &(0x7f00000006c0)=0x9fc, &(0x7f0000003780)=0x2) r6 = socket(0xa, 0x3, 0x4) ioctl$sock_SIOCBRDELBR(r6, 0x89a2, &(0x7f0000000000)='bridge0\x00') 1.168565322s ago: executing program 3 (id=817): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3f8, 0x0, 0x32}, 0x9c) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000001c80)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000240)="af", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f00000004c0)="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"/917, 0x395}, {&(0x7f00000003c0)="439e9c06fc666cabc8569d63a866b31ff3ceda1e28f23f455e96a02001fc3fb0", 0x20}], 0x2}}, {{0x0, 0x0, &(0x7f00000018c0)=[{&(0x7f0000000380)="8f7c82824d7718b9ca0e1e03c23ce8a0dc1b26", 0x13}, {&(0x7f0000000400)="de2b472e4d94768d492c7220e74c98f4911206983ebeea023c6a38e4eddc14a3551132530218a2", 0x27}, {&(0x7f0000000880)="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", 0x367}, {0x0, 0xf00}], 0x4}}], 0x3, 0x40000) 1.105814618s ago: executing program 5 (id=818): r0 = socket$inet6(0xa, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x12, 0x80, 0x0, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @cgroup_sock_addr=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$F2FS_IOC_START_ATOMIC_WRITE(r0, 0xf501, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f0000000380), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$netlink(r2, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000480)={0xe0, 0x10, 0x50b, 0x0, 0x0, "", [@generic="6f6d8864d22a3f2ffaa46c88bc", @typed={0xa9, 0x0, 0x0, 0x0, @binary="2b0e13e735a3184f1b3d6da2f1acfac0ee50d2b184b27db1f302de337c0004060000000000bf852c89867f6691b01b2d44e4ff2d5f28732c5fbd9423debbb86f9dba4a2dba4dbe076c02262600c446a567de243ab0d67683f7bb11c9cab3b3eed8a8bef4ff1631aa78acefca03c1a66db4424a8ba100022db228bb7b5eb5100100000000000000a0912086d9f4606d2e4cc898739222c5d3a83cb6b707f3336336ebb7d681"}, @generic="e9fa37a5fc1164cc8b9de498f6d8c88069c8b688"]}, 0xe0}], 0x1}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) pipe(&(0x7f0000000100)) 987.299895ms ago: executing program 4 (id=819): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000000080eff95"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f00000002c0)='contention_end\x00', r0}, 0x10) pipe2(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) pipe(&(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r3, 0x0, 0xffe, 0x8) close_range(r2, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000014c0)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000040)=""/20, 0x14}], 0x1, &(0x7f0000000440)=""/13, 0xd}, 0x7}, {{&(0x7f0000000480)=@nl=@proc, 0x80, &(0x7f00000007c0)=[{&(0x7f0000000580)=""/201, 0xc9}, {&(0x7f0000000680)=""/115, 0x73}, {&(0x7f0000000700)=""/154, 0x9a}], 0x3, &(0x7f0000002100)=""/4096, 0x1000}, 0x9}, {{&(0x7f0000000800)=@in6={0xa, 0x0, 0x0, @loopback}, 0x80, &(0x7f0000000b00)=[{&(0x7f0000000880)=""/57, 0x39}, {&(0x7f00000008c0)=""/131, 0x83}, {&(0x7f0000000980)=""/227, 0xe3}, {&(0x7f0000000a80)=""/111, 0x6f}], 0x4, &(0x7f0000000b40)=""/43, 0x2b}, 0xbb58}, {{&(0x7f0000000b80)=@in6={0xa, 0x0, 0x0, @initdev}, 0x80, &(0x7f0000001400)=[{&(0x7f0000000c00)=""/178, 0xb2}, {&(0x7f0000000cc0)=""/209, 0xd1}, {&(0x7f0000000dc0)=""/185, 0xb9}, {&(0x7f0000000e80)=""/242, 0xf2}, {&(0x7f0000000f80)=""/130, 0x82}, {&(0x7f0000001040)=""/179, 0xb3}, {&(0x7f0000001100)=""/47, 0x2f}, {&(0x7f0000001200)=""/209, 0xd1}, {&(0x7f0000001300)=""/245, 0xf5}], 0x9, &(0x7f0000001140)=""/28, 0x1c}, 0x7}], 0x4, 0x2, 0x0) mkdir(&(0x7f00000020c0)='./file0\x00', 0x0) openat$fb0(0xffffffffffffff9c, &(0x7f0000000240), 0x102, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$TIPC_NL_MON_PEER_GET(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)={0x20, r8, 0xb03, 0x0, 0x0, {}, [@TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0xad0}]}]}, 0x20}}, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) r9 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) capset(&(0x7f0000000100)={0x20071026}, &(0x7f0000000140)) fchown(r9, 0x0, 0xee00) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r10 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000011c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r10, &(0x7f0000000080)={0x5, 0x10, 0xfa00, {0xfffffffffffffffd}}, 0x18) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffc000/0x1000)=nil, 0x1000, &(0x7f00000000c0)='/dev/input/event#\x00') syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') 360.302008ms ago: executing program 5 (id=820): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd(0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001d40)={&(0x7f00000009c0)='sched_switch\x00', r3}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r7 = creat(&(0x7f00000005c0)='./file0\x00', 0x0) close(r7) sendmsg$inet(r6, &(0x7f0000000780)={&(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10, &(0x7f00000001c0)=[{&(0x7f0000000140)="be38", 0x2}], 0x1}, 0x0) r8 = socket$inet6_udp(0xa, 0x2, 0x0) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r10 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r11 = openat$cgroup_int(r10, &(0x7f0000000080)='cgroup.clone_children\x00', 0x2, 0x0) sendfile(r11, r11, 0x0, 0x60) getsockopt$inet6_int(r9, 0x29, 0x10, 0x0, &(0x7f0000000080)) setsockopt$IP6T_SO_SET_REPLACE(r8, 0x29, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x64, 0x6, 0x598, 0x0, 0xd0, 0x0, 0x3d0, 0x2c8, 0x510, 0x510, 0x510, 0x510, 0x510, 0x6, 0x0, {[{{@ipv6={@mcast1, @private1, [], [], 'veth1\x00', 'veth1_vlan\x00'}, 0x0, 0xa8, 0xd0, 0x0, {0x0, 0x3a010000}}, @HL={0x28}}, {{@ipv6={@mcast2, @loopback, [], [], 'veth1_virt_wifi\x00', 'pimreg\x00'}, 0x0, 0xd0, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x2c8}}, {{@uncond, 0x0, 0xd8, 0x100, 0x0, {}, [@common=@frag={{0x30}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0x108}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv4=@remote}}}, {{@ipv6={@loopback, @private2, [], [], 'batadv0\x00', 'veth0_to_batadv\x00'}, 0x0, 0xd0, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @inet=@DSCP={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5f8) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000140)={0x0, 0x0, 0x1, r2}) mount(0x0, &(0x7f00000003c0)='./cgroup/cgroup.procs\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) 168.690979ms ago: executing program 3 (id=821): mremap(&(0x7f000000d000/0x2000)=nil, 0xfffffffffffffe74, 0x1000, 0x3, &(0x7f0000007000/0x1000)=nil) r0 = socket(0x15, 0x5, 0x0) (async) r1 = syz_open_dev$sndpcmp(&(0x7f0000000300), 0x3f, 0x101000) mmap$snddsp_control(&(0x7f0000007000/0x4000)=nil, 0x1000, 0x100000d, 0x80010, r1, 0x83000000) (async) setsockopt$sock_int(r0, 0x1, 0x4, &(0x7f0000000340)=0x2, 0x4) r2 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) close(r2) (async) munmap(&(0x7f000000d000/0x4000)=nil, 0x4000) (async) r3 = syz_open_dev$dri(&(0x7f0000000380), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f0000000200)={0x0, &(0x7f0000000100)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_WAIT_VBLANK(r2, 0xc018643a, &(0x7f0000000140)={0x1, 0x101}) (async) ioctl$DRM_IOCTL_MODE_SETCRTC(r2, 0xc06864a2, &(0x7f0000000740)={0x0, 0x0, r4, 0x0, 0x0, 0x200, 0x2, 0x80000000, {0x5, 0x2, 0x0, 0x800, 0x0, 0x5, 0x0, 0xf7fe, 0x0, 0x4, 0x0, 0x4, 0x0, 0x0, "65366a50432b7ee2c7feddd91dfe68e7cfc6fa7272f3bf0a71b5d0c19323a260"}}) (async) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{r5, 0xffffffffffffffff}, &(0x7f0000000080), &(0x7f0000000280)='%ps \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000006c0)={r6}, 0x4) (async) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x6, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70500000800000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)=""/244, 0x16e, 0xf4, 0x1, 0x8000, 0x10000, @value=r2}, 0x28) 0s ago: executing program 4 (id=822): bpf$MAP_CREATE(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) r3 = socket(0x1d, 0x2, 0x6) setsockopt$ALG_SET_AEAD_AUTHSIZE(r3, 0x6a, 0x4, 0x20000002, 0x4) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000002100), 0x0, 0x0) read$FUSE(r4, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r4, &(0x7f0000004300)="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", 0x2000, &(0x7f0000000d00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x78, 0x0, 0x0, {0x0, 0x0, 0x0, {0x0, 0x0, 0x800000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, 0xffffffffffffffff}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r4, &(0x7f0000004200)={0x50, 0x0, r5, {0x7, 0x21, 0x0, 0x128200, 0xfff7}}, 0x50) setxattr(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=@random={'user.', '\x00'}, 0x0, 0x0, 0x0) capset(&(0x7f00000020c0)={0x19980330}, &(0x7f0000002100)) lchown(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) shmat(0x0, &(0x7f0000313000/0x1000)=nil, 0x4000) r6 = syz_open_dev$video4linux(&(0x7f0000000040), 0x7, 0x0) r7 = syz_open_dev$dmmidi(&(0x7f0000001040), 0x2, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_STATUS32(r7, 0xc0245720, &(0x7f0000000080)) ioctl$VIDIOC_SUBDEV_G_FRAME_INTERVAL(r6, 0xc0305615, &(0x7f0000000000)) kernel console output (not intermixed with test programs): ed USB device number 10 using dummy_hcd [ 178.695484][ T5925] usb 1-1: too many configurations: 9, using maximum allowed: 8 [ 178.705031][ T5925] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 178.714310][ T5925] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 178.733300][ T5925] usb 1-1: config 0 interface 0 has no altsetting 0 [ 178.752234][ T5925] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 178.762101][ T5925] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 178.773477][ T5925] usb 1-1: config 0 interface 0 has no altsetting 0 [ 178.786590][ T46] usb 5-1: config 0 has no interfaces? [ 178.792101][ T5925] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 178.792154][ T5925] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 178.792186][ T5925] usb 1-1: config 0 interface 0 has no altsetting 0 [ 178.825152][ T5925] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 178.833722][ T46] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 178.861830][ T5925] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 178.865263][ T46] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 178.874824][ T5925] usb 1-1: config 0 interface 0 has no altsetting 0 [ 178.911629][ T5925] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 178.921377][ T5925] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 178.939998][ T5925] usb 1-1: config 0 interface 0 has no altsetting 0 [ 178.946185][ T46] usb 5-1: config 0 descriptor?? [ 179.011052][ T5925] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 179.036255][ T5925] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 179.068795][ T46] usb 4-1: USB disconnect, device number 13 [ 179.071288][ T5925] usb 1-1: config 0 interface 0 has no altsetting 0 [ 179.095699][ T5925] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 179.105298][ T5925] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 179.122237][ T5925] usb 1-1: config 0 interface 0 has no altsetting 0 [ 179.164816][ T5925] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 179.176096][ T5925] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 179.211695][ T5925] usb 1-1: config 0 interface 0 has no altsetting 0 [ 179.236708][ T6958] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 179.262252][ T5925] usb 1-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 179.273866][ T6958] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 179.282709][ T5925] usb 1-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 179.318215][ T5925] usb 1-1: Product: syz [ 179.332684][ T5881] usb 5-1: USB disconnect, device number 10 [ 179.352445][ T5925] usb 1-1: Manufacturer: syz [ 179.370620][ T5925] usb 1-1: SerialNumber: syz [ 179.391224][ T5925] usb 1-1: config 0 descriptor?? [ 179.443351][ T5925] yurex 1-1:0.0: USB YUREX device now attached to Yurex #0 [ 179.780104][ T5925] usb 1-1: USB disconnect, device number 10 [ 179.786232][ T5881] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 179.795345][ T5925] yurex 1-1:0.0: USB YUREX #0 now disconnected [ 179.954965][ T5881] usb 5-1: Using ep0 maxpacket: 16 [ 179.971030][ T5881] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 179.994635][ T5881] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 180.019430][ T5881] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 1.40 [ 180.041241][ T5881] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 180.062697][ T5881] usb 5-1: Product: syz [ 180.077535][ T5881] usb 5-1: Manufacturer: syz [ 180.092644][ T5881] usb 5-1: SerialNumber: syz [ 180.574947][ T5881] usb 5-1: 0:2 : does not exist [ 181.734791][ T46] usb 4-1: new full-speed USB device number 14 using dummy_hcd [ 181.755650][ T5846] usb 5-1: USB disconnect, device number 11 [ 181.995552][ T6992] block nbd4: NBD_DISCONNECT [ 182.088465][ T46] usb 4-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.32 [ 182.099226][ T46] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 182.948124][ T46] usb 4-1: config 0 descriptor?? [ 183.587901][ T46] usb 4-1: can't set config #0, error -71 [ 183.966446][ T46] usb 4-1: USB disconnect, device number 14 [ 184.633510][ T5881] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 185.266272][ T5881] usb 5-1: config 0 has an invalid interface number: 31 but max is 0 [ 185.276108][ T5881] usb 5-1: config 0 has no interface number 0 [ 185.283171][ T5881] usb 5-1: New USB device found, idVendor=04ca, idProduct=3010, bcdDevice=fe.7a [ 185.303403][ T5881] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 185.468700][ T5881] usb 5-1: config 0 descriptor?? [ 187.535663][ T5881] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 187.668026][ T5881] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 188.018288][ T2146] usb 5-1: USB disconnect, device number 12 [ 189.388582][ T7052] capability: warning: `syz.0.321' uses deprecated v2 capabilities in a way that may be insecure [ 190.586176][ T7063] netlink: 28 bytes leftover after parsing attributes in process `syz.0.326'. [ 190.639204][ T7063] netlink: 28 bytes leftover after parsing attributes in process `syz.0.326'. [ 190.738874][ T5840] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 190.912937][ T5840] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 190.925134][ T5840] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 190.955053][ T5840] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 190.983014][ T5840] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 190.993311][ T5840] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 191.203678][ T7075] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 191.235245][ T5925] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 192.507420][ T5925] usb 4-1: config 0 has an invalid interface number: 31 but max is 0 [ 192.517488][ T5925] usb 4-1: config 0 has no interface number 0 [ 192.523747][ T5925] usb 4-1: New USB device found, idVendor=04ca, idProduct=3010, bcdDevice=fe.7a [ 193.126472][ T5836] Bluetooth: hci5: command tx timeout [ 193.358614][ T5925] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 194.113379][ T5925] usb 4-1: config 0 descriptor?? [ 194.119185][ T5925] usb 4-1: can't set config #0, error -71 [ 194.128277][ T5925] usb 4-1: USB disconnect, device number 15 [ 194.898854][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.905676][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.089038][ T7065] chnl_net:caif_netlink_parms(): no params data found [ 195.155269][ T5836] Bluetooth: hci5: command tx timeout [ 196.030395][ T7065] bridge0: port 1(bridge_slave_0) entered blocking state [ 196.059054][ T7065] bridge0: port 1(bridge_slave_0) entered disabled state [ 196.085859][ T7065] bridge_slave_0: entered allmulticast mode [ 196.094240][ T7065] bridge_slave_0: entered promiscuous mode [ 196.108147][ T7065] bridge0: port 2(bridge_slave_1) entered blocking state [ 196.133115][ T7065] bridge0: port 2(bridge_slave_1) entered disabled state [ 196.144213][ T7065] bridge_slave_1: entered allmulticast mode [ 196.151222][ T5925] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 196.168558][ T7065] bridge_slave_1: entered promiscuous mode [ 196.271448][ T7065] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 196.297487][ T7065] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 196.307520][ T5925] usb 4-1: Using ep0 maxpacket: 32 [ 196.318177][ T5925] usb 4-1: config index 0 descriptor too short (expected 1819, got 27) [ 196.520909][ T5925] usb 4-1: config 0 contains an unexpected descriptor of type 0x1, skipping [ 196.543923][ T5925] usb 4-1: config 0 has an invalid descriptor of length 221, skipping remainder of the config [ 196.557759][ T5925] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 16 [ 197.024809][ T7128] block nbd4: NBD_DISCONNECT [ 197.029760][ T5925] usb 4-1: New USB device found, idVendor=086a, idProduct=0003, bcdDevice=a5.66 [ 197.073675][ T5925] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 197.093773][ T7065] team0: Port device team_slave_0 added [ 197.106342][ T5925] usb 4-1: Product: syz [ 197.119017][ T5925] usb 4-1: Manufacturer: syz [ 197.130831][ T7065] team0: Port device team_slave_1 added [ 197.138882][ T5925] usb 4-1: SerialNumber: syz [ 197.169131][ T5925] usb 4-1: config 0 descriptor?? [ 197.279781][ T5836] Bluetooth: hci5: command tx timeout [ 197.383988][ T5925] usb 4-1: USB disconnect, device number 16 [ 197.445055][ T7065] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 197.462428][ T7065] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 197.525621][ T7065] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 197.540601][ T7065] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 197.548004][ T7065] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 197.575773][ T7065] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 197.664885][ T46] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 197.678480][ T7065] hsr_slave_0: entered promiscuous mode [ 197.746829][ T7065] hsr_slave_1: entered promiscuous mode [ 197.763814][ T7065] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 197.784698][ T7065] Cannot create hsr debugfs directory [ 197.904461][ T46] usb 5-1: config 0 has an invalid interface number: 31 but max is 0 [ 197.923400][ T46] usb 5-1: config 0 has no interface number 0 [ 197.930389][ T46] usb 5-1: New USB device found, idVendor=04ca, idProduct=3010, bcdDevice=fe.7a [ 197.966643][ T46] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 198.036994][ T7140] fuse: Unknown parameter 'Ix_read' [ 198.789888][ T46] usb 5-1: config 0 descriptor?? [ 199.369524][ T5836] Bluetooth: hci5: command tx timeout [ 199.454402][ T7065] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 199.616755][ T7153] netlink: 40 bytes leftover after parsing attributes in process `syz.3.351'. [ 200.041949][ T5925] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 200.197262][ T5846] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 200.734789][ T7065] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 200.789743][ T7065] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 200.836663][ T7065] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 201.525831][ T25] usb 5-1: USB disconnect, device number 13 [ 201.621038][ T7065] 8021q: adding VLAN 0 to HW filter on device bond0 [ 201.641630][ T7065] 8021q: adding VLAN 0 to HW filter on device team0 [ 201.666612][ T7171] netlink: 40 bytes leftover after parsing attributes in process `syz.1.355'. [ 201.682217][ T1095] bridge0: port 1(bridge_slave_0) entered blocking state [ 201.689930][ T1095] bridge0: port 1(bridge_slave_0) entered forwarding state [ 201.715032][ T5925] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 201.798063][ T1095] bridge0: port 2(bridge_slave_1) entered blocking state [ 201.805491][ T1095] bridge0: port 2(bridge_slave_1) entered forwarding state [ 201.881945][ T5925] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 201.896748][ T5925] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 201.920754][ T5925] usb 1-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 201.932892][ T5925] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 201.977025][ T5925] usb 1-1: config 0 descriptor?? [ 201.984917][ T5846] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 202.009099][ T7181] netlink: 28 bytes leftover after parsing attributes in process `syz.3.360'. [ 202.018446][ T7181] netlink: 28 bytes leftover after parsing attributes in process `syz.3.360'. [ 202.116909][ T5839] Bluetooth: hci0: command 0x0406 tx timeout [ 202.123417][ T5144] Bluetooth: hci4: command 0x0406 tx timeout [ 202.125617][ T5839] Bluetooth: hci2: command 0x0406 tx timeout [ 202.138878][ T5846] usb 5-1: Using ep0 maxpacket: 32 [ 202.148882][ T5846] usb 5-1: config index 0 descriptor too short (expected 1819, got 27) [ 202.157554][ T5846] usb 5-1: config 0 contains an unexpected descriptor of type 0x1, skipping [ 202.185328][ T5846] usb 5-1: config 0 has an invalid descriptor of length 221, skipping remainder of the config [ 202.198368][ T5846] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 16 [ 202.217982][ T5846] usb 5-1: New USB device found, idVendor=086a, idProduct=0003, bcdDevice=a5.66 [ 202.233355][ T5846] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 202.245496][ T5846] usb 5-1: Product: syz [ 202.249778][ T5846] usb 5-1: Manufacturer: syz [ 202.256692][ T5846] usb 5-1: SerialNumber: syz [ 202.265379][ T5846] usb 5-1: config 0 descriptor?? [ 202.290794][ T7065] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 202.349836][ T7191] netlink: 40 bytes leftover after parsing attributes in process `syz.3.361'. [ 202.414294][ T5925] cm6533_jd 0003:0D8C:0022.0004: unknown main item tag 0x0 [ 202.423384][ T5925] cm6533_jd 0003:0D8C:0022.0004: unknown main item tag 0x0 [ 202.476587][ T5925] input: HID 0d8c:0022 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:0D8C:0022.0004/input/input7 [ 202.548285][ T5925] cm6533_jd 0003:0D8C:0022.0004: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.0-1/input0 [ 202.881274][ T25] usb 1-1: USB disconnect, device number 11 [ 203.103787][ T7065] veth0_vlan: entered promiscuous mode [ 203.145342][ T7065] veth1_vlan: entered promiscuous mode [ 203.237993][ T7065] veth0_macvtap: entered promiscuous mode [ 203.258243][ T7065] veth1_macvtap: entered promiscuous mode [ 203.306630][ T7065] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 203.334718][ T7065] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 203.354847][ T7065] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 203.374710][ T7065] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 203.397569][ T7065] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 203.424575][ T7065] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 203.448466][ T7065] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 203.480221][ T7065] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 203.510154][ T7065] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 203.539424][ T7065] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 203.611231][ T7065] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 203.689668][ T7065] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 203.750098][ T7065] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 203.821990][ T7065] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 203.866927][ T7065] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 203.908989][ T7065] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 203.933283][ T7065] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 203.956494][ T7065] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 203.980109][ T7065] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 203.994196][ T7065] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 204.007643][ T7065] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 204.027892][ T7065] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 204.041635][ T7219] netlink: 40 bytes leftover after parsing attributes in process `syz.3.368'. [ 204.074839][ T46] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 204.091872][ T7065] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 204.101561][ T7065] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 204.111042][ T7065] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 204.121350][ T7065] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 204.248516][ T46] usb 1-1: config 0 has an invalid interface number: 31 but max is 0 [ 204.257649][ T46] usb 1-1: config 0 has no interface number 0 [ 204.276282][ T46] usb 1-1: New USB device found, idVendor=04ca, idProduct=3010, bcdDevice=fe.7a [ 204.292785][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 204.301700][ T1095] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 204.321900][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 204.325326][ T1095] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 204.352836][ T46] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 204.374163][ T46] usb 1-1: config 0 descriptor?? [ 204.488168][ T7227] netlink: 40 bytes leftover after parsing attributes in process `syz.3.371'. [ 204.689094][ T5846] usb 5-1: USB disconnect, device number 14 [ 205.412636][ T7239] Invalid ELF header magic: != ELF [ 205.424968][ T46] usb 1-1: USB disconnect, device number 12 [ 205.621447][ T7246] netlink: 40 bytes leftover after parsing attributes in process `syz.4.378'. [ 205.848498][ T7250] overlayfs: failed to resolve './file0': -2 [ 206.631178][ T7259] netlink: 28 bytes leftover after parsing attributes in process `syz.5.382'. [ 206.834975][ T5925] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 206.893207][ T7266] block nbd5: NBD_DISCONNECT [ 206.985414][ T5925] usb 2-1: too many configurations: 9, using maximum allowed: 8 [ 207.014411][ T5925] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 207.030857][ T7275] netlink: 28 bytes leftover after parsing attributes in process `syz.5.389'. [ 207.033284][ T5925] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 207.066999][ T5925] usb 2-1: config 0 interface 0 has no altsetting 0 [ 207.083153][ T5925] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 207.106310][ T5925] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 207.124952][ T5925] usb 2-1: config 0 interface 0 has no altsetting 0 [ 207.143883][ T5925] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 207.156006][ T5925] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 207.168106][ T5925] usb 2-1: config 0 interface 0 has no altsetting 0 [ 207.176411][ T5925] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 207.208842][ T5925] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 207.244746][ T5925] usb 2-1: config 0 interface 0 has no altsetting 0 [ 207.265218][ T5925] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 207.292089][ T5925] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 207.339506][ T5925] usb 2-1: config 0 interface 0 has no altsetting 0 [ 207.368460][ T5925] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 207.398055][ T5925] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 207.398094][ T5925] usb 2-1: config 0 interface 0 has no altsetting 0 [ 207.399486][ T5925] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 207.431672][ T5925] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 207.431712][ T5925] usb 2-1: config 0 interface 0 has no altsetting 0 [ 207.434386][ T5925] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 207.442943][ T46] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 207.467729][ T5925] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 207.467767][ T5925] usb 2-1: config 0 interface 0 has no altsetting 0 [ 207.470521][ T5925] usb 2-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 207.500703][ T5925] usb 2-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 207.500741][ T5925] usb 2-1: Product: syz [ 207.500762][ T5925] usb 2-1: Manufacturer: syz [ 207.500782][ T5925] usb 2-1: SerialNumber: syz [ 207.503313][ T5925] usb 2-1: config 0 descriptor?? [ 207.532650][ T5883] usb 6-1: new low-speed USB device number 2 using dummy_hcd [ 207.539858][ T5925] yurex 2-1:0.0: USB YUREX device now attached to Yurex #0 [ 207.664778][ T5883] usb 6-1: device descriptor read/64, error -71 [ 207.684673][ T46] usb 4-1: Using ep0 maxpacket: 32 [ 207.692208][ T46] usb 4-1: config index 0 descriptor too short (expected 1819, got 27) [ 207.701180][ T46] usb 4-1: config 0 contains an unexpected descriptor of type 0x1, skipping [ 207.711141][ T46] usb 4-1: config 0 has an invalid descriptor of length 221, skipping remainder of the config [ 207.723087][ T46] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 16 [ 207.741642][ T46] usb 4-1: New USB device found, idVendor=086a, idProduct=0003, bcdDevice=a5.66 [ 207.751301][ T46] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 207.760725][ T46] usb 4-1: Product: syz [ 207.765449][ T46] usb 4-1: Manufacturer: syz [ 207.770170][ T46] usb 4-1: SerialNumber: syz [ 207.778647][ T46] usb 4-1: config 0 descriptor?? [ 208.611680][ C1] usb 2-1: yurex_control_callback - control failed: -71 [ 208.661872][ T2146] usb 2-1: USB disconnect, device number 8 [ 208.680855][ T2146] yurex 2-1:0.0: USB YUREX #0 now disconnected [ 208.714695][ T5883] usb 6-1: new low-speed USB device number 3 using dummy_hcd [ 208.749627][ T7291] netlink: 28 bytes leftover after parsing attributes in process `syz.4.393'. [ 208.865001][ T5883] usb 6-1: device descriptor read/64, error -71 [ 208.969157][ T7297] netlink: 16 bytes leftover after parsing attributes in process `syz.4.396'. [ 208.986656][ T5883] usb usb6-port1: attempt power cycle [ 209.246611][ T5881] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 209.418438][ T5883] usb 6-1: new low-speed USB device number 4 using dummy_hcd [ 209.680248][ T5881] usb 1-1: config 0 has an invalid interface number: 31 but max is 0 [ 209.837153][ T5883] usb 6-1: device descriptor read/8, error -71 [ 209.885982][ T5881] usb 1-1: config 0 has no interface number 0 [ 209.961398][ T5881] usb 1-1: New USB device found, idVendor=04ca, idProduct=3010, bcdDevice=fe.7a [ 210.000823][ T5881] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 210.055752][ T46] usb 4-1: USB disconnect, device number 18 [ 210.060054][ T5881] usb 1-1: config 0 descriptor?? [ 210.119720][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 210.151271][ T5883] usb 6-1: new low-speed USB device number 5 using dummy_hcd [ 210.188833][ T7309] block nbd4: NBD_DISCONNECT [ 210.402840][ T5883] usb 6-1: device not accepting address 5, error -71 [ 211.731060][ T46] usb 1-1: USB disconnect, device number 13 [ 212.705800][ T5883] usb usb6-port1: unable to enumerate USB device [ 212.761925][ T7333] netlink: 28 bytes leftover after parsing attributes in process `syz.4.405'. [ 212.966375][ T7341] netlink: 28 bytes leftover after parsing attributes in process `syz.3.409'. [ 212.976129][ T7341] netlink: 28 bytes leftover after parsing attributes in process `syz.3.409'. [ 213.639970][ T5883] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 214.215048][ T5883] usb 6-1: Using ep0 maxpacket: 32 [ 214.231601][ T5883] usb 6-1: config index 0 descriptor too short (expected 1819, got 27) [ 214.242914][ T5883] usb 6-1: config 0 contains an unexpected descriptor of type 0x1, skipping [ 214.258713][ T5883] usb 6-1: config 0 has an invalid descriptor of length 221, skipping remainder of the config [ 214.280893][ T5883] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 16 [ 214.300885][ T7357] block nbd0: NBD_DISCONNECT [ 214.316715][ T5883] usb 6-1: New USB device found, idVendor=086a, idProduct=0003, bcdDevice=a5.66 [ 214.328656][ T5883] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 214.354802][ T5883] usb 6-1: Product: syz [ 214.361804][ T5883] usb 6-1: Manufacturer: syz [ 214.385313][ T5883] usb 6-1: SerialNumber: syz [ 214.425825][ T5883] usb 6-1: config 0 descriptor?? [ 215.906996][ T7379] netlink: 28 bytes leftover after parsing attributes in process `syz.4.418'. [ 216.512174][ T5883] usb 6-1: USB disconnect, device number 6 [ 216.761234][ T7399] block nbd3: NBD_DISCONNECT [ 216.917572][ T5883] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 218.510238][ T5883] usb 6-1: config 0 has an invalid interface number: 31 but max is 0 [ 218.519279][ T5883] usb 6-1: config 0 has no interface number 0 [ 218.541660][ T7417] netlink: 28 bytes leftover after parsing attributes in process `syz.1.429'. [ 218.558795][ T5883] usb 6-1: New USB device found, idVendor=04ca, idProduct=3010, bcdDevice=fe.7a [ 218.675860][ T5883] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 219.029904][ T7417] netlink: 28 bytes leftover after parsing attributes in process `syz.1.429'. [ 219.031564][ T5883] usb 6-1: config 0 descriptor?? [ 219.231660][ T7427] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 220.326392][ T5913] usb 6-1: USB disconnect, device number 7 [ 221.914677][ T5913] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 222.434962][ T5913] usb 2-1: Using ep0 maxpacket: 32 [ 222.447128][ T5913] usb 2-1: config index 0 descriptor too short (expected 1819, got 27) [ 222.457661][ T5913] usb 2-1: config 0 contains an unexpected descriptor of type 0x1, skipping [ 222.467279][ T5913] usb 2-1: config 0 has an invalid descriptor of length 221, skipping remainder of the config [ 222.514293][ T5913] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 16 [ 222.527361][ T5913] usb 2-1: New USB device found, idVendor=086a, idProduct=0003, bcdDevice=a5.66 [ 222.537128][ T5913] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 222.545604][ T5913] usb 2-1: Product: syz [ 222.550060][ T5913] usb 2-1: Manufacturer: syz [ 222.555575][ T5913] usb 2-1: SerialNumber: syz [ 222.575701][ T5913] usb 2-1: config 0 descriptor?? [ 223.603129][ T7459] block nbd0: NBD_DISCONNECT [ 223.815631][ T7461] fuse: Unknown parameter 'Ix_read' [ 224.544786][ T5883] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 224.681863][ T7466] FAULT_INJECTION: forcing a failure. [ 224.681863][ T7466] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 224.695157][ T7466] CPU: 1 UID: 0 PID: 7466 Comm: syz.1.441 Not tainted 6.12.0-rc7-syzkaller #0 [ 224.704322][ T7466] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 224.714514][ T7466] Call Trace: [ 224.718102][ T7466] [ 224.721171][ T7466] dump_stack_lvl+0x241/0x360 [ 224.726099][ T7466] ? __pfx_dump_stack_lvl+0x10/0x10 [ 224.731360][ T7466] ? __pfx__printk+0x10/0x10 [ 224.736004][ T7466] ? __pfx_lock_release+0x10/0x10 [ 224.741083][ T7466] should_fail_ex+0x3b0/0x4e0 [ 224.745909][ T7466] _copy_from_user+0x2f/0xc0 [ 224.750543][ T7466] copy_msghdr_from_user+0xae/0x680 [ 224.755785][ T7466] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 224.761719][ T7466] __sys_sendmsg+0x22d/0x380 [ 224.766363][ T7466] ? __pfx___sys_sendmsg+0x10/0x10 [ 224.771806][ T7466] ? __pfx_vfs_write+0x10/0x10 [ 224.776654][ T7466] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 224.783035][ T7466] ? do_syscall_64+0x100/0x230 [ 224.787858][ T7466] ? do_syscall_64+0xb6/0x230 [ 224.792669][ T7466] do_syscall_64+0xf3/0x230 [ 224.797367][ T7466] ? clear_bhb_loop+0x35/0x90 [ 224.802076][ T7466] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 224.808005][ T7466] RIP: 0033:0x7f260a77e719 [ 224.812473][ T7466] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 224.832187][ T7466] RSP: 002b:00007f260b63a038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 224.840723][ T7466] RAX: ffffffffffffffda RBX: 00007f260a936058 RCX: 00007f260a77e719 [ 224.848723][ T7466] RDX: 0000000000000000 RSI: 00000000200000c0 RDI: 000000000000000c [ 224.856718][ T7466] RBP: 00007f260b63a090 R08: 0000000000000000 R09: 0000000000000000 [ 224.864816][ T7466] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 224.872865][ T7466] R13: 0000000000000000 R14: 00007f260a936058 R15: 00007ffc7b211d48 [ 224.881101][ T7466] [ 224.975352][ T5883] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 225.022469][ T5883] usb 1-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 225.065554][ T5883] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 225.117441][ T5883] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 225.149056][ T5883] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 225.181761][ T5883] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 225.201626][ T5883] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 225.229719][ T5883] usb 1-1: Product: syz [ 225.239821][ T5883] usb 1-1: Manufacturer: syz [ 225.263394][ T5883] cdc_wdm 1-1:1.0: skipping garbage [ 225.278307][ T5883] cdc_wdm 1-1:1.0: skipping garbage [ 225.287468][ T5883] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 225.293483][ T5883] cdc_wdm 1-1:1.0: Unknown control protocol [ 225.940769][ C0] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 225.947901][ C0] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 225.956217][ C0] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 225.962892][ C0] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 225.969920][ C0] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 225.976582][ C0] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 225.984869][ C0] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 225.991788][ C0] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 225.998181][ C0] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 226.004810][ C0] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 226.011215][ C0] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 226.017844][ C0] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 226.293870][ T5913] usb 2-1: USB disconnect, device number 9 [ 226.312408][ T5883] usb 1-1: USB disconnect, device number 14 [ 227.289643][ T7480] netlink: 12 bytes leftover after parsing attributes in process `syz.3.445'. [ 229.219099][ T7505] overlayfs: failed to resolve './file1': -2 [ 230.684814][ T5913] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 231.131423][ T5913] usb 6-1: Using ep0 maxpacket: 32 [ 231.304976][ T5913] usb 6-1: config index 0 descriptor too short (expected 1819, got 27) [ 231.345995][ T5913] usb 6-1: config 0 contains an unexpected descriptor of type 0x1, skipping [ 231.371046][ T5913] usb 6-1: config 0 has an invalid descriptor of length 221, skipping remainder of the config [ 231.382810][ T5913] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 16 [ 231.394203][ T5913] usb 6-1: New USB device found, idVendor=086a, idProduct=0003, bcdDevice=a5.66 [ 231.404289][ T5913] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 231.413677][ T5913] usb 6-1: Product: syz [ 231.418482][ T5913] usb 6-1: Manufacturer: syz [ 231.423151][ T5913] usb 6-1: SerialNumber: syz [ 231.453336][ T5913] usb 6-1: config 0 descriptor?? [ 231.701989][ T7525] fuse: Unknown parameter 'Ix_read' [ 231.854726][ T5846] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 232.215843][ T5846] usb 5-1: Using ep0 maxpacket: 32 [ 232.635935][ T5846] usb 5-1: config index 0 descriptor too short (expected 29220, got 36) [ 232.850348][ T5846] usb 5-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 232.957504][ T5846] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 232.993402][ T5846] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 233.037993][ T5846] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 233.073777][ T5846] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 233.140290][ T5846] usb 5-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 233.191297][ T5846] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 233.242781][ T5846] usb 5-1: config 0 descriptor?? [ 233.485982][ T5913] usb 6-1: USB disconnect, device number 8 [ 233.987762][ T7535] netlink: 28 bytes leftover after parsing attributes in process `syz.1.459'. [ 234.205139][ T5846] usblp 5-1:0.0: usblp0: USB Bidirectional printer dev 15 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 234.227717][ T5846] usb 5-1: USB disconnect, device number 15 [ 234.248218][ T5846] usblp0: removed [ 234.465110][ T5913] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 234.636657][ T5913] usb 6-1: device descriptor read/64, error -71 [ 234.957916][ T5913] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 235.165124][ T5913] usb 6-1: device descriptor read/64, error -71 [ 235.392722][ T5913] usb usb6-port1: attempt power cycle [ 235.754688][ T5913] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 235.807205][ T5913] usb 6-1: device descriptor read/8, error -71 [ 236.885054][ T5913] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 236.919048][ T5913] usb 6-1: device descriptor read/8, error -71 [ 237.527092][ T5913] usb usb6-port1: unable to enumerate USB device [ 237.671166][ T7581] netlink: 28 bytes leftover after parsing attributes in process `syz.5.470'. [ 238.235387][ T46] usb 1-1: new full-speed USB device number 15 using dummy_hcd [ 239.748864][ T5913] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 239.819563][ T7591] netlink: 28 bytes leftover after parsing attributes in process `syz.5.474'. [ 239.832755][ T7591] netlink: 28 bytes leftover after parsing attributes in process `syz.5.474'. [ 239.913428][ T46] usb 1-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.32 [ 239.923080][ T46] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 239.935629][ T46] usb 1-1: config 0 descriptor?? [ 239.950937][ T46] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 240.035927][ T7596] fuse: Unknown parameter 'Ix_read' [ 240.419114][ T5913] usb 4-1: Using ep0 maxpacket: 32 [ 240.426490][ T5913] usb 4-1: config index 0 descriptor too short (expected 1819, got 27) [ 240.435193][ T5913] usb 4-1: config 0 contains an unexpected descriptor of type 0x1, skipping [ 240.455221][ T5913] usb 4-1: config 0 has an invalid descriptor of length 221, skipping remainder of the config [ 240.492847][ T7599] netlink: 8 bytes leftover after parsing attributes in process `syz.5.476'. [ 240.502384][ T46] gp8psk: usb in 128 operation failed. [ 240.510100][ T5913] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 16 [ 240.569620][ T7603] netlink: 256 bytes leftover after parsing attributes in process `syz.4.477'. [ 240.580528][ T7603] netlink: 80 bytes leftover after parsing attributes in process `syz.4.477'. [ 240.671970][ T5913] usb 4-1: string descriptor 0 read error: -71 [ 240.681395][ T5913] usb 4-1: New USB device found, idVendor=086a, idProduct=0003, bcdDevice=a5.66 [ 240.691448][ T5913] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 240.706908][ T5913] usb 4-1: config 0 descriptor?? [ 240.724650][ T46] gp8psk: FW Version = 144.22.38 (0x901626) Build 2022/167/212 [ 240.734374][ T5913] usb 4-1: can't set config #0, error -71 [ 240.764272][ T5913] usb 4-1: USB disconnect, device number 19 [ 241.303751][ T7599] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 241.326164][ T7599] @: renamed from vlan0 (while UP) [ 242.431771][ T46] gp8psk: usb in 149 operation failed. [ 242.448725][ T46] gp8psk: failed to get FPGA version [ 242.479832][ T46] gp8psk: usb in 138 operation failed. [ 242.514873][ T46] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 242.568957][ T46] dvb-usb: Genpix SkyWalker-1 DVB-S receiver error while loading driver (-19) [ 242.825270][ T46] usb 1-1: USB disconnect, device number 15 [ 243.196132][ T5925] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 243.355119][ T5925] usb 6-1: device descriptor read/64, error -71 [ 243.644810][ T5925] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 243.964945][ T46] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 244.125229][ T46] usb 1-1: Using ep0 maxpacket: 8 [ 244.338245][ T46] usb 1-1: New USB device found, idVendor=2770, idProduct=9120, bcdDevice=6c.77 [ 244.364663][ T46] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=239 [ 244.394972][ T46] usb 1-1: Product: syz [ 244.411197][ T46] usb 1-1: Manufacturer: syz [ 244.423140][ T46] usb 1-1: SerialNumber: syz [ 244.452783][ T46] usb 1-1: config 0 descriptor?? [ 244.473682][ T46] gspca_main: sq905-2.14.0 probing 2770:9120 [ 244.584658][ T5925] usb 6-1: device descriptor read/64, error -71 [ 244.695196][ T5925] usb usb6-port1: attempt power cycle [ 245.129334][ T46] gspca_sq905: sq905_command: usb_control_msg failed (-110) [ 245.470841][ T46] sq905 1-1:0.0: probe with driver sq905 failed with error -110 [ 245.544627][ T5914] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 245.704690][ T5914] usb 2-1: Using ep0 maxpacket: 32 [ 245.818374][ T5914] usb 2-1: config index 0 descriptor too short (expected 1819, got 27) [ 245.854612][ T5914] usb 2-1: config 0 contains an unexpected descriptor of type 0x1, skipping [ 245.883301][ T5914] usb 2-1: config 0 has an invalid descriptor of length 221, skipping remainder of the config [ 245.952128][ T5914] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 16 [ 245.990294][ T5914] usb 2-1: New USB device found, idVendor=086a, idProduct=0003, bcdDevice=a5.66 [ 246.022422][ T5914] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 246.060295][ T5914] usb 2-1: Product: syz [ 246.074808][ T5914] usb 2-1: Manufacturer: syz [ 246.089913][ T5914] usb 2-1: SerialNumber: syz [ 246.112739][ T5914] usb 2-1: config 0 descriptor?? [ 246.344913][ T5846] usb 4-1: new full-speed USB device number 20 using dummy_hcd [ 247.033271][ T5846] usb 4-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.32 [ 247.043039][ T5846] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 247.090448][ T5846] usb 4-1: config 0 descriptor?? [ 247.123639][ T5846] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 247.143477][ T8] usb 1-1: USB disconnect, device number 16 [ 247.324963][ T5846] gp8psk: usb in 128 operation failed. [ 247.657549][ T5846] gp8psk: FW Version = 144.22.38 (0x901626) Build 2022/167/212 [ 248.022326][ T8] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 248.767201][ T8] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 249.986849][ T5846] gp8psk: usb in 149 operation failed. [ 249.992404][ T5846] gp8psk: failed to get FPGA version [ 250.003402][ T5846] gp8psk: usb in 138 operation failed. [ 250.024439][ T5846] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 250.039713][ T5846] dvb-usb: Genpix SkyWalker-1 DVB-S receiver error while loading driver (-19) [ 250.294390][ T5846] usb 4-1: USB disconnect, device number 20 [ 251.761031][ T2146] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 251.842308][ T5925] usb 2-1: USB disconnect, device number 10 [ 252.203329][ T2146] usb 1-1: device descriptor read/64, error -71 [ 253.795081][ T2146] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 253.985170][ T2146] usb 1-1: device descriptor read/64, error -71 [ 254.121987][ T2146] usb usb1-port1: attempt power cycle [ 254.829616][ T2146] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 254.935044][ T2146] usb 1-1: device descriptor read/8, error -71 [ 254.986413][ T7732] netlink: 830 bytes leftover after parsing attributes in process `syz.0.512'. [ 256.206471][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.213073][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.614777][ T5925] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 257.080398][ T5925] usb 6-1: Using ep0 maxpacket: 32 [ 257.112901][ T5925] usb 6-1: config index 0 descriptor too short (expected 1819, got 27) [ 257.123436][ T5925] usb 6-1: config 0 contains an unexpected descriptor of type 0x1, skipping [ 257.132745][ T5925] usb 6-1: config 0 has an invalid descriptor of length 221, skipping remainder of the config [ 257.144620][ T5925] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 16 [ 257.313195][ T5925] usb 6-1: New USB device found, idVendor=086a, idProduct=0003, bcdDevice=a5.66 [ 257.324009][ T5925] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 257.332749][ T5925] usb 6-1: Product: syz [ 257.338612][ T5925] usb 6-1: Manufacturer: syz [ 257.344116][ T5925] usb 6-1: SerialNumber: syz [ 257.769841][ T5925] usb 6-1: config 0 descriptor?? [ 257.868092][ T7754] block nbd4: NBD_DISCONNECT [ 259.135696][ T5914] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 259.279067][ T5925] usb 6-1: USB disconnect, device number 16 [ 259.305737][ C0] IPv4: Oversized IP packet from 172.20.20.24 [ 259.645924][ T7770] ubi0: attaching mtd0 [ 259.652374][ T7770] ubi0: scanning is finished [ 259.975149][ T5914] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 260.122530][ T7770] ubi0 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt0d", error -4 [ 263.418381][ T7810] block nbd3: NBD_DISCONNECT [ 263.858895][ C1] IPv4: Oversized IP packet from 172.20.20.24 [ 264.230958][ T7824] ubi0: attaching mtd0 [ 264.236336][ T7824] ubi0: scanning is finished [ 265.342633][ T7824] ubi0 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt0d", error -4 [ 265.414919][ T46] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 265.764006][ T46] usb 4-1: Using ep0 maxpacket: 32 [ 265.771166][ T46] usb 4-1: config index 0 descriptor too short (expected 1819, got 27) [ 265.787591][ T46] usb 4-1: config 0 contains an unexpected descriptor of type 0x1, skipping [ 265.797500][ T46] usb 4-1: config 0 has an invalid descriptor of length 221, skipping remainder of the config [ 265.808887][ T46] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 16 [ 266.710646][ T46] usb 4-1: New USB device found, idVendor=086a, idProduct=0003, bcdDevice=a5.66 [ 266.722474][ T46] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 266.730653][ T46] usb 4-1: Product: syz [ 266.734921][ T46] usb 4-1: Manufacturer: syz [ 266.739534][ T46] usb 4-1: SerialNumber: syz [ 267.477370][ T46] usb 4-1: config 0 descriptor?? [ 267.605233][ T46] usb 4-1: can't set config #0, error -71 [ 267.695200][ T46] usb 4-1: USB disconnect, device number 21 [ 269.172700][ T7860] block nbd0: NBD_DISCONNECT [ 270.025315][ T7874] ubi0: attaching mtd0 [ 270.036116][ T7874] ubi0: scanning is finished [ 271.698482][ T7874] ubi0 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt0d", error -4 [ 273.019714][ T7887] vlan2: entered promiscuous mode [ 273.051590][ T7887] batadv0: entered promiscuous mode [ 273.085342][ T7887] batadv0: left promiscuous mode [ 273.405186][ T5846] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 273.614637][ T5846] usb 1-1: Using ep0 maxpacket: 32 [ 273.622888][ T5846] usb 1-1: config index 0 descriptor too short (expected 29220, got 36) [ 273.639915][ T5846] usb 1-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 273.675676][ T5846] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 273.702477][ T5846] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 273.723738][ T5846] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 273.763677][ T5846] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 273.821923][ T5846] usb 1-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 273.842160][ T5846] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 273.875415][ T7910] syzkaller1: entered promiscuous mode [ 273.885953][ T5846] usb 1-1: config 0 descriptor?? [ 273.894678][ T7910] syzkaller1: entered allmulticast mode [ 274.104940][ T5846] usblp 1-1:0.0: usblp0: USB Bidirectional printer dev 21 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 274.158197][ T7896] netlink: 830 bytes leftover after parsing attributes in process `syz.0.554'. [ 274.252662][ C0] usblp0: nonzero read bulk status received: -71 [ 274.261534][ T8] usb 1-1: USB disconnect, device number 21 [ 274.463422][ T7895] usblp0: removed [ 275.435310][ T7922] ubi0: attaching mtd0 [ 275.447570][ T7922] ubi0: scanning is finished [ 275.806813][ T7922] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 275.814562][ T7922] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 275.821843][ T7922] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 275.829015][ T7922] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 275.836525][ T7922] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 275.843564][ T7922] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 275.852172][ T7922] ubi0: max/mean erase counter: 1/1, WL threshold: 4096, image sequence number: 3864187833 [ 275.862401][ T7922] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 275.969682][ T7924] ubi0: background thread "ubi_bgt0d" started, PID 7924 [ 276.373619][ T7932] overlayfs: failed to resolve './file0': -2 [ 277.713961][ T7941] block nbd4: NBD_DISCONNECT [ 278.344714][ T2146] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 278.504709][ T5913] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 278.526492][ T2146] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 278.544671][ T2146] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 278.567523][ T2146] usb 1-1: config 0 descriptor?? [ 278.577878][ T2146] cp210x 1-1:0.0: cp210x converter detected [ 278.688657][ T5913] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 278.697847][ T46] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 278.706343][ T5913] usb 4-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 278.727026][ T5913] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 278.744631][ T5913] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 278.778099][ T2146] cp210x 1-1:0.0: failed to get vendor val 0x370b size 1: -121 [ 278.785915][ T5913] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 278.805069][ T2146] cp210x 1-1:0.0: querying part number failed [ 278.816444][ T5913] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 278.835627][ T5913] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 278.843809][ T5913] usb 4-1: Product: syz [ 278.849969][ T2146] usb 1-1: cp210x converter now attached to ttyUSB0 [ 278.877658][ T5913] usb 4-1: Manufacturer: syz [ 278.884901][ T46] usb 5-1: Using ep0 maxpacket: 32 [ 278.919364][ T5913] cdc_wdm 4-1:1.0: skipping garbage [ 278.924859][ T46] usb 5-1: config index 0 descriptor too short (expected 29220, got 36) [ 278.933389][ T46] usb 5-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 278.943720][ T5913] cdc_wdm 4-1:1.0: skipping garbage [ 278.958032][ T5913] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 278.964040][ T5913] cdc_wdm 4-1:1.0: Unknown control protocol [ 278.970664][ T46] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 278.993231][ T46] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 279.001660][ T5925] usb 1-1: USB disconnect, device number 22 [ 279.030295][ T46] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 279.047279][ T46] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 279.051406][ T5925] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 279.113292][ T5925] cp210x 1-1:0.0: device disconnected [ 279.124787][ T46] usb 5-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 279.155052][ T46] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 279.468661][ T46] usb 5-1: config 0 descriptor?? [ 279.622958][ C0] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 279.629652][ C0] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 279.636202][ C0] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 279.642861][ C0] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 279.649251][ C0] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 279.655910][ C0] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 279.662397][ C0] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 279.669050][ C0] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 279.675453][ C0] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 279.682400][ C0] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 280.085973][ T7959] netlink: 830 bytes leftover after parsing attributes in process `syz.4.573'. [ 280.185640][ C1] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 280.192348][ C1] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 280.199295][ C1] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 280.206131][ C1] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 280.213375][ C1] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 280.217484][ T8] usb 4-1: USB disconnect, device number 22 [ 280.220007][ C1] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 280.232624][ C1] cdc_wdm 4-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 280.492400][ T46] usblp 5-1:0.0: usblp0: USB Bidirectional printer dev 16 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 282.812114][ T7975] ubi: mtd0 is already attached to ubi0 [ 283.349250][ T46] usb 5-1: USB disconnect, device number 16 [ 283.361103][ T46] usblp0: removed [ 284.164931][ T46] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 284.324879][ T46] usb 5-1: Using ep0 maxpacket: 32 [ 284.559032][ T46] usb 5-1: config 0 has an invalid interface number: 144 but max is 0 [ 284.567384][ T46] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 284.577826][ T46] usb 5-1: config 0 has no interface number 0 [ 284.584248][ T46] usb 5-1: config 0 interface 144 has no altsetting 0 [ 284.674561][ T7997] FAULT_INJECTION: forcing a failure. [ 284.674561][ T7997] name failslab, interval 1, probability 0, space 0, times 0 [ 284.687368][ T7997] CPU: 1 UID: 0 PID: 7997 Comm: syz.1.579 Not tainted 6.12.0-rc7-syzkaller #0 [ 284.696509][ T7997] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 284.706623][ T7997] Call Trace: [ 284.709947][ T7997] [ 284.712913][ T7997] dump_stack_lvl+0x241/0x360 [ 284.717724][ T7997] ? __pfx_dump_stack_lvl+0x10/0x10 [ 284.722965][ T7997] ? __pfx__printk+0x10/0x10 [ 284.727598][ T7997] ? kmem_cache_alloc_node_noprof+0x49/0x320 [ 284.733621][ T7997] ? __pfx___might_resched+0x10/0x10 [ 284.738958][ T7997] should_fail_ex+0x3b0/0x4e0 [ 284.743681][ T7997] should_failslab+0xac/0x100 [ 284.748452][ T7997] ? __alloc_skb+0x1c3/0x440 [ 284.753174][ T7997] kmem_cache_alloc_node_noprof+0x71/0x320 [ 284.759117][ T7997] __alloc_skb+0x1c3/0x440 [ 284.763614][ T7997] ? __pfx___alloc_skb+0x10/0x10 [ 284.768622][ T7997] ? reacquire_held_locks+0x5c0/0x690 [ 284.774048][ T7997] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 284.780100][ T7997] alloc_skb_with_frags+0xc3/0x820 [ 284.785353][ T7997] ? irqentry_exit+0x63/0x90 [ 284.789977][ T7997] ? lockdep_hardirqs_on+0x99/0x150 [ 284.795226][ T7997] sock_alloc_send_pskb+0x91a/0xa60 [ 284.800643][ T7997] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 284.806577][ T7997] ? smack_socket_sendmsg+0x178/0x540 [ 284.812044][ T7997] ? __pfx_smack_socket_sendmsg+0x10/0x10 [ 284.817822][ T7997] ? tomoyo_socket_sendmsg_permission+0x288/0x420 [ 284.824324][ T7997] hci_sock_sendmsg+0x22b/0x11c0 [ 284.829311][ T7997] ? __pfx_tomoyo_socket_sendmsg_permission+0x10/0x10 [ 284.836236][ T7997] ? __pfx_hci_sock_sendmsg+0x10/0x10 [ 284.841752][ T7997] ? __pfx_hci_sock_sendmsg+0x10/0x10 [ 284.847197][ T7997] __sock_sendmsg+0x221/0x270 [ 284.851923][ T7997] sock_write_iter+0x2d7/0x3f0 [ 284.856754][ T7997] ? __pfx_sock_write_iter+0x10/0x10 [ 284.862119][ T7997] ? bpf_lsm_file_permission+0x9/0x10 [ 284.867846][ T7997] ? security_file_permission+0x74/0x280 [ 284.873816][ T7997] vfs_write+0xaeb/0xd30 [ 284.878384][ T7997] ? __pfx_sock_write_iter+0x10/0x10 [ 284.883726][ T7997] ? __pfx_vfs_write+0x10/0x10 [ 284.888566][ T7997] ? fdget_pos+0x19a/0x320 [ 284.893027][ T7997] ksys_write+0x183/0x2b0 [ 284.897417][ T7997] ? __pfx_ksys_write+0x10/0x10 [ 284.902340][ T7997] ? do_syscall_64+0x100/0x230 [ 284.907147][ T7997] ? do_syscall_64+0xb6/0x230 [ 284.911868][ T7997] do_syscall_64+0xf3/0x230 [ 284.916420][ T7997] ? clear_bhb_loop+0x35/0x90 [ 284.921178][ T7997] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 284.927155][ T7997] RIP: 0033:0x7f260a77e719 [ 284.931891][ T7997] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 284.952794][ T7997] RSP: 002b:00007f260b619038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 284.961648][ T7997] RAX: ffffffffffffffda RBX: 00007f260a936130 RCX: 00007f260a77e719 [ 284.969699][ T7997] RDX: 000000000000000d RSI: 0000000020000000 RDI: 0000000000000006 [ 284.977716][ T7997] RBP: 00007f260b619090 R08: 0000000000000000 R09: 0000000000000000 [ 284.985833][ T7997] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 284.993847][ T7997] R13: 0000000000000000 R14: 00007f260a936130 R15: 00007ffc7b211d48 [ 285.002307][ T7997] [ 285.215200][ T46] usb 5-1: New USB device found, idVendor=19d2, idProduct=ffb3, bcdDevice= 0.df [ 285.227075][ T46] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 285.235474][ T46] usb 5-1: Product: syz [ 285.240085][ T46] usb 5-1: Manufacturer: syz [ 285.248231][ T46] usb 5-1: SerialNumber: syz [ 285.288518][ T46] usb 5-1: config 0 descriptor?? [ 285.577074][ T46] option 5-1:0.144: GSM modem (1-port) converter detected [ 285.597235][ T46] usb 5-1: USB disconnect, device number 17 [ 285.599738][ T7999] block nbd0: NBD_DISCONNECT [ 285.604258][ T46] option 5-1:0.144: device disconnected [ 286.687140][ T8017] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 287.782609][ T5883] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 288.687234][ T5883] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 288.696819][ T5883] usb 4-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 288.713925][ T5883] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 288.753778][ T5883] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 288.876452][ T5883] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 288.890264][ T5883] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 288.967516][ T5883] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 289.010831][ T5883] usb 4-1: Product: syz [ 289.043158][ T5883] usb 4-1: Manufacturer: syz [ 289.116001][ T5883] cdc_wdm 4-1:1.0: skipping garbage [ 289.121390][ T5883] cdc_wdm 4-1:1.0: skipping garbage [ 289.415433][ T5883] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 289.686142][ T5883] cdc_wdm 4-1:1.0: Unknown control protocol [ 290.075344][ T5883] usb 4-1: USB disconnect, device number 23 [ 290.817525][ T8067] ubi: mtd0 is already attached to ubi0 [ 291.594138][ T8068] syz.5.602: attempt to access beyond end of device [ 291.594138][ T8068] nbd5: rw=0, sector=16, nr_sectors = 8 limit=0 [ 291.668767][ T8068] REISERFS warning (device nbd5): sh-2006 read_super_block: bread failed (dev nbd5, block 2, size 4096) [ 291.682885][ T8068] syz.5.602: attempt to access beyond end of device [ 291.682885][ T8068] nbd5: rw=0, sector=128, nr_sectors = 8 limit=0 [ 291.696555][ T8068] REISERFS warning (device nbd5): sh-2006 read_super_block: bread failed (dev nbd5, block 16, size 4096) [ 294.749276][ T8100] ubi: mtd0 is already attached to ubi0 [ 296.031903][ T8113] netlink: 'syz.0.614': attribute type 33 has an invalid length. [ 296.134719][ T8118] netlink: 'syz.0.614': attribute type 21 has an invalid length. [ 296.151385][ T8118] netlink: 132 bytes leftover after parsing attributes in process `syz.0.614'. [ 296.544411][ T8131] netlink: 'syz.0.618': attribute type 4 has an invalid length. [ 296.745562][ T5846] usb 2-1: new full-speed USB device number 11 using dummy_hcd [ 296.763913][ T5925] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 297.329381][ T5846] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xD has an invalid bInterval 0, changing to 10 [ 297.343886][ T5846] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xD has invalid maxpacket 83, setting to 64 [ 297.365099][ T5925] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 297.437913][ T5925] usb 6-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 297.463074][ T5846] usb 2-1: New USB device found, idVendor=4752, idProduct=0011, bcdDevice=32.4f [ 297.481372][ T5846] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 297.491290][ T5925] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 297.500929][ T5846] usb 2-1: Product: syz [ 297.505933][ T5925] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 297.518550][ T5846] usb 2-1: Manufacturer: syz [ 297.524194][ T5846] usb 2-1: SerialNumber: syz [ 297.529093][ T5925] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 297.542784][ T5846] usb 2-1: config 0 descriptor?? [ 297.568465][ T8129] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 297.590571][ T5846] hub 2-1:0.0: bad descriptor, ignoring hub [ 297.600118][ T5846] hub 2-1:0.0: probe with driver hub failed with error -5 [ 297.608710][ T5925] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 297.619939][ T5925] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 297.652269][ T5846] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 297.660729][ T5925] usb 6-1: Product: syz [ 297.666409][ T5925] usb 6-1: Manufacturer: syz [ 297.681745][ T5925] cdc_wdm 6-1:1.0: skipping garbage [ 297.703194][ T5925] cdc_wdm 6-1:1.0: skipping garbage [ 297.736267][ T5925] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device [ 297.742270][ T5925] cdc_wdm 6-1:1.0: Unknown control protocol [ 297.865867][ T8129] netlink: 'syz.1.617': attribute type 9 has an invalid length. [ 297.900627][ T8129] netlink: 134660 bytes leftover after parsing attributes in process `syz.1.617'. [ 298.152631][ C0] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 298.159366][ C0] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 298.166339][ C0] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 298.173037][ C0] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 298.179807][ C0] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 298.186493][ C0] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 298.193790][ C0] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 298.200727][ C0] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 298.209272][ C0] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 298.216035][ C0] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 298.222294][ C0] cdc_wdm 6-1:1.0: wdm_int_callback - usb_submit_urb failed with result -1 [ 298.254194][ T5925] usb 6-1: USB disconnect, device number 17 [ 301.034123][ T5914] usb 2-1: USB disconnect, device number 11 [ 301.196810][ T8160] overlayfs: missing 'lowerdir' [ 302.231843][ T8177] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 302.239255][ T8177] IPv6: NLM_F_CREATE should be set when creating new route [ 302.246841][ T8177] IPv6: NLM_F_CREATE should be set when creating new route [ 302.439435][ T8172] syzkaller1: entered promiscuous mode [ 302.621082][ T8172] syzkaller1: entered allmulticast mode [ 303.518236][ T8188] loop6: detected capacity change from 0 to 524287999 [ 304.214916][ T5846] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 304.365155][ T5846] usb 1-1: device descriptor read/64, error -71 [ 304.402804][ T8196] netlink: 28 bytes leftover after parsing attributes in process `syz.1.633'. [ 304.412161][ T8196] netlink: 28 bytes leftover after parsing attributes in process `syz.1.633'. [ 304.615527][ T5846] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 304.703358][ T8203] FAULT_INJECTION: forcing a failure. [ 304.703358][ T8203] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 304.723617][ T8203] CPU: 0 UID: 0 PID: 8203 Comm: syz.1.636 Not tainted 6.12.0-rc7-syzkaller #0 [ 304.732522][ T8203] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 304.742697][ T8203] Call Trace: [ 304.746031][ T8203] [ 304.749065][ T8203] dump_stack_lvl+0x241/0x360 [ 304.753904][ T8203] ? __pfx_dump_stack_lvl+0x10/0x10 [ 304.759175][ T8203] ? __pfx__printk+0x10/0x10 [ 304.763879][ T8203] ? snprintf+0xda/0x120 [ 304.768146][ T8203] should_fail_ex+0x3b0/0x4e0 [ 304.772832][ T8203] _copy_to_user+0x31/0xb0 [ 304.777418][ T8203] simple_read_from_buffer+0xca/0x150 [ 304.782825][ T8203] proc_fail_nth_read+0x1e9/0x250 [ 304.788137][ T8203] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 304.794001][ T8203] ? rw_verify_area+0x55e/0x6f0 [ 304.799563][ T8203] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 304.805259][ T8203] vfs_read+0x1fc/0xb70 [ 304.809472][ T8203] ? fdget_pos+0x24e/0x320 [ 304.814017][ T8203] ? __pfx_vfs_read+0x10/0x10 [ 304.818738][ T8203] ? __fget_files+0x3f3/0x470 [ 304.823461][ T8203] ? fdget_pos+0x24e/0x320 [ 304.827917][ T8203] ksys_read+0x183/0x2b0 [ 304.832206][ T8203] ? __pfx_ksys_read+0x10/0x10 [ 304.837122][ T8203] ? do_syscall_64+0x100/0x230 [ 304.841954][ T8203] ? do_syscall_64+0xb6/0x230 [ 304.846675][ T8203] do_syscall_64+0xf3/0x230 [ 304.851201][ T8203] ? clear_bhb_loop+0x35/0x90 [ 304.855893][ T8203] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 304.861877][ T8203] RIP: 0033:0x7f260a77d15c [ 304.866685][ T8203] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 69 8e 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 bf 8e 02 00 48 [ 304.886586][ T8203] RSP: 002b:00007f260b65b030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 304.895036][ T8203] RAX: ffffffffffffffda RBX: 00007f260a935f80 RCX: 00007f260a77d15c [ 304.903609][ T8203] RDX: 000000000000000f RSI: 00007f260b65b0a0 RDI: 0000000000000008 [ 304.911808][ T8203] RBP: 00007f260b65b090 R08: 0000000000000000 R09: 0000000000000000 [ 304.919842][ T8203] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 304.927966][ T8203] R13: 0000000000000000 R14: 00007f260a935f80 R15: 00007ffc7b211d48 [ 304.936099][ T8203] [ 304.954653][ T5846] usb 1-1: device descriptor read/64, error -71 [ 305.066191][ T5846] usb usb1-port1: attempt power cycle [ 305.575958][ T5846] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 305.614295][ T5846] usb 1-1: device descriptor read/8, error -71 [ 305.874742][ T5846] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 305.895326][ T5846] usb 1-1: device descriptor read/8, error -71 [ 305.905457][ T8] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 306.004869][ T5846] usb usb1-port1: unable to enumerate USB device [ 306.060546][ T8] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 306.069543][ T8] usb 6-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 306.091279][ T8] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 306.121082][ T8] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 306.152423][ T8] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 306.171932][ T8] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 306.182961][ T8] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 306.201332][ T8] usb 6-1: Product: syz [ 306.215192][ T8] usb 6-1: Manufacturer: syz [ 306.227321][ T8] cdc_wdm 6-1:1.0: skipping garbage [ 306.242851][ T8] cdc_wdm 6-1:1.0: skipping garbage [ 306.254109][ T8] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device [ 306.264557][ T8] cdc_wdm 6-1:1.0: Unknown control protocol [ 307.083199][ C0] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 307.083657][ T5914] usb 6-1: USB disconnect, device number 18 [ 307.089858][ C0] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 307.089883][ C0] cdc_wdm 6-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 309.009949][ T8234] overlayfs: missing 'lowerdir' [ 314.943578][ T5836] Bluetooth: hci5: command 0x0406 tx timeout [ 315.743787][ T8283] overlayfs: missing 'lowerdir' [ 315.794664][ T46] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 316.725041][ T46] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 316.744280][ T46] usb 1-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 316.858440][ T46] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 316.899164][ T46] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 316.925053][ T5913] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 316.934173][ T46] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 316.973897][ T46] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 316.983377][ T46] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 316.991942][ T46] usb 1-1: Product: syz [ 316.996553][ T46] usb 1-1: Manufacturer: syz [ 317.020877][ T46] cdc_wdm 1-1:1.0: skipping garbage [ 317.026443][ T46] cdc_wdm 1-1:1.0: skipping garbage [ 317.039427][ T46] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 317.045884][ T46] cdc_wdm 1-1:1.0: Unknown control protocol [ 317.096684][ T5913] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 317.110700][ T5913] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 317.121247][ T5913] usb 4-1: New USB device found, idVendor=0eef, idProduct=72d0, bcdDevice= 0.00 [ 317.131119][ T5913] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 317.161371][ T5913] usb 4-1: config 0 descriptor?? [ 317.442129][ T8299] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 317.615586][ T8299] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 317.873414][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.902951][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 318.345924][ C0] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 318.352716][ C0] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 318.360412][ C0] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 318.362020][ T5913] hid-multitouch 0003:0EEF:72D0.0005: unbalanced collection at end of report description [ 318.367184][ C0] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 318.367455][ C0] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 318.391746][ C0] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 318.398357][ C0] vkms_vblank_simulate: vblank timer overrun [ 318.407921][ C0] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 318.414573][ C0] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 318.423244][ C0] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 318.429951][ C0] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 318.436546][ C0] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 318.443242][ C0] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 318.449857][ C0] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 318.456685][ C0] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 318.463300][ C0] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 318.469977][ C0] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 318.476474][ C0] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 318.483114][ C0] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 318.489602][ C0] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 318.496353][ C0] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 318.560636][ T8299] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 318.562703][ T8] usb 1-1: USB disconnect, device number 27 [ 318.569635][ C0] cdc_wdm 1-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 318.672058][ T5913] hid-multitouch 0003:0EEF:72D0.0005: probe with driver hid-multitouch failed with error -22 [ 318.676232][ T8299] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 319.009737][ T8314] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 319.047671][ T8314] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 319.071558][ T8299] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 319.112083][ T8299] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 319.213926][ T5913] usb 4-1: USB disconnect, device number 24 [ 322.691397][ T8356] overlayfs: missing 'lowerdir' [ 325.722674][ T46] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 326.128777][ T8] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 326.311567][ T8] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 326.322258][ T8] usb 6-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 326.895826][ T46] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 326.935115][ T8385] netlink: 'syz.0.678': attribute type 2 has an invalid length. [ 326.955973][ T8] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 326.971048][ T8] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 326.982046][ T8387] No such timeout policy "syz1" [ 327.021511][ T8385] netlink: 8 bytes leftover after parsing attributes in process `syz.0.678'. [ 327.042253][ T8] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 327.133725][ T8] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 327.166562][ T8] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 327.194667][ T8] usb 6-1: Product: syz [ 327.207907][ T8] usb 6-1: Manufacturer: syz [ 327.265763][ T8391] FAULT_INJECTION: forcing a failure. [ 327.265763][ T8391] name failslab, interval 1, probability 0, space 0, times 0 [ 327.279582][ T8] cdc_wdm 6-1:1.0: skipping garbage [ 327.289259][ T8] cdc_wdm 6-1:1.0: skipping garbage [ 327.292050][ T8391] CPU: 1 UID: 0 PID: 8391 Comm: syz.0.681 Not tainted 6.12.0-rc7-syzkaller #0 [ 327.301917][ T8] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device [ 327.303348][ T8391] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 327.319369][ T8391] Call Trace: [ 327.320044][ T8] cdc_wdm 6-1:1.0: Unknown control protocol [ 327.322661][ T8391] [ 327.322677][ T8391] dump_stack_lvl+0x241/0x360 [ 327.322715][ T8391] ? __pfx_dump_stack_lvl+0x10/0x10 [ 327.341570][ T8391] ? __pfx__printk+0x10/0x10 [ 327.346217][ T8391] ? kmem_cache_alloc_node_noprof+0x49/0x320 [ 327.352252][ T8391] ? __pfx___might_resched+0x10/0x10 [ 327.357952][ T8391] should_fail_ex+0x3b0/0x4e0 [ 327.362706][ T8391] should_failslab+0xac/0x100 [ 327.367449][ T8391] ? __alloc_skb+0x1c3/0x440 [ 327.372104][ T8391] kmem_cache_alloc_node_noprof+0x71/0x320 [ 327.377974][ T8391] __alloc_skb+0x1c3/0x440 [ 327.382459][ T8391] ? __pfx___alloc_skb+0x10/0x10 [ 327.387463][ T8391] ? netlink_autobind+0xd6/0x2f0 [ 327.392645][ T8391] ? netlink_autobind+0x2b0/0x2f0 [ 327.397722][ T8391] netlink_sendmsg+0x638/0xcb0 [ 327.402688][ T8391] ? __pfx_netlink_sendmsg+0x10/0x10 [ 327.408139][ T8391] ? __pfx_netlink_sendmsg+0x10/0x10 [ 327.413577][ T8391] __sock_sendmsg+0x221/0x270 [ 327.418316][ T8391] ____sys_sendmsg+0x52a/0x7e0 [ 327.423145][ T8391] ? __pfx_____sys_sendmsg+0x10/0x10 [ 327.428500][ T8391] __sys_sendmsg+0x292/0x380 [ 327.433160][ T8391] ? __pfx___sys_sendmsg+0x10/0x10 [ 327.438423][ T8391] ? __pfx_vfs_write+0x10/0x10 [ 327.443266][ T8391] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 327.450323][ T8391] ? do_syscall_64+0x100/0x230 [ 327.456565][ T8391] ? do_syscall_64+0xb6/0x230 [ 327.461770][ T8391] do_syscall_64+0xf3/0x230 [ 327.466776][ T8391] ? clear_bhb_loop+0x35/0x90 [ 327.471798][ T8391] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 327.477779][ T8391] RIP: 0033:0x7fbecf97e719 [ 327.482280][ T8391] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 327.502092][ T8391] RSP: 002b:00007fbed078f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 327.510751][ T8391] RAX: ffffffffffffffda RBX: 00007fbecfb35f80 RCX: 00007fbecf97e719 [ 327.518867][ T8391] RDX: 0000000000000000 RSI: 0000000020000100 RDI: 0000000000000007 [ 327.526883][ T8391] RBP: 00007fbed078f090 R08: 0000000000000000 R09: 0000000000000000 [ 327.534897][ T8391] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 327.542919][ T8391] R13: 0000000000000000 R14: 00007fbecfb35f80 R15: 00007ffdd58278d8 [ 327.550955][ T8391] [ 327.663156][ T8395] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 327.672080][ T8395] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 328.419241][ T8399] ubi: mtd0 is already attached to ubi0 [ 329.439267][ C0] wdm_int_callback: 257 callbacks suppressed [ 329.439299][ C0] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 329.451940][ C0] wdm_int_callback: 257 callbacks suppressed [ 329.451961][ C0] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 329.466642][ C0] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 329.473297][ C0] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 329.482362][ C0] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 329.489032][ C0] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 329.495583][ C0] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 329.502228][ C0] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 329.508655][ C0] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 329.515295][ C0] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 329.521869][ C0] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 329.528521][ C0] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 329.535176][ C0] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 329.541820][ C0] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 329.548217][ C0] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 329.554979][ C0] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 329.563545][ C0] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 329.570192][ C0] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 329.579063][ C0] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 329.585717][ C0] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 329.627183][ T8] usb 6-1: USB disconnect, device number 19 [ 329.627271][ C0] cdc_wdm 6-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 331.095637][ T5881] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 331.255981][ T5881] usb 5-1: Using ep0 maxpacket: 8 [ 331.275866][ T5881] usb 5-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 331.384854][ T8] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 332.144597][ T5881] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 332.186717][ T5881] usb 5-1: Product: syz [ 332.190949][ T5881] usb 5-1: Manufacturer: syz [ 332.220481][ T5881] usb 5-1: SerialNumber: syz [ 332.269657][ T5881] usb 5-1: config 0 descriptor?? [ 332.279406][ T5881] gspca_main: se401-2.14.0 probing 047d:5003 [ 332.306015][ T8] usb 4-1: Using ep0 maxpacket: 32 [ 332.318657][ T8] usb 4-1: unable to get BOS descriptor or descriptor too short [ 332.344360][ T8] usb 4-1: config 2 has an invalid interface number: 155 but max is 1 [ 332.548164][ T8] usb 4-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 332.623699][ T8] usb 4-1: config 2 has 1 interface, different from the descriptor's value: 2 [ 332.799640][ T8] usb 4-1: config 2 has no interface number 0 [ 332.799813][ T5881] gspca_se401: Frame size: 0x1 bayer [ 332.812322][ T8] usb 4-1: too many endpoints for config 2 interface 155 altsetting 15: 96, using maximum allowed: 30 [ 332.931490][ T5881] gspca_se401: Frame size: 0x0 1/16th janggu [ 332.944202][ T8] usb 4-1: config 2 interface 155 altsetting 15 has 0 endpoint descriptors, different from the interface descriptor's value: 96 [ 332.958143][ T5881] gspca_se401: Frame size: 0x0 1/16th janggu [ 333.273096][ T5881] gspca_se401: Frame size: 0x0 1/16th janggu [ 333.297084][ T5881] gspca_se401: Frame size: 0x0 1/16th janggu [ 333.306107][ T8] usb 4-1: config 2 interface 155 has no altsetting 0 [ 333.338761][ T5881] gspca_se401: Frame size: 0x0 1/16th janggu [ 333.356306][ T5881] gspca_se401: Frame size: 0x0 1/16th janggu [ 333.365862][ T8] usb 4-1: string descriptor 0 read error: -22 [ 333.377667][ T8] usb 4-1: New USB device found, idVendor=0781, idProduct=0100, bcdDevice= 1.00 [ 333.407831][ T5881] gspca_se401: Frame size: 0x0 1/16th janggu [ 333.434820][ T8] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 333.739623][ T29] audit: type=1326 audit(1731443423.124:61): auid=4294967295 uid=60929 gid=60928 ses=4294967295 subj=_ pid=8430 comm="syz.5.690" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe66b17e719 code=0x7ffc0000 [ 334.591717][ T29] audit: type=1326 audit(1731443423.134:62): auid=4294967295 uid=60929 gid=60928 ses=4294967295 subj=_ pid=8430 comm="syz.5.690" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe66b17e719 code=0x7ffc0000 [ 334.620955][ T29] audit: type=1326 audit(1731443423.134:63): auid=4294967295 uid=60929 gid=60928 ses=4294967295 subj=_ pid=8430 comm="syz.5.690" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe66b17e719 code=0x7ffc0000 [ 334.643245][ T29] audit: type=1326 audit(1731443423.134:64): auid=4294967295 uid=60929 gid=60928 ses=4294967295 subj=_ pid=8430 comm="syz.5.690" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe66b17e719 code=0x7ffc0000 [ 334.665811][ T29] audit: type=1326 audit(1731443423.134:65): auid=4294967295 uid=60929 gid=60928 ses=4294967295 subj=_ pid=8430 comm="syz.5.690" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe66b17e719 code=0x7ffc0000 [ 334.689809][ T29] audit: type=1326 audit(1731443423.134:66): auid=4294967295 uid=60929 gid=60928 ses=4294967295 subj=_ pid=8430 comm="syz.5.690" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fe66b17e719 code=0x7ffc0000 [ 334.712243][ T29] audit: type=1326 audit(1731443423.134:67): auid=4294967295 uid=60929 gid=60928 ses=4294967295 subj=_ pid=8430 comm="syz.5.690" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe66b17e719 code=0x7ffc0000 [ 334.734706][ T29] audit: type=1326 audit(1731443423.134:68): auid=4294967295 uid=60929 gid=60928 ses=4294967295 subj=_ pid=8430 comm="syz.5.690" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fe66b17d0b0 code=0x7ffc0000 [ 334.757603][ T29] audit: type=1326 audit(1731443423.144:69): auid=4294967295 uid=60929 gid=60928 ses=4294967295 subj=_ pid=8430 comm="syz.5.690" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fe66b17d0b0 code=0x7ffc0000 [ 334.779961][ T29] audit: type=1326 audit(1731443423.144:70): auid=4294967295 uid=60929 gid=60928 ses=4294967295 subj=_ pid=8430 comm="syz.5.690" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe66b17e719 code=0x7ffc0000 [ 334.807170][ T5881] input: se401 as /devices/platform/dummy_hcd.4/usb5/5-1/input/input8 [ 334.842756][ T8437] netlink: 'syz.5.692': attribute type 4 has an invalid length. [ 335.269592][ T5881] usb 5-1: USB disconnect, device number 18 [ 336.116055][ T8] usb 4-1: can't set config #2, error -71 [ 336.133775][ T8] usb 4-1: USB disconnect, device number 25 [ 336.736460][ T8452] overlayfs: failed to resolve './file1': -2 [ 336.745074][ T8447] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 336.754068][ T8447] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 337.173682][ T5836] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 337.197699][ T5836] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 337.207242][ T5836] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 337.228885][ T5836] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 337.237275][ T5836] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 337.247175][ T5836] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 338.116384][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 338.552355][ T8484] program syz.0.702 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 338.823181][ T8458] chnl_net:caif_netlink_parms(): no params data found [ 338.859273][ T8490] netlink: 8 bytes leftover after parsing attributes in process `syz.5.704'. [ 338.905084][ T8490] bond0: option use_carrier: invalid value (16) [ 339.205821][ T46] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 339.262755][ T8458] bridge0: port 1(bridge_slave_0) entered blocking state [ 339.280222][ T8458] bridge0: port 1(bridge_slave_0) entered disabled state [ 339.300091][ T8458] bridge_slave_0: entered allmulticast mode [ 339.316675][ T54] Bluetooth: hci1: command tx timeout [ 339.329325][ T8508] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 339.338612][ T8508] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 339.352473][ T8458] bridge_slave_0: entered promiscuous mode [ 339.377979][ T8458] bridge0: port 2(bridge_slave_1) entered blocking state [ 340.080435][ T46] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 340.097029][ T8458] bridge0: port 2(bridge_slave_1) entered disabled state [ 340.104422][ T8458] bridge_slave_1: entered allmulticast mode [ 340.113245][ T8458] bridge_slave_1: entered promiscuous mode [ 340.124615][ T5881] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 340.143009][ T46] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 340.200338][ T46] usb 4-1: config 0 descriptor?? [ 340.223647][ T46] cp210x 4-1:0.0: cp210x converter detected [ 340.242731][ T8458] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 340.267064][ T8458] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 340.289867][ T5881] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 340.293743][ C1] IPv4: Oversized IP packet from 172.20.20.24 [ 340.317358][ T5881] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 340.347582][ T5881] usb 5-1: config 0 descriptor?? [ 340.374798][ T5881] cp210x 5-1:0.0: cp210x converter detected [ 340.390732][ T8458] team0: Port device team_slave_0 added [ 340.600417][ T8458] team0: Port device team_slave_1 added [ 340.615237][ T46] cp210x 4-1:0.0: failed to get vendor val 0x370b size 1: -121 [ 340.623130][ T5881] cp210x 5-1:0.0: failed to get vendor val 0x370b size 1: -121 [ 340.623169][ T5881] cp210x 5-1:0.0: querying part number failed [ 340.643745][ T5881] usb 5-1: cp210x converter now attached to ttyUSB0 [ 340.796719][ T8520] ubi: mtd0 is already attached to ubi0 [ 341.652071][ T46] cp210x 4-1:0.0: querying part number failed [ 341.654537][ T54] Bluetooth: hci1: command tx timeout [ 341.720522][ T46] usb 4-1: cp210x converter now attached to ttyUSB1 [ 341.798992][ T5914] usb 5-1: USB disconnect, device number 19 [ 341.825760][ T5881] usb 4-1: USB disconnect, device number 26 [ 341.871581][ T5914] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 341.880307][ T5914] cp210x 5-1:0.0: device disconnected [ 341.885181][ T5881] cp210x ttyUSB1: cp210x converter now disconnected from ttyUSB1 [ 341.969668][ T5881] cp210x 4-1:0.0: device disconnected [ 341.985068][ T8458] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 342.000758][ T8458] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 342.019032][ T8528] FAULT_INJECTION: forcing a failure. [ 342.019032][ T8528] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 342.041839][ T8528] CPU: 1 UID: 0 PID: 8528 Comm: syz.0.713 Not tainted 6.12.0-rc7-syzkaller #0 [ 342.050768][ T8528] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 342.060869][ T8528] Call Trace: [ 342.064214][ T8528] [ 342.067552][ T8528] dump_stack_lvl+0x241/0x360 [ 342.072328][ T8528] ? __pfx_dump_stack_lvl+0x10/0x10 [ 342.077595][ T8528] ? __pfx__printk+0x10/0x10 [ 342.082222][ T8528] ? __pfx_lock_release+0x10/0x10 [ 342.087287][ T8528] should_fail_ex+0x3b0/0x4e0 [ 342.091993][ T8528] _copy_from_user+0x2f/0xc0 [ 342.096604][ T8528] copy_msghdr_from_user+0xae/0x680 [ 342.101826][ T8528] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 342.107664][ T8528] __sys_sendmsg+0x22d/0x380 [ 342.112284][ T8528] ? __pfx___sys_sendmsg+0x10/0x10 [ 342.117433][ T8528] ? __pfx_vfs_write+0x10/0x10 [ 342.122444][ T8528] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 342.128952][ T8528] ? do_syscall_64+0x100/0x230 [ 342.133872][ T8528] ? do_syscall_64+0xb6/0x230 [ 342.138606][ T8528] do_syscall_64+0xf3/0x230 [ 342.143145][ T8528] ? clear_bhb_loop+0x35/0x90 [ 342.147850][ T8528] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 342.153774][ T8528] RIP: 0033:0x7fbecf97e719 [ 342.158238][ T8528] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 342.177892][ T8528] RSP: 002b:00007fbed078f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 342.186442][ T8528] RAX: ffffffffffffffda RBX: 00007fbecfb35f80 RCX: 00007fbecf97e719 [ 342.194987][ T8528] RDX: 0000000000000000 RSI: 0000000020000600 RDI: 0000000000000004 [ 342.203092][ T8528] RBP: 00007fbed078f090 R08: 0000000000000000 R09: 0000000000000000 [ 342.211111][ T8528] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 342.219108][ T8528] R13: 0000000000000000 R14: 00007fbecfb35f80 R15: 00007ffdd58278d8 [ 342.227126][ T8528] [ 342.244583][ T8458] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 342.245724][ T8529] usb usb1: usbfs: interface 0 claimed by hub while 'syz.5.714' sets config #1 [ 342.260444][ T8458] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 342.290456][ T8458] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 342.322276][ T8458] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 342.442253][ T8458] hsr_slave_0: entered promiscuous mode [ 342.471006][ T8458] hsr_slave_1: entered promiscuous mode [ 342.491250][ T8458] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 342.515122][ T8458] Cannot create hsr debugfs directory [ 342.536488][ T8532] netlink: 'syz.0.715': attribute type 1 has an invalid length. [ 342.554807][ T8532] netlink: 224 bytes leftover after parsing attributes in process `syz.0.715'. [ 342.598353][ T8532] netlink: 8 bytes leftover after parsing attributes in process `syz.0.715'. [ 342.614291][ T8537] netlink: 4 bytes leftover after parsing attributes in process `syz.0.715'. [ 343.549054][ T8550] overlayfs: missing 'lowerdir' [ 344.345113][ T54] Bluetooth: hci1: command tx timeout [ 344.413446][ C1] IPv4: Oversized IP packet from 172.20.20.24 [ 344.481281][ T8555] netlink: 32 bytes leftover after parsing attributes in process `syz.4.720'. [ 344.648622][ T8458] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 344.658315][ T8547] netlink: 40 bytes leftover after parsing attributes in process `syz.0.718'. [ 344.693738][ T8458] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 344.738779][ T8458] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 344.826235][ T8458] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 344.991511][ T8560] ubi: mtd0 is already attached to ubi0 [ 346.205178][ T5914] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 346.355714][ T54] Bluetooth: hci1: command tx timeout [ 347.482377][ T5884] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 347.653317][ T8458] 8021q: adding VLAN 0 to HW filter on device bond0 [ 347.672758][ T8458] 8021q: adding VLAN 0 to HW filter on device team0 [ 347.735766][ T61] bridge0: port 1(bridge_slave_0) entered blocking state [ 347.743481][ T61] bridge0: port 1(bridge_slave_0) entered forwarding state [ 347.757227][ T61] bridge0: port 2(bridge_slave_1) entered blocking state [ 347.764628][ T61] bridge0: port 2(bridge_slave_1) entered forwarding state [ 347.789532][ T8458] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 347.828840][ T8583] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 347.840299][ T8583] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 347.895280][ T8458] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 348.830366][ T8599] overlayfs: missing 'lowerdir' [ 349.155622][ T8458] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 349.247779][ T5884] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 349.484771][ T5884] usb 4-1: Using ep0 maxpacket: 32 [ 349.493104][ T5884] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 349.525570][ T5884] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 349.553041][ T5884] usb 4-1: New USB device found, idVendor=172f, idProduct=0501, bcdDevice= 0.00 [ 349.588476][ T5884] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 349.655332][ T5884] usb 4-1: config 0 descriptor?? [ 350.135147][ T8618] ubi: mtd0 is already attached to ubi0 [ 350.273138][ T8598] overlay: Unknown parameter 'subj_role' [ 350.616753][ T8458] veth0_vlan: entered promiscuous mode [ 350.690640][ T8458] veth1_vlan: entered promiscuous mode [ 350.830005][ T8458] veth0_macvtap: entered promiscuous mode [ 350.936863][ T8458] veth1_macvtap: entered promiscuous mode [ 351.077757][ T8458] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 351.117107][ T8458] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 351.140228][ T8458] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 351.192343][ T8458] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 351.314093][ T8458] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 351.458954][ T5884] usbhid 4-1:0.0: can't add hid device: -71 [ 351.498058][ T5884] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 351.525842][ T8458] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 351.550381][ T5884] usb 4-1: USB disconnect, device number 27 [ 351.569651][ T8458] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 351.764703][ T8458] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 351.806393][ T8458] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 351.847705][ T8458] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 352.744387][ T8458] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 352.748109][ T8632] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 352.764593][ T8458] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 352.780184][ T8458] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 352.817111][ T8458] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 352.830364][ T8458] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 352.841970][ T8458] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 352.861377][ T8458] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 352.871673][ T8458] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 352.892796][ T8634] Illegal XDP return value 2148550552 on prog (id 253) dev N/A, expect packet loss! [ 352.903601][ T8458] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 352.932918][ T8458] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 352.946601][ T8458] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 352.963160][ T8458] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 352.997263][ T8458] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 353.009888][ T8458] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 353.020684][ T8458] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 353.032385][ T8458] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 353.103292][ T8458] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 353.134678][ T8458] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 353.143475][ T8458] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 353.169965][ T8458] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 353.394018][ T7091] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 353.449125][ T7091] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 353.573947][ T3458] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 353.604763][ T3458] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 353.818452][ T5913] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 354.107168][ T8646] netlink: 104 bytes leftover after parsing attributes in process `syz.3.740'. [ 354.130711][ T8646] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 354.138111][ T8646] IPv6: NLM_F_CREATE should be set when creating new route [ 354.145463][ T8646] IPv6: NLM_F_CREATE should be set when creating new route [ 354.202070][ T5913] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x9 has an invalid bInterval 0, changing to 7 [ 354.213751][ T5913] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 51, changing to 9 [ 354.304993][ T5913] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 33540, setting to 1024 [ 354.505291][ T5913] usb 6-1: New USB device found, idVendor=05ac, idProduct=030a, bcdDevice=65.8c [ 354.795025][ T5913] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 354.876285][ T5913] usb 6-1: config 0 descriptor?? [ 354.915463][ T5913] appletouch 6-1:0.0: Could not find int-in endpoint [ 354.933013][ T5913] appletouch 6-1:0.0: probe with driver appletouch failed with error -5 [ 355.006746][ T8653] overlayfs: missing 'lowerdir' [ 355.456814][ T5913] usbhid 6-1:0.0: couldn't find an input interrupt endpoint [ 355.724813][ T8655] overlayfs: failed to resolve './file0': -2 [ 356.598225][ C1] IPv4: Oversized IP packet from 172.20.20.24 [ 356.917519][ T8673] ubi: mtd0 is already attached to ubi0 [ 357.088970][ T5881] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 357.182752][ T8675] block nbd5: NBD_DISCONNECT [ 357.224822][ T5846] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 357.247945][ T5881] usb 1-1: too many configurations: 9, using maximum allowed: 8 [ 357.260356][ T5881] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 357.271940][ T5881] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 357.303443][ T5881] usb 1-1: config 0 interface 0 has no altsetting 0 [ 357.329507][ T5881] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 357.351450][ T5881] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 357.374906][ T5846] usb 4-1: Using ep0 maxpacket: 32 [ 357.388796][ T5846] usb 4-1: config 0 has an invalid interface number: 12 but max is 0 [ 357.404913][ T5881] usb 1-1: config 0 interface 0 has no altsetting 0 [ 357.415732][ T5846] usb 4-1: config 0 has no interface number 0 [ 357.441928][ T5846] usb 4-1: config 0 interface 12 has no altsetting 0 [ 357.451126][ T5881] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 357.465505][ T5881] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 357.492016][ T5846] usb 4-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 357.525432][ T5846] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 357.537493][ T5881] usb 1-1: config 0 interface 0 has no altsetting 0 [ 357.557386][ T5846] usb 4-1: Product: syz [ 357.564021][ T5881] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 357.578371][ T5846] usb 4-1: Manufacturer: syz [ 357.585612][ T5846] usb 4-1: SerialNumber: syz [ 357.590544][ T5881] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 357.607049][ T5846] usb 4-1: config 0 descriptor?? [ 357.620524][ T5881] usb 1-1: config 0 interface 0 has no altsetting 0 [ 357.632506][ T5881] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 357.649505][ T5881] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 357.678062][ T5881] usb 1-1: config 0 interface 0 has no altsetting 0 [ 357.699171][ T5881] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 357.717031][ T5881] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 357.739697][ T5881] usb 1-1: config 0 interface 0 has no altsetting 0 [ 357.753156][ T5881] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 357.803571][ T5881] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 357.846699][ T5881] usb 1-1: config 0 interface 0 has no altsetting 0 [ 357.880853][ T5881] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 357.898753][ T5881] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 357.929674][ T5881] usb 1-1: config 0 interface 0 has no altsetting 0 [ 357.947180][ T5881] usb 1-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 357.980622][ T5881] usb 1-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 358.020857][ T5881] usb 1-1: Product: syz [ 358.036431][ T5881] usb 1-1: Manufacturer: syz [ 358.051671][ T5881] usb 1-1: SerialNumber: syz [ 358.084056][ T5881] usb 1-1: config 0 descriptor?? [ 358.135565][ T5881] yurex 1-1:0.0: USB YUREX device now attached to Yurex #0 [ 358.307752][ T5881] usb 6-1: USB disconnect, device number 20 [ 358.582290][ T8] usb 1-1: USB disconnect, device number 28 [ 359.371530][ T8668] yurex 1-1:0.0: yurex_write - failed to send bulk msg, error -19 [ 359.467976][ T8] yurex 1-1:0.0: USB YUREX #0 now disconnected [ 359.496513][ T5914] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 359.717664][ T5914] usb 6-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 359.722487][ T5846] f81534 4-1:0.12: f81534_get_register: reg: 1003 failed: -71 [ 359.740242][ T5846] f81534 4-1:0.12: f81534_find_config_idx: read failed: -71 [ 359.740278][ T5914] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 359.748218][ T5846] f81534 4-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 359.748304][ T5846] f81534 4-1:0.12: probe with driver f81534 failed with error -71 [ 359.811129][ T5846] usb 4-1: USB disconnect, device number 28 [ 359.833279][ T5914] usb 6-1: config 0 descriptor?? [ 359.858348][ T5914] cp210x 6-1:0.0: cp210x converter detected [ 360.068474][ T5914] cp210x 6-1:0.0: failed to get vendor val 0x370b size 1: -121 [ 360.080635][ T5914] cp210x 6-1:0.0: querying part number failed [ 360.109637][ T5914] usb 6-1: cp210x converter now attached to ttyUSB0 [ 360.491797][ T8] usb 6-1: USB disconnect, device number 21 [ 360.505045][ T8] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 360.523868][ T8] cp210x 6-1:0.0: device disconnected [ 362.115776][ T8706] netlink: 36 bytes leftover after parsing attributes in process `syz.0.756'. [ 363.141385][ C1] IPv4: Oversized IP packet from 172.20.20.24 [ 364.284876][ T8719] FAULT_INJECTION: forcing a failure. [ 364.284876][ T8719] name failslab, interval 1, probability 0, space 0, times 0 [ 364.298042][ T8719] CPU: 1 UID: 0 PID: 8719 Comm: syz.6.760 Not tainted 6.12.0-rc7-syzkaller #0 [ 364.307176][ T8719] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 364.317306][ T8719] Call Trace: [ 364.320946][ T8719] [ 364.324279][ T8719] dump_stack_lvl+0x241/0x360 [ 364.329237][ T8719] ? __pfx_dump_stack_lvl+0x10/0x10 [ 364.334743][ T8719] ? __pfx__printk+0x10/0x10 [ 364.339371][ T8719] should_fail_ex+0x3b0/0x4e0 [ 364.344202][ T8719] ? skb_clone+0x20c/0x390 [ 364.348662][ T8719] should_failslab+0xac/0x100 [ 364.353465][ T8719] ? skb_clone+0x20c/0x390 [ 364.357914][ T8719] kmem_cache_alloc_noprof+0x6c/0x2a0 [ 364.363310][ T8719] skb_clone+0x20c/0x390 [ 364.367615][ T8719] ? dev_queue_xmit_nit+0x220/0xc10 [ 364.372881][ T8719] dev_queue_xmit_nit+0x419/0xc10 [ 364.377961][ T8719] ? dev_queue_xmit_nit+0x2b/0xc10 [ 364.383155][ T8719] ? validate_xmit_skb+0x977/0xf90 [ 364.388346][ T8719] dev_hard_start_xmit+0x15f/0x7e0 [ 364.393537][ T8719] ? __pfx_validate_xmit_skb+0x10/0x10 [ 364.399066][ T8719] __dev_queue_xmit+0x1b11/0x3ed0 [ 364.404134][ T8719] ? kasan_save_track+0x51/0x80 [ 364.409042][ T8719] ? do_syscall_64+0xf3/0x230 [ 364.413762][ T8719] ? __dev_queue_xmit+0x2da/0x3ed0 [ 364.419022][ T8719] ? __pfx___dev_queue_xmit+0x10/0x10 [ 364.424437][ T8719] ? __copy_skb_header+0x437/0x5b0 [ 364.429649][ T8719] ? __asan_memcpy+0x40/0x70 [ 364.434280][ T8719] ? __copy_skb_header+0x437/0x5b0 [ 364.439447][ T8719] ? __skb_clone+0x454/0x6c0 [ 364.444127][ T8719] ? skb_clone+0x240/0x390 [ 364.448737][ T8719] __netlink_deliver_tap+0x54d/0x7c0 [ 364.454085][ T8719] ? netlink_deliver_tap+0x2e/0x1b0 [ 364.459310][ T8719] netlink_deliver_tap+0x19d/0x1b0 [ 364.464901][ T8719] netlink_unicast+0x7c4/0x990 [ 364.469771][ T8719] ? __pfx_netlink_unicast+0x10/0x10 [ 364.475092][ T8719] ? __virt_addr_valid+0x183/0x530 [ 364.480242][ T8719] ? __check_object_size+0x48e/0x900 [ 364.485604][ T8719] netlink_sendmsg+0x8e4/0xcb0 [ 364.490450][ T8719] ? __pfx_netlink_sendmsg+0x10/0x10 [ 364.495786][ T8719] ? __pfx_netlink_sendmsg+0x10/0x10 [ 364.501116][ T8719] __sock_sendmsg+0x221/0x270 [ 364.505851][ T8719] ____sys_sendmsg+0x52a/0x7e0 [ 364.510711][ T8719] ? __pfx_____sys_sendmsg+0x10/0x10 [ 364.516051][ T8719] __sys_sendmsg+0x292/0x380 [ 364.520715][ T8719] ? __pfx___sys_sendmsg+0x10/0x10 [ 364.525870][ T8719] ? __pfx_vfs_write+0x10/0x10 [ 364.530691][ T8719] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 364.537048][ T8719] ? do_syscall_64+0x100/0x230 [ 364.541856][ T8719] ? do_syscall_64+0xb6/0x230 [ 364.546608][ T8719] do_syscall_64+0xf3/0x230 [ 364.551157][ T8719] ? clear_bhb_loop+0x35/0x90 [ 364.555865][ T8719] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 364.561935][ T8719] RIP: 0033:0x7f391ef7e719 [ 364.566470][ T8719] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 364.586142][ T8719] RSP: 002b:00007f391fe53038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 364.594681][ T8719] RAX: ffffffffffffffda RBX: 00007f391f135f80 RCX: 00007f391ef7e719 [ 364.602705][ T8719] RDX: 0000000000000000 RSI: 0000000020000100 RDI: 0000000000000007 [ 364.610748][ T8719] RBP: 00007f391fe53090 R08: 0000000000000000 R09: 0000000000000000 [ 364.618872][ T8719] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 364.626898][ T8719] R13: 0000000000000000 R14: 00007f391f135f80 R15: 00007ffc46c77c18 [ 364.634919][ T8719] [ 364.637972][ C1] vkms_vblank_simulate: vblank timer overrun [ 364.984915][ T8726] ubi: mtd0 is already attached to ubi0 [ 366.153472][ T8740] syz.0.767[8740] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 366.153599][ T8740] syz.0.767[8740] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 366.927564][ T8740] syz.0.767[8740] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 366.976307][ T8747] tipc: Started in network mode [ 366.993507][ T8747] tipc: Node identity e2730b7a416e, cluster identity 4711 [ 367.004038][ T8747] tipc: Enabled bearer , priority 0 [ 367.531939][ T8754] ebt_limit: overflow, try lower: 0/0 [ 368.262356][ T5914] tipc: Node number set to 2736589690 [ 368.349771][ T8739] tipc: Disabling bearer [ 368.465881][ T8761] vlan2: entered promiscuous mode [ 368.471708][ T8761] team0: entered promiscuous mode [ 368.586919][ T8761] team_slave_0: entered promiscuous mode [ 368.596483][ T8761] team_slave_1: entered promiscuous mode [ 368.612997][ T8761] team0: Device vlan2 is already an upper device of the team interface [ 368.629731][ T8761] team0: left promiscuous mode [ 368.647602][ T8761] team_slave_0: left promiscuous mode [ 368.668033][ T8761] team_slave_1: left promiscuous mode [ 368.764242][ T8764] netlink: 28 bytes leftover after parsing attributes in process `syz.4.773'. [ 368.787963][ T8764] netlink: 28 bytes leftover after parsing attributes in process `syz.4.773'. [ 369.072933][ T8775] FAULT_INJECTION: forcing a failure. [ 369.072933][ T8775] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 369.097652][ T8775] CPU: 1 UID: 0 PID: 8775 Comm: syz.3.776 Not tainted 6.12.0-rc7-syzkaller #0 [ 369.106693][ T8775] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 369.116812][ T8775] Call Trace: [ 369.120235][ T8775] [ 369.123216][ T8775] dump_stack_lvl+0x241/0x360 [ 369.127968][ T8775] ? __pfx_dump_stack_lvl+0x10/0x10 [ 369.133768][ T8775] ? __pfx__printk+0x10/0x10 [ 369.138507][ T8775] ? __pfx_lock_release+0x10/0x10 [ 369.143626][ T8775] should_fail_ex+0x3b0/0x4e0 [ 369.148368][ T8775] _copy_from_iter+0x4ae/0x1e70 [ 369.153269][ T8775] ? __virt_addr_valid+0x183/0x530 [ 369.158438][ T8775] ? __pfx__copy_from_iter+0x10/0x10 [ 369.163854][ T8775] ? __virt_addr_valid+0x183/0x530 [ 369.169023][ T8775] ? __virt_addr_valid+0x183/0x530 [ 369.174166][ T8775] ? __virt_addr_valid+0x45f/0x530 [ 369.179307][ T8775] ? __check_object_size+0x48e/0x900 [ 369.184640][ T8775] netlink_sendmsg+0x73d/0xcb0 [ 369.189560][ T8775] ? __pfx_netlink_sendmsg+0x10/0x10 [ 369.194898][ T8775] ? __pfx_netlink_sendmsg+0x10/0x10 [ 369.200223][ T8775] __sock_sendmsg+0x221/0x270 [ 369.204944][ T8775] ____sys_sendmsg+0x52a/0x7e0 [ 369.209779][ T8775] ? __pfx_____sys_sendmsg+0x10/0x10 [ 369.215134][ T8775] __sys_sendmsg+0x292/0x380 [ 369.219809][ T8775] ? __pfx___sys_sendmsg+0x10/0x10 [ 369.224991][ T8775] ? __pfx_vfs_write+0x10/0x10 [ 369.229895][ T8775] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 369.236283][ T8775] ? do_syscall_64+0x100/0x230 [ 369.241281][ T8775] ? do_syscall_64+0xb6/0x230 [ 369.246048][ T8775] do_syscall_64+0xf3/0x230 [ 369.250588][ T8775] ? clear_bhb_loop+0x35/0x90 [ 369.255332][ T8775] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 369.261309][ T8775] RIP: 0033:0x7fe40c57e719 [ 369.266021][ T8775] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 369.285977][ T8775] RSP: 002b:00007fe40d34b038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 369.294544][ T8775] RAX: ffffffffffffffda RBX: 00007fe40c735f80 RCX: 00007fe40c57e719 [ 369.302682][ T8775] RDX: 0000000000000000 RSI: 0000000020000600 RDI: 0000000000000004 [ 369.310689][ T8775] RBP: 00007fe40d34b090 R08: 0000000000000000 R09: 0000000000000000 [ 369.318810][ T8775] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 369.327014][ T8775] R13: 0000000000000000 R14: 00007fe40c735f80 R15: 00007ffd71abb228 [ 369.335090][ T8775] [ 372.434053][ C1] IPv4: Oversized IP packet from 172.20.20.24 [ 372.869809][ T8799] ubi: mtd0 is already attached to ubi0 [ 376.581106][ T8777] FAULT_INJECTION: forcing a failure. [ 376.581106][ T8777] name failslab, interval 1, probability 0, space 0, times 0 [ 376.593945][ T8777] CPU: 0 UID: 0 PID: 8777 Comm: syz.4.777 Not tainted 6.12.0-rc7-syzkaller #0 [ 376.602827][ T8777] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 376.613293][ T8777] Call Trace: [ 376.616660][ T8777] [ 376.619902][ T8777] dump_stack_lvl+0x241/0x360 [ 376.624965][ T8777] ? __pfx_dump_stack_lvl+0x10/0x10 [ 376.630301][ T8777] ? __pfx__printk+0x10/0x10 [ 376.634952][ T8777] ? __kmalloc_cache_noprof+0x44/0x2c0 [ 376.640680][ T8777] ? __pfx___might_resched+0x10/0x10 [ 376.646117][ T8777] ? __asan_memcpy+0x40/0x70 [ 376.650795][ T8777] should_fail_ex+0x3b0/0x4e0 [ 376.655584][ T8777] should_failslab+0xac/0x100 [ 376.660321][ T8777] ? inet6_rtm_newroute+0xc01/0x2310 [ 376.665771][ T8777] __kmalloc_cache_noprof+0x6c/0x2c0 [ 376.671112][ T8777] inet6_rtm_newroute+0xc01/0x2310 [ 376.676466][ T8777] ? __pfx_inet6_rtm_newroute+0x10/0x10 [ 376.682219][ T8777] ? __mutex_lock+0x9a1/0xd70 [ 376.687036][ T8777] ? __pfx_inet6_rtm_newroute+0x10/0x10 [ 376.692688][ T8777] rtnetlink_rcv_msg+0x73f/0xcf0 [ 376.697799][ T8777] ? rtnetlink_rcv_msg+0x1a7/0xcf0 [ 376.703669][ T8777] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 376.709521][ T8777] ? ref_tracker_free+0x643/0x7e0 [ 376.714586][ T8777] netlink_rcv_skb+0x1e3/0x430 [ 376.719399][ T8777] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 376.724907][ T8777] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 376.730241][ T8777] ? netlink_deliver_tap+0x2e/0x1b0 [ 376.735485][ T8777] netlink_unicast+0x7f6/0x990 [ 376.740282][ T8777] ? __pfx_netlink_unicast+0x10/0x10 [ 376.745672][ T8777] ? __virt_addr_valid+0x183/0x530 [ 376.750832][ T8777] ? __check_object_size+0x48e/0x900 [ 376.756273][ T8777] netlink_sendmsg+0x8e4/0xcb0 [ 376.761162][ T8777] ? __pfx_netlink_sendmsg+0x10/0x10 [ 376.766492][ T8777] ? __pfx_netlink_sendmsg+0x10/0x10 [ 376.771885][ T8777] __sock_sendmsg+0x221/0x270 [ 376.776766][ T8777] ____sys_sendmsg+0x52a/0x7e0 [ 376.781601][ T8777] ? __pfx_____sys_sendmsg+0x10/0x10 [ 376.787071][ T8777] __sys_sendmsg+0x292/0x380 [ 376.791913][ T8777] ? __pfx___sys_sendmsg+0x10/0x10 [ 376.797192][ T8777] ? __pfx_vfs_write+0x10/0x10 [ 376.802011][ T8777] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 376.808368][ T8777] ? do_syscall_64+0x100/0x230 [ 376.813267][ T8777] ? do_syscall_64+0xb6/0x230 [ 376.818054][ T8777] do_syscall_64+0xf3/0x230 [ 376.822617][ T8777] ? clear_bhb_loop+0x35/0x90 [ 376.827319][ T8777] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 376.833254][ T8777] RIP: 0033:0x7f295717e719 [ 376.837727][ T8777] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 376.857967][ T8777] RSP: 002b:00007f2957f13038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 376.866827][ T8777] RAX: ffffffffffffffda RBX: 00007f2957335f80 RCX: 00007f295717e719 [ 376.874962][ T8777] RDX: 0000000000000000 RSI: 0000000020000100 RDI: 0000000000000007 [ 376.882984][ T8777] RBP: 00007f2957f13090 R08: 0000000000000000 R09: 0000000000000000 [ 376.891055][ T8777] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 376.899071][ T8777] R13: 0000000000000000 R14: 00007f2957335f80 R15: 00007ffc36cc1e38 [ 376.907106][ T8777] [ 376.941610][ T8784] hsr0: entered allmulticast mode [ 376.954814][ T8784] hsr_slave_0: entered allmulticast mode [ 376.966884][ T8784] hsr_slave_1: entered allmulticast mode [ 377.476668][ T8827] FAULT_INJECTION: forcing a failure. [ 377.476668][ T8827] name failslab, interval 1, probability 0, space 0, times 0 [ 377.491857][ T8827] CPU: 0 UID: 0 PID: 8827 Comm: syz.4.788 Not tainted 6.12.0-rc7-syzkaller #0 [ 377.501740][ T8827] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 377.511941][ T8827] Call Trace: [ 377.515380][ T8827] [ 377.518546][ T8827] dump_stack_lvl+0x241/0x360 [ 377.523322][ T8827] ? __pfx_dump_stack_lvl+0x10/0x10 [ 377.528616][ T8827] ? __pfx__printk+0x10/0x10 [ 377.533341][ T8827] ? __kmalloc_noprof+0xb0/0x400 [ 377.538452][ T8827] ? __pfx___might_resched+0x10/0x10 [ 377.543894][ T8827] should_fail_ex+0x3b0/0x4e0 [ 377.548729][ T8827] ? nla_strdup+0x9c/0x140 [ 377.553397][ T8827] should_failslab+0xac/0x100 [ 377.558158][ T8827] ? nla_strdup+0x9c/0x140 [ 377.562677][ T8827] __kmalloc_noprof+0xd8/0x400 [ 377.568022][ T8827] ? __kasan_kmalloc+0x98/0xb0 [ 377.573304][ T8827] nla_strdup+0x9c/0x140 [ 377.577810][ T8827] nf_tables_newtable+0x59b/0x1e40 [ 377.583358][ T8827] ? nfnl_pernet+0x23/0x240 [ 377.587925][ T8827] ? __pfx_nf_tables_newtable+0x10/0x10 [ 377.593629][ T8827] ? __nla_parse+0x40/0x60 [ 377.598233][ T8827] nfnetlink_rcv+0x14dc/0x2ab0 [ 377.603250][ T8827] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 377.608653][ T8827] ? netlink_deliver_tap+0x2e/0x1b0 [ 377.614320][ T8827] ? skb_clone+0x240/0x390 [ 377.618909][ T8827] ? __pfx_lock_release+0x10/0x10 [ 377.624427][ T8827] ? netlink_deliver_tap+0x2e/0x1b0 [ 377.629788][ T8827] netlink_unicast+0x7f6/0x990 [ 377.634774][ T8827] ? __pfx_netlink_unicast+0x10/0x10 [ 377.640189][ T8827] ? __virt_addr_valid+0x183/0x530 [ 377.645350][ T8827] ? __check_object_size+0x48e/0x900 [ 377.650894][ T8827] netlink_sendmsg+0x8e4/0xcb0 [ 377.656334][ T8827] ? __pfx_netlink_sendmsg+0x10/0x10 [ 377.661798][ T8827] ? __pfx_netlink_sendmsg+0x10/0x10 [ 377.667386][ T8827] __sock_sendmsg+0x221/0x270 [ 377.672120][ T8827] ____sys_sendmsg+0x52a/0x7e0 [ 377.677008][ T8827] ? __pfx_____sys_sendmsg+0x10/0x10 [ 377.682591][ T8827] __sys_sendmsg+0x292/0x380 [ 377.687552][ T8827] ? __pfx___sys_sendmsg+0x10/0x10 [ 377.692959][ T8827] ? __pfx_vfs_write+0x10/0x10 [ 377.698080][ T8827] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 377.704855][ T8827] ? do_syscall_64+0x100/0x230 [ 377.709677][ T8827] ? do_syscall_64+0xb6/0x230 [ 377.714398][ T8827] do_syscall_64+0xf3/0x230 [ 377.718929][ T8827] ? clear_bhb_loop+0x35/0x90 [ 377.723924][ T8827] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 377.730156][ T8827] RIP: 0033:0x7f295717e719 [ 377.734626][ T8827] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 377.755582][ T8827] RSP: 002b:00007f2957ef2038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 377.765023][ T8827] RAX: ffffffffffffffda RBX: 00007f2957336058 RCX: 00007f295717e719 [ 377.773285][ T8827] RDX: 0000000000000000 RSI: 00000000200000c0 RDI: 000000000000000c [ 377.781279][ T8827] RBP: 00007f2957ef2090 R08: 0000000000000000 R09: 0000000000000000 [ 377.791058][ T8827] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 377.799253][ T8827] R13: 0000000000000000 R14: 00007f2957336058 R15: 00007ffc36cc1e38 [ 377.807343][ T8827] [ 379.106416][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 379.112824][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.123796][ C1] IPv4: Oversized IP packet from 172.20.20.24 [ 379.724772][ T8845] ubi: mtd0 is already attached to ubi0 [ 380.350827][ T8848] overlayfs: failed to resolve './file1': -2 [ 381.748524][ T8857] block nbd4: NBD_DISCONNECT [ 381.905130][ T8860] netlink: 'syz.0.797': attribute type 10 has an invalid length. [ 381.915968][ T8860] hsr0: left promiscuous mode [ 381.926725][ T8860] bond0: (slave hsr0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 381.974726][ T8860] bond0: (slave hsr0): The slave device specified does not support setting the MAC address [ 382.041691][ T8860] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 382.101037][ T8860] bond0: (slave hsr0): Error -22 calling dev_set_mtu [ 382.380716][ T8869] fuse: Unknown parameter ''fyqpJ!kU@I0$u@c7!퉳 0`&2[~@m [ 382.380716][ T8869] 1s螞TI}πpN?ԯZ2C:p4^ XJC2.7C' [ 382.770386][ C0] IPv4: Oversized IP packet from 172.20.20.24 [ 383.221156][ T8880] ubi: mtd0 is already attached to ubi0 [ 383.449275][ T5883] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 383.824690][ T5883] usb 5-1: Using ep0 maxpacket: 8 [ 383.844985][ T5883] usb 5-1: New USB device found, idVendor=0423, idProduct=000c, bcdDevice=14.e5 [ 383.897880][ T5883] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 383.937352][ T5883] usb 5-1: config 0 descriptor?? [ 383.976580][ T5883] usb 5-1: selecting invalid altsetting 1 [ 383.982413][ T5883] catc 5-1:0.0: Can't set altsetting 1. [ 384.014836][ T5883] catc 5-1:0.0: probe with driver catc failed with error -5 [ 384.151705][ T5883] usb 5-1: USB disconnect, device number 20 [ 384.451082][ T8882] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 384.504993][ T5881] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 384.586282][ T5836] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 384.608701][ T5836] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 384.618095][ T5836] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 384.626646][ T5836] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 384.635377][ T5836] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 384.653341][ T5836] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 384.899456][ T5881] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 384.909621][ T5881] usb 6-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 384.921732][ T5881] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 385.008529][ T5881] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 385.020206][ T5881] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 385.083636][ T5881] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 385.450718][ T5881] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 385.609772][ T5881] usb 6-1: Product: syz [ 385.614158][ T5881] usb 6-1: Manufacturer: syz [ 385.919599][ T5881] cdc_wdm 6-1:1.0: skipping garbage [ 385.930006][ T5881] cdc_wdm 6-1:1.0: skipping garbage [ 386.036260][ T5881] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device [ 386.136790][ T5881] cdc_wdm 6-1:1.0: Unknown control protocol [ 386.196749][ T8888] chnl_net:caif_netlink_parms(): no params data found [ 386.663460][ C0] wdm_int_callback: 162 callbacks suppressed [ 386.663491][ C0] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 386.676349][ C0] wdm_int_callback: 162 callbacks suppressed [ 386.676376][ C0] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 386.689750][ C0] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 386.696420][ C0] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 386.840392][ T5881] usb 6-1: USB disconnect, device number 22 [ 387.125272][ T54] Bluetooth: hci0: command tx timeout [ 387.429489][ T8888] bridge0: port 1(bridge_slave_0) entered blocking state [ 387.437343][ T8888] bridge0: port 1(bridge_slave_0) entered disabled state [ 387.445599][ T8888] bridge_slave_0: entered allmulticast mode [ 387.453630][ T8888] bridge_slave_0: entered promiscuous mode [ 387.467626][ T8888] bridge0: port 2(bridge_slave_1) entered blocking state [ 387.527247][ T8922] netlink: 'syz.4.814': attribute type 1 has an invalid length. [ 387.535261][ T8922] netlink: 9328 bytes leftover after parsing attributes in process `syz.4.814'. [ 387.544770][ T8922] netlink: 'syz.4.814': attribute type 1 has an invalid length. [ 388.422846][ T8888] bridge0: port 2(bridge_slave_1) entered disabled state [ 388.431248][ T8888] bridge_slave_1: entered allmulticast mode [ 388.452880][ T8888] bridge_slave_1: entered promiscuous mode [ 388.482322][ T29] kauditd_printk_skb: 9 callbacks suppressed [ 388.482338][ T29] audit: type=1107 audit(1731447572.029:80): pid=8919 uid=0 auid=4294967295 ses=4294967295 subj=_ msg='P' [ 388.627966][ T8888] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 388.700185][ T8888] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 388.879587][ T8888] team0: Port device team_slave_0 added [ 388.900637][ T8888] team0: Port device team_slave_1 added [ 388.923834][ T8933] overlayfs: failed to resolve './file1': -2 [ 389.117201][ T8888] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 389.129098][ T8888] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 389.156140][ C0] vkms_vblank_simulate: vblank timer overrun [ 389.206523][ T8888] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 389.221060][ T8888] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 389.228741][ T8888] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 389.271791][ T8888] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 389.281993][ T54] Bluetooth: hci0: command tx timeout [ 389.376350][ T8888] hsr_slave_0: entered promiscuous mode [ 389.384314][ T8888] hsr_slave_1: entered promiscuous mode [ 389.393835][ T8888] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 389.403194][ T8888] Cannot create hsr debugfs directory [ 389.501223][ T8938] syz.3.821 (8938): attempted to duplicate a private mapping with mremap. This is not supported. [ 389.977841][ T8888] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 390.523936][ T8938] ------------[ cut here ]------------ [ 390.530217][ T8938] WARNING: CPU: 1 PID: 8938 at drivers/gpu/drm/vkms/vkms_crtc.c:100 vkms_get_vblank_timestamp+0x183/0x1b0 [ 390.542003][ T8938] Modules linked in: [ 390.546106][ T8938] CPU: 1 UID: 0 PID: 8938 Comm: syz.3.821 Not tainted 6.12.0-rc7-syzkaller #0 [ 390.555290][ T8938] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 390.565590][ T8938] RIP: 0010:vkms_get_vblank_timestamp+0x183/0x1b0 [ 390.572383][ T8938] Code: 42 80 3c 30 00 74 08 48 89 ef e8 28 18 0f fc 48 89 5d 00 b0 01 5b 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc e8 fe 6f a8 fb 90 <0f> 0b 90 eb e4 89 d9 80 e1 07 38 c1 0f 8c cd fe ff ff 48 89 df e8 [ 390.592842][ T8938] RSP: 0018:ffffc90004697468 EFLAGS: 00010293 [ 390.599739][ T8938] RAX: ffffffff85ec69b2 RBX: 0000005aea4e8704 RCX: ffff888027fe1e00 [ 390.608023][ T8938] RDX: 0000000000000000 RSI: 0000005aea4e8704 RDI: 0000005aea4e8704 [ 390.616276][ T8938] RBP: ffffc90004697600 R08: ffffffff85ec691f R09: 0000000000000000 [ 390.624409][ T8938] R10: ffffc90003ae1000 R11: ffffffff85ec6830 R12: 0000005aea4e8704 [ 390.632584][ T8938] R13: ffff888142b91950 R14: 1ffff920008d2ec0 R15: ffff88802520c000 [ 390.641039][ T8938] FS: 00007fe40d34b6c0(0000) GS:ffff8880b8700000(0000) knlGS:0000000000000000 [ 390.650497][ T8938] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 390.657331][ T8938] CR2: 00007f8733a47d08 CR3: 000000007f026000 CR4: 00000000003526f0 [ 390.665850][ T8938] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 390.674371][ T8938] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 390.683167][ T8938] Call Trace: [ 390.687177][ T8938] [ 390.691707][ T8938] ? __warn+0x168/0x4e0 [ 390.696863][ T8938] ? vkms_get_vblank_timestamp+0x183/0x1b0 [ 390.703138][ T8938] ? report_bug+0x2b3/0x500 [ 390.708190][ T8938] ? vkms_get_vblank_timestamp+0x183/0x1b0 [ 390.714276][ T8938] ? handle_bug+0x60/0x90 [ 390.719042][ T8938] ? exc_invalid_op+0x1a/0x50 [ 390.723825][ T8938] ? asm_exc_invalid_op+0x1a/0x20 [ 390.729042][ T8938] ? __pfx_vkms_get_vblank_timestamp+0x10/0x10 [ 390.735839][ T8938] ? vkms_get_vblank_timestamp+0xef/0x1b0 [ 390.742508][ T8938] ? vkms_get_vblank_timestamp+0x182/0x1b0 [ 390.748603][ T8938] ? vkms_get_vblank_timestamp+0x183/0x1b0 [ 390.754902][ T8938] ? vkms_get_vblank_timestamp+0x182/0x1b0 [ 390.761099][ T8938] ? __pfx_vkms_get_vblank_timestamp+0x10/0x10 [ 390.767586][ T8938] drm_crtc_next_vblank_start+0x229/0x490 [ 390.774114][ T8938] ? mark_lock+0x9a/0x360 [ 390.778877][ T8938] ? __pfx_drm_crtc_next_vblank_start+0x10/0x10 [ 390.785517][ T8938] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 390.791715][ T8938] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 390.799407][ T8938] drm_atomic_helper_wait_for_fences+0x277/0x8e0 [ 390.806663][ T8938] ? __pfx_drm_atomic_helper_wait_for_fences+0x10/0x10 [ 390.813998][ T8938] ? __pfx_vkms_prepare_fb+0x10/0x10 [ 390.819511][ T8938] drm_atomic_helper_commit+0x53a/0x9f0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 390.825264][ T8938] ? __pfx_drm_atomic_helper_commit+0x10/0x10 [ 390.831513][ T8938] drm_atomic_commit+0x296/0x2f0 [ 390.837233][ T8938] ? __pfx_drm_atomic_commit+0x10/0x10 [ 390.844391][ T8938] ? __pfx___drm_printfn_info+0x10/0x10 [ 390.850742][ T8938] ? __pfx___drm_atomic_helper_set_config+0x10/0x10 [ 390.857637][ T8938] drm_client_modeset_commit_atomic+0x676/0x7e0 [ 390.864095][ T8938] ? __pfx_drm_client_modeset_commit_atomic+0x10/0x10 [ 390.871769][ T8938] ? trace_contention_end+0x3c/0x120 [ 390.878023][ T8938] ? __pfx___mutex_lock+0x10/0x10 [ 390.883339][ T8938] ? drm_client_dev_restore+0xae/0x270 [ 390.889522][ T8938] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 390.898122][ T8938] drm_client_modeset_commit_locked+0xe0/0x520 [ 390.905174][ T8938] drm_client_modeset_commit+0x4a/0x70 [ 390.911161][ T8938] drm_fb_helper_lastclose+0xbb/0x180 [ 390.916968][ T8938] drm_fbdev_shmem_client_restore+0x34/0x40 [ 390.923320][ T8938] drm_client_dev_restore+0x132/0x270 [ 390.929288][ T8938] drm_release+0x335/0x410 [ 390.933997][ T8938] ? __pfx_drm_release+0x10/0x10 [ 390.939692][ T8938] __fput+0x23f/0x880 [ 390.944840][ T8938] task_work_run+0x24f/0x310 [ 390.949729][ T8938] ? __pfx_task_work_run+0x10/0x10 [ 390.955403][ T8938] get_signal+0x15e8/0x1740 [ 390.960022][ T8938] ? __pfx_get_signal+0x10/0x10 [ 390.965410][ T8938] arch_do_signal_or_restart+0x96/0x860 [ 390.971160][ T8938] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 390.978522][ T8938] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 390.984785][ T8938] ? syscall_exit_to_user_mode+0xa3/0x370 [ 390.990605][ T8938] syscall_exit_to_user_mode+0xc9/0x370 [ 390.997060][ T8938] do_syscall_64+0x100/0x230 [ 391.002255][ T8938] ? clear_bhb_loop+0x35/0x90 [ 391.007660][ T8938] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 391.013864][ T8938] RIP: 0033:0x7fe40c57e719 [ 391.018514][ T8938] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 391.039258][ T8938] RSP: 002b:00007fe40d34b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 391.047995][ T8938] RAX: fffffffffffffffc RBX: 00007fe40c735f80 RCX: 00007fe40c57e719 [ 391.056350][ T8938] RDX: 0000000020000140 RSI: 00000000c018643a RDI: 0000000000000004 [ 391.064704][ T8938] RBP: 00007fe40c5f1616 R08: 0000000000000000 R09: 0000000000000000 [ 391.073805][ T8938] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 391.082271][ T8938] R13: 0000000000000000 R14: 00007fe40c735f80 R15: 00007ffd71abb228 [ 391.090665][ T8938] [ 391.093846][ T8938] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 391.102106][ T8938] CPU: 1 UID: 0 PID: 8938 Comm: syz.3.821 Not tainted 6.12.0-rc7-syzkaller #0 [ 391.112013][ T8938] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 391.123195][ T8938] Call Trace: [ 391.126620][ T8938] [ 391.129838][ T8938] dump_stack_lvl+0x241/0x360 [ 391.135149][ T8938] ? __pfx_dump_stack_lvl+0x10/0x10 [ 391.140609][ T8938] ? __pfx__printk+0x10/0x10 [ 391.145440][ T8938] ? vscnprintf+0x5d/0x90 [ 391.149862][ T8938] panic+0x349/0x880 [ 391.153906][ T8938] ? __warn+0x177/0x4e0 [ 391.158208][ T8938] ? __pfx_panic+0x10/0x10 [ 391.162775][ T8938] __warn+0x34b/0x4e0 [ 391.166812][ T8938] ? vkms_get_vblank_timestamp+0x183/0x1b0 [ 391.172689][ T8938] report_bug+0x2b3/0x500 [ 391.177153][ T8938] ? vkms_get_vblank_timestamp+0x183/0x1b0 [ 391.183140][ T8938] handle_bug+0x60/0x90 [ 391.187349][ T8938] exc_invalid_op+0x1a/0x50 [ 391.192346][ T8938] asm_exc_invalid_op+0x1a/0x20 [ 391.197355][ T8938] RIP: 0010:vkms_get_vblank_timestamp+0x183/0x1b0 [ 391.204008][ T8938] Code: 42 80 3c 30 00 74 08 48 89 ef e8 28 18 0f fc 48 89 5d 00 b0 01 5b 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc e8 fe 6f a8 fb 90 <0f> 0b 90 eb e4 89 d9 80 e1 07 38 c1 0f 8c cd fe ff ff 48 89 df e8 [ 391.223789][ T8938] RSP: 0018:ffffc90004697468 EFLAGS: 00010293 [ 391.229988][ T8938] RAX: ffffffff85ec69b2 RBX: 0000005aea4e8704 RCX: ffff888027fe1e00 [ 391.238013][ T8938] RDX: 0000000000000000 RSI: 0000005aea4e8704 RDI: 0000005aea4e8704 [ 391.246307][ T8938] RBP: ffffc90004697600 R08: ffffffff85ec691f R09: 0000000000000000 [ 391.254333][ T8938] R10: ffffc90003ae1000 R11: ffffffff85ec6830 R12: 0000005aea4e8704 [ 391.262456][ T8938] R13: ffff888142b91950 R14: 1ffff920008d2ec0 R15: ffff88802520c000 [ 391.270500][ T8938] ? __pfx_vkms_get_vblank_timestamp+0x10/0x10 [ 391.276922][ T8938] ? vkms_get_vblank_timestamp+0xef/0x1b0 [ 391.282918][ T8938] ? vkms_get_vblank_timestamp+0x182/0x1b0 [ 391.288796][ T8938] ? vkms_get_vblank_timestamp+0x182/0x1b0 [ 391.294694][ T8938] ? __pfx_vkms_get_vblank_timestamp+0x10/0x10 [ 391.301064][ T8938] drm_crtc_next_vblank_start+0x229/0x490 [ 391.306823][ T8938] ? mark_lock+0x9a/0x360 [ 391.311269][ T8938] ? __pfx_drm_crtc_next_vblank_start+0x10/0x10 [ 391.319156][ T8938] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 391.325398][ T8938] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 391.331795][ T8938] drm_atomic_helper_wait_for_fences+0x277/0x8e0 [ 391.338251][ T8938] ? __pfx_drm_atomic_helper_wait_for_fences+0x10/0x10 [ 391.345149][ T8938] ? __pfx_vkms_prepare_fb+0x10/0x10 [ 391.350471][ T8938] drm_atomic_helper_commit+0x53a/0x9f0 [ 391.356140][ T8938] ? __pfx_drm_atomic_helper_commit+0x10/0x10 [ 391.362243][ T8938] drm_atomic_commit+0x296/0x2f0 [ 391.367215][ T8938] ? __pfx_drm_atomic_commit+0x10/0x10 [ 391.372765][ T8938] ? __pfx___drm_printfn_info+0x10/0x10 [ 391.378366][ T8938] ? __pfx___drm_atomic_helper_set_config+0x10/0x10 [ 391.385020][ T8938] drm_client_modeset_commit_atomic+0x676/0x7e0 [ 391.391427][ T8938] ? __pfx_drm_client_modeset_commit_atomic+0x10/0x10 [ 391.398388][ T8938] ? trace_contention_end+0x3c/0x120 [ 391.403886][ T8938] ? __pfx___mutex_lock+0x10/0x10 [ 391.409196][ T8938] ? drm_client_dev_restore+0xae/0x270 [ 391.414708][ T8938] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 391.421096][ T8938] drm_client_modeset_commit_locked+0xe0/0x520 [ 391.427373][ T8938] drm_client_modeset_commit+0x4a/0x70 [ 391.432945][ T8938] drm_fb_helper_lastclose+0xbb/0x180 [ 391.438371][ T8938] drm_fbdev_shmem_client_restore+0x34/0x40 [ 391.444437][ T8938] drm_client_dev_restore+0x132/0x270 [ 391.449887][ T8938] drm_release+0x335/0x410 [ 391.454351][ T8938] ? __pfx_drm_release+0x10/0x10 [ 391.459396][ T8938] __fput+0x23f/0x880 [ 391.463432][ T8938] task_work_run+0x24f/0x310 [ 391.468149][ T8938] ? __pfx_task_work_run+0x10/0x10 [ 391.473296][ T8938] get_signal+0x15e8/0x1740 [ 391.477843][ T8938] ? __pfx_get_signal+0x10/0x10 [ 391.482961][ T8938] arch_do_signal_or_restart+0x96/0x860 [ 391.488642][ T8938] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 391.495049][ T8938] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 391.501227][ T8938] ? syscall_exit_to_user_mode+0xa3/0x370 [ 391.507177][ T8938] syscall_exit_to_user_mode+0xc9/0x370 [ 391.512868][ T8938] do_syscall_64+0x100/0x230 [ 391.517502][ T8938] ? clear_bhb_loop+0x35/0x90 [ 391.522227][ T8938] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 391.528158][ T8938] RIP: 0033:0x7fe40c57e719 [ 391.532622][ T8938] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 391.552720][ T8938] RSP: 002b:00007fe40d34b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 391.561187][ T8938] RAX: fffffffffffffffc RBX: 00007fe40c735f80 RCX: 00007fe40c57e719 [ 391.569819][ T8938] RDX: 0000000020000140 RSI: 00000000c018643a RDI: 0000000000000004 [ 391.578082][ T8938] RBP: 00007fe40c5f1616 R08: 0000000000000000 R09: 0000000000000000 [ 391.586297][ T8938] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 391.594659][ T8938] R13: 0000000000000000 R14: 00007fe40c735f80 R15: 00007ffd71abb228 [ 391.602719][ T8938] [ 391.606128][ T8938] Kernel Offset: disabled [ 391.610606][ T8938] Rebooting in 86400 seconds..