last executing test programs: 30.343923789s ago: executing program 3 (id=106): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f00000000c0)="440f20c03507000000440f22c067420f8f04000000c443ad68b60080000095c4828947b600000000b99d090000b82f624a48baf4e055500f30263636f3430fc73636f2360fa5a10050aa37f39066b817018ec8c4c1795a5100", 0x59}], 0x1, 0x0, 0x0, 0x0) r2 = socket$inet6(0xa, 0x800, 0x4) setsockopt$inet_opts(r2, 0x0, 0x6, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000001000)={0x18, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000001000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='kmem_cache_free\x00', r3}, 0xa) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x64, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x4}, @IPSET_ATTR_HASHSIZE={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000010}, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r7, {}, {0x4, 0xffff}, {0x10}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0x10, 0x1, 0x0, 0x1}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x51}, 0x0) r8 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@delchain={0x3c, 0x65, 0x100, 0x8, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0x9, 0x1}, {0x7, 0x2}, {0xf, 0xfff3}}, [@TCA_RATE={0x6, 0x5, {0xfc, 0x7}}, @TCA_RATE={0x6, 0x5, {0xff, 0xfe}}, @TCA_CHAIN={0x8, 0xb, 0x2}]}, 0x3c}}, 0x4000001) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8003, &(0x7f0000000000)=0x9, 0x6, 0x0) quotactl$Q_SYNC(0xffffffff80000102, 0x20, 0x0, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0xc, 0x200000005c831, 0xffffffffffffffff, 0x0) r9 = dup(r1) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) sendmsg$ETHTOOL_MSG_DEBUG_SET(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x254}}, 0x2008040) r10 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(r9, r9, &(0x7f0000000000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, 0x0}], 0x1, 0x68, 0x0, 0x0) unshare(0x20000400) bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="01000000420000000600001a0800000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@bloom_filter={0x1e, 0x6, 0xfffffffb, 0x7ff4, 0x21c20, 0x1, 0xd0f4, '\x00', r7, 0xffffffffffffffff, 0x3, 0x3, 0x5, 0xb, @void, @value, @void, @value}, 0x50) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, r11}, 0x38) ioctl$KVM_RUN(r10, 0xae80, 0x0) 29.656538485s ago: executing program 3 (id=110): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000d00)=[{{&(0x7f00000002c0)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000680)=[{&(0x7f0000000b00)="25056c12dbdb15b1d3e96f045256a1df0b0ea3a0c56a3e53f48cd90b7ab0e60423643af479340bcc1ee68e5d05de0e96cfbe9cf0fd7997ef18b3702f853721685906ce3aa9dab0529c985e570bb270d300f142f26c48b7bca37b78dfc803d517b59ce595cd394f07e00666888865166778b07fb71750ce4a0ae06c39927f6ca73d69fb995b19bc87d113c1faa9e15c81707754ea28114bd57e7716f552d263576574f5047d4ff4cdc12b2d46320b75fbacdabc9725454c56a2675e20f4f741c50b6e278eceb1f3cf1d20d3c52c8583256c38e9d77a905c89f66e8be9630ffdff0cece56b05753c31d8431d93626f6b8fa2e855692858f7045502f55d", 0xfc}, {&(0x7f0000000340)="a401b29a1b85259843154b8c8bb06360ae5de0d585f82ab8d5fb93618c6ab42b3b83170a0ad3759ba09409e8e56f9566be3d1adaf91588406ea4ca2dcdced02b", 0x40}, {&(0x7f0000000900)="049c9957915f4ac0888b2355cbfcff5da592fe8d189714da51fd6ca125662cb8b46d08400f3d00c7196fe5f733a3d05504cf4a96c9f2232b60c15eba4bd29c31be392bb9564353a766203edecefb39e4a9dc9f0046328a5826bd7d2a9f3b25b5205addac9962faa5c00d4b33e376ac9bf4982dc8464edac2564dc1198e678b3656938644c04af2dfabde66680384588defe6072009b4e606269bd680b85451a994b6b47b5790520d528c23e7a3c0a991f6aa2b66fd25fe9e44c5c4a87bed58330389f7bfa58e21ff119fc9753b13ccf90f59f2e0185c851cdb8f0e69807b5aca300f895748a89a6b46289341b6cb0870fe35", 0xf2}, {&(0x7f0000000380)="eea083b7a13b17c34f52b2dca25d8cc779bf23bbcb1b5ded81ac7faae94433432d", 0x21}, {&(0x7f00000007c0)="77dd9452f0026b6f806e133fec8084dfa4540e813075d05979d8469404cad9d29420ccfb57070b497d035663e7d8b28866a06c511a903821bcb3c2a86ff7c4d6eb58ee808a72", 0x46}, {&(0x7f0000000400)="01071f52b75052e2cbe8b0316feefea02c67a78ca395693cde73848911204b99129220c2d17dd0", 0x27}], 0x6, &(0x7f0000000e80)=ANY=[@ANYBLOB="00000000000000000000000000000000b29e9222c60019e6a35e4f32aae9a5fb18a70fbbac60c102c2a474220310a916d99436b13d2dc08a3379f8c0916f7b508a740842ac8714f38e527b98478dd33d0adbd887c8fe2ebe13897f54b423bad9d36950bbc0be50bc58d63cf5d7aaade08c451127f6a4aedb7110a0525921f56b06b4c25df76726c9a2cdab48ffbac6a7be2bdce1e366590e1f880098", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRESHEX=r0, @ANYBLOB="65e4d72f00f5e24fd53cb06d98584befa2eb6a5c3b988953c5d487b12038f0e12d886479406923b86a6ed2287d31db80737b6d2bd9321814c49c9d2f66c38e494643e5d862cc9227c73eb3423246521ae7401d", @ANYBLOB="0000000028000000000000000100000001000000", @ANYRES32=r1, @ANYRES32, @ANYRES32=r0, @ANYRES32=r0, @ANYRES32=r1, @ANYRES32=r1], 0x68, 0x20000000}}], 0x1, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) rmdir(0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0x7, 0xfa11, 0xffffffff}, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x50, 0x0, &(0x7f0000000040)=0x54) r2 = socket$l2tp6(0xa, 0x2, 0x73) r3 = accept4$inet(0xffffffffffffffff, &(0x7f0000000140)={0x2, 0x0, @multicast2}, &(0x7f0000000200)=0x10, 0x80c00) r4 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180), 0x197243, 0x0) ioctl$FBIOGETCMAP(r4, 0x4604, &(0x7f00000001c0)={0x2, 0x0, &(0x7f00000000c0)=[0x0], &(0x7f0000000300), 0x0, 0x0}) sendmsg(r2, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)=ANY=[@ANYRESHEX=r0], 0x28}, 0x200000d4) writev(0xffffffffffffffff, 0x0, 0x0) r5 = syz_open_dev$video(&(0x7f0000000440), 0x8, 0x0) ioctl$VIDIOC_S_SELECTION(r5, 0xc040565f, &(0x7f0000000240)={0xc, 0x100, 0x0, {0x7ffe, 0x40, 0x5}}) r6 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f00000003c0), 0x80800) ioctl$VHOST_SET_VRING_KICK(0xffffffffffffffff, 0x4008af20, &(0x7f0000000780)={0x1}) write$binfmt_aout(r6, &(0x7f0000000200)=ANY=[@ANYBLOB="03000000b5"], 0xc8) mknodat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x10, 0xfffffff6) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone(0x1000, 0x0, 0x0, 0x0, 0x0, 0x0) r7 = syz_open_dev$vbi(&(0x7f0000000080), 0x1, 0x2) sendmsg$NL80211_CMD_STOP_SCHED_SCAN(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000840)={&(0x7f0000000880)=ANY=[@ANYRESDEC=r0, @ANYRES64=r3, @ANYBLOB="01002dbd7000fedbdf254c0000000c00580069000000000000000c00580078000000000000000c0058001b000000000000000c0058007600000000000000de2345ffa95918c75aa8d41af4d093da97039ec4c3c23db99f159673f5"], 0x44}}, 0x40) pidfd_getfd(0xffffffffffffffff, r7, 0x0) ioctl$VIDIOC_S_DV_TIMINGS(r7, 0xc0845657, 0x0) 28.633486776s ago: executing program 3 (id=116): socket(0x29, 0x80002, 0x17788879) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c00000010000d0425bd7000fcdbff2500000000", @ANYRES32=0x0, @ANYBLOB="1000000000c600001c0012800b00010062726964676500000c0002800800130011"], 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x0) (async, rerun: 64) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) (rerun: 64) r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f00000000c0), 0x109801, 0x0) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x3000001, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0) (async) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000300)=0x3) (async) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) (async) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/oops_count', 0x26243, 0x103) r1 = msgget$private(0x0, 0x0) msgrcv(r1, 0x0, 0x0, 0x2, 0x2000) (async) msgsnd(r1, &(0x7f0000000000)={0x2}, 0x8, 0x800) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x300, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async, rerun: 32) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) (async, rerun: 32) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) (async) prlimit64(0x0, 0x7, &(0x7f0000000280)={0x0, 0x1ff}, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) (async) ioctl$KVM_RUN(r4, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000051b000/0x18000)=nil, &(0x7f0000000440)=[@text16={0x10, &(0x7f0000000480)="660f3881bcf7a9ba4100b024ee66b9b50a000066b8249b71a466ba000000000f300f01ca660fdb0eec3fbaf80c66b8488ebb8c66efbafc0c66ed2eeae700bf4f660fd7c10f01ca360fdc60c9", 0x4c}], 0x1, 0x25, 0x0, 0x0) sendmsg$IPSET_CMD_GET_BYNAME(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x20000000) (async, rerun: 64) r5 = syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0xcf, 0x8b, 0xed, 0x20, 0xfd9, 0x25, 0x2940, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xca, 0xfb, 0x1a}}]}}]}}, 0x0) (rerun: 64) syz_usb_control_io$cdc_ncm(r5, 0x0, &(0x7f00000005c0)={0x44, &(0x7f0000000380)={0x20, 0xb, 0x1, "c9"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) r6 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) ioctl$I2C_SMBUS(r6, 0x720, &(0x7f0000000040)={0x1, 0xd4, 0x5, &(0x7f0000000080)={0x3, "42cae8b3df20afbcf8dd178c50e5d84526580489d79a473f112453b228922bd31c"}}) r7 = open(0x0, 0x4542, 0x1ba) (async, rerun: 32) ioctl$KVM_RUN(r4, 0xae80, 0x0) (rerun: 32) r8 = socket$nl_generic(0x10, 0x3, 0x10) (async) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r7) sendmsg$NL80211_CMD_ADD_TX_TS(r8, &(0x7f0000000340)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x34, r9, 0x1, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0xfffffffb, 0x32}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x34}, 0x1, 0x0, 0x0, 0x2}, 0x41) 28.55976565s ago: executing program 3 (id=117): setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, 0x0, 0x0) openat$nvram(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) recvmsg$can_bcm(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000015c0)=[{0x0}, {&(0x7f0000000300)=""/182, 0xb6}], 0x2}, 0x10043) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00') r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) pivot_root(&(0x7f0000000240)='./file0\x00', &(0x7f00000000c0)='./file0/../file0/../file0/../file0/../file0\x00') socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmmsg$inet(r2, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0x0) 28.416026816s ago: executing program 3 (id=118): r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'ip6tnl0\x00', 0x0}) r2 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x201, 0x2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=@newtfilter={0x24, 0x11, 0x1, 0x691522eb, 0x10000, {0x0, 0x0, 0x74, r5, {0x10, 0x4}, {}, {0x5}}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0) r7 = socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000002040)=@newtfilter={0x474, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, 0x0, {0x0, 0x7}, {}, {0xa}}, [@filter_kind_options=@f_fw={{0x7}, {0x448, 0x2, [@TCA_FW_POLICE={0x444, 0x2, [@TCA_POLICE_RATE={0x404, 0x2, [0x1d, 0xb, 0xffffffff, 0xffff, 0x9, 0x800, 0x80000001, 0x1, 0xde86, 0x0, 0xfff, 0xe, 0x1, 0xde4b, 0x1352, 0x800, 0x400, 0x4f9b, 0x2e6d, 0x2, 0x10, 0x6, 0xc6, 0xd, 0x1, 0x800, 0x200, 0x0, 0x2053, 0x10001, 0xb, 0x1b57, 0x6, 0x2f33, 0x0, 0xc2, 0x80, 0xaad, 0xb, 0x8, 0x2, 0x6, 0x4, 0x9, 0x5, 0x4, 0xfffffff7, 0x7, 0xffffffff, 0xb, 0x800, 0x80401893, 0x8, 0x8, 0x7fffffff, 0x9, 0x5, 0x1000, 0x9, 0x4, 0x83, 0x7, 0x4, 0x7f, 0x5, 0x8, 0x2, 0x7, 0x2, 0x1, 0x9, 0x7, 0x8, 0x707, 0x81, 0x200, 0x1, 0x1ff, 0x0, 0x5, 0x8, 0x1000, 0x75, 0x0, 0xfffffc01, 0x0, 0x4, 0x8, 0x9, 0x5, 0x2, 0x9, 0x7ff, 0x8, 0x2, 0x7, 0x1000, 0x0, 0xfffffff7, 0x8, 0x3, 0x5, 0x6, 0x1, 0x9, 0x40, 0x1, 0x3f, 0x3b16cd5d, 0xb5, 0xa40, 0x3, 0x0, 0x8e, 0x1, 0xbb, 0x81, 0xffffff37, 0x80000000, 0x6, 0x800, 0x7, 0x3ff, 0x200, 0x101, 0x3ff, 0x0, 0x6, 0x9, 0x8001, 0x71, 0x575, 0x3, 0x7fffffff, 0x3, 0x7, 0x1, 0x7ff, 0xffffff60, 0x2ce, 0x51, 0x9, 0x8, 0x8, 0x10001, 0xfffffffb, 0x4, 0x4, 0x5, 0x8, 0x0, 0x6, 0x4, 0x4, 0x3, 0x0, 0x1, 0xfffffffc, 0x2372, 0x3ff, 0x8, 0xc20e, 0x5, 0x0, 0x7, 0x7, 0x4, 0x6, 0x44, 0x1, 0x6b3, 0xffffffff, 0x1ff, 0xbbc, 0x800, 0x2, 0x0, 0x8001, 0x4, 0x50f, 0x2d4a, 0x1, 0x5, 0x8, 0x1, 0xfff, 0x2, 0x0, 0xfffffff8, 0x7, 0x2, 0x200, 0x8, 0x475c, 0x0, 0x2, 0xffffffff, 0x0, 0x0, 0xdcc8, 0x0, 0x0, 0x1, 0xfc4, 0x5, 0x1, 0x9, 0x268, 0x10001, 0x5, 0x3, 0x3c, 0x6, 0x8001, 0x47, 0x7, 0x0, 0x5, 0x401, 0x9, 0x5, 0x1ff, 0x0, 0x5, 0x7, 0x9, 0xfffffffe, 0x7, 0x8, 0xa, 0x7a3, 0x3, 0x7f, 0x9e12, 0x1, 0x4, 0xdb18, 0x1, 0x10, 0x8, 0x3a28ded7, 0x2, 0x4, 0x3, 0x4, 0x4dbd46c9, 0x923, 0x7, 0xfffffffd, 0xffffffff, 0x12, 0x6, 0x7f, 0x2, 0x3, 0x7]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x7, 0x5, 0xfffff800, 0x2, 0x9, {0x2, 0x2, 0x4000, 0x2, 0x164, 0x1}, {0x98, 0x0, 0xf000, 0x5, 0x9}, 0x6, 0x401, 0xc14}}]}]}}]}, 0x474}, 0x1, 0x0, 0x0, 0x80}, 0x20000000) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x11012, r2, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) sendmsg$nl_route(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=@newlink={0x44, 0x10, 0x403, 0x70bd28, 0x300, {0x0, 0x0, 0x4, 0x0, 0x3ff, 0xc8df8ae552dcbaf7}, [@IFLA_LINK={0x8, 0x5, r9}, @IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x4}}}, @IFLA_TXQLEN={0x8, 0xd, 0x5677f557}]}, 0x44}}, 0x0) ioctl$USBDEVFS_IOCTL(r2, 0xc0105512, &(0x7f0000000100)=@usbdevfs_connect={0xa}) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, 0x0, 0x0, 0x3) syz_clone(0x410c2000, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=@newqdisc={0x54, 0x24, 0xf0b, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, r1, {0x0, 0x4}, {0xffff, 0xffff}, {0xd, 0xf}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x24, 0x2, [@TCA_CAKE_AUTORATE={0x8, 0x9, 0x400}, @TCA_CAKE_ATM={0x8, 0x4, 0x2}, @TCA_CAKE_FLOW_MODE={0x8, 0x5, 0x1}, @TCA_CAKE_WASH={0x8, 0xd, 0x1}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x44004}, 0x0) 28.415768611s ago: executing program 3 (id=119): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x6c, r1, 0x1, 0x0, 0x20, {}, [@TIPC_NLA_BEARER={0x58, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4, 0x2, @loopback}}, {0x20, 0x2, @in6={0xa, 0x0, 0x0, @remote}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}]}]}, 0x6c}}, 0x0) (async) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x2, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) (async) r4 = dup3(r3, r2, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0xb, 0x0, 0x0}) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x4e20, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, 0x9}]}, &(0x7f00000002c0)=0x10) (async) getsockopt$inet_sctp6_SCTP_MAX_BURST(r4, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000300)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r5, 0x84, 0x22, &(0x7f0000000100)={0x1, 0x6, 0x2, 0x0, r7}, 0x10) (async) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r4, 0x84, 0x70, &(0x7f0000000200)={r7, @in6={{0xa, 0x4e23, 0x81, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x9}}, [0x543, 0xd, 0xffffffff, 0x4, 0x100000001, 0x3, 0x392, 0x100000001, 0xfffffffffffffffb, 0xfc3, 0x4a, 0x5, 0x4, 0x4, 0x6]}, &(0x7f0000000000)=0x100) 28.00584485s ago: executing program 32 (id=119): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x6c, r1, 0x1, 0x0, 0x20, {}, [@TIPC_NLA_BEARER={0x58, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4, 0x2, @loopback}}, {0x20, 0x2, @in6={0xa, 0x0, 0x0, @remote}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}]}]}, 0x6c}}, 0x0) (async) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x2, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) (async) r4 = dup3(r3, r2, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0xb, 0x0, 0x0}) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x4e20, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, 0x9}]}, &(0x7f00000002c0)=0x10) (async) getsockopt$inet_sctp6_SCTP_MAX_BURST(r4, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000300)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r5, 0x84, 0x22, &(0x7f0000000100)={0x1, 0x6, 0x2, 0x0, r7}, 0x10) (async) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r4, 0x84, 0x70, &(0x7f0000000200)={r7, @in6={{0xa, 0x4e23, 0x81, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x9}}, [0x543, 0xd, 0xffffffff, 0x4, 0x100000001, 0x3, 0x392, 0x100000001, 0xfffffffffffffffb, 0xfc3, 0x4a, 0x5, 0x4, 0x4, 0x6]}, &(0x7f0000000000)=0x100) 13.257951611s ago: executing program 1 (id=155): syz_emit_ethernet(0x52, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb08004c", @ANYRES32=0x41424344, @ANYRES32=0x41424344], 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x10000, 0x0) r0 = add_key$user(&(0x7f0000000180), &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000280)="d25a9850a9d77f733e1a00000000", 0xe, 0xfffffffffffffffe) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'erspan0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000018c0)={&(0x7f0000000040)=ANY=[@ANYRES32=r2], 0x48}, 0x1, 0x0, 0x0, 0x4000011}, 0x0) r3 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r0, r3, r0}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0) r5 = add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) keyctl$read(0xb, r5, &(0x7f0000000240)=""/112, 0x349b7f55) keyctl$search(0xa, r0, &(0x7f00000001c0)='keyring\x00', &(0x7f0000000240)={'syz', 0x2}, r5) r6 = socket$unix(0x1, 0x1, 0x0) bind$unix(r6, &(0x7f0000003000)=@file={0x1}, 0x6e) r7 = socket$unix(0x1, 0x1, 0x0) bind$unix(r7, &(0x7f0000003000)=@abs={0x1, 0x0, 0xffffffff}, 0x6e) r8 = io_uring_setup(0x1fc3, &(0x7f00000002c0)={0x0, 0x4bb2, 0x1000, 0x2, 0x27}) r9 = syz_open_dev$usbmon(&(0x7f0000000900), 0x7, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) preadv(r9, &(0x7f0000001d00)=[{&(0x7f0000000140)=""/117, 0x75}], 0x1, 0xff, 0xb26) close_range(r8, 0xffffffffffffffff, 0x0) r10 = syz_open_procfs(0x0, &(0x7f0000000200)='net/ptype\x00') pread64(r10, &(0x7f0000000480)=""/177, 0xb1, 0xe0) add_key$user(&(0x7f0000000080), 0x0, 0x0, 0x0, 0x0) r11 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r12 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(r12, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="180000000c14010000000000000000000800410000000000896ff56723adf8c947189188a7c5c3576bd0858cad38dd269ae9eb392751aebe343dc8ce28a37bbacded6eb60ef7425845c6795d9e9df6b8775bc9db6d9cd462588122f8d151"], 0x18}}, 0x0) r13 = dup(r11) ioctl$KVM_SET_USER_MEMORY_REGION(r11, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) ioctl$KVM_CREATE_VCPU(r13, 0xae41, 0x2) 10.92418926s ago: executing program 0 (id=156): socket$inet(0xa, 0x801, 0x84) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x20000000, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x8, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="18080000000000000000000000ff010018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014008900b7030000000000008500000005000000bf0900000000000055090100000000009500000000000000b7020000000000007baaf8ff00000000b509080089ffffff7baaf0ff00000000bf8700000000000007070000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018280000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7050000080000004600000076000000bf98000000000000b5080000000000008500000007000000b70000000000000095000000000000"], &(0x7f0000000980)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 10.107879876s ago: executing program 1 (id=158): pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, 0x0) keyctl$session_to_parent(0x12) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x34, r4, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_CHANNELS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}, @ETHTOOL_A_CHANNELS_RX_COUNT={0x8, 0x6, 0x5}]}, 0x34}}, 0x0) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) syz_usb_connect(0x0, 0x5f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b1f203401e0903003bd7010203010902"], 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000001400)=ANY=[@ANYBLOB="58000000020601020000000000000000000000000c00078008001240000600000500010006000000050005000a00000005000400000000000900020073797a310000000011000300686173683a69702c706f727400000000a9a1ec0906f1df8060e388afe27ac00064c8500bfd9438b3348632f99393f2f0dc4a710135dcbed09504383456d7aaac938cee62e91eb97b8a"], 0x58}}, 0x0) r6 = open(0x0, 0x0, 0x0) r7 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000001880)="5c00000012006bab9e3de3d86e6c1dffff137e0300000000000000b68675f8001d000a00a0e69ee517d34460bc24eab556a7e6241e6182949a36c23d3b48dfd8cdbf9367b4fa51f60a64c9f408000300060100000800030011000000", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) sendmsg$tipc(r6, &(0x7f0000001380)={&(0x7f00000000c0)=@name={0x1e, 0x2, 0x1, {{0x42, 0x1}, 0x4}}, 0x10, &(0x7f0000000280)=[{&(0x7f0000000200)="ab45b3d24d71effafa5d09c410b578c210cad38a1aa9b36eb645c979b2dfcd5a4247038bb0b38b2d98c5a4b22dad8d80cf3a", 0x32}, {&(0x7f0000000340)="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", 0x1000}], 0x2, &(0x7f0000001340)="46b1c5e9a4204ada96d3a496318cdcc6bf3dae23962a84e85c2d9f2cb1e86cc3145dcb8140", 0x25, 0x24005011}, 0x40) mkdirat(0xffffffffffffffff, 0x0, 0x100) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, &(0x7f00000001c0)=[@text64={0x40, 0x0}], 0x1, 0x4e, 0x0, 0x0) msgsnd(0x0, 0x0, 0x8, 0x800) ioctl$BTRFS_IOC_DEFRAG_RANGE(r1, 0x40309410, &(0x7f0000000180)={0x34, 0x3, 0x2, 0x83a, 0x1, [0x6, 0x9, 0x8, 0x10]}) msgsnd(0x0, &(0x7f00000013c0)=ANY=[@ANYBLOB="96f6"], 0x8, 0x0) msgrcv(0x0, 0x0, 0x0, 0xffffff7f00000000, 0x800) 9.828106441s ago: executing program 4 (id=159): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) writev(r0, &(0x7f0000000000)=[{0x0}, {0x0}, {&(0x7f0000001480)}], 0x3) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0xad82, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) timer_create(0x0, &(0x7f0000000680)={0x0, 0x21, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f0000000500)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={0x30, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_SYNPROXY={0x1c, 0x18, 0x0, 0x1, [@CTA_SYNPROXY_ISN={0x8}, @CTA_SYNPROXY_ITS={0x8}, @CTA_SYNPROXY_TSOFF={0x8}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x4}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000003e000701feffffff00000000017c0000040042800c00018006000600800a0000200002"], 0x44}, 0x1, 0x0, 0x0, 0x40040c0}, 0xc000) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) socket(0x10, 0x80002, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x2}) readv(r2, &(0x7f0000002500)=[{&(0x7f0000001400)=""/227, 0xe3}], 0x1) mlock2(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x2000)=nil, 0x2000, &(0x7f00000000c0)='\x00') prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffc000/0x2000)=nil, 0x2000, &(0x7f0000000b00)='rose0\x00') r3 = socket$kcm(0x2, 0xa, 0x2) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_int(r4, &(0x7f0000000080)='hugetlb.1GB.limit_in_bytes\x00', 0x2, 0x0) write$FUSE_INIT(r5, &(0x7f0000002340)={0x4b, 0xfffffffffffffffe, 0x0, {0x7, 0x29, 0x0, 0x20582a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0xfffffffd}}, 0x50) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', @link_local}) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000006280)="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", 0x2000, 0x0) ioctl$SCSI_IOCTL_GET_PCI(r0, 0x5393, &(0x7f0000000000)) 8.877392715s ago: executing program 0 (id=162): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@ipv4_newrule={0x1c, 0x20, 0x301, 0x70bd2a, 0x25dfdbff, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x24008805) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mmap(&(0x7f0000125000/0x2000)=nil, 0x2000, 0x1000002, 0x40010, 0xffffffffffffffff, 0xf25f1000) syz_usb_connect(0x0, 0x3d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100009662da20402001497747010203010902"], 0x0) socket$inet6(0xa, 0x3, 0x1) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000840)=@raw={'raw\x00', 0x3c1, 0x3, 0x3e8, 0x0, 0x111, 0x4b4, 0x0, 0xd4feffff, 0x318, 0x20a, 0x278, 0x318, 0x278, 0x3, 0x0, {[{{@ipv6={@empty, @empty, [], [], 'ipvlan0\x00', 'team_slave_0\x00', {}, {}, 0x6}, 0x7a, 0x198, 0x1c0, 0x0, {}, [@common=@inet=@tcp={{0x30}, {[], [], 0x0, 0x0, 0x2}}, @common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "6d93eb04697dfa39de04767f46614613a407abbf4ed2e83a63b484dbb3bf6b2a850e79009e2905d2f98ba19f91f3c9faee6d3686e9bee067f4e77d9ad66238750c4100d7ee97ec7646259d90edece6e9787a97bc956c01754c34c5c9518c46178ed5f9194454980e579c80eca35a58dc47d1d5e4ff6e216c724e88c702448587", 0x28}}]}, @common=@inet=@TCPMSS={0x28}}, {{@ipv6={@loopback, @private1, [], [], 'veth1_to_hsr\x00', 'pim6reg1\x00'}, 0x0, 0xf0, 0x158, 0x0, {}, [@common=@unspec=@nfacct={{0x48}, {'syz0\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x448) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) shmat(0x0, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffdfff) r4 = socket$netlink(0x10, 0x3, 0x400000000000004) writev(r4, 0x0, 0x0) sendto(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, 0x0, 0x0, &(0x7f0000000600)=""/191, 0xbf}}], 0x1, 0x0, &(0x7f0000003700)={0x77359400}) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) r5 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r5, 0xc02064b2, &(0x7f0000000040)={0x7, 0x6576, 0x3}) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, 0x11, r5, 0x100000000) syz_open_procfs(0x0, &(0x7f0000002a00)='net/fib_trie\x00') socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00'}) ioctl$vim2m_VIDIOC_S_CTRL(0xffffffffffffffff, 0xc008561c, &(0x7f0000000280)={0xf0f022}) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f00000000c0)={0x2, @pix={0xfeedcafe, 0x8, 0x31435641, 0x3, 0x5, 0xb8, 0x3, 0x6, 0x0, 0x6, 0x0, 0x74c3924ecb75b6cd}}) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/bus/input/handlers\x00', 0x0, 0x0) pread64(r6, 0x0, 0x0, 0xea6) 7.71053074s ago: executing program 4 (id=164): r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz1\x00', 0x200002, 0x0) openat$cgroup_ro(r0, &(0x7f00000000c0)='blkio.bfq.io_service_time\x00', 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r3, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r4, @ANYBLOB="01000000000000001c0012000c000100626f6e6400"], 0x3c}}, 0x0) socket(0x1, 0x803, 0x0) (async) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) (async) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x90646}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'erspan0\x00'}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x3c}, 0x1, 0x0, 0x0, 0x600}, 0x24044800) 6.862798767s ago: executing program 1 (id=167): r0 = open(&(0x7f00009e1000)='./file0\x00', 0x8060, 0x0) fcntl$setlease(r0, 0x400, 0x0) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x54, 0x140f, 0x4, 0x70bd29, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @RDMA_NLDEV_ATTR_CHARDEV_TYPE={0xb, 0x45, 'uverbs\x00'}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @RDMA_NLDEV_ATTR_CHARDEV_TYPE={0x8, 0x45, 'cma\x00'}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8}]}, 0x54}, 0x1, 0x0, 0x0, 0x4008040}, 0x800) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)={0x1c, r4, 0x303, 0x70bd2a, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r5}]}, 0x1c}}, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f00000033c0)={'wlan0\x00', &(0x7f0000003380)=@ethtool_regs={0x4, 0x7}}) r6 = syz_usb_connect$cdc_ncm(0x3, 0x7a, &(0x7f00000004c0)=ANY=[@ANYBLOB="12010000020000402505a1a44000018203010902680002010040000904000001020e0000052406000105240000000d240f0100000000000000000006241a0000000c241b4800f3ff00050080050945811302020000000904010000020d00000904010102020d00000905820200f6f10000090503020002"], 0x0) syz_usb_control_io$cdc_ncm(r6, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r6, 0x0, 0x0) syz_usb_control_io(r6, 0x0, &(0x7f0000000a00)={0x84, &(0x7f00000000c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r6, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r6, &(0x7f0000000040)={0x14, 0x0, &(0x7f0000000000)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r0, 0x13, &(0x7f0000000140)=[0x4, 0x6], 0x2) sendmsg$nl_xfrm(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000580)=@allocspi={0x10c, 0x16, 0x1, 0x0, 0x0, {{{@in6=@loopback, @in=@broadcast}, {@in=@dev, 0x0, 0x6c}, @in6=@mcast2}, 0x0, 0x7fff}, [@proto={0x5, 0x1b}, @mark={0xc, 0x15, {0x35075a, 0x5}}]}, 0x10c}}, 0x0) 6.444037629s ago: executing program 4 (id=169): r0 = socket$unix(0x1, 0x1, 0x0) sendmmsg$unix(r0, &(0x7f0000002640)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)='@', 0x1}], 0x1}}], 0x1, 0x4001) bpf$PROG_LOAD(0x5, &(0x7f0000caefb8)={0x8, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB="8500000061000000540010000000000095000000000000002031c68bcb22e91156926834c7a70b9961c569917368d4a9be9a548a047b8b7157154f69d71963a5cc15a31a9d8eea1058c7364a85483ba7b735fcae382d35d253064a2142185676946165de29291403dd4d4b6811a0053d72509f5f8c7b200c2f02296cb905dae804a6a7bc2bdcec3d1dcfe3518bf75d8cd64eb855ab6609c8886ed4d96ef9f1158bb5f6e9bf3b1f680bd6500b350d0f4219fcdd406416fd"], &(0x7f0000281ffc)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c) connect$pppl2tp(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) openat$audio(0xffffffffffffff9c, 0x0, 0x40000000040201, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000080), 0x8000, 0x0) ioctl$PTP_EXTTS_REQUEST2(r4, 0xc4c03d12, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_open_dev$vim2m(&(0x7f0000000580), 0x8000000000000, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r5, 0xc0d05605, &(0x7f0000000080)={0x2, @sliced={0x8, [0x1, 0x7, 0x5, 0x3ff, 0x9, 0x2, 0x6, 0x9, 0x1ff, 0xdd, 0x494, 0x6, 0x7, 0x5, 0x5, 0x7, 0x6, 0x9, 0x2, 0x5, 0x1, 0x1, 0xd, 0x6, 0x9, 0x8, 0xf6, 0x5, 0x7, 0x9, 0x4, 0x5, 0x9, 0x5, 0x5, 0x258d, 0xa, 0x9, 0x6, 0x1, 0xe, 0x40, 0x7ff, 0x7, 0x7f, 0xdea, 0x5, 0xbb], 0x80000000}}) mknodat(0xffffffffffffffff, 0x0, 0x800, 0x0) sendmsg(r3, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1004000, 0x0, 0xb49, 0x9, 0x6, 0x0, 0x3}, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) r6 = openat$fb0(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r6, 0x4601, &(0x7f0000000380)={0x356, 0x78, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x1, 0x1, 0x4, 0x9f6, 0x3, 0x1ff, 0x803d, 0x5, 0x3, 0x5f, 0x202, 0x1, 0xc}) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='loginuid\x00') write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) sendmsg$NFT_BATCH(r1, 0x0, 0x0) unshare(0x6a040000) 4.804110816s ago: executing program 4 (id=172): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000380), 0x101040) r1 = syz_open_dev$swradio(&(0x7f0000000040), 0x1, 0x2) pread64(r1, &(0x7f00000002c0)=""/75, 0x4b, 0x0) ioctl$VIDIOC_EXPBUF(r1, 0xc0405610, &(0x7f0000000140)={0x3}) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000300)={{0x2, 0x2, 0x0, 0x3, 0x7af}}) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000600), 0x0) r3 = syz_usb_connect(0x0, 0x2d, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000050cb5340450c10108e492940a80909021b00090000000009040002010035040009058dff86"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r3) r4 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) close_range(r4, 0xffffffffffffffff, 0x0) r5 = syz_usb_connect(0x0, 0x24, &(0x7f0000000340)=ANY=[@ANYBLOB="120100005938d74010973077339600000001090212000100001e000904"], 0x0) syz_usb_control_io(r5, 0x0, &(0x7f0000000040)={0x84, &(0x7f0000000100)=ANY=[@ANYRESHEX=r5], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r5, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r5, 0x0, 0x0) syz_usb_control_io$uac1(r5, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r5, 0x0, &(0x7f00000008c0)={0x44, &(0x7f00000005c0)=ANY=[@ANYBLOB="000e460000002ece"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r5, 0x0, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@bridge_delneigh={0x2c, 0x1e, 0x1, 0x0, 0x4, {0x2}, [@NDA_MASTER={0x8, 0x7}, @NDA_DST_IPV4={0x8, 0x1, @initdev={0xac, 0x1e, 0x1, 0x0}}]}, 0x2c}}, 0x0) syz_usb_control_io$cdc_ncm(r5, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f00000003c0)={0x9c9, 0x0, 0x0, 'queue1\x00', 0x200000}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r2, 0x40605346, &(0x7f0000000280)={0x0, 0x0, {0x3}}) syz_usb_control_io$uac1(r5, &(0x7f0000000240)={0x14, &(0x7f00000001c0)={0x20, 0x12, 0x6f, {0x6f, 0x9, "22e65b9403c75d36e95cc252f16698fe82822d28f5add7d93b6699918fdd2570ea3ba892d8f2ed8c45c3830223d47bdc3a912724f5ae1fc5f9fbd28108c0a86a5b90349212a84e750e18d3f29403b11444cdbd1fd186840a813b51e8ee6e0f5228a58a837b82abc55a251527e8"}}, &(0x7f0000000480)={0x0, 0x3, 0x6f, @string={0x6f, 0x3, "95b2c02e2e658279dfbe547c62d589cfa413d91661f5c285081775ba463b0ebbd7031224d1e1c3fb4e1d47ee7dc1e66d1e912b1e326c525f75fe6855c82040301cafb4f8d856558fbed0319cdf9ba97f9ca0954230d6f736377fd84e0d0de91e13f082c92e0e44d0b144993a1b"}}}, &(0x7f0000000780)={0x44, &(0x7f0000000500)={0x20, 0x31, 0x18, "993acbaff46e6828f7361e4cbac748dc7bd311245c7d385b"}, &(0x7f0000000540)={0x0, 0xa, 0x1}, &(0x7f0000000580)={0x0, 0x8, 0x1, 0xb}, &(0x7f0000000640)={0x20, 0x81, 0x1, "e1"}, &(0x7f0000000680)={0x20, 0x82, 0x3, "0c1243"}, &(0x7f00000006c0)={0x20, 0x83, 0x2, "6dfc"}, &(0x7f0000000700)={0x20, 0x84, 0x2, "ff25"}, &(0x7f0000000740)={0x20, 0x85, 0x3, "f13a36"}}) r7 = memfd_secret(0x80000) write$6lowpan_enable(r7, &(0x7f0000000000)='1', 0x1) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f00000000c0)={0x3, 0x2, 0x40, 0x0, 0xc71a56d4406e7211}) 4.261583141s ago: executing program 0 (id=174): r0 = openat$dsp1(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f00000000c0)=0x17) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000080)={0xc}) 4.188203928s ago: executing program 5 (id=175): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c00000010003b1500"/20, @ANYRES32=r0, @ANYBLOB="004a6edb000000000000001400128009000100626f6e64000020000400028008001f0001"], 0x3c}}, 0x0) 4.187825428s ago: executing program 2 (id=176): openat$tun(0xffffffffffffff9c, 0x0, 0x6600, 0x0) r0 = syz_open_procfs$pagemap(0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) ioctl$PAGEMAP_SCAN(r0, 0xc0606610, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x2200, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x240080c5}, 0x800) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r3, &(0x7f0000000200)={0x10, 0x0, 0x0, 0x80065c9}, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={{0x14}, [], {0x14}}, 0x28}}, 0x0) io_uring_enter(0xffffffffffffffff, 0x567, 0x0, 0x0, 0x0, 0x0) fsopen(&(0x7f0000000300)='tmpfs\x00', 0x0) syz_emit_ethernet(0x36, &(0x7f00000001c0)={@local, @local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x2, 0x5, 0x10}}}}}}, 0x0) 4.010401521s ago: executing program 5 (id=177): timer_create(0x7, &(0x7f0000000000)={0x0, 0x26, 0x1, @tid=0xffffffffffffffff}, &(0x7f0000000040)) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) modify_ldt$write(0x1, &(0x7f0000000040), 0x10) modify_ldt$write2(0x11, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1}, 0x10) write$tun(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="034886dd010000000000140000006000000001002f00fe88a43de1a400000000000000007d01ff0200000000000000000000000000010000883e"], 0xfdef) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x8, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b405000040000000711077000000000006000000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd96, &(0x7f0000000080)=""/201, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffd56, 0x10, &(0x7f0000000000), 0x1dd, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r3, 0x40086602, &(0x7f00000018c0)=0x80) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) connect$inet6(r4, &(0x7f0000000000)={0xa, 0xfffc, 0x8, @empty}, 0x1c) setsockopt$inet6_IPV6_ADDRFORM(r4, 0x29, 0x1, &(0x7f0000000040), 0x4) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000280)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="0100000000000000000007000000080001006e00000008000300", @ANYRES32=r7, @ANYBLOB="0c0099000000000000000000050053000100000014000400776c616e310000000000000000000000140006"], 0x60}}, 0x0) r8 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="020000000400000008000000643c0237c1e6e4dd", @ANYRES32=0x0, @ANYBLOB="000200"/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x8, 0x10, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007baa00fe00000000b5080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000418230000", @ANYRES32=r8, @ANYBLOB="0000000000000000b705000008000000850000006900000095"], &(0x7f0000000300)='GPL\x00', 0x1, 0x24, &(0x7f0000001e00)=""/4087, 0x0, 0x1, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) pread64(r6, &(0x7f00000002c0), 0x0, 0x1) 3.911081666s ago: executing program 2 (id=178): sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x41}, 0x809d) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)={0x0, 0x3c}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) write$binfmt_script(r2, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x8001}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r3, &(0x7f0000002b40)=[{{&(0x7f0000001800)={0xa, 0x4e23, 0x6, @mcast2}, 0x1c, 0x0, 0x0, &(0x7f0000002ac0)=[@tclass={{0x14, 0x29, 0x43, 0x5}}, @hoplimit={{0x14, 0x29, 0x34, 0x9}}, @dstopts_2292={{0x18, 0x29, 0x4, {0x89}}}], 0x48}}], 0x1, 0x44004) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f326635004000000f300f20e06635800000000f22e0f30fa6c8", 0x50}], 0x1, 0x0, 0x0, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@RTM_NEWNSID={0x14, 0x58, 0x4837deceb25b88bb, 0x70bd26, 0x25dfdbfd}, 0x14}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004000}, 0x14) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10) ioctl$KVM_RUN(r4, 0xae80, 0x0) 3.847882044s ago: executing program 1 (id=179): r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'ip6tnl0\x00', 0x0}) r2 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x201, 0x2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=@newtfilter={0x24, 0x11, 0x1, 0x691522eb, 0x10000, {0x0, 0x0, 0x74, r5, {0x10, 0x4}, {}, {0x5}}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000002040)=@newtfilter={0x474, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r8, {0x0, 0x7}, {}, {0xa}}, [@filter_kind_options=@f_fw={{0x7}, {0x448, 0x2, [@TCA_FW_POLICE={0x444, 0x2, [@TCA_POLICE_RATE={0x404, 0x2, [0x1d, 0xb, 0xffffffff, 0xffff, 0x9, 0x800, 0x80000001, 0x1, 0xde86, 0x0, 0xfff, 0xe, 0x1, 0xde4b, 0x1352, 0x800, 0x400, 0x4f9b, 0x2e6d, 0x2, 0x10, 0x6, 0xc6, 0xd, 0x1, 0x800, 0x200, 0x0, 0x2053, 0x10001, 0xb, 0x1b57, 0x6, 0x2f33, 0x0, 0xc2, 0x80, 0xaad, 0xb, 0x8, 0x2, 0x6, 0x4, 0x9, 0x5, 0x4, 0xfffffff7, 0x7, 0xffffffff, 0xb, 0x800, 0x80401893, 0x8, 0x8, 0x7fffffff, 0x9, 0x5, 0x1000, 0x9, 0x4, 0x83, 0x7, 0x4, 0x7f, 0x5, 0x8, 0x2, 0x7, 0x2, 0x1, 0x9, 0x7, 0x8, 0x707, 0x81, 0x200, 0x1, 0x1ff, 0x0, 0x5, 0x8, 0x1000, 0x75, 0x0, 0xfffffc01, 0x0, 0x4, 0x8, 0x9, 0x5, 0x2, 0x9, 0x7ff, 0x8, 0x2, 0x7, 0x1000, 0x0, 0xfffffff7, 0x8, 0x3, 0x5, 0x6, 0x1, 0x9, 0x40, 0x1, 0x3f, 0x3b16cd5d, 0xb5, 0xa40, 0x3, 0x0, 0x8e, 0x1, 0xbb, 0x81, 0xffffff37, 0x80000000, 0x6, 0x800, 0x7, 0x3ff, 0x200, 0x101, 0x3ff, 0x0, 0x6, 0x9, 0x8001, 0x71, 0x575, 0x3, 0x7fffffff, 0x3, 0x7, 0x1, 0x7ff, 0xffffff60, 0x2ce, 0x51, 0x9, 0x8, 0x8, 0x10001, 0xfffffffb, 0x4, 0x4, 0x5, 0x8, 0x0, 0x6, 0x4, 0x4, 0x3, 0x0, 0x1, 0xfffffffc, 0x2372, 0x3ff, 0x8, 0xc20e, 0x5, 0x0, 0x7, 0x7, 0x4, 0x6, 0x44, 0x1, 0x6b3, 0xffffffff, 0x1ff, 0xbbc, 0x800, 0x2, 0x0, 0x8001, 0x4, 0x50f, 0x2d4a, 0x1, 0x5, 0x8, 0x1, 0xfff, 0x2, 0x0, 0xfffffff8, 0x7, 0x2, 0x200, 0x8, 0x475c, 0x0, 0x2, 0xffffffff, 0x0, 0x0, 0xdcc8, 0x0, 0x0, 0x1, 0xfc4, 0x5, 0x1, 0x9, 0x268, 0x10001, 0x5, 0x3, 0x3c, 0x6, 0x8001, 0x47, 0x7, 0x0, 0x5, 0x401, 0x9, 0x5, 0x1ff, 0x0, 0x5, 0x7, 0x9, 0xfffffffe, 0x7, 0x8, 0xa, 0x7a3, 0x3, 0x7f, 0x9e12, 0x1, 0x4, 0xdb18, 0x1, 0x10, 0x8, 0x3a28ded7, 0x2, 0x4, 0x3, 0x4, 0x4dbd46c9, 0x923, 0x7, 0xfffffffd, 0xffffffff, 0x12, 0x6, 0x7f, 0x2, 0x3, 0x7]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x7, 0x5, 0xfffff800, 0x2, 0x9, {0x2, 0x2, 0x4000, 0x2, 0x164, 0x1}, {0x98, 0x0, 0xf000, 0x5, 0x9}, 0x6, 0x401, 0xc14}}]}]}}]}, 0x474}, 0x1, 0x0, 0x0, 0x80}, 0x20000000) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x11012, r2, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) sendmsg$nl_route(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=@newlink={0x44, 0x10, 0x403, 0x70bd28, 0x300, {0x0, 0x0, 0x4, 0x0, 0x3ff, 0xc8df8ae552dcbaf7}, [@IFLA_LINK={0x8, 0x5, r10}, @IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x4}}}, @IFLA_TXQLEN={0x8, 0xd, 0x5677f557}]}, 0x44}}, 0x0) ioctl$USBDEVFS_IOCTL(r2, 0xc0105512, &(0x7f0000000100)=@usbdevfs_connect={0xa}) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, 0x0, 0x0, 0x3) syz_clone(0x410c2000, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=@newqdisc={0x54, 0x24, 0xf0b, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, r1, {0x0, 0x4}, {0xffff, 0xffff}, {0xd, 0xf}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x24, 0x2, [@TCA_CAKE_AUTORATE={0x8, 0x9, 0x400}, @TCA_CAKE_ATM={0x8, 0x4, 0x2}, @TCA_CAKE_FLOW_MODE={0x8, 0x5, 0x1}, @TCA_CAKE_WASH={0x8, 0xd, 0x1}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x44004}, 0x0) 3.847507586s ago: executing program 0 (id=180): r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000400)={0x18, 0x0, {0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}, 'lo\x00'}}, 0x1e) recvmmsg(r0, &(0x7f0000005e40)=[{{0x0, 0x0, 0x0}, 0x5}], 0x1, 0x0, 0x0) syz_open_procfs$pagemap(0x0, 0x0) symlinkat(&(0x7f0000002340)='./file1\x00', 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x800, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x5, 0x0, 0x4, 0x7fffffff}]}) r2 = openat(0xffffffffffffff9c, &(0x7f0000002300)='./file2\x00', 0x143042, 0x21) pwritev2(r2, &(0x7f0000000100)=[{&(0x7f0000000000)='\v', 0x1}], 0x1, 0x5405, 0x0, 0x17) read$FUSE(r2, &(0x7f00000002c0)={0x2020}, 0x2020) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0/file0\x00', 0x1c0) r3 = landlock_create_ruleset(&(0x7f0000000180)={0x1587}, 0x47, 0x0) r4 = openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x200000, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r3, 0x1, &(0x7f0000000200)={0x100, r4}, 0x0) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file2\x00', 0x131c80, 0x42) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r3, 0x1, &(0x7f0000000280)={0x100, r5}, 0x0) rename(&(0x7f0000000000)='./file1\x00', &(0x7f0000000140)='./file1\x00') r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0x200000, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r3, 0x1, &(0x7f0000000340)={0x100, r6}, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b0000000000000000"], 0x48) socket$inet_tcp(0x2, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet_udp(0x2, 0x2, 0x0) 3.380002001s ago: executing program 2 (id=181): r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)=@gettclass={0x24, 0x2a, 0x100, 0x70bd2b, 0x25dfdc00, {0x0, 0x0, 0x0, 0x0, {0x7, 0xffff}, {0x5, 0x1}, {0xd, 0xc}}}, 0x24}}, 0x0) getsockname$packet(r2, &(0x7f0000000440)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xd}, {0xffff, 0xffff}, {0x0, 0xffff}}}, 0x24}}, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000002300)={&(0x7f00000017c0)=@newtfilter={0x898, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0x9}, {}, {0xffe0, 0x8}}, [@filter_kind_options=@f_fw={{0x7}, {0x86c, 0x2, [@TCA_FW_POLICE={0x860, 0x2, [@TCA_POLICE_RATE={0x404, 0x2, [0x4, 0xffffff80, 0x3, 0x1, 0x71, 0x7, 0x8dda, 0x8, 0xffc00000, 0xa46e6f21, 0x6, 0x200, 0x0, 0x3, 0xaeb, 0xb, 0x1, 0x1ba, 0x42, 0x7, 0x8, 0x2, 0xf4, 0x5, 0x6, 0x5, 0xfffffff7, 0x7f, 0x0, 0x81, 0x3, 0x6ceb, 0x0, 0x1000, 0xffffffff, 0x991, 0xffff, 0x3, 0x8, 0x5000000, 0x2, 0x8, 0x3, 0x0, 0x3, 0x80000001, 0x0, 0x4, 0xfffffffa, 0x0, 0x10000, 0x4, 0xffff, 0x1, 0x4, 0x4, 0x2, 0x6, 0x1ff, 0xffffffff, 0x5, 0x3, 0x4, 0x7cc, 0xe7, 0xc, 0x8, 0x0, 0x29400, 0x9, 0x4, 0x8, 0xfffffff7, 0x7, 0x8, 0x75, 0x2, 0x2, 0x4, 0x5, 0x4, 0x5, 0x3, 0x4, 0x0, 0x6, 0x3, 0xbc, 0x80000001, 0x888, 0x9, 0x5, 0x9, 0x3, 0x3, 0x0, 0x2b8, 0x7f, 0x5, 0x0, 0x9, 0x7f, 0x8, 0xab9, 0x5, 0x2, 0xffffffc7, 0x40, 0xd0f7, 0xa0, 0x8001, 0x3, 0xb, 0x2, 0x9, 0x4, 0x8, 0x1, 0x1000000, 0x9, 0x83e, 0x9, 0x7, 0x7fffffff, 0xf, 0xd41, 0x0, 0x2, 0x401, 0x0, 0x80000000, 0x80, 0x1, 0xaf, 0xffff0001, 0x0, 0x6, 0xffffffff, 0xa74, 0x3, 0x200, 0x8, 0x308000, 0xfff, 0x538, 0x80, 0x2, 0xe5, 0x8e4, 0x1, 0x9, 0x7, 0x19, 0x7f, 0x100, 0xffff, 0xc, 0xaa7b, 0xf8, 0x1, 0x8, 0x8, 0x7f, 0xfffffe00, 0x8, 0x1, 0x9fb9, 0x40, 0x9, 0x529feba6, 0x8, 0x7, 0xfffff232, 0x0, 0xffff, 0x9, 0x2, 0x2, 0x6, 0x8, 0x800, 0x10001, 0x7, 0x3226, 0xffffff81, 0x0, 0x3, 0x7, 0x8a, 0x4, 0x2, 0x7d32, 0x6, 0x0, 0x6f5, 0x401, 0x2, 0xf3, 0x8, 0x7, 0x3, 0x0, 0xffffffff, 0xd, 0x28000000, 0x0, 0xd15, 0x9, 0x4, 0x95, 0x4, 0x6, 0x81, 0x5, 0xc, 0x707, 0x1, 0x9, 0x3, 0x693c, 0x5, 0xd1, 0x2, 0xd, 0x8, 0xbf, 0x8, 0x100, 0x4, 0x10, 0x4, 0xffff46a7, 0x8f7, 0x7, 0xf7a, 0x599, 0xfffffffc, 0x5, 0x8, 0x0, 0xffffffff, 0x7, 0x80000, 0xb, 0xff, 0x6, 0x6, 0x0, 0x8, 0x5, 0x4, 0x45, 0x8001, 0x9, 0x3, 0x6459]}, @TCA_POLICE_RATE64={0xc, 0x8, 0x9}, @TCA_POLICE_TBF={0x3c, 0x1, {0xc000, 0x3, 0x5, 0x10001, 0x4, {0x1, 0x2, 0x5, 0x8, 0xfffa, 0x3ff}, {0x4, 0x2, 0xc23a, 0x9, 0x8, 0x2}, 0x7ff, 0x61d3, 0x10}}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x1, 0x7f, 0x8, 0x9, 0x6, 0x7, 0x7, 0x81, 0x6, 0xff, 0x6, 0x80000001, 0x2ba, 0x8, 0x38, 0x9f, 0x76f, 0x0, 0xfff, 0x7, 0xfffffff1, 0xf3b, 0x4, 0x1, 0x1, 0x0, 0x8, 0xffff, 0x1, 0x7, 0x7, 0x9, 0x1, 0x63f, 0x6, 0x3, 0x4, 0x100, 0x7, 0x5, 0x4, 0x1, 0x80, 0xbdaa, 0xd, 0x5, 0x9, 0x8, 0x2, 0x1, 0x8, 0x401, 0x8, 0x3, 0x2, 0xf, 0xffffffff, 0x6e, 0x5, 0x0, 0x4, 0x8, 0x2, 0x10000, 0x6, 0x4, 0x7, 0x483861a2, 0x200, 0x7, 0x19ce, 0x6fbe, 0x3, 0x1, 0x8, 0xfffffff7, 0x9, 0x400, 0xe25a, 0x7, 0x101, 0x4, 0x3aa9, 0x7, 0x2, 0x1be5, 0x0, 0xffff7fff, 0x800, 0x5, 0x0, 0x800, 0x3, 0x0, 0x6, 0x4, 0x3, 0x4, 0xc6f, 0xa62, 0x0, 0x4, 0x6, 0x5, 0x101, 0xce, 0x7, 0x10001, 0x6, 0x7, 0x55, 0x6, 0x521e, 0x4, 0x7, 0x5, 0x1f69363, 0xff, 0xfffffffc, 0xffff, 0x4, 0x9, 0x5, 0x4, 0x10, 0x6, 0x5, 0x5, 0x7d46, 0x5, 0x2, 0x0, 0x719aa394, 0x4, 0x0, 0x80000000, 0x1000, 0x1, 0x5, 0x5, 0x80000001, 0x5, 0x5, 0x7, 0x81, 0xb, 0x8000, 0x2, 0x0, 0x100, 0x0, 0x2, 0x48, 0x8, 0x8, 0x7, 0x0, 0x81b3, 0x4, 0x1, 0x8, 0x5, 0x4c0, 0x7f9, 0xa, 0x5, 0x7, 0x6, 0x10, 0x6, 0x6, 0x8, 0x10000, 0x8, 0xe5, 0x4, 0x9, 0xe, 0x101, 0x5, 0x9, 0x6, 0x27e, 0x9, 0x7, 0xff, 0xdbffc9a5, 0x6, 0x8, 0x5, 0x8, 0x0, 0x4, 0x6, 0x9, 0x6, 0x400, 0xa0c, 0x8, 0x6, 0x100, 0x3c26, 0xff, 0x7ff, 0xe3, 0x4, 0xfffffff8, 0x6, 0x568, 0x4, 0x1, 0x2, 0xffff0000, 0xd, 0xffffffff, 0x1, 0x0, 0x1, 0x101, 0x8, 0xb, 0x4, 0x4, 0x5, 0x1, 0x8001, 0x3e827735, 0x10001, 0x2, 0x7, 0x7e3c0838, 0x3, 0xe, 0x9, 0x14, 0x3, 0x3c3f, 0x9, 0x5, 0x5, 0x5, 0x0, 0x9, 0x800, 0x2, 0x9, 0x100, 0x5f, 0x3ff, 0x80000001, 0x234, 0xc, 0x80000000, 0x8, 0x8e, 0xa0cf]}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x5}]}, @TCA_FW_CLASSID={0x8, 0x1, {0xa51c1014a57ab6c7, 0xffea}}]}}]}, 0x898}, 0x1, 0x0, 0x0, 0x10000}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0) syz_io_uring_setup(0x4e7, &(0x7f0000000280)={0x0, 0xc, 0x10100, 0x0, 0x1d4, 0x0, r1}, &(0x7f0000000240), &(0x7f0000000140)) ioctl$SNDRV_CTL_IOCTL_TLV_WRITE(r1, 0xc008551b, &(0x7f0000000000)={0x2, 0xc, [0x5, 0xfa9a, 0x9]}) pselect6(0x7dcc7adf4cc4be85, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x700}, &(0x7f0000000240), &(0x7f00000002c0)={&(0x7f0000000280), 0x8}) syz_usb_connect(0x0, 0x24, &(0x7f0000000500)={{0x12, 0x1, 0x0, 0xc1, 0x66, 0xa0, 0x10, 0x483, 0x1234, 0xff76, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x7b, 0xe4, 0xa8}}]}}]}}, 0x0) 3.311604369s ago: executing program 5 (id=182): r0 = socket$unix(0x1, 0x1, 0x0) sendmmsg$unix(r0, &(0x7f0000002640)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)='@', 0x1}], 0x1}}], 0x1, 0x4001) bpf$PROG_LOAD(0x5, &(0x7f0000caefb8)={0x8, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB="8500000061000000540010000000000095000000000000002031c68bcb22e91156926834c7a70b9961c569917368d4a9be9a548a047b8b7157154f69d71963a5cc15a31a9d8eea1058c7364a85483ba7b735fcae382d35d253064a2142185676946165de29291403dd4d4b6811a0053d72509f5f8c7b200c2f02296cb905dae804a6a7bc2bdcec3d1dcfe3518bf75d8cd64eb855ab6609c8886ed4d96ef9f1158bb5f6e9bf3b1f680bd6500b350d0f4219fcdd406416fd"], &(0x7f0000281ffc)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c) connect$pppl2tp(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) openat$audio(0xffffffffffffff9c, 0x0, 0x40000000040201, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000080), 0x8000, 0x0) ioctl$PTP_EXTTS_REQUEST2(r4, 0xc4c03d12, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_open_dev$vim2m(&(0x7f0000000580), 0x8000000000000, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r5, 0xc0d05605, &(0x7f0000000080)={0x2, @sliced={0x8, [0x1, 0x7, 0x5, 0x3ff, 0x9, 0x2, 0x6, 0x9, 0x1ff, 0xdd, 0x494, 0x6, 0x7, 0x5, 0x5, 0x7, 0x6, 0x9, 0x2, 0x5, 0x1, 0x1, 0xd, 0x6, 0x9, 0x8, 0xf6, 0x5, 0x7, 0x9, 0x4, 0x5, 0x9, 0x5, 0x5, 0x258d, 0xa, 0x9, 0x6, 0x1, 0xe, 0x40, 0x7ff, 0x7, 0x7f, 0xdea, 0x5, 0xbb], 0x80000000}}) mknodat(0xffffffffffffffff, 0x0, 0x800, 0x0) sendmsg(r3, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1004000, 0x0, 0xb49, 0x9, 0x6, 0x0, 0x3}, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) r6 = openat$fb0(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r6, 0x4601, &(0x7f0000000380)={0x356, 0x78, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x1, 0x1, 0x4, 0x9f6, 0x3, 0x1ff, 0x803d, 0x5, 0x3, 0x5f, 0x202, 0x1, 0xc}) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='loginuid\x00') write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) sendmsg$NFT_BATCH(r1, 0x0, 0x0) unshare(0x6a040000) 3.212082408s ago: executing program 1 (id=183): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f00000043c0)=ANY=[@ANYBLOB="bf16000000000000b7070000000100004870000000000000500000000000000095000000000000002ba728041598fbd30cb599e83d24a3aa81d36bb3019c13bd23212fb56fa54f2641d8b02c3815e79c1414eb07eae6f0711e6bd917487960717142fa9ea4318123f602000000000080de89e661168c1886d0d4d94f204e34ff65c26e278ef5b915395b19284a1a4bc72fbc1626e3a2a2ad358061d0ae0209e62f51ee988e6ea604ce974a22a550d6f97080980400003e05df3ceb9f1feae5737ecaa80a666963c474c2a100c788b277beee1cbf9b0a4d3881dcc7b1b85f3c3d44aeaccd3641110bec4e90a6341965c39e4b3431abe802f5ab3e89cf6c662ed4048d3b3e22278d00ce00000000d3a02762c2951257b85802189d74005d2a1bcf9436e192e23fd275985bf31b714f000bcab6fcd610f25f5888000000003f11afc9bd08c6ebfbb89432fb465bc52f49129b9b6150e320c9901de2ebb9000000018e3095c4c5c7a156cec33a667dccaff950ca1e5efdd4c968dacf81baa3a509b1041d06f6b0097c430481824a3f4fddd3c643f630ba175d876defd3541772f26e27c44cfdb2d85d6d29983e830a9cdd79837b3468e8c67a571d0a017c100344c52a6f387a1340bdc8889464f90cc4cd1f570dd39877dfb2ff1ae66e1ce917474b2e650ae630afd014a337ac5d58bcb5e51723257c872c5255f20100000000000000f041b665ab21372c8d8b7bac5b5c784d20a4a24d8dbd75062e1daef9dead619cc6e7baa72707157791c3d2a286ffb8d35452bb5d36c2a8682bf7ecbd53f950ef4709ec01e230d2f53594ef4839c6130c4c13a0cca84b9935f771fd49e480cd9d48aeb12b1d6acabd38a817bcd222614d1f62734d679039a97d2b74f9e8e997ccd314000f7477137f4e8e7025123e783df8b8a17e3aa9fe1f662aef87a065b03cfb65b4dfe4f1b56e1f23128d743753a1de172d683d5892ce9414a1d98ea93e3d35dbb6c23b90cf36e83b8a434a97d09343d7f83079ccb02e69d384146056d125cfa788237874dd42dae334bda042819a2aa24dba1c25be2794448b4f63483026b5e34d44705b76ef29241adab0dd7d68bf975e02069f6f2425e1bc97a3d588085f16bef63a06578d4f5de7bfb6aaa75f16996d536256c02284cb1d3a6fb8cae87691fae365a70c3fc69e1565bba8dd8a8ca049f798abe646f738bebd69413afc9d8a5edd7aaa000000000000001e6c2f2a287c5278a218dbfaffffff00a14db5cfa6819eb1d39c48cfdc80d215c9e16e0c4736c819363154cca4e2f89800d18c89d7f46f679df6c9e2952ae1ebfd0ca88368ee6ce139e8b5822c22cf2e9dde943d34c432e1001171792c65986146666a5490928441f47e0fe5eac41824ca1fd0eb71aa243c88d5480efd8329d9a733d8f9ffffff5f912ac4e34bf6ea8a86da707b03bddb491ba0cc98f6be92c50008a2b50025419d1476c73132ca7ca26ce8a7e3ffb700f09e157f9b844051f1a642aca9ff98c9036471ccff0522903e7bcf62e18f7696bbc280b95e8e0d6fd5644b0ebde3a95b06548862de809d3dae3cccf109f7c78e8479a345e800000000000000000000009455bf417627ce723a5d9103706aba69279500bb82f6b5a3ddc0bd9856712945b70c75ce5b722578820820d010d7a3cffc99fc647d0b82ef26ab708c0b19ed144be51c3b398f0e6bb7a30006000000cba12953d58cff0f0378740fe6662f377b97d8e7cdb047acd083d3cd3856476a60a49ad127ba6570bafc2bbcf9ee721fd9cb467ff071e5604fbf0491245c0000007d932d7a64de4c4aa433fc0840aff7c47da3a4c6966d0000000000000000f6bfbae29e8a6e2a889f6ef6869d82d6bd73eb76b65c7a35a54a4a6b8ad4600e3a972a0bb5971a5f16590b0a03dafa3fd1118765cc8ab9fccf3b51c41a339f200f2fa33006910a679a9ae0187b4d750c4bd244cb0cbfd23b265f4d4da448a7a0d19c5e43eae50a31609dfa2dde267551467eb6475293dd7012cc449009981f22820e57a0eff234ccfe21d7a2302e000669753d3c3432cc14ee1abe724adb6b5431befedd3e22971118f0e21aed1823cb7dde8212a8531bd9691dd4cc6a370e9eb56b3d790b98f2bd0db1e5de6a146597b2cbb7103040d2a39d7965d34df524b760ab92efcce7dd1574052c735935bf6a752c015c7f5ffee9ff66e5dd2866b15b6e0d17618cb1f5c1ee4b051f47db7aa110f499f840a5c965443d725556351ee25fe09f69494b053678dcadcf02e063dff2fa4bef1ac3bbbebe6c74d71ec3b23e29895eff1d1017024fe3e8cc759b05785adc346b7ffd05963f92c1d0d7d90ba878ad89e490f3e29ac51d30632869a534418f916bf6fe8167827a8e6c8f8b391c822805cb0adf1b8bd6947ff208753eb0d208ce14f7b206b2e02c21e963abc5ceb735c1b3c46b0a843de52a903375dfb663a8d8ee9c2b2705c1a81d9d3b9656b219c8cd99c9cafcd0d0540884d97aecb19983fc6af29ab44a82aff9cba921192c665b877af6539bdb1b567f481ba07982e7ad758f4e1eac69e7e88a63960975f490e161e371ec8534791e3b61c685d900a9c0839208356b53750e76fcc3c2d1bddcbd83897921414d0c02e8188f3df79ea2a5c5444004830e6cb227ca1bdafb977c00000000003a417193b8c5d793687335a930867094fd6a78218218e04b705ec62f1608cb569b81914e68f175b392af6bc4fd2121d7fd276af2c97a441b56e7a0687d98b8e76d8d0d231e4fe00be1de76bd19cc12e2bd938eb681ed6bc951c1b4f7c51af59eea4d40c6000000000200778a677b72786311153271a3313da02645e11761699e4d04ac86dd14ff7b9a10d3fa74696fe3953a5b7706bf5d1faba4b18808d9cb0e9db696dec4e0820ee4028d7225a2c9c427cf64cbde6fba056b2006b7a37c1181d530fb865e235cd302f3b4071ee5237ada986b9e5e3144bf479f277f10656ad3744037ccc9c63685a6f1109d2ea73773d3635f61497f1fa1ea4a16f601800bf3e59141fbf05a96113320c445f9ba8596970d5254727e804fbd99ccefb7c09269dd2c5c25e56e169ac15980f3f85f7ca36dd5950ef5b64fd46f123311829534a82940994199b3cf7a8fabea9930952f5da9b909c1946e55289f668c423fcbb31ae91864c882313151741a67538c9689dc8ecc9903c7041e5c0704e2fa55a756487517a7445cbd9e3f5175e41c00000000000000000000000000bf98efd587fffe326f474b0b089c017b16c0062cbce96f5adebec52a79f9363909842f79c50a1520be46d87003137e4c5031f00123e812a5e37cd52c9eb7336281cb8c6ce9934b157d7875a70eaf103cb3938e2361c51cd1eab8a26b232acf6bf0ab829c26dab637538b2eb1420d812d2b80c777710ba0f18e4661681aa218d9ba54023ab4305d77eb15611ae2545835e9d30e9f6d4fb43a291c69545a1eea0f8720431132d8549f99bf6c5cb060da70cbb59d0a000000000034d083fc37d2449f72de0cbea4bc1dc89c136cdbc504f849d5502d77a95c7bfff4cd9c03058d0d4d07ea64824f1acf2b39389f675f39d01719cdbab3f1ce10609c8d7b3e37cb99b41da5e485a441b6a103549f55ab09dc98767763d1f2fafd45bb7d2b40050d1f8292f4d9ec6d0000000000003932062290f4996fdd55b06023437e9e2072daf7f5d82f6f1b5b89a41134f4dc2e65bb11272fdf8c8141f41d6160b3d8b6ecd16d14267f61b4881adee7f07f3d6af5ae79e16fe2c3f55ac7a6392d2e1d9b4286b6c3e1f5a76b85ed6e1f0000c67e6c5fcdc8c39381be4799b8cb2d08b8262c807dd755e22b801162381aa9d1af2bbc9cfd497585337eac408b8475b47a392a10cae349160f128e5f873a58064eb400c36a90624f6aed398a215e9ce64522ab249f67c38a656d32ecff5cdb2b039c4abf349d2c0f88a42e9189bbfa7f5cf35b6e7ef8f9d33163b7ea87550fb1ba334c83e3aec4714c9c4ca3ecb04f2720237615a28bf310b58ffa2a103216fdcc8c2d8f5d55e5e7ebf147105272aaae56e86d856b3cf79a3f7306436762dd1a08ce873e07cebc7892ec6f9f696da38feed3dc0001500e34adae1ba89a32bad2af9030f840f1ba46cdadd5cbacc59352c290f55d971b65953533668c25f21d8d62d849e9058eaa97c63491568887548f668cdbca2abf01a361a0b64d8b523e669da350e3ec7445dfbf366b0b3bc5e76824a1e43eaaeca70db90f2fa39596443447671933079a24fe3681ad9ac361f71ac279a688f10a1cc4df1112105edebc5e3bbc394c8305ab129ca2dfb9b7c5e9d097bd01b495cccefddce569117f7f5d6a6270ff0f0f4c371029ca8489571b55841bf3dd003bc81460eee57ceb3c33f4e9300b0144fe040cf5fcfcbb616c2070237881afdb314cecd1623f3e55ab8b7627fa1be349145a8d6313cbc790eefe2020138e82fb9d351be4ddcbcc9bc048dd3db5828d16baec6e07a007f0030f34ea3cfd524d6fa1d45da5641d6c94e1d3ae7fba1c85035d2a60ef1696e0d96aa1c60019f73ae0aa6113cd66ef26b5777337c26e1461405d86fdf091edd526f25cada439bb3609ed5c35ab60a539ade786bd6004d0ea3edbd6c4da0d8e8be8c771c8c8a0b07d9859e04adb18964dcce9bce546074c26dffbc2df372a016e8c845d4257000000000000000000000000000000000000f29657697d9c2b132b2dc2f5ea5122836582a7e85fe2bc166f17aefd9d861de0191f5277d4a3b5afb6f23d9eea2459f7844606e1202768d83c24cc791bde44a448022bbfa571fe029a7b2d5152639ee283894ab6168992ff0acc01b39a078f285ce615351f262019586eb9447bb3eaffd7b53d8f37ca6c5f1027dd5b7592996c8a7789ba108979cc9ad07ed86682843e2eaa855dd01443ee6ffde1811f10039d5d14458177096e15cc4d8f2582a1bea5ccb9f10f615c87c441dc970ec896a5af6bf69b50a244bc138a1cae9868c3079bafe69769000000000000000000e99b63029d219cd3545a8426b56554a9f265d3557eefb3602894507c256cb8ee9ebadfecb6afeb84ba757bfa8d00a5af0dd6aa1e8144ef8ef04410d52204c335408941b8eccc5c734cc6a05247142ed647f89bcb5c043acfb382b9cc918bc3cdc368983157851cdf678800aa7eb2a6cbc12c7ae23bc88b8f10223ab2a093429f3f6965bc5af0114cf6f246e891e20ecaad7059866506c3000000000c3230e901e885b7a4a36bdfdb5ce7a2e5807a0f4c1d461d1243fccf51b875b49490cd7d044e7a1e1a4c013fae1f070a8a37ab90da2efc6c875b3aab34b75a252072691fc97bef0fed8ee597ab83bb53f89c36bc2ee3ad54904542f66dc94132df75fc9944882d6f2e13b7057e"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffe89, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000040)=r2, 0x4) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x1) (async) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x1) ioctl$KVM_SET_MSRS(r5, 0x4008ae89, &(0x7f0000000080)=ANY=[@ANYBLOB="01000000000000008202"]) sendmsg$inet(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000340)="25b096f681cd731c3f3a9badc4e3cf5edeae1f3b5082d7ab3a97c053df68744e7c7e24d0b59997bab4bccff8363b275de3510b0ebe4275d8d2f153395668e3d608e358fc2294263c03f8dc4f8bf194e4fde4600a2dec2f483a914e2fde0cbc344a2b9fc18dd198966045a6d4d4eb8571e8bb69e6724e37fcbaa6e4c64050b47256b9bb17f5c0aa5101e015ecdcb62fec46fc0205512535", 0x97}, {&(0x7f0000000280)="d3a88bea5916e313729a3989393caca70c74cd74e62e524bdd37be131ad827f911027e70ccf679d8e7c0cd3333095f83d6d473db345ded2ac8acaa87503de74c82431758e8e11e3ecb7bce02d6cd65f4eb88cc49ceb9e39f7117eb0f62323dc9b80dea447b0c96a383f14281bb87b09de0a6153ceeaae2b50a2b0f0f41810f379f9c3a1f3938461829d716a4bda86ab11b41f754bc15d71b", 0xfed0}], 0x2}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) socket$packet(0x11, 0x3, 0x300) (async) r7 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) (async) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="200000001000250800170000000000000a000000", @ANYRES32=r8, @ANYBLOB="01"], 0x20}}, 0x0) sendmsg$IPSET_CMD_TEST(r6, &(0x7f0000000440)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000400)={&(0x7f0000000240)={0x3c, 0xb, 0x6, 0x3, 0x0, 0x0, {0x1, 0x0, 0xa}, [@IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x65eb}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x4}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40041}, 0x8) 2.84097301s ago: executing program 0 (id=184): r0 = syz_open_dev$usbfs(&(0x7f0000000480), 0x77, 0x41341) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000200)) r1 = syz_open_dev$usbfs(&(0x7f0000000000), 0x3, 0x4c0002) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r2, 0x0, 0x0) setsockopt$inet_opts(r2, 0x0, 0xf, &(0x7f0000000140)="d1", 0x1) r3 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r3, &(0x7f0000000040)={0xa, 0x0, 0x7ff, @mcast1, 0x8}, 0x20) r4 = socket$inet6_sctp(0xa, 0x0, 0x84) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f00000001c0)={0x0, 0x74, &(0x7f0000000340)=[@in={0x2, 0x4e21, @local}, @in={0x2, 0x4e22, @private=0xa010102}, @in6={0xa, 0x4e22, 0x0, @local, 0x8}, @in6={0xa, 0x4e21, 0x2, @dev={0xfe, 0x80, '\x00', 0x3f}, 0x5}, @in6={0xa, 0x4e22, 0x6, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x2}]}, &(0x7f00000002c0)=0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r7 = socket(0x400000000010, 0x3, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r9, {0x0, 0x1}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)=@newtfilter={0x8c, 0x2c, 0xd27, 0x30bd2b, 0x25dfdbfd, {0x0, 0x0, 0x0, r9, {0x1, 0xffff}, {}, {0x7}}, [@filter_kind_options=@f_flow={{0x9}, {0x5c, 0x2, [@TCA_FLOW_EMATCHES={0x58, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x7}}, @TCA_EMATCH_TREE_LIST={0x4c, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0x48, 0x1, 0x0, 0x0, {{0x2008, 0x9, 0x40}, [@TCA_EM_IPT_NFPROTO={0x5, 0x4, 0x2}, @TCA_EM_IPT_MATCH_DATA={0x4}, @TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_MATCH_DATA={0xc, 0x5, "0706c7084b882b35a2d5f45d67a0e2420032d66057cd805c106842d50b55"}]}}]}]}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x10}, 0x2008c014) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r4, 0x84, 0x77, &(0x7f0000000300)={r5, 0x2, 0x7, [0xe, 0x7, 0x5943, 0x3ff, 0xabd6, 0x5, 0x0]}, 0x16) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000180)=@usbdevfs_driver={0x5, 0x10001, &(0x7f0000000080)="d3a78178818e2fee7e3c62cdd6d6d6d4c2974cebda39cf07a45217c286da5b8c9a8d994d833961a075bc00e4a62e6aa56cae8c357547cd3074aa97a69d55314a0602ba894fc42a29564f098129d17beeacc2deb7fa8fa702edce4c3a2238d6c2506674b69cb46b075760637263b89487247297be8228b3bff476a86de7ab2951346ce636eb42c6b8321593990683221623fd569287ac946fc560238c0a07d7c90715b246faef3d8e5be88125ea26365123a9be017a73014efb2a98e20d4d882afd338adbf2f3207923d833c9a1f75747cc04a2e5761f"}) 2.800194537s ago: executing program 1 (id=185): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@ipv4_newrule={0x1c, 0x20, 0x301, 0x70bd2a, 0x25dfdbff, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x24008805) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mmap(&(0x7f0000125000/0x2000)=nil, 0x2000, 0x1000002, 0x40010, 0xffffffffffffffff, 0xf25f1000) syz_usb_connect(0x0, 0x3d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100009662da20402001497747010203010902"], 0x0) socket$inet6(0xa, 0x3, 0x1) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000840)=@raw={'raw\x00', 0x3c1, 0x3, 0x3e8, 0x0, 0x111, 0x4b4, 0x0, 0xd4feffff, 0x318, 0x20a, 0x278, 0x318, 0x278, 0x3, 0x0, {[{{@ipv6={@empty, @empty, [], [], 'ipvlan0\x00', 'team_slave_0\x00', {}, {}, 0x6}, 0x7a, 0x198, 0x1c0, 0x0, {}, [@common=@inet=@tcp={{0x30}, {[], [], 0x0, 0x0, 0x2}}, @common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "6d93eb04697dfa39de04767f46614613a407abbf4ed2e83a63b484dbb3bf6b2a850e79009e2905d2f98ba19f91f3c9faee6d3686e9bee067f4e77d9ad66238750c4100d7ee97ec7646259d90edece6e9787a97bc956c01754c34c5c9518c46178ed5f9194454980e579c80eca35a58dc47d1d5e4ff6e216c724e88c702448587", 0x28}}]}, @common=@inet=@TCPMSS={0x28}}, {{@ipv6={@loopback, @private1, [], [], 'veth1_to_hsr\x00', 'pim6reg1\x00'}, 0x0, 0xf0, 0x158, 0x0, {}, [@common=@unspec=@nfacct={{0x48}, {'syz0\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x448) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) shmat(0x0, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffdfff) r4 = socket$netlink(0x10, 0x3, 0x400000000000004) writev(r4, 0x0, 0x0) sendto(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, 0x0, 0x0, &(0x7f0000000600)=""/191, 0xbf}}], 0x1, 0x0, &(0x7f0000003700)={0x77359400}) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) r5 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r5, 0xc02064b2, &(0x7f0000000040)={0x7, 0x6576, 0x3}) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, 0x11, r5, 0x100000000) syz_open_procfs(0x0, &(0x7f0000002a00)='net/fib_trie\x00') socket$netlink(0x10, 0x3, 0x0) r6 = syz_open_dev$vim2m(0x0, 0x800, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r6, 0xc008561c, &(0x7f0000000280)={0xf0f022}) ioctl$vim2m_VIDIOC_S_FMT(r6, 0xc0d05605, &(0x7f00000000c0)={0x2, @pix={0xfeedcafe, 0x8, 0x31435641, 0x3, 0x5, 0xb8, 0x3, 0x6, 0x0, 0x6, 0x0, 0x74c3924ecb75b6cd}}) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/bus/input/handlers\x00', 0x0, 0x0) pread64(r7, 0x0, 0x0, 0xea6) 2.021788104s ago: executing program 0 (id=186): socket$alg(0x26, 0x5, 0x0) madvise(&(0x7f0000171000/0x13000)=nil, 0x13000, 0x14) modify_ldt$write2(0x11, &(0x7f0000000040), 0x10) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone(0x640c7000, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000140), 0x102, 0x0) write(r0, 0x0, 0x0) syz_clone(0x4200000, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) syz_usb_connect(0x3, 0x5e, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000cb62fc40a728ab7139df0102030109024c0001000000000904f6000002098e00052406e40005240006000d240f0105000000ffffd809ff06241a0e0000052406000105240900000d240f"], 0x0) socket$packet(0x11, 0x3, 0x300) r2 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC(r2, 0x0, 0xcc, &(0x7f0000000140)={@multicast2, @multicast1, 0x0, "aaa517d60f2811d48c8a2cc60c4380bc23b510d442ff13482864280a9c0f4eb5"}, 0x3c) setsockopt$MRT_ADD_MFC_PROXY(r2, 0x0, 0xd2, &(0x7f0000000040)={@multicast2, @multicast1, 0x2, "4f6fb4d1af0f724e6118ecd4ac1100843af297baebb0efcdf5a284da144a011a"}, 0x3c) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000001c0)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c0000004a000300000000000a00800000000000", @ANYRES32=r3, @ANYBLOB='\x00\x00\x00\x00'], 0x1c}}, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000300)={'wg0\x00', 0x0}) sendto$packet(r4, &(0x7f0000000080)="5c0001", 0x3, 0x0, &(0x7f0000000140)={0x11, 0xf7, r5, 0x1, 0x0, 0x6, @remote}, 0x14) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000300)={'geneve0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000100)=@delchain={0x24, 0x11, 0x1, 0x70bd2b, 0x0, {0x0, 0x0, 0x0, r8, {0x10, 0xf}, {0xb, 0xc}, {0x7, 0x8}}}, 0x24}, 0x1, 0x0, 0x0, 0x841}, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000001c0)={'gretap0\x00', &(0x7f0000000140)={'sit0\x00', 0x0, 0x20, 0x1, 0x1, 0xffff, {{0x11, 0x4, 0x0, 0x18, 0x44, 0x68, 0x0, 0x86, 0x2f, 0x0, @empty, @private=0xa010102, {[@timestamp_prespec={0x44, 0xc, 0x82, 0x3, 0x0, [{@empty, 0x34}]}, @timestamp_prespec={0x44, 0x24, 0xb, 0x3, 0xd, [{@local, 0xffffffff}, {@loopback, 0x7}, {@empty, 0x5380710b}, {@broadcast, 0x4}]}]}}}}}) r9 = socket$packet(0x11, 0x2, 0x300) r10 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="6800000010000200"/20, @ANYRES32=0x0, @ANYBLOB="0422000000000000480012800e0001006970386772657461700000003400028008000100", @ANYRES32=r11, @ANYBLOB="14000600fe80000000000000000000000000001514000700200100"/40], 0x68}}, 0x0) sendto$packet(r9, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x11, 0x88a8, r11, 0x1, 0x4, 0x6, @remote}, 0x14) 1.566620164s ago: executing program 4 (id=187): sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB="88000000000101040000000000000000020000002400018014000180"], 0x88}}, 0x0) (async) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB="88000000000101040000000000000000020000002400018014000180"], 0x88}}, 0x0) r0 = syz_open_dev$sndpcmp(&(0x7f0000000080), 0x5, 0xa200) ioctl$SNDRV_PCM_IOCTL_STATUS_EXT32(r0, 0xc06c4124, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) 1.477004219s ago: executing program 5 (id=188): openat$tun(0xffffffffffffff9c, 0x0, 0x6600, 0x0) r0 = syz_open_procfs$pagemap(0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) ioctl$PAGEMAP_SCAN(r0, 0xc0606610, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x2200, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x240080c5}, 0x800) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r3, &(0x7f0000000200)={0x10, 0x0, 0x0, 0x80065c9}, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={{0x14}, [], {0x14}}, 0x28}}, 0x0) io_uring_enter(0xffffffffffffffff, 0x567, 0x0, 0x0, 0x0, 0x0) fsopen(&(0x7f0000000300)='tmpfs\x00', 0x0) syz_emit_ethernet(0x36, &(0x7f00000001c0)={@local, @local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x2, 0x5, 0x10}}}}}}, 0x0) 1.118333397s ago: executing program 4 (id=189): r0 = socket$netlink(0x10, 0x3, 0x2) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, 0x0, 0x0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000180)=ANY=[@ANYBLOB="12010000cd4f70202b050318620c000000010902120001000000000904"], 0x0) syz_usb_control_io$printer(r1, 0x0, &(0x7f0000005f00)={0x34, &(0x7f0000000300)=ANY=[@ANYBLOB="40140b00000017"], 0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$netlink(r0, 0x10e, 0x9, &(0x7f0000001840)=""/42, &(0x7f0000000100)=0x2a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) syz_usb_connect(0x0, 0x5f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b1f203401e0903003bd7010203010902"], 0x0) socket$inet_smc(0x2b, 0x1, 0x0) r4 = socket$pppl2tp(0x18, 0x1, 0x1) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"/2944], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd64, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_TID_CONFIG(r5, &(0x7f0000000c00)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[], 0x34}, 0x1, 0x0, 0x0, 0x240048c5}, 0x0) ioctl$SIOCSIFMTU(r4, 0x8923, &(0x7f0000000100)={'vlan0\x00', 0x40}) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xa, &(0x7f0000000000)=0x2, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x8, 0x3, &(0x7f00000005c0)=ANY=[@ANYBLOB="7a0a00ff00000000711078000000000095000000000000004448f8ddefcfd1e0c994af54e0b08c02fe1ff485c25d2a0a457883a32cceae"], &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r6 = socket$inet6_udp(0xa, 0x2, 0x0) syz_open_dev$usbfs(&(0x7f0000000040), 0x76, 0x141201) r7 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r7, 0x107, 0xf, &(0x7f0000000440)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000300)={'ip6_vti0\x00', 0x0}) sendto$packet(r7, &(0x7f0000000180)="10030600e0ff020004004788aa96a13b", 0x10, 0x0, &(0x7f0000000140)={0x11, 0x0, r8, 0x1, 0x0, 0x6, @broadcast}, 0x14) getsockopt$inet_int(0xffffffffffffffff, 0x10d, 0xd2, &(0x7f0000000080), &(0x7f0000000000)=0x4) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000c80)={'lo\x00'}) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, 0x0, &(0x7f0000000140)) 1.117823617s ago: executing program 5 (id=190): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000006c0)=ANY=[@ANYBLOB="44000000090601020000000000000000000000000900020073797a310000000005000100070000001c0007800c00018008000140fdffffff0c00028008000140"], 0x44}, 0x1, 0x0, 0x0, 0x10040047}, 0x240008c4) (fail_nth: 3) 1.012028537s ago: executing program 2 (id=191): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000006c0)=ANY=[@ANYBLOB="44000000090601020000000000000000000000000900020073797a310000000005000100070000001c0007800c00018008000140fdffffff0c00028008000140"], 0x44}, 0x1, 0x0, 0x0, 0x10040047}, 0x240008c4) 753.237486ms ago: executing program 5 (id=192): r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000080)={'vxcan1\x00', 0x0}) connect$can_bcm(r0, &(0x7f0000000000)={0x1d, r1}, 0x10) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000280)=0xd9, 0x4) readv(r0, &(0x7f0000000240)=[{&(0x7f0000000800)=""/153, 0x7}, {0x0}], 0x2) r2 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card0/oss_mixer\x00', 0x1, 0x0) r3 = socket(0x10, 0x3, 0x4) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)=@newqdisc={0x68, 0x14, 0xf0b, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, {0x4}, {0xb, 0x1}, {0x4}}, [@TCA_STAB={0x44, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0xb, 0xfc, 0x1ff, 0xa, 0x0, 0x0, 0x7c}}, {0x4}}, {{0x1c, 0x1, {0x1, 0x18, 0x8, 0xd, 0x2, 0x8, 0x2}}, {0x4}}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x24008814}, 0x20000040) write$proc_mixer(r2, &(0x7f00000000c0)=[{'LINE1', @val={' \'', 'Synth'}}], 0x23) close(r2) sendmsg$can_bcm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYRESDEC=r0, @ANYRES64=0x0, @ANYRES64=r0], 0x80}, 0x1, 0x0, 0x0, 0x800}, 0x4048041) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="4400000010000000000000000400002e00000040", @ANYRES32=0x0, @ANYBLOB="00000000400000002400128009000100626f6e64000000001400028008000a000000000005001d"], 0x44}}, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = socket$inet_udp(0x2, 0x2, 0x0) close(r7) socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="4808000010001fff3a4ee9bfd5c3a3696c40af0b", @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800a00010076786c616e"], 0x3}}, 0x0) write$binfmt_misc(r6, &(0x7f0000000000), 0xfffffecc) splice(r5, 0x0, r7, 0x0, 0x4ffe2, 0x0) r8 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)={0x14, r8, 0x1, 0x0, 0x0, {0x7}}, 0x14}}, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), r4) syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120100006325a640402000207265970000010902240001000000000904000002214c6a0009050702000000da00090589"], 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(0xffffffffffffffff, 0xc0a85320, &(0x7f0000000180)={{0x7, 0x9}, 'port1\x00', 0x20, 0x800, 0x5, 0x2, 0x3, 0x8, 0xb68, 0x0, 0x2, 0x7}) 708.916483ms ago: executing program 2 (id=193): r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'ip6tnl0\x00', 0x0}) r2 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x201, 0x2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=@newtfilter={0x24, 0x11, 0x1, 0x691522eb, 0x10000, {0x0, 0x0, 0x74, r5, {0x10, 0x4}, {}, {0x5}}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000002040)=@newtfilter={0x474, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r8, {0x0, 0x7}, {}, {0xa}}, [@filter_kind_options=@f_fw={{0x7}, {0x448, 0x2, [@TCA_FW_POLICE={0x444, 0x2, [@TCA_POLICE_RATE={0x404, 0x2, [0x1d, 0xb, 0xffffffff, 0xffff, 0x9, 0x800, 0x80000001, 0x1, 0xde86, 0x0, 0xfff, 0xe, 0x1, 0xde4b, 0x1352, 0x800, 0x400, 0x4f9b, 0x2e6d, 0x2, 0x10, 0x6, 0xc6, 0xd, 0x1, 0x800, 0x200, 0x0, 0x2053, 0x10001, 0xb, 0x1b57, 0x6, 0x2f33, 0x0, 0xc2, 0x80, 0xaad, 0xb, 0x8, 0x2, 0x6, 0x4, 0x9, 0x5, 0x4, 0xfffffff7, 0x7, 0xffffffff, 0xb, 0x800, 0x80401893, 0x8, 0x8, 0x7fffffff, 0x9, 0x5, 0x1000, 0x9, 0x4, 0x83, 0x7, 0x4, 0x7f, 0x5, 0x8, 0x2, 0x7, 0x2, 0x1, 0x9, 0x7, 0x8, 0x707, 0x81, 0x200, 0x1, 0x1ff, 0x0, 0x5, 0x8, 0x1000, 0x75, 0x0, 0xfffffc01, 0x0, 0x4, 0x8, 0x9, 0x5, 0x2, 0x9, 0x7ff, 0x8, 0x2, 0x7, 0x1000, 0x0, 0xfffffff7, 0x8, 0x3, 0x5, 0x6, 0x1, 0x9, 0x40, 0x1, 0x3f, 0x3b16cd5d, 0xb5, 0xa40, 0x3, 0x0, 0x8e, 0x1, 0xbb, 0x81, 0xffffff37, 0x80000000, 0x6, 0x800, 0x7, 0x3ff, 0x200, 0x101, 0x3ff, 0x0, 0x6, 0x9, 0x8001, 0x71, 0x575, 0x3, 0x7fffffff, 0x3, 0x7, 0x1, 0x7ff, 0xffffff60, 0x2ce, 0x51, 0x9, 0x8, 0x8, 0x10001, 0xfffffffb, 0x4, 0x4, 0x5, 0x8, 0x0, 0x6, 0x4, 0x4, 0x3, 0x0, 0x1, 0xfffffffc, 0x2372, 0x3ff, 0x8, 0xc20e, 0x5, 0x0, 0x7, 0x7, 0x4, 0x6, 0x44, 0x1, 0x6b3, 0xffffffff, 0x1ff, 0xbbc, 0x800, 0x2, 0x0, 0x8001, 0x4, 0x50f, 0x2d4a, 0x1, 0x5, 0x8, 0x1, 0xfff, 0x2, 0x0, 0xfffffff8, 0x7, 0x2, 0x200, 0x8, 0x475c, 0x0, 0x2, 0xffffffff, 0x0, 0x0, 0xdcc8, 0x0, 0x0, 0x1, 0xfc4, 0x5, 0x1, 0x9, 0x268, 0x10001, 0x5, 0x3, 0x3c, 0x6, 0x8001, 0x47, 0x7, 0x0, 0x5, 0x401, 0x9, 0x5, 0x1ff, 0x0, 0x5, 0x7, 0x9, 0xfffffffe, 0x7, 0x8, 0xa, 0x7a3, 0x3, 0x7f, 0x9e12, 0x1, 0x4, 0xdb18, 0x1, 0x10, 0x8, 0x3a28ded7, 0x2, 0x4, 0x3, 0x4, 0x4dbd46c9, 0x923, 0x7, 0xfffffffd, 0xffffffff, 0x12, 0x6, 0x7f, 0x2, 0x3, 0x7]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x7, 0x5, 0xfffff800, 0x2, 0x9, {0x2, 0x2, 0x4000, 0x2, 0x164, 0x1}, {0x98, 0x0, 0xf000, 0x5, 0x9}, 0x6, 0x401, 0xc14}}]}]}}]}, 0x474}, 0x1, 0x0, 0x0, 0x80}, 0x20000000) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x11012, r2, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) sendmsg$nl_route(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=@newlink={0x44, 0x10, 0x403, 0x70bd28, 0x300, {0x0, 0x0, 0x4, 0x0, 0x3ff, 0xc8df8ae552dcbaf7}, [@IFLA_LINK={0x8, 0x5, r10}, @IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x4}}}, @IFLA_TXQLEN={0x8, 0xd, 0x5677f557}]}, 0x44}}, 0x0) ioctl$USBDEVFS_IOCTL(r2, 0xc0105512, &(0x7f0000000100)=@usbdevfs_connect={0xa}) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, 0x0, 0x0, 0x3) syz_clone(0x410c2000, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=@newqdisc={0x54, 0x24, 0xf0b, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, r1, {0x0, 0x4}, {0xffff, 0xffff}, {0xd, 0xf}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x24, 0x2, [@TCA_CAKE_AUTORATE={0x8, 0x9, 0x400}, @TCA_CAKE_ATM={0x8, 0x4, 0x2}, @TCA_CAKE_FLOW_MODE={0x8, 0x5, 0x1}, @TCA_CAKE_WASH={0x8, 0xd, 0x1}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x44004}, 0x0) 0s ago: executing program 2 (id=194): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) (async) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) (async) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = socket$nl_route(0x10, 0x3, 0x0) (async) r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@newlink={0x58, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x90646}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_FLAGS={0xc, 0x2, {0x1f, 0x1f}}, @IFLA_VLAN_ID={0x6, 0x1, 0x1}]}}}, @IFLA_LINK={0x8, 0x5, r4}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x58}, 0x1, 0x0, 0x0, 0x600}, 0x0) (async) syz_usb_connect(0x5, 0x0, 0x0, 0x0) r5 = socket(0x400000000010, 0x3, 0x0) (async) r6 = socket$unix(0x1, 0x5, 0x0) (async) r7 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x10, 0x46d, 0xc531, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x90, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x0, 0x3, 0x0, {0x9, 0x21, 0x1000, 0x5, 0x1, {0x22, 0x7}}, {{{0x9, 0x5, 0x81, 0x3, 0x40, 0xd, 0x1}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r7, 0x0, 0x0) syz_usb_control_io$hid(r7, &(0x7f0000000080)={0x24, 0x0, 0x0, &(0x7f00000000c0)={0x0, 0x22, 0x7, {[@local=@item_4={0x3, 0x2, 0x2, "00df0010"}, @global=@item_012={0x1, 0x1, 0x6, 'O'}]}}, 0x0}, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, 0x0, 0x0) (async) sendmsg$nl_route_sched(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=@newtfilter={0x5c, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r8, {0x8, 0x7}, {}, {0xa, 0xfff3}}, [@filter_kind_options=@f_flower={{0xb}, {0x2c, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS_MASK={0x10, 0x55, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0xc, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5}]}]}, @TCA_FLOWER_KEY_ENC_OPTS={0x18, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x14, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5, 0x1, 0x1}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_INDEX={0x8, 0x2, 0x100c}]}]}]}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x22044028}, 0x0) (async) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) (async) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x50, 0x0, 0x0) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000140)={0x2, 0x1}, 0x2) (async) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) (async) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) (async) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) (async) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.10.2' (ED25519) to the list of known hosts. [ 336.775827][ T5841] cgroup: Unknown subsys name 'net' [ 336.915739][ T5841] cgroup: Unknown subsys name 'cpuset' [ 336.925382][ T5841] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 338.594077][ T5841] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 341.177127][ T5854] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 341.190426][ T5858] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 341.215198][ T5858] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 341.232591][ T5858] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 341.251994][ T5858] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 341.262911][ T5858] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 341.279418][ T5862] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 341.283334][ T5858] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 341.297793][ T5860] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 341.303489][ T5862] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 341.305891][ T5858] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 341.320847][ T5862] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 341.321024][ T5858] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 341.332807][ T5867] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 341.336673][ T5858] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 341.344289][ T5864] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 341.349968][ T5858] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 341.357383][ T5867] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 341.377509][ T5867] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 341.386723][ T5867] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 341.407515][ T5867] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 341.414875][ T5857] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 341.424449][ T5857] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 341.455448][ T55] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 341.469796][ T55] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 342.067523][ T5873] chnl_net:caif_netlink_parms(): no params data found [ 342.137986][ T5868] chnl_net:caif_netlink_parms(): no params data found [ 342.257791][ T5870] chnl_net:caif_netlink_parms(): no params data found [ 342.320583][ T5872] chnl_net:caif_netlink_parms(): no params data found [ 342.403642][ T5874] chnl_net:caif_netlink_parms(): no params data found [ 342.482122][ T5873] bridge0: port 1(bridge_slave_0) entered blocking state [ 342.489512][ T5873] bridge0: port 1(bridge_slave_0) entered disabled state [ 342.498332][ T5873] bridge_slave_0: entered allmulticast mode [ 342.505811][ T5873] bridge_slave_0: entered promiscuous mode [ 342.555363][ T5873] bridge0: port 2(bridge_slave_1) entered blocking state [ 342.562871][ T5873] bridge0: port 2(bridge_slave_1) entered disabled state [ 342.570950][ T5873] bridge_slave_1: entered allmulticast mode [ 342.578617][ T5873] bridge_slave_1: entered promiscuous mode [ 342.604119][ T5868] bridge0: port 1(bridge_slave_0) entered blocking state [ 342.611300][ T5868] bridge0: port 1(bridge_slave_0) entered disabled state [ 342.618813][ T5868] bridge_slave_0: entered allmulticast mode [ 342.626810][ T5868] bridge_slave_0: entered promiscuous mode [ 342.682939][ T5868] bridge0: port 2(bridge_slave_1) entered blocking state [ 342.690158][ T5868] bridge0: port 2(bridge_slave_1) entered disabled state [ 342.697443][ T5868] bridge_slave_1: entered allmulticast mode [ 342.705669][ T5868] bridge_slave_1: entered promiscuous mode [ 342.766872][ T5870] bridge0: port 1(bridge_slave_0) entered blocking state [ 342.774093][ T5870] bridge0: port 1(bridge_slave_0) entered disabled state [ 342.781239][ T5870] bridge_slave_0: entered allmulticast mode [ 342.789522][ T5870] bridge_slave_0: entered promiscuous mode [ 342.819660][ T5873] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 342.834063][ T5873] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 342.858900][ T5870] bridge0: port 2(bridge_slave_1) entered blocking state [ 342.866303][ T5870] bridge0: port 2(bridge_slave_1) entered disabled state [ 342.874012][ T5870] bridge_slave_1: entered allmulticast mode [ 342.881229][ T5870] bridge_slave_1: entered promiscuous mode [ 342.906308][ T5868] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 342.919470][ T5868] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 342.960868][ T5872] bridge0: port 1(bridge_slave_0) entered blocking state [ 342.969602][ T5872] bridge0: port 1(bridge_slave_0) entered disabled state [ 342.977131][ T5872] bridge_slave_0: entered allmulticast mode [ 342.985289][ T5872] bridge_slave_0: entered promiscuous mode [ 343.054494][ T5873] team0: Port device team_slave_0 added [ 343.060641][ T5872] bridge0: port 2(bridge_slave_1) entered blocking state [ 343.068312][ T5872] bridge0: port 2(bridge_slave_1) entered disabled state [ 343.076722][ T5872] bridge_slave_1: entered allmulticast mode [ 343.084704][ T5872] bridge_slave_1: entered promiscuous mode [ 343.108044][ T5870] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 343.120453][ T5868] team0: Port device team_slave_0 added [ 343.142442][ T5873] team0: Port device team_slave_1 added [ 343.177306][ T5872] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 343.189134][ T5870] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 343.202410][ T5868] team0: Port device team_slave_1 added [ 343.208489][ T5874] bridge0: port 1(bridge_slave_0) entered blocking state [ 343.216774][ T5874] bridge0: port 1(bridge_slave_0) entered disabled state [ 343.224399][ T5874] bridge_slave_0: entered allmulticast mode [ 343.232005][ T5874] bridge_slave_0: entered promiscuous mode [ 343.254001][ T5873] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 343.261008][ T5873] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 343.287296][ T5873] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 343.307460][ T5872] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 343.370964][ T5874] bridge0: port 2(bridge_slave_1) entered blocking state [ 343.378459][ T5874] bridge0: port 2(bridge_slave_1) entered disabled state [ 343.385930][ T5874] bridge_slave_1: entered allmulticast mode [ 343.393889][ T5874] bridge_slave_1: entered promiscuous mode [ 343.401273][ T5873] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 343.409613][ T5873] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 343.436289][ T5873] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 343.452904][ T55] Bluetooth: hci0: command tx timeout [ 343.452910][ T5863] Bluetooth: hci3: command tx timeout [ 343.474622][ T5870] team0: Port device team_slave_0 added [ 343.522017][ T55] Bluetooth: hci4: command tx timeout [ 343.522059][ T5863] Bluetooth: hci2: command tx timeout [ 343.527543][ T5857] Bluetooth: hci1: command tx timeout [ 343.545805][ T5872] team0: Port device team_slave_0 added [ 343.555341][ T5872] team0: Port device team_slave_1 added [ 343.563253][ T5870] team0: Port device team_slave_1 added [ 343.569777][ T5868] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 343.577254][ T5868] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 343.603744][ T5868] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 343.616395][ T5868] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 343.623541][ T5868] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 343.649556][ T5868] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 343.669687][ T5874] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 343.756075][ T5873] hsr_slave_0: entered promiscuous mode [ 343.763320][ T5873] hsr_slave_1: entered promiscuous mode [ 343.774692][ T5874] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 343.799111][ T5872] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 343.806476][ T5872] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 343.832498][ T5872] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 343.845314][ T5872] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 343.852369][ T5872] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 343.878758][ T5872] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 343.904196][ T5870] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 343.911187][ T5870] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 343.937265][ T5870] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 343.968042][ T5874] team0: Port device team_slave_0 added [ 343.993917][ T5870] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 344.000946][ T5870] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 344.028070][ T5870] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 344.048957][ T5874] team0: Port device team_slave_1 added [ 344.125800][ T5868] hsr_slave_0: entered promiscuous mode [ 344.133628][ T5868] hsr_slave_1: entered promiscuous mode [ 344.139806][ T5868] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 344.147837][ T5868] Cannot create hsr debugfs directory [ 344.227924][ T5874] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 344.235083][ T5874] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 344.262318][ T5874] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 344.306635][ T5870] hsr_slave_0: entered promiscuous mode [ 344.316306][ T5870] hsr_slave_1: entered promiscuous mode [ 344.323223][ T5870] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 344.330800][ T5870] Cannot create hsr debugfs directory [ 344.343284][ T5874] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 344.350276][ T5874] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 344.376304][ T5874] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 344.394199][ T5872] hsr_slave_0: entered promiscuous mode [ 344.400694][ T5872] hsr_slave_1: entered promiscuous mode [ 344.407122][ T5872] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 344.415344][ T5872] Cannot create hsr debugfs directory [ 344.676808][ T5874] hsr_slave_0: entered promiscuous mode [ 344.683565][ T5874] hsr_slave_1: entered promiscuous mode [ 344.689880][ T5874] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 344.697625][ T5874] Cannot create hsr debugfs directory [ 345.039844][ T5873] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 345.069195][ T5873] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 345.090103][ T5873] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 345.115921][ T5873] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 345.189824][ T5870] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 345.214656][ T5870] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 345.229122][ T5870] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 345.240563][ T5870] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 345.309566][ T5868] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 345.369690][ T5868] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 345.380267][ T5868] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 345.410049][ T5868] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 345.482756][ T5874] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 345.510879][ T5874] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 345.522201][ T55] Bluetooth: hci3: command tx timeout [ 345.526803][ T5874] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 345.527782][ T5857] Bluetooth: hci0: command tx timeout [ 345.548009][ T5874] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 345.602063][ T5857] Bluetooth: hci2: command tx timeout [ 345.607633][ T55] Bluetooth: hci1: command tx timeout [ 345.607671][ T5863] Bluetooth: hci4: command tx timeout [ 345.692946][ T5872] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 345.707008][ T5872] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 345.732184][ T5870] 8021q: adding VLAN 0 to HW filter on device bond0 [ 345.739120][ T5872] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 345.750053][ T5872] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 345.767492][ T5873] 8021q: adding VLAN 0 to HW filter on device bond0 [ 345.868680][ T5873] 8021q: adding VLAN 0 to HW filter on device team0 [ 345.880683][ T5870] 8021q: adding VLAN 0 to HW filter on device team0 [ 345.925704][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 345.933034][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 345.945972][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 345.953120][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 345.963468][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 345.970599][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 346.015475][ T5868] 8021q: adding VLAN 0 to HW filter on device bond0 [ 346.037212][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 346.044385][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 346.097798][ T5868] 8021q: adding VLAN 0 to HW filter on device team0 [ 346.136309][ T5872] 8021q: adding VLAN 0 to HW filter on device bond0 [ 346.176740][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 346.184364][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 346.230721][ T5872] 8021q: adding VLAN 0 to HW filter on device team0 [ 346.249878][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 346.257046][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 346.295601][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 346.302815][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 346.325534][ T5874] 8021q: adding VLAN 0 to HW filter on device bond0 [ 346.340084][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 346.347367][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 346.421283][ T5874] 8021q: adding VLAN 0 to HW filter on device team0 [ 346.446964][ T5870] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 346.467098][ T5914] bridge0: port 1(bridge_slave_0) entered blocking state [ 346.474337][ T5914] bridge0: port 1(bridge_slave_0) entered forwarding state [ 346.500856][ T5873] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 346.527559][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 346.534786][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 346.676148][ T5870] veth0_vlan: entered promiscuous mode [ 346.718153][ T5868] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 346.731156][ T5870] veth1_vlan: entered promiscuous mode [ 346.760840][ T5872] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 346.770986][ T5873] veth0_vlan: entered promiscuous mode [ 346.797869][ T5873] veth1_vlan: entered promiscuous mode [ 346.849829][ T5870] veth0_macvtap: entered promiscuous mode [ 346.871650][ T5870] veth1_macvtap: entered promiscuous mode [ 346.903683][ T5874] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 346.927237][ T5868] veth0_vlan: entered promiscuous mode [ 346.956833][ T5873] veth0_macvtap: entered promiscuous mode [ 346.979546][ T5873] veth1_macvtap: entered promiscuous mode [ 346.988778][ T5870] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 347.018776][ T5868] veth1_vlan: entered promiscuous mode [ 347.037254][ T5870] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 347.053676][ T5872] veth0_vlan: entered promiscuous mode [ 347.077608][ T5870] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 347.086888][ T5870] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 347.096161][ T5870] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 347.106156][ T5870] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 347.126209][ T5873] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 347.137697][ T5873] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 347.149200][ T5873] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 347.179297][ T5873] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 347.190087][ T5873] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 347.204797][ T5873] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 347.246156][ T5872] veth1_vlan: entered promiscuous mode [ 347.278181][ T5873] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 347.288974][ T5873] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 347.299507][ T5873] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 347.308602][ T5873] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 347.339082][ T5874] veth0_vlan: entered promiscuous mode [ 347.359431][ T5868] veth0_macvtap: entered promiscuous mode [ 347.376561][ T5874] veth1_vlan: entered promiscuous mode [ 347.401928][ T5868] veth1_macvtap: entered promiscuous mode [ 347.426710][ T81] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 347.436940][ T81] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 347.535582][ T5872] veth0_macvtap: entered promiscuous mode [ 347.547654][ T5868] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 347.558480][ T5868] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 347.568466][ T5868] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 347.579119][ T5868] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 347.590659][ T5868] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 347.602494][ T5863] Bluetooth: hci0: command tx timeout [ 347.602650][ T55] Bluetooth: hci3: command tx timeout [ 347.610301][ T5874] veth0_macvtap: entered promiscuous mode [ 347.655056][ T5868] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 347.666857][ T5868] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 347.677391][ T5868] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 347.682160][ T55] Bluetooth: hci1: command tx timeout [ 347.689704][ T5863] Bluetooth: hci2: command tx timeout [ 347.693260][ T5857] Bluetooth: hci4: command tx timeout [ 347.699385][ T5868] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 347.715965][ T5868] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 347.728362][ T81] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 347.731097][ T5874] veth1_macvtap: entered promiscuous mode [ 347.736400][ T81] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 347.755813][ T5872] veth1_macvtap: entered promiscuous mode [ 347.766188][ T5888] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 347.778099][ T5868] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 347.790568][ T5888] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 347.796575][ T5868] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 347.807460][ T5868] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 347.816216][ T5868] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 347.857724][ T5872] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 347.871168][ T5872] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 347.883581][ T5872] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 347.894399][ T5872] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 347.904364][ T5872] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 347.914910][ T5872] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 347.929133][ T5872] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 347.943516][ T5870] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 347.969446][ T5874] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 347.980645][ T5874] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 347.990692][ T5874] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 348.001378][ T5874] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 348.014174][ T5874] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 348.025427][ T5874] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 348.035856][ T5874] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 348.046572][ T5874] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 348.058127][ T5874] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 348.080782][ T5872] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 348.100752][ T5872] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 348.129721][ T5872] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 348.150369][ T5872] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 348.160448][ T5872] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 348.173178][ T5872] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 348.185288][ T5872] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 348.201518][ T5874] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 348.213065][ T5874] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 348.223335][ T5874] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 348.234666][ T5874] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 348.246275][ T5874] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 348.257438][ T5874] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 348.270092][ T5874] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 348.292834][ T5874] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 348.313298][ T5874] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 348.328297][ T5914] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 348.354105][ T5872] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 348.358207][ T5914] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 348.402264][ T5920] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 348.419406][ T5872] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 348.419444][ T5872] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 348.419472][ T5872] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 348.464423][ T5874] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 348.486702][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 348.515793][ T5874] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 348.525668][ T5874] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 348.543806][ T5874] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 348.619245][ T5921] veth1_macvtap: left promiscuous mode [ 348.628141][ T5921] macsec0: entered promiscuous mode [ 348.720519][ T5914] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 348.775349][ T5914] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 349.096335][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 349.117239][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 349.298043][ T5912] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 349.312417][ T5912] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 349.414679][ T5912] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 349.432826][ T5912] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 349.595022][ T5914] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 349.641531][ T5914] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 349.682394][ T5857] Bluetooth: hci0: command tx timeout [ 349.687864][ T5857] Bluetooth: hci3: command tx timeout [ 349.754215][ T5914] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 349.764894][ T55] Bluetooth: hci1: command tx timeout [ 349.770384][ T5857] Bluetooth: hci4: command tx timeout [ 349.776083][ T55] Bluetooth: hci2: command tx timeout [ 349.781152][ T47] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 349.782954][ T5914] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 349.959162][ T5940] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 350.066090][ T47] usb 1-1: Using ep0 maxpacket: 32 [ 350.071871][ T0] NOHZ tick-stop error: local softirq work is pending, handler #c0!!! [ 350.105948][ T47] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 48, changing to 9 [ 350.138108][ T47] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8240, setting to 1024 [ 350.152595][ T47] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 350.173105][ T5853] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 350.263517][ T47] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 350.362155][ T5853] usb 5-1: Using ep0 maxpacket: 8 [ 350.379600][ T47] usb 1-1: config 0 descriptor?? [ 350.430391][ T5853] usb 5-1: New USB device found, idVendor=10c4, idProduct=8244, bcdDevice=dc.00 [ 350.453018][ T47] hub 1-1:0.0: USB hub found [ 350.531888][ T5951] netlink: 'syz.1.8': attribute type 1 has an invalid length. [ 350.540872][ T5853] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 350.549295][ T5946] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 350.605757][ T5853] usb 5-1: Product: syz [ 350.622618][ T47] hub 1-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 350.662810][ T5853] usb 5-1: Manufacturer: syz [ 350.667475][ T5853] usb 5-1: SerialNumber: syz [ 350.692510][ T5853] usb 5-1: config 0 descriptor?? [ 350.709367][ T5952] netlink: 28 bytes leftover after parsing attributes in process `syz.1.8'. [ 350.761932][ T5946] usb 3-1: Using ep0 maxpacket: 32 [ 350.778282][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 350.788400][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 350.811534][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 350.821743][ T5946] usb 3-1: config 0 has an invalid interface number: 12 but max is 0 [ 350.832575][ T5853] radio-usb-si4713 5-1:0.0: Si4713 development board discovered: (10C4:8244) [ 350.849433][ T5946] usb 3-1: config 0 has no interface number 0 [ 350.899490][ T5946] usb 3-1: config 0 interface 12 has no altsetting 0 [ 350.912190][ T0] NOHZ tick-stop error: local softirq work is pending, handler #300!!! [ 350.946749][ T5946] usb 3-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 350.962673][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 350.982930][ T9] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 351.011184][ T5946] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 351.097519][ T47] hid-generic 0003:046D:C31C.0001: hidraw0: USB HID v8.00 Device [HID 046d:c31c] on usb-dummy_hcd.0-1/input0 [ 351.136535][ T5946] usb 3-1: Product: syz [ 351.151878][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 351.169823][ T5946] usb 3-1: Manufacturer: syz [ 351.181541][ T5946] usb 3-1: SerialNumber: syz [ 351.202645][ T9] usb 4-1: Using ep0 maxpacket: 8 [ 351.214909][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 351.237912][ T9] usb 4-1: New USB device found, idVendor=17ef, idProduct=6062, bcdDevice= 0.00 [ 351.251840][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 351.263669][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 351.372670][ T5946] usb 3-1: config 0 descriptor?? [ 351.406283][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 351.537683][ T9] usb 4-1: config 0 descriptor?? [ 351.836496][ T5948] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 351.849864][ T5948] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 352.012979][ T5948] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 352.016159][ T5853] radio-usb-si4713 5-1:0.0: probe with driver radio-usb-si4713 failed with error -32 [ 352.023169][ T5948] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 352.092335][ T5853] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 352.190370][ T9] usbhid 4-1:0.0: can't add hid device: -71 [ 352.197283][ T9] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 352.243502][ T9] usb 4-1: USB disconnect, device number 2 [ 352.512458][ T5838] usb 1-1: USB disconnect, device number 2 [ 352.744126][ T5946] f81534 3-1:0.12: f81534_get_register: reg: 1003 failed: -71 [ 352.753219][ T5946] f81534 3-1:0.12: f81534_find_config_idx: read failed: -71 [ 352.766352][ T5946] f81534 3-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 352.797862][ T5946] f81534 3-1:0.12: probe with driver f81534 failed with error -71 [ 352.895323][ T5946] usb 3-1: USB disconnect, device number 2 [ 353.142524][ T5910] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 353.162922][ T47] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 353.821748][ T5910] usb 4-1: Using ep0 maxpacket: 8 [ 353.840020][ T47] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 353.894166][ T47] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 353.910871][ T5910] usb 4-1: config 7 has an invalid interface number: 112 but max is 0 [ 353.919429][ T5910] usb 4-1: config 7 has no interface number 0 [ 353.929669][ T47] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 353.939000][ T5910] usb 4-1: config 7 interface 112 altsetting 4 endpoint 0x8 has invalid maxpacket 1023, setting to 64 [ 353.952273][ T47] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 353.961069][ T47] usb 1-1: SerialNumber: syz [ 353.988192][ T5946] usb 5-1: USB disconnect, device number 2 [ 354.092240][ T5910] usb 4-1: config 7 interface 112 altsetting 4 endpoint 0xD has invalid maxpacket 1024, setting to 64 [ 354.147476][ T5910] usb 4-1: config 7 interface 112 altsetting 4 has an invalid descriptor for endpoint zero, skipping [ 354.160935][ T5910] usb 4-1: config 7 interface 112 altsetting 4 has an endpoint descriptor with address 0x14, changing to 0x4 [ 354.176740][ T5910] usb 4-1: config 7 interface 112 altsetting 4 bulk endpoint 0x4 has invalid maxpacket 1024 [ 354.187123][ T5910] usb 4-1: config 7 interface 112 altsetting 4 endpoint 0x7 has invalid wMaxPacketSize 0 [ 354.197107][ T5910] usb 4-1: config 7 interface 112 has no altsetting 0 [ 354.207092][ T5910] usb 4-1: New USB device found, idVendor=0403, idProduct=937c, bcdDevice=de.b7 [ 354.217227][ T5910] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 354.225608][ T5910] usb 4-1: Product: 希嚖䩃䙻⸨慰ꀛ봎í„䣲鼹㪵䬻즞龪鴃èŽà¹¡é²¦î›‚ᙃఈꞈì…⭤孿ꌘ䕟튨픫ɹ멺ꮀ᥺쟱긂쉠ᣀ릾࠽ê˜â¾—懲èœî±›×ç¿‹é“愳癫졄뉳䃚 [ 354.245571][ T5910] usb 4-1: Manufacturer: 떤쨆隯Ѣæ·ëŽ»å¡˜î¦ ëŒŽæ„ã¹á‚ŽåŽ¬î¤¦é‚¤î§ï½·Ò°å‚¢â¬€î«ì£³áŽà°µæ“±í„ู쎽溌㶭訄ᆉ厣䶩閜똨焙⬑䤡ã‚䢮⦉줨輥氺녤뤑瘻Ɦ霪齛飛쬅è¹ë¬®á—⧳痱但넃å‡ç–¸ä“¹Èªç¹«ì¬ŠìžƒéŸ¼ä—¶â±‚럨ဆ貦∞ã¨î•Š [ 354.270820][ T5910] usb 4-1: SerialNumber: И [ 354.339156][ T5996] netlink: 4 bytes leftover after parsing attributes in process `syz.2.19'. [ 354.355045][ T5998] FAULT_INJECTION: forcing a failure. [ 354.355045][ T5998] name failslab, interval 1, probability 0, space 0, times 1 [ 354.370851][ T5981] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 354.391844][ T5998] CPU: 1 UID: 0 PID: 5998 Comm: syz.4.20 Not tainted 6.15.0-rc5-syzkaller #0 PREEMPT(full) [ 354.391865][ T5998] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025 [ 354.391879][ T5998] Call Trace: [ 354.391888][ T5998] [ 354.391898][ T5998] dump_stack_lvl+0x189/0x250 [ 354.391931][ T5998] ? __pfx_dump_stack_lvl+0x10/0x10 [ 354.391952][ T5998] ? __pfx__printk+0x10/0x10 [ 354.391970][ T5998] ? __pfx___might_resched+0x10/0x10 [ 354.391984][ T5998] ? fs_reclaim_acquire+0x7d/0x100 [ 354.392009][ T5998] should_fail_ex+0x414/0x560 [ 354.392036][ T5998] should_failslab+0xa8/0x100 [ 354.392056][ T5998] __kmalloc_noprof+0xcb/0x4f0 [ 354.392073][ T5998] ? kfree+0x4d/0x440 [ 354.392087][ T5998] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 354.392108][ T5998] tomoyo_realpath_from_path+0xe3/0x5d0 [ 354.392126][ T5998] ? tomoyo_domain+0xda/0x130 [ 354.392147][ T5998] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 354.392169][ T5998] tomoyo_path_number_perm+0x1e8/0x5a0 [ 354.392194][ T5998] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 354.392228][ T5998] ? __lock_acquire+0xaac/0xd20 [ 354.392261][ T5998] ? __fget_files+0x2a/0x420 [ 354.392282][ T5998] ? __fget_files+0x3a0/0x420 [ 354.392299][ T5998] ? __fget_files+0x2a/0x420 [ 354.392320][ T5998] security_file_ioctl+0xcb/0x2d0 [ 354.392343][ T5998] __se_sys_ioctl+0x47/0x170 [ 354.392359][ T5998] do_syscall_64+0xf6/0x210 [ 354.392378][ T5998] ? clear_bhb_loop+0x45/0xa0 [ 354.392395][ T5998] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 354.392408][ T5998] RIP: 0033:0x7f989158e969 [ 354.392425][ T5998] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 354.392437][ T5998] RSP: 002b:00007f98924cd038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 354.392457][ T5998] RAX: ffffffffffffffda RBX: 00007f98917b5fa0 RCX: 00007f989158e969 [ 354.392467][ T5998] RDX: 0000200000000040 RSI: 00000000c008561c RDI: 0000000000000003 [ 354.392478][ T5998] RBP: 00007f98924cd090 R08: 0000000000000000 R09: 0000000000000000 [ 354.392487][ T5998] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 354.392495][ T5998] R13: 0000000000000000 R14: 00007f98917b5fa0 R15: 00007f98918dfa28 [ 354.392516][ T5998] [ 354.392543][ T5998] ERROR: Out of memory at tomoyo_realpath_from_path. [ 354.875124][ T5910] ftdi_sio 4-1:7.112: FTDI USB Serial Device converter detected [ 354.923928][ T5910] ftdi_sio ttyUSB0: unknown device type: 0xdeb7 [ 354.965271][ T5910] usb 4-1: USB disconnect, device number 3 [ 355.050609][ T5956] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 355.065247][ T5910] ftdi_sio 4-1:7.112: device disconnected [ 355.261710][ T5956] usb 5-1: Using ep0 maxpacket: 32 [ 355.329297][ T5956] usb 5-1: too many configurations: 255, using maximum allowed: 8 [ 355.376786][ T5956] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 355.389139][ T5956] usb 5-1: can't read configurations, error -61 [ 355.572508][ T5956] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 355.691744][ T5947] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 355.796262][ T5956] usb 5-1: Using ep0 maxpacket: 32 [ 355.816946][ T5956] usb 5-1: too many configurations: 255, using maximum allowed: 8 [ 355.830727][ T5956] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 355.861156][ T5956] usb 5-1: can't read configurations, error -61 [ 355.871343][ T5956] usb usb5-port1: attempt power cycle [ 355.947972][ T5947] usb 2-1: Using ep0 maxpacket: 32 [ 356.078981][ T5947] usb 2-1: config 0 has no interfaces? [ 356.100110][ T5947] usb 2-1: New USB device found, idVendor=2040, idProduct=4901, bcdDevice=47.77 [ 356.140590][ T5947] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 356.170154][ T5947] usb 2-1: Product: syz [ 356.178974][ T5947] usb 2-1: Manufacturer: syz [ 356.188120][ T5947] usb 2-1: SerialNumber: syz [ 356.191036][ T47] usb 1-1: 0:2 : does not exist [ 356.200294][ T5947] usb 2-1: config 0 descriptor?? [ 356.211743][ T5956] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 356.325729][ T5956] usb 5-1: Using ep0 maxpacket: 32 [ 356.416702][ T5956] usb 5-1: too many configurations: 255, using maximum allowed: 8 [ 356.446660][ T47] usb 1-1: USB disconnect, device number 3 [ 356.455096][ T5956] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 356.480330][ T6012] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 356.494959][ T6012] xt_nfacct: accounting object `syz0' does not exists [ 356.507161][ T5956] usb 5-1: can't read configurations, error -61 [ 356.686678][ T5906] udevd[5906]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 356.731779][ T5956] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 356.752610][ T5956] usb 5-1: Using ep0 maxpacket: 32 [ 356.758730][ T5956] usb 5-1: too many configurations: 255, using maximum allowed: 8 [ 356.770142][ T5956] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 356.782406][ T5956] usb 5-1: can't read configurations, error -61 [ 356.800139][ T5956] usb usb5-port1: unable to enumerate USB device [ 357.769720][ T6038] netlink: 8 bytes leftover after parsing attributes in process `syz.2.31'. [ 358.517883][ T6044] netlink: 100 bytes leftover after parsing attributes in process `syz.4.32'. [ 359.648676][ T6050] binder: BINDER_SET_CONTEXT_MGR already set [ 359.698566][ T6050] binder: 6047:6050 ioctl 4018620d 200000000040 returned -16 [ 359.718219][ T5947] usb 2-1: USB disconnect, device number 2 [ 360.087151][ T9] usb 5-1: new full-speed USB device number 7 using dummy_hcd [ 360.429756][ T9] usb 5-1: config 0 has an invalid interface number: 93 but max is 0 [ 360.480957][ T6060] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 360.509033][ T9] usb 5-1: config 0 has no interface number 0 [ 360.674972][ T9] usb 5-1: New USB device found, idVendor=10b8, idProduct=1bb4, bcdDevice=34.65 [ 360.710846][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 360.740331][ T9] usb 5-1: Product: syz [ 360.767112][ T9] usb 5-1: Manufacturer: syz [ 360.838223][ T9] usb 5-1: SerialNumber: syz [ 360.888904][ T6063] syzkaller1: entered promiscuous mode [ 360.894541][ T6063] syzkaller1: entered allmulticast mode [ 361.113423][ T9] usb 5-1: config 0 descriptor?? [ 361.523658][ T9] dvb-usb: found a 'DiBcom TFE7090PVR reference design' in cold state, will try to load a firmware [ 362.163446][ T6078] openvswitch: netlink: Missing valid actions attribute. [ 362.170628][ T6078] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 362.285390][ T9] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 362.307111][ T9] dib0700: firmware download failed at 7 with -22 [ 362.475626][ T6060] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 362.524973][ T6060] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 362.541128][ T6060] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 362.554639][ T6060] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 362.560721][ T6060] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 362.575402][ T6060] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 362.641449][ T6060] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 362.667616][ T6060] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 362.690197][ T6060] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 362.717205][ T6060] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 362.724034][ T6060] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 362.741128][ T6060] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 362.754550][ T6060] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 362.774698][ T6060] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 362.891365][ T6060] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 363.076761][ T5857] Bluetooth: hci0: command 0x0c1a tx timeout [ 363.152578][ T5947] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 363.192218][ T9] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 363.335375][ T5947] usb 1-1: Using ep0 maxpacket: 8 [ 363.343908][ T5947] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 363.355745][ T9] usb 3-1: Using ep0 maxpacket: 32 [ 363.373196][ T9] usb 3-1: config 0 has no interfaces? [ 363.381886][ T9] usb 3-1: New USB device found, idVendor=2040, idProduct=4901, bcdDevice=47.77 [ 363.394352][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 363.404120][ T5947] usb 1-1: New USB device found, idVendor=05ac, idProduct=8501, bcdDevice=20.9d [ 363.413614][ T9] usb 3-1: Product: syz [ 363.418050][ T5947] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=105 [ 363.428238][ T9] usb 3-1: Manufacturer: syz [ 363.433432][ T9] usb 3-1: SerialNumber: syz [ 363.438381][ T5947] usb 1-1: SerialNumber: syz [ 363.458960][ T5947] usb 1-1: config 0 descriptor?? [ 363.466035][ T9] usb 3-1: config 0 descriptor?? [ 363.498256][ T5947] usb 1-1: Found UVC 0.00 device (05ac:8501) [ 363.549947][ T5947] usb 1-1: Failed to create links for entity 255 [ 363.575179][ T5947] usb 1-1: Failed to register entities (-22). [ 363.693899][ T5947] usb 1-1: USB disconnect, device number 4 [ 363.716058][ T6081] xt_nfacct: accounting object `syz0' does not exists [ 364.263043][ T5947] usb 5-1: USB disconnect, device number 7 [ 364.642310][ T5857] Bluetooth: hci3: command 0x0c1a tx timeout [ 364.642761][ T5857] Bluetooth: hci1: command 0x0c1a tx timeout [ 364.722445][ T55] Bluetooth: hci2: command 0x0c1a tx timeout [ 364.801922][ T55] Bluetooth: hci4: command 0x0c1a tx timeout [ 364.997158][ T5947] usb 3-1: USB disconnect, device number 3 [ 365.077289][ T6104] syz.4.50 uses obsolete (PF_INET,SOCK_PACKET) [ 365.078100][ T6104] veth1_to_bridge: entered allmulticast mode [ 365.122038][ T55] Bluetooth: hci0: command 0x0c1a tx timeout [ 365.130525][ T6104] process 'syz.4.50' launched './file0' with NULL argv: empty string added [ 365.219175][ T5927] bridge0: port 2(bridge_slave_1) entered disabled state [ 366.221780][ T5910] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 366.478130][ T5910] usb 4-1: Using ep0 maxpacket: 8 [ 366.528231][ T5910] usb 4-1: config index 0 descriptor too short (expected 28277, got 36) [ 366.547192][ T6136] Zero length message leads to an empty skb [ 366.566795][ T5910] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 366.577145][ T5910] usb 4-1: config 0 has no interfaces? [ 366.582907][ T5910] usb 4-1: New USB device found, idVendor=046d, idProduct=c20e, bcdDevice= 0.00 [ 366.699403][ T5910] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 366.749998][ T55] Bluetooth: hci1: command 0x0c1a tx timeout [ 366.751956][ T5857] Bluetooth: hci3: command 0x0c1a tx timeout [ 366.790540][ T5910] usb 4-1: config 0 descriptor?? [ 366.801758][ T5857] Bluetooth: hci2: command 0x0c1a tx timeout [ 366.932820][ T5857] Bluetooth: hci4: command 0x0c1a tx timeout [ 366.959627][ T6138] vlan0: entered promiscuous mode [ 367.025854][ T5956] usb 5-1: new low-speed USB device number 8 using dummy_hcd [ 367.219252][ T5857] Bluetooth: hci0: command 0x0c1a tx timeout [ 367.281747][ T5956] usb 5-1: device descriptor read/64, error -71 [ 367.537807][ T5956] usb 5-1: new low-speed USB device number 9 using dummy_hcd [ 367.688050][ T5956] usb 5-1: device descriptor read/64, error -71 [ 367.839698][ T5956] usb usb5-port1: attempt power cycle [ 368.191714][ T5956] usb 5-1: new low-speed USB device number 10 using dummy_hcd [ 368.222404][ T5956] usb 5-1: device descriptor read/8, error -71 [ 368.471712][ T5956] usb 5-1: new low-speed USB device number 11 using dummy_hcd [ 368.495630][ T5946] usb 4-1: USB disconnect, device number 4 [ 368.533846][ T5956] usb 5-1: device descriptor read/8, error -71 [ 368.598769][ T6167] netlink: 4 bytes leftover after parsing attributes in process `syz.3.66'. [ 368.662161][ T5956] usb usb5-port1: unable to enumerate USB device [ 368.802744][ T5857] Bluetooth: hci3: command 0x0c1a tx timeout [ 368.802754][ T55] Bluetooth: hci1: command 0x0c1a tx timeout [ 368.882047][ T55] Bluetooth: hci2: command 0x0c1a tx timeout [ 368.962027][ T55] Bluetooth: hci4: command 0x0c1a tx timeout [ 369.106888][ T6177] syz.3.69: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 369.129281][ T6177] CPU: 1 UID: 0 PID: 6177 Comm: syz.3.69 Not tainted 6.15.0-rc5-syzkaller #0 PREEMPT(full) [ 369.129308][ T6177] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025 [ 369.129322][ T6177] Call Trace: [ 369.129330][ T6177] [ 369.129339][ T6177] dump_stack_lvl+0x189/0x250 [ 369.129375][ T6177] ? __pfx_dump_stack_lvl+0x10/0x10 [ 369.129402][ T6177] ? __pfx__printk+0x10/0x10 [ 369.129423][ T6177] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 369.129458][ T6177] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 369.129508][ T6177] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 369.129543][ T6177] warn_alloc+0x214/0x310 [ 369.129569][ T6177] ? __pfx_warn_alloc+0x10/0x10 [ 369.129589][ T6177] ? kasan_save_track+0x4f/0x80 [ 369.129605][ T6177] ? __kmalloc_cache_noprof+0x230/0x3d0 [ 369.129622][ T6177] ? xskq_create+0x56/0x170 [ 369.129639][ T6177] ? __x64_sys_setsockopt+0x18b/0x220 [ 369.129656][ T6177] ? do_syscall_64+0xf6/0x210 [ 369.129674][ T6177] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 369.129696][ T6177] __vmalloc_node_range_noprof+0x125/0x12c0 [ 369.129739][ T6177] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 369.129759][ T6177] ? xskq_create+0x56/0x170 [ 369.129775][ T6177] ? __kasan_kmalloc+0x93/0xb0 [ 369.129802][ T6177] vmalloc_user_noprof+0x74/0x80 [ 369.129823][ T6177] ? xskq_create+0xbf/0x170 [ 369.129842][ T6177] xskq_create+0xbf/0x170 [ 369.129860][ T6177] xsk_init_queue+0xb0/0x110 [ 369.129877][ T6177] xsk_setsockopt+0x43f/0x710 [ 369.129894][ T6177] ? __pfx_xsk_setsockopt+0x10/0x10 [ 369.129916][ T6177] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 369.129932][ T6177] ? __pfx_xsk_setsockopt+0x10/0x10 [ 369.129948][ T6177] do_sock_setsockopt+0x257/0x3e0 [ 369.129968][ T6177] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 369.129984][ T6177] ? __fget_files+0x2a/0x420 [ 369.130006][ T6177] ? __fget_files+0x3a0/0x420 [ 369.130024][ T6177] ? __fget_files+0x2a/0x420 [ 369.130048][ T6177] __x64_sys_setsockopt+0x18b/0x220 [ 369.130071][ T6177] do_syscall_64+0xf6/0x210 [ 369.130089][ T6177] ? clear_bhb_loop+0x45/0xa0 [ 369.130107][ T6177] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 369.130121][ T6177] RIP: 0033:0x7f38cd78e969 [ 369.130134][ T6177] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 369.130146][ T6177] RSP: 002b:00007f38cb5f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 369.130162][ T6177] RAX: ffffffffffffffda RBX: 00007f38cd9b5fa0 RCX: 00007f38cd78e969 [ 369.130172][ T6177] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000003 [ 369.130181][ T6177] RBP: 00007f38cd810ab1 R08: 0000000000000004 R09: 0000000000000000 [ 369.130190][ T6177] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 369.130198][ T6177] R13: 0000000000000000 R14: 00007f38cd9b5fa0 R15: 00007f38cdadfa28 [ 369.130220][ T6177] [ 369.130411][ T6177] Mem-Info: [ 369.365037][ C1] vkms_vblank_simulate: vblank timer overrun [ 369.509428][ T6177] active_anon:5398 inactive_anon:0 isolated_anon:0 [ 369.509428][ T6177] active_file:1491 inactive_file:38330 isolated_file:0 [ 369.509428][ T6177] unevictable:768 dirty:214 writeback:0 [ 369.509428][ T6177] slab_reclaimable:9850 slab_unreclaimable:99267 [ 369.509428][ T6177] mapped:33338 shmem:1433 pagetables:906 [ 369.509428][ T6177] sec_pagetables:0 bounce:0 [ 369.509428][ T6177] kernel_misc_reclaimable:0 [ 369.509428][ T6177] free:1347619 free_pcp:872 free_cma:0 [ 369.575458][ T6177] Node 0 active_anon:19992kB inactive_anon:0kB active_file:5964kB inactive_file:153248kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:125852kB dirty:852kB writeback:0kB shmem:4296kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:11012kB pagetables:3624kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 369.612312][ T6177] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:72kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 369.648628][ T6177] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 369.699389][ T6177] lowmem_reserve[]: 0 2504 2504 2504 2504 [ 369.705859][ T6177] Node 0 DMA32 free:1465676kB boost:0kB min:34304kB low:42880kB high:51456kB reserved_highatomic:0KB active_anon:21724kB inactive_anon:0kB active_file:5964kB inactive_file:153152kB unevictable:1536kB writepending:852kB present:3129332kB managed:2564140kB mlocked:0kB bounce:0kB free_pcp:1980kB local_pcp:892kB free_cma:0kB [ 369.791202][ T6177] lowmem_reserve[]: 0 0 0 0 0 [ 369.807851][ T6177] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB active_anon:8kB inactive_anon:0kB active_file:0kB inactive_file:96kB unevictable:0kB writepending:0kB present:1048580kB managed:108kB mlocked:0kB bounce:0kB free_pcp:4kB local_pcp:0kB free_cma:0kB [ 369.834494][ C1] vkms_vblank_simulate: vblank timer overrun [ 369.891744][ T6177] lowmem_reserve[]: 0 0 0 0 0 [ 369.922004][ T6177] Node 1 Normal free:3910584kB boost:0kB min:55592kB low:69488kB high:83384kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:72kB unevictable:1536kB writepending:4kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:500kB local_pcp:0kB free_cma:0kB [ 369.994134][ T6177] lowmem_reserve[]: 0 0 0 0 0 [ 369.998943][ T6177] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 370.055180][ T6177] Node 0 DMA32: 53*4kB (UM) 50*8kB (UME) 409*16kB (UE) 116*32kB (UME) 89*64kB (UME) 36*128kB (UM) 27*256kB (UM) 13*512kB (UM) 3*1024kB (UME) 3*2048kB (ME) 346*4096kB (M) = 1461172kB [ 370.128494][ T6177] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 370.157981][ T30] audit: type=1326 audit(1746478557.390:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6186 comm="syz.4.73" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f989158e969 code=0x7ffc0000 [ 370.171687][ T6177] Node 1 Normal: 114*4kB (UME) 74*8kB (UME) 54*16kB (UME) 220*32kB (UME) 101*64kB (UME) 31*128kB (UME) 20*256kB (UME) 8*512kB (UM) 7*1024kB (UME) 4*2048kB (UE) 944*4096kB (M) = 3910584kB [ 370.212774][ T6187] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 370.241332][ T30] audit: type=1326 audit(1746478557.440:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6186 comm="syz.4.73" exe="/root/syz-executor" sig=0 arch=c000003e syscall=226 compat=0 ip=0x7f989158e969 code=0x7ffc0000 [ 370.310232][ T6177] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 370.361707][ T6177] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 370.370008][ T30] audit: type=1326 audit(1746478557.440:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6186 comm="syz.4.73" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f989158e969 code=0x7ffc0000 [ 370.371049][ T6177] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 370.371070][ T6177] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 370.371088][ T6177] 43730 total pagecache pages [ 370.441112][ T30] audit: type=1326 audit(1746478557.440:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6186 comm="syz.4.73" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f989158e969 code=0x7ffc0000 [ 370.461727][ T6177] 0 pages in swap cache [ 370.467604][ T6177] Free swap = 124996kB [ 370.487386][ T6177] Total swap = 124996kB [ 370.489167][ T30] audit: type=1326 audit(1746478557.440:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6186 comm="syz.4.73" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7f989158e969 code=0x7ffc0000 [ 370.514539][ T6177] 2097051 pages RAM [ 370.548372][ T6177] 0 pages HighMem/MovableOnly [ 370.553305][ T30] audit: type=1326 audit(1746478557.440:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6186 comm="syz.4.73" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f989158e969 code=0x7ffc0000 [ 370.553357][ T30] audit: type=1326 audit(1746478557.440:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6186 comm="syz.4.73" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f989158e969 code=0x7ffc0000 [ 370.553400][ T30] audit: type=1326 audit(1746478557.440:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6186 comm="syz.4.73" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f989158e969 code=0x7ffc0000 [ 370.553442][ T30] audit: type=1326 audit(1746478557.440:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6186 comm="syz.4.73" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f989158e969 code=0x7ffc0000 [ 370.553485][ T30] audit: type=1326 audit(1746478557.450:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6186 comm="syz.4.73" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f989158e969 code=0x7ffc0000 [ 370.752092][ T6177] 424358 pages reserved [ 370.764050][ T6177] 0 pages cma reserved [ 370.965711][ T6200] netlink: 4 bytes leftover after parsing attributes in process `syz.3.78'. [ 371.588592][ T6222] tap0: tun_chr_ioctl cmd 1074025677 [ 371.600689][ T6222] tap0: linktype set to 780 [ 371.840517][ T6226] rdma_op ffff88805af711f0 conn xmit_rdma 0000000000000000 [ 372.796020][ T6230] netlink: 20 bytes leftover after parsing attributes in process `syz.0.80'. [ 372.807999][ T6230] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'syz0' [ 373.961732][ T5956] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 374.142164][ T5956] usb 4-1: Using ep0 maxpacket: 32 [ 374.158917][ T5956] usb 4-1: config 0 has an invalid interface number: 51 but max is 0 [ 374.194124][ T5956] usb 4-1: config 0 has no interface number 0 [ 374.206945][ T5956] usb 4-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 374.224922][ T5956] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 374.234225][ T5956] usb 4-1: Product: syz [ 374.240748][ T5956] usb 4-1: Manufacturer: syz [ 374.308859][ T5956] usb 4-1: SerialNumber: syz [ 374.331925][ T5947] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 374.349129][ T5956] usb 4-1: config 0 descriptor?? [ 374.367269][ T5956] quatech2 4-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 374.535801][ T5947] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 374.583861][ T5947] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 374.605669][ T5956] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 374.635831][ T5947] usb 3-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 374.681439][ C1] usb 4-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 374.681546][ T5947] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 374.696694][ T5956] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 374.765704][ T5956] usb 4-1: USB disconnect, device number 5 [ 374.775071][ T5947] usb 3-1: Product: syz [ 374.793402][ T5947] usb 3-1: Manufacturer: syz [ 374.819190][ T5947] usb 3-1: SerialNumber: syz [ 374.847234][ T5947] usb 3-1: config 0 descriptor?? [ 374.864671][ T5956] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 374.872833][ T6254] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 374.895461][ T6254] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 374.916629][ T6270] netlink: 72 bytes leftover after parsing attributes in process `syz.3.97'. [ 374.929637][ T5956] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 375.013995][ T5956] quatech2 4-1:0.51: device disconnected [ 375.136585][ T55] Bluetooth: hci0: unexpected event for opcode 0x2003 [ 375.212649][ T6254] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 375.250515][ T6254] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 375.291892][ T5946] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 375.329980][ T6277] netlink: 'syz.0.99': attribute type 21 has an invalid length. [ 375.379323][ T6277] netlink: 'syz.0.99': attribute type 1 has an invalid length. [ 375.390205][ T6277] netlink: 144 bytes leftover after parsing attributes in process `syz.0.99'. [ 375.491858][ T5946] usb 2-1: Using ep0 maxpacket: 8 [ 375.551806][ T5946] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 375.592828][ T5946] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 375.633668][ T5946] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 375.668714][ T5947] dm9601: No valid MAC address in EEPROM, using 00:00:00:00:00:00 [ 375.674374][ T6280] netlink: 23 bytes leftover after parsing attributes in process `syz.0.101'. [ 375.698533][ T5946] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 375.711210][ T6280] caif0: entered allmulticast mode [ 375.764996][ T5946] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 375.804967][ T5946] usb 2-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 375.822645][ T5946] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 375.873168][ T5946] usb 2-1: config 0 descriptor?? [ 375.942272][ T6287] netlink: 156 bytes leftover after parsing attributes in process `syz.0.101'. [ 376.024465][ T6287] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 377.440656][ T5947] dm9601 3-1:0.0 (unnamed net_device) (uninitialized): Error reading MODE_CTRL [ 377.491910][ T6296] Cannot find set identified by id 2 to match [ 378.809394][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.810718][ T5946] usb 2-1: USB disconnect, device number 3 [ 378.816190][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.861210][ T5947] usb 3-1: USB disconnect, device number 4 [ 379.206380][ T55] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 379.215066][ T55] Bluetooth: hci0: Injecting HCI hardware error event [ 379.222974][ T55] Bluetooth: hci0: hardware error 0x00 [ 380.241819][ T5910] usb 3-1: new low-speed USB device number 5 using dummy_hcd [ 380.274218][ T6321] ptrace attach of "./syz-executor exec"[5873] was attempted by "./syz-executor exec"[6321] [ 380.341711][ T47] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 380.397518][ T6317] could not allocate digest TFM handle vmac64(aes-generic) [ 380.411765][ T5910] usb 3-1: device descriptor read/64, error -71 [ 380.503751][ T47] usb 2-1: Using ep0 maxpacket: 16 [ 380.525028][ T47] usb 2-1: config 0 has an invalid interface number: 215 but max is 0 [ 380.539116][ T47] usb 2-1: config 0 has no interface number 0 [ 380.550359][ T47] usb 2-1: New USB device found, idVendor=10cf, idProduct=5503, bcdDevice=ea.9f [ 380.569967][ T47] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 380.579382][ T47] usb 2-1: Product: syz [ 380.590155][ T47] usb 2-1: Manufacturer: syz [ 380.595967][ T47] usb 2-1: SerialNumber: syz [ 380.606192][ T47] usb 2-1: config 0 descriptor?? [ 380.629732][ T47] vmk80xx 2-1:0.215: driver 'vmk80xx' failed to auto-configure device. [ 380.671695][ T5910] usb 3-1: new low-speed USB device number 6 using dummy_hcd [ 380.816588][ T5946] usb 2-1: USB disconnect, device number 4 [ 380.831885][ T5910] usb 3-1: device descriptor read/64, error -71 [ 380.942013][ T5910] usb usb3-port1: attempt power cycle [ 380.981747][ T5947] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 381.145417][ T5947] usb 5-1: config 0 has no interfaces? [ 381.157784][ T5947] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 381.167902][ T5947] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 381.176020][ T5947] usb 5-1: Product: syz [ 381.180295][ T5947] usb 5-1: Manufacturer: syz [ 381.185256][ T5947] usb 5-1: SerialNumber: syz [ 381.204208][ T5947] usb 5-1: config 0 descriptor?? [ 381.282385][ T55] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 381.292082][ T5910] usb 3-1: new low-speed USB device number 7 using dummy_hcd [ 381.307290][ T12] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 381.320149][ T5910] usb 3-1: device descriptor read/8, error -71 [ 381.437791][ T12] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 381.472666][ T6346] vlan3: entered promiscuous mode [ 381.477731][ T6346] vlan2: entered promiscuous mode [ 381.482919][ T6346] bond0: entered promiscuous mode [ 381.487968][ T6346] bond_slave_0: entered promiscuous mode [ 381.497762][ T6346] bond_slave_1: entered promiscuous mode [ 381.550069][ T12] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 381.574697][ T5910] usb 3-1: new low-speed USB device number 8 using dummy_hcd [ 381.607008][ T5910] usb 3-1: device descriptor read/8, error -71 [ 381.616293][ T12] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 381.733020][ T5910] usb usb3-port1: unable to enumerate USB device [ 381.972023][ T120] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 382.015002][ T12] bridge_slave_1: left allmulticast mode [ 382.044183][ T12] bridge_slave_1: left promiscuous mode [ 382.158089][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 382.183282][ T120] usb 2-1: Using ep0 maxpacket: 8 [ 382.191012][ T120] usb 2-1: config 2 has an invalid interface number: 169 but max is 0 [ 382.200169][ T120] usb 2-1: config 2 has no interface number 0 [ 383.408818][ T12] bridge_slave_0: left allmulticast mode [ 383.414857][ T12] bridge_slave_0: left promiscuous mode [ 383.420243][ T120] usb 2-1: New USB device found, idVendor=1163, idProduct=0200, bcdDevice=b8.92 [ 383.438389][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 383.449745][ T120] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 383.503314][ T120] cypress_m8 2-1:2.169: DeLorme Earthmate USB converter detected [ 383.542932][ T120] earthmate ttyUSB0: required endpoint is missing [ 383.826273][ T5838] usb 2-1: USB disconnect, device number 5 [ 383.845060][ T5838] cypress_m8 2-1:2.169: device disconnected [ 383.882239][ T47] usb 5-1: USB disconnect, device number 12 [ 383.930507][ T6371] netlink: 'syz.2.123': attribute type 10 has an invalid length. [ 384.249040][ T6385] netlink: 4 bytes leftover after parsing attributes in process `syz.4.125'. [ 384.337616][ T5857] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 384.346870][ T5857] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 384.359765][ T5857] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 384.387400][ T5857] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 384.395770][ T5857] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 384.721432][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 384.754814][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 384.778656][ T12] bond0 (unregistering): Released all slaves [ 384.795522][ T47] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 384.813285][ T6371] 8021q: adding VLAN 0 to HW filter on device team0 [ 384.825177][ T6371] bond0: (slave team0): Enslaving as an active interface with an up link [ 384.885127][ T6385] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 384.925412][ T6385] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 384.999995][ T6385] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 385.017195][ T6385] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 385.080134][ T47] usb 2-1: config 0 has an invalid interface number: 168 but max is 0 [ 385.109254][ T47] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 385.169212][ T47] usb 2-1: config 0 has no interface number 0 [ 385.197901][ T6401] netlink: 36 bytes leftover after parsing attributes in process `syz.2.127'. [ 385.211738][ T47] usb 2-1: config 0 interface 168 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 385.223356][ T47] usb 2-1: config 0 interface 168 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 385.238837][ T47] usb 2-1: config 0 interface 168 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 16 [ 385.270587][ T47] usb 2-1: New USB device found, idVendor=0959, idProduct=2bd0, bcdDevice=48.98 [ 385.279909][ T47] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 385.309541][ T47] usb 2-1: config 0 descriptor?? [ 385.347359][ T47] HFC-S_USB 2-1:0.168: probe with driver HFC-S_USB failed with error -5 [ 385.376399][ T6405] netlink: 4 bytes leftover after parsing attributes in process `syz.0.129'. [ 385.434058][ T6400] bridge0: port 3(netdevsim0) entered blocking state [ 385.441226][ T6400] bridge0: port 3(netdevsim0) entered disabled state [ 385.525955][ T6400] netdevsim netdevsim2 netdevsim0: entered allmulticast mode [ 385.731448][ T6400] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 385.741200][ T6400] bridge0: port 3(netdevsim0) entered blocking state [ 385.748992][ T6400] bridge0: port 3(netdevsim0) entered forwarding state [ 385.790814][ T6392] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 385.835154][ T6392] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 385.851558][ T6405] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 385.859250][ T6405] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 385.926692][ T5956] usb 2-1: USB disconnect, device number 6 [ 385.957947][ T6405] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 385.993033][ T6405] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 386.341707][ T5946] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 386.370881][ T12] hsr_slave_0: left promiscuous mode [ 386.377993][ T12] hsr_slave_1: left promiscuous mode [ 386.384212][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 386.391852][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 386.400536][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 386.408346][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 386.449992][ T12] veth1_macvtap: left promiscuous mode [ 386.468797][ T12] veth0_macvtap: left promiscuous mode [ 386.487795][ T55] Bluetooth: hci0: command tx timeout [ 386.493019][ T12] veth1_vlan: left promiscuous mode [ 386.512714][ T5946] usb 3-1: Using ep0 maxpacket: 16 [ 386.521561][ T12] veth0_vlan: left promiscuous mode [ 386.538346][ T5946] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 386.553155][ T5946] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 386.568373][ T5946] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 386.595196][ T5946] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 386.620018][ T5946] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 386.665306][ T5946] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 386.676659][ T5946] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 386.702837][ T5946] usb 3-1: Manufacturer: syz [ 386.711317][ T5946] usb 3-1: config 0 descriptor?? [ 386.793393][ T5956] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 386.962513][ T5956] usb 2-1: Using ep0 maxpacket: 16 [ 386.983117][ T5956] usb 2-1: unable to get BOS descriptor or descriptor too short [ 387.004038][ T5956] usb 2-1: config 2 has an invalid interface number: 64 but max is 0 [ 387.024242][ T5956] usb 2-1: config 2 has no interface number 0 [ 387.030431][ T5956] usb 2-1: config 2 interface 64 altsetting 10 bulk endpoint 0xC has invalid maxpacket 32 [ 387.055177][ T5956] usb 2-1: config 2 interface 64 altsetting 10 endpoint 0xA has invalid maxpacket 1024, setting to 64 [ 387.076881][ T5956] usb 2-1: config 2 interface 64 has no altsetting 0 [ 387.093651][ T5956] usb 2-1: string descriptor 0 read error: -22 [ 387.105586][ T5956] usb 2-1: New USB device found, idVendor=093c, idProduct=0701, bcdDevice=f6.00 [ 387.121760][ T5946] rc_core: IR keymap rc-hauppauge not found [ 387.157418][ T5946] Registered IR keymap rc-empty [ 387.173639][ T5946] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 387.192012][ T5956] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 387.206167][ T6425] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 387.211724][ T5946] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 387.256949][ T5956] ftdi_sio 2-1:2.64: FTDI USB Serial Device converter detected [ 387.320809][ T5946] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 387.356871][ T5956] ftdi_sio ttyUSB0: unknown device type: 0xf600 [ 387.376043][ T5946] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input5 [ 387.428019][ T5946] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 387.462999][ T5946] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 387.482418][ T5956] usb 2-1: USB disconnect, device number 7 [ 387.507621][ T5956] ftdi_sio 2-1:2.64: device disconnected [ 387.520822][ T5910] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 387.522229][ T5946] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 387.598566][ T6435] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 387.601929][ T5946] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 387.618805][ T6435] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 387.672840][ T5946] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 387.702093][ T5946] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 387.716049][ T12] team0 (unregistering): Port device team_slave_1 removed [ 387.733393][ T5946] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 387.751888][ T5946] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 387.770115][ T5910] usb 5-1: config 0 has no interfaces? [ 387.791930][ T5946] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 387.805174][ T5910] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 387.815315][ T5910] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 387.816214][ T12] team0 (unregistering): Port device team_slave_0 removed [ 387.823875][ T5910] usb 5-1: Product: syz [ 387.823897][ T5910] usb 5-1: Manufacturer: syz [ 387.834077][ T5946] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 387.835962][ T5910] usb 5-1: SerialNumber: syz [ 387.867584][ T5910] usb 5-1: config 0 descriptor?? [ 387.872796][ T5946] mceusb 3-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 387.892648][ T5946] mceusb 3-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 388.147270][ T6442] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 388.161720][ T6442] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 388.582475][ T55] Bluetooth: hci0: command tx timeout [ 390.757639][ T55] Bluetooth: hci0: command tx timeout [ 390.800497][ T6461] mmap: syz.1.136 (6461) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 391.021515][ T5946] usb 5-1: USB disconnect, device number 13 [ 391.269436][ T5956] hid-generic 0005:03FF:1000.0002: item fetching failed at offset 1/5 [ 391.324671][ T5956] hid-generic 0005:03FF:1000.0002: probe with driver hid-generic failed with error -22 [ 391.335679][ T6463] netlink: 292 bytes leftover after parsing attributes in process `syz.4.138'. [ 391.340943][ T5910] usb 3-1: USB disconnect, device number 9 [ 391.588527][ T6470] FAULT_INJECTION: forcing a failure. [ 391.588527][ T6470] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 391.647031][ T6470] CPU: 0 UID: 0 PID: 6470 Comm: syz.4.140 Not tainted 6.15.0-rc5-syzkaller #0 PREEMPT(full) [ 391.647053][ T6470] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025 [ 391.647062][ T6470] Call Trace: [ 391.647068][ T6470] [ 391.647074][ T6470] dump_stack_lvl+0x189/0x250 [ 391.647099][ T6470] ? __lock_acquire+0xaac/0xd20 [ 391.647121][ T6470] ? __pfx_dump_stack_lvl+0x10/0x10 [ 391.647141][ T6470] ? __pfx__printk+0x10/0x10 [ 391.647156][ T6470] ? __might_fault+0xb0/0x130 [ 391.647182][ T6470] should_fail_ex+0x414/0x560 [ 391.647209][ T6470] _copy_from_user+0x2d/0xb0 [ 391.647229][ T6470] ___sys_sendmsg+0x158/0x2a0 [ 391.647252][ T6470] ? __pfx____sys_sendmsg+0x10/0x10 [ 391.647302][ T6470] ? __fget_files+0x2a/0x420 [ 391.647320][ T6470] ? __fget_files+0x3a0/0x420 [ 391.647345][ T6470] __x64_sys_sendmsg+0x19b/0x260 [ 391.647365][ T6470] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 391.647394][ T6470] ? do_syscall_64+0xba/0x210 [ 391.647414][ T6470] do_syscall_64+0xf6/0x210 [ 391.647432][ T6470] ? clear_bhb_loop+0x45/0xa0 [ 391.647450][ T6470] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 391.647463][ T6470] RIP: 0033:0x7f989158e969 [ 391.647476][ T6470] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 391.647487][ T6470] RSP: 002b:00007f98924cd038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 391.647502][ T6470] RAX: ffffffffffffffda RBX: 00007f98917b5fa0 RCX: 00007f989158e969 [ 391.647512][ T6470] RDX: 0000000000000000 RSI: 00002000000006c0 RDI: 0000000000000003 [ 391.647520][ T6470] RBP: 00007f98924cd090 R08: 0000000000000000 R09: 0000000000000000 [ 391.647528][ T6470] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 391.647536][ T6470] R13: 0000000000000000 R14: 00007f98917b5fa0 R15: 00007f98918dfa28 [ 391.647556][ T6470] [ 391.947218][ T6390] chnl_net:caif_netlink_parms(): no params data found [ 392.027538][ T5910] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 392.272561][ T5910] usb 3-1: Using ep0 maxpacket: 8 [ 392.285678][ T5910] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 392.297995][ T5910] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 392.307567][ T5910] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 392.321913][ T5910] usb 3-1: config 0 descriptor?? [ 392.451811][ T5947] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 392.587214][ T5910] iowarrior 3-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 392.611847][ T5947] usb 5-1: Using ep0 maxpacket: 8 [ 392.630855][ T5947] usb 5-1: New USB device found, idVendor=0471, idProduct=0313, bcdDevice=81.d5 [ 392.661669][ T5947] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 392.691928][ T5947] usb 5-1: Product: syz [ 392.696174][ T5947] usb 5-1: Manufacturer: syz [ 392.700893][ T5947] usb 5-1: SerialNumber: syz [ 392.719499][ T6390] bridge0: port 1(bridge_slave_0) entered blocking state [ 392.733136][ T6390] bridge0: port 1(bridge_slave_0) entered disabled state [ 392.740635][ T6390] bridge_slave_0: entered allmulticast mode [ 392.749243][ T5947] usb 5-1: config 0 descriptor?? [ 392.759415][ T6390] bridge_slave_0: entered promiscuous mode [ 392.770079][ T5947] pwc: Philips PCVC720K/40 (ToUCam XS) USB webcam detected. [ 392.795620][ T5956] usb 3-1: USB disconnect, device number 10 [ 392.801684][ C1] iowarrior 3-1:0.0: iowarrior_callback - usb_submit_urb failed with result -19 [ 392.801747][ T55] Bluetooth: hci0: command tx timeout [ 392.875874][ T6390] bridge0: port 2(bridge_slave_1) entered blocking state [ 392.893444][ T6496] FAULT_INJECTION: forcing a failure. [ 392.893444][ T6496] name failslab, interval 1, probability 0, space 0, times 0 [ 392.915391][ T6390] bridge0: port 2(bridge_slave_1) entered disabled state [ 392.935121][ T6496] CPU: 0 UID: 0 PID: 6496 Comm: syz.0.144 Not tainted 6.15.0-rc5-syzkaller #0 PREEMPT(full) [ 392.935153][ T6496] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025 [ 392.935172][ T6496] Call Trace: [ 392.935180][ T6496] [ 392.935189][ T6496] dump_stack_lvl+0x189/0x250 [ 392.935227][ T6496] ? __pfx_dump_stack_lvl+0x10/0x10 [ 392.935255][ T6496] ? __pfx__printk+0x10/0x10 [ 392.935278][ T6496] ? __pfx___might_resched+0x10/0x10 [ 392.935297][ T6496] ? fs_reclaim_acquire+0x7d/0x100 [ 392.935332][ T6496] should_fail_ex+0x414/0x560 [ 392.935370][ T6496] should_failslab+0xa8/0x100 [ 392.935397][ T6496] __kmalloc_cache_noprof+0x70/0x3d0 [ 392.935421][ T6496] ? snd_pcm_hw_param_near+0x7f/0x500 [ 392.935447][ T6496] snd_pcm_hw_param_near+0x7f/0x500 [ 392.935466][ T6496] ? snd_pcm_oss_change_params_locked+0xff9/0x3f60 [ 392.935486][ T6496] ? kfree+0x193/0x440 [ 392.935505][ T6496] ? snd_pcm_hw_param_value+0x2b9/0x510 [ 392.935530][ T6496] snd_pcm_oss_change_params_locked+0x1048/0x3f60 [ 392.935571][ T6496] ? trace_contention_end+0x39/0x120 [ 392.935604][ T6496] ? __pfx_snd_pcm_oss_change_params_locked+0x10/0x10 [ 392.935624][ T6496] ? snd_pcm_oss_make_ready+0xc0/0x340 [ 392.935661][ T6496] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 392.935682][ T6496] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 392.935711][ T6496] snd_pcm_oss_make_ready+0x11b/0x340 [ 392.935738][ T6496] snd_pcm_oss_set_trigger+0x95/0x740 [ 392.935768][ T6496] snd_pcm_oss_poll+0x659/0x8a0 [ 392.935794][ T6496] ? __pfx_snd_pcm_oss_poll+0x10/0x10 [ 392.935822][ T6496] ? __pfx_snd_pcm_oss_poll+0x10/0x10 [ 392.935840][ T6496] ep_insert+0x115e/0x1a00 [ 392.935879][ T6496] ? __pfx_ep_insert+0x10/0x10 [ 392.935900][ T6496] ? __pfx___mutex_lock+0x10/0x10 [ 392.935924][ T6496] ? __fget_files+0x2a/0x420 [ 392.935951][ T6496] ? __pfx_ep_ptable_queue_proc+0x10/0x10 [ 392.935975][ T6496] ? __fget_files+0x3a0/0x420 [ 392.935999][ T6496] ? __fget_files+0x2a/0x420 [ 392.936034][ T6496] do_epoll_ctl+0x80e/0xe80 [ 392.936065][ T6496] __x64_sys_epoll_ctl+0x163/0x1a0 [ 392.936086][ T6496] ? rcu_is_watching+0x15/0xb0 [ 392.936117][ T6496] ? __pfx___x64_sys_epoll_ctl+0x10/0x10 [ 392.936144][ T6496] ? do_syscall_64+0xba/0x210 [ 392.936179][ T6496] do_syscall_64+0xf6/0x210 [ 392.936204][ T6496] ? clear_bhb_loop+0x45/0xa0 [ 392.936228][ T6496] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 392.936247][ T6496] RIP: 0033:0x7fea63f8e969 [ 392.936265][ T6496] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 392.936280][ T6496] RSP: 002b:00007fea64d12038 EFLAGS: 00000246 ORIG_RAX: 00000000000000e9 [ 392.936301][ T6496] RAX: ffffffffffffffda RBX: 00007fea641b5fa0 RCX: 00007fea63f8e969 [ 392.936315][ T6496] RDX: 0000000000000003 RSI: 0000000000000001 RDI: 0000000000000004 [ 392.936326][ T6496] RBP: 00007fea64d12090 R08: 0000000000000000 R09: 0000000000000000 [ 392.936337][ T6496] R10: 0000200000000080 R11: 0000000000000246 R12: 0000000000000002 [ 392.936349][ T6496] R13: 0000000000000000 R14: 00007fea641b5fa0 R15: 00007fea642dfa28 [ 392.936381][ T6496] [ 392.954737][ T6390] bridge_slave_1: entered allmulticast mode [ 393.005279][ T5947] pwc: send_video_command error -71 [ 393.166843][ T6390] bridge_slave_1: entered promiscuous mode [ 393.326263][ T5947] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 393.347705][ T5947] Philips webcam 5-1:0.0: probe with driver Philips webcam failed with error -71 [ 393.388563][ T5947] usb 5-1: USB disconnect, device number 14 [ 393.564703][ T6390] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 394.020039][ T6390] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 394.170190][ T6390] team0: Port device team_slave_0 added [ 394.237846][ T6390] team0: Port device team_slave_1 added [ 394.547592][ T6390] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 394.560255][ T6390] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 394.596484][ T5910] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 394.627854][ T6390] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 394.662058][ T6390] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 394.682672][ T6390] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 394.740241][ T6390] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 394.784904][ T5956] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 394.811934][ T5910] usb 3-1: Using ep0 maxpacket: 32 [ 394.824321][ T5910] usb 3-1: unable to get BOS descriptor or descriptor too short [ 394.840583][ T5910] usb 3-1: config 253 has an invalid interface number: 202 but max is 0 [ 394.859241][ T5910] usb 3-1: config 253 has no interface number 0 [ 394.951686][ T5956] usb 2-1: Using ep0 maxpacket: 32 [ 394.982384][ T5956] usb 2-1: config index 0 descriptor too short (expected 35577, got 27) [ 394.991769][ T5956] usb 2-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 395.001670][ T5956] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 395.013895][ T5910] usb 3-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=58.16 [ 395.024305][ T5956] usb 2-1: config 1 has no interface number 0 [ 395.041841][ T5910] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 395.051711][ T5956] usb 2-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 32, changing to 9 [ 395.074632][ T5910] usb 3-1: Product: syz [ 395.079719][ T6390] hsr_slave_0: entered promiscuous mode [ 395.088791][ T5956] usb 2-1: config 1 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 8240, setting to 1024 [ 395.101776][ T5910] usb 3-1: Manufacturer: syz [ 395.121684][ T5910] usb 3-1: SerialNumber: syz [ 395.129887][ T6390] hsr_slave_1: entered promiscuous mode [ 395.146200][ T5956] usb 2-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 395.164963][ T6390] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 395.190186][ T5956] usb 2-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 395.202158][ T6390] Cannot create hsr debugfs directory [ 395.206608][ T5956] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 395.242088][ T5956] snd_usb_pod 2-1:1.1: Line 6 Pocket POD found [ 395.405583][ T5910] usb 3-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 395.415049][ T12] usb 3-1: Failed to submit usb control message: -71 [ 395.415119][ T12] usb 3-1: unable to send the bmi data to the device: -71 [ 395.415138][ T12] usb 3-1: unable to get target info from device [ 395.415160][ T12] usb 3-1: could not get target info (-71) [ 395.415186][ T12] usb 3-1: could not probe fw (-71) [ 395.467642][ T5956] snd_usb_pod 2-1:1.1: Line 6 Pocket POD now attached [ 395.616896][ T5910] usb 3-1: USB disconnect, device number 11 [ 395.662438][ T6518] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 395.709067][ T6518] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 395.756162][ T6518] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 395.777770][ T6518] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 395.793530][ T5956] usb 2-1: USB disconnect, device number 8 [ 395.801405][ T5956] snd_usb_pod 2-1:1.1: Line 6 Pocket POD now disconnected [ 395.868494][ T6538] veth0_macvtap: entered allmulticast mode [ 395.943987][ T6390] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 395.965859][ T6390] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 395.985332][ T6390] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 395.997151][ T6390] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 396.009342][ T6536] veth0_macvtap: left allmulticast mode [ 396.214249][ T6390] 8021q: adding VLAN 0 to HW filter on device bond0 [ 396.241435][ T6390] 8021q: adding VLAN 0 to HW filter on device team0 [ 396.268776][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 396.276035][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 396.287892][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 396.295218][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 396.336391][ T5956] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 396.556849][ T5956] usb 3-1: Using ep0 maxpacket: 16 [ 396.597797][ T5956] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 396.618304][ T5956] usb 3-1: config 0 has no interfaces? [ 396.618994][ T6557] FAULT_INJECTION: forcing a failure. [ 396.618994][ T6557] name failslab, interval 1, probability 0, space 0, times 0 [ 396.672195][ T5956] usb 3-1: New USB device found, idVendor=046d, idProduct=c29c, bcdDevice= 0.00 [ 398.218676][ T6557] CPU: 1 UID: 0 PID: 6557 Comm: syz.0.154 Not tainted 6.15.0-rc5-syzkaller #0 PREEMPT(full) [ 398.218708][ T6557] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025 [ 398.218719][ T6557] Call Trace: [ 398.218727][ T6557] [ 398.218737][ T6557] dump_stack_lvl+0x189/0x250 [ 398.218776][ T6557] ? __pfx_dump_stack_lvl+0x10/0x10 [ 398.218806][ T6557] ? __pfx__printk+0x10/0x10 [ 398.218833][ T6557] ? __pfx___might_resched+0x10/0x10 [ 398.218850][ T6557] ? fs_reclaim_acquire+0x7d/0x100 [ 398.218899][ T6557] should_fail_ex+0x414/0x560 [ 398.218937][ T6557] should_failslab+0xa8/0x100 [ 398.218964][ T6557] __kmalloc_noprof+0xcb/0x4f0 [ 398.218987][ T6557] ? snd_pcm_hw_refine+0x967/0x1640 [ 398.219025][ T6557] snd_pcm_hw_refine+0x967/0x1640 [ 398.219059][ T6557] ? __kasan_kmalloc+0x93/0xb0 [ 398.219081][ T6557] ? snd_pcm_oss_change_params_locked+0x1048/0x3f60 [ 398.219101][ T6557] ? snd_pcm_oss_set_trigger+0x95/0x740 [ 398.219126][ T6557] ? ep_insert+0x115e/0x1a00 [ 398.219145][ T6557] ? do_epoll_ctl+0x80e/0xe80 [ 398.219165][ T6557] ? __pfx_snd_pcm_hw_refine+0x10/0x10 [ 398.219247][ T6557] snd_pcm_hw_param_first+0x3e9/0xaf0 [ 398.219278][ T6557] snd_pcm_hw_param_near+0x460/0x500 [ 398.219298][ T6557] ? snd_pcm_oss_change_params_locked+0xff9/0x3f60 [ 398.219319][ T6557] ? snd_pcm_hw_param_value+0x2b9/0x510 [ 398.219343][ T6557] snd_pcm_oss_change_params_locked+0x1048/0x3f60 [ 398.219383][ T6557] ? trace_contention_end+0x39/0x120 [ 398.219417][ T6557] ? __pfx_snd_pcm_oss_change_params_locked+0x10/0x10 [ 398.219437][ T6557] ? snd_pcm_oss_make_ready+0xc0/0x340 [ 398.219475][ T6557] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 398.219495][ T6557] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 398.219523][ T6557] snd_pcm_oss_make_ready+0x11b/0x340 [ 398.219549][ T6557] snd_pcm_oss_set_trigger+0x95/0x740 [ 398.219579][ T6557] snd_pcm_oss_poll+0x659/0x8a0 [ 398.219603][ T6557] ? __pfx_snd_pcm_oss_poll+0x10/0x10 [ 398.219630][ T6557] ? __pfx_snd_pcm_oss_poll+0x10/0x10 [ 398.219648][ T6557] ep_insert+0x115e/0x1a00 [ 398.219685][ T6557] ? __pfx_ep_insert+0x10/0x10 [ 398.219705][ T6557] ? __pfx___mutex_lock+0x10/0x10 [ 398.219727][ T6557] ? __fget_files+0x2a/0x420 [ 398.219754][ T6557] ? __pfx_ep_ptable_queue_proc+0x10/0x10 [ 398.219778][ T6557] ? __fget_files+0x3a0/0x420 [ 398.219801][ T6557] ? __fget_files+0x2a/0x420 [ 398.219836][ T6557] do_epoll_ctl+0x80e/0xe80 [ 398.219877][ T6557] __x64_sys_epoll_ctl+0x163/0x1a0 [ 398.219900][ T6557] ? rcu_is_watching+0x15/0xb0 [ 398.219938][ T6557] ? __pfx___x64_sys_epoll_ctl+0x10/0x10 [ 398.219965][ T6557] ? do_syscall_64+0xba/0x210 [ 398.219994][ T6557] do_syscall_64+0xf6/0x210 [ 398.220020][ T6557] ? clear_bhb_loop+0x45/0xa0 [ 398.220044][ T6557] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 398.220064][ T6557] RIP: 0033:0x7fea63f8e969 [ 398.220082][ T6557] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 398.220097][ T6557] RSP: 002b:00007fea64d12038 EFLAGS: 00000246 ORIG_RAX: 00000000000000e9 [ 398.220118][ T6557] RAX: ffffffffffffffda RBX: 00007fea641b5fa0 RCX: 00007fea63f8e969 [ 398.220132][ T6557] RDX: 0000000000000003 RSI: 0000000000000001 RDI: 0000000000000004 [ 398.220143][ T6557] RBP: 00007fea64d12090 R08: 0000000000000000 R09: 0000000000000000 [ 398.220155][ T6557] R10: 0000200000000080 R11: 0000000000000246 R12: 0000000000000002 [ 398.220167][ T6557] R13: 0000000000000000 R14: 00007fea641b5fa0 R15: 00007fea642dfa28 [ 398.220204][ T6557] [ 398.585815][ T6390] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 398.635903][ T6561] trusted_key: encrypted_key: master key parameter 'aç<ã–{ÿ:Vý‹°Å¤G^¼?mÐq´è-É [ 398.635903][ T6561] ¿¹uvKL' is invalid [ 398.691989][ T5956] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 398.722217][ T5956] usb 3-1: config 0 descriptor?? [ 398.787467][ T6390] veth0_vlan: entered promiscuous mode [ 398.801287][ T6390] veth1_vlan: entered promiscuous mode [ 398.955149][ T6390] veth0_macvtap: entered promiscuous mode [ 398.985832][ T6390] veth1_macvtap: entered promiscuous mode [ 399.006920][ T6390] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 399.023624][ T6390] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 399.036152][ T6390] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 399.065257][ T6390] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 399.083781][ T6390] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 399.097109][ T6390] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 399.116546][ T6390] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 399.133754][ T6390] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 399.146879][ T6390] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 399.159280][ T6390] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 399.186715][ T6390] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 399.196958][ T6390] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 399.368793][ T6390] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 399.387129][ T6390] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 399.520558][ T6572] netlink: 4 bytes leftover after parsing attributes in process `syz.4.157'. [ 399.980124][ T5927] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 400.018059][ T5927] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 400.025868][ T5956] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 400.051359][ T5910] usb 3-1: USB disconnect, device number 12 [ 400.119038][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 400.149688][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 400.225785][ T5956] usb 2-1: config 0 has no interfaces? [ 400.343563][ T5956] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 400.391014][ T5956] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 400.461944][ T5956] usb 2-1: Product: syz [ 400.489732][ T6581] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 400.492565][ T5956] usb 2-1: Manufacturer: syz [ 400.568166][ T5956] usb 2-1: SerialNumber: syz [ 400.601000][ T5956] usb 2-1: config 0 descriptor?? [ 401.693686][ T5910] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 401.821681][ T47] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 401.882024][ T5910] usb 1-1: Using ep0 maxpacket: 32 [ 401.963046][ T5910] usb 1-1: config 0 has no interfaces? [ 401.987040][ T47] usb 6-1: Using ep0 maxpacket: 16 [ 402.159893][ T6615] FAULT_INJECTION: forcing a failure. [ 402.159893][ T6615] name failslab, interval 1, probability 0, space 0, times 0 [ 402.218536][ T6615] CPU: 0 UID: 0 PID: 6615 Comm: syz.2.165 Not tainted 6.15.0-rc5-syzkaller #0 PREEMPT(full) [ 402.218560][ T6615] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025 [ 402.218569][ T6615] Call Trace: [ 402.218575][ T6615] [ 402.218582][ T6615] dump_stack_lvl+0x189/0x250 [ 402.218615][ T6615] ? __pfx_dump_stack_lvl+0x10/0x10 [ 402.218636][ T6615] ? __pfx__printk+0x10/0x10 [ 402.218654][ T6615] ? __pfx___might_resched+0x10/0x10 [ 402.218667][ T6615] ? fs_reclaim_acquire+0x7d/0x100 [ 402.218692][ T6615] should_fail_ex+0x414/0x560 [ 402.218719][ T6615] should_failslab+0xa8/0x100 [ 402.218739][ T6615] __kmalloc_noprof+0xcb/0x4f0 [ 402.218756][ T6615] ? snd_pcm_hw_refine+0x967/0x1640 [ 402.218780][ T6615] snd_pcm_hw_refine+0x967/0x1640 [ 402.218810][ T6615] ? __pfx_snd_pcm_hw_refine+0x10/0x10 [ 402.218829][ T6615] ? __pfx_snd_pcm_hw_refine+0x10/0x10 [ 402.218852][ T6615] ? __pfx_snd_pcm_hw_refine+0x10/0x10 [ 402.218896][ T6615] snd_pcm_hw_param_last+0x488/0xb60 [ 402.218917][ T6615] snd_pcm_hw_param_near+0x337/0x500 [ 402.218931][ T6615] ? __asan_memset+0x22/0x50 [ 402.218950][ T6615] snd_pcm_oss_change_params_locked+0x2135/0x3f60 [ 402.218989][ T6615] ? __pfx_snd_pcm_oss_change_params_locked+0x10/0x10 [ 402.219002][ T6615] ? snd_pcm_oss_make_ready+0xc0/0x340 [ 402.219028][ T6615] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 402.219042][ T6615] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 402.219063][ T6615] snd_pcm_oss_make_ready+0x11b/0x340 [ 402.219081][ T6615] snd_pcm_oss_set_trigger+0x95/0x740 [ 402.219103][ T6615] snd_pcm_oss_poll+0x659/0x8a0 [ 402.219120][ T6615] ? __pfx_snd_pcm_oss_poll+0x10/0x10 [ 402.219139][ T6615] ? __pfx_snd_pcm_oss_poll+0x10/0x10 [ 402.219152][ T6615] ep_insert+0x115e/0x1a00 [ 402.219179][ T6615] ? __pfx_ep_insert+0x10/0x10 [ 402.219194][ T6615] ? __pfx___mutex_lock+0x10/0x10 [ 402.219210][ T6615] ? __fget_files+0x2a/0x420 [ 402.219230][ T6615] ? __pfx_ep_ptable_queue_proc+0x10/0x10 [ 402.219247][ T6615] ? __fget_files+0x3a0/0x420 [ 402.219264][ T6615] ? __fget_files+0x2a/0x420 [ 402.219288][ T6615] do_epoll_ctl+0x80e/0xe80 [ 402.219310][ T6615] __x64_sys_epoll_ctl+0x163/0x1a0 [ 402.219325][ T6615] ? rcu_is_watching+0x15/0xb0 [ 402.219347][ T6615] ? __pfx___x64_sys_epoll_ctl+0x10/0x10 [ 402.219368][ T6615] ? do_syscall_64+0xba/0x210 [ 402.219388][ T6615] do_syscall_64+0xf6/0x210 [ 402.219406][ T6615] ? clear_bhb_loop+0x45/0xa0 [ 402.219423][ T6615] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 402.219437][ T6615] RIP: 0033:0x7ff14ed8e969 [ 402.219449][ T6615] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 402.219461][ T6615] RSP: 002b:00007ff14cbf6038 EFLAGS: 00000246 ORIG_RAX: 00000000000000e9 [ 402.219475][ T6615] RAX: ffffffffffffffda RBX: 00007ff14efb5fa0 RCX: 00007ff14ed8e969 [ 402.219486][ T6615] RDX: 0000000000000003 RSI: 0000000000000001 RDI: 0000000000000004 [ 402.219493][ T6615] RBP: 00007ff14cbf6090 R08: 0000000000000000 R09: 0000000000000000 [ 402.219502][ T6615] R10: 0000200000000080 R11: 0000000000000246 R12: 0000000000000002 [ 402.219511][ T6615] R13: 0000000000000000 R14: 00007ff14efb5fa0 R15: 00007ff14f0dfa28 [ 402.219532][ T6615] [ 402.556807][ T6617] netlink: 12 bytes leftover after parsing attributes in process `syz.4.164'. [ 402.708624][ T6617] 8021q: adding VLAN 0 to HW filter on device bond1 [ 402.797120][ T47] usb 6-1: no configurations [ 402.819014][ T5853] usb 2-1: USB disconnect, device number 9 [ 402.828338][ T6618] erspan0: entered allmulticast mode [ 402.840088][ T6618] bond1: (slave erspan0): Enslaving as an active interface with an up link [ 402.911765][ T47] usb 6-1: can't read configurations, error -22 [ 402.977437][ T5910] usb 1-1: New USB device found, idVendor=2040, idProduct=4901, bcdDevice=47.77 [ 403.145246][ T5910] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 403.193255][ T5910] usb 1-1: Product: syz [ 403.219599][ T5910] usb 1-1: Manufacturer: syz [ 403.234647][ T5910] usb 1-1: SerialNumber: syz [ 403.281703][ T47] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 403.290655][ T6632] netlink: 4 bytes leftover after parsing attributes in process `syz.2.168'. [ 403.307047][ T5910] usb 1-1: config 0 descriptor?? [ 403.308787][ T6632] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 403.331560][ T6632] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 403.340614][ T6632] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 403.348366][ T6632] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 403.462062][ T5853] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 403.522036][ T47] usb 6-1: Using ep0 maxpacket: 16 [ 403.617710][ T5853] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 403.676733][ T6603] xt_nfacct: accounting object `syz0' does not exists [ 403.685026][ T5853] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 62976, setting to 1024 [ 403.711429][ T5853] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 403.738128][ T5853] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 403.754216][ T5853] usb 2-1: New USB device strings: Mfr=1, Product=130, SerialNumber=3 [ 403.768918][ T47] usb 6-1: no configurations [ 403.783280][ T47] usb 6-1: can't read configurations, error -22 [ 403.847102][ T5853] usb 2-1: Product: syz [ 403.854256][ T5853] usb 2-1: Manufacturer: syz [ 403.859023][ T5853] usb 2-1: SerialNumber: syz [ 403.872827][ T5853] cdc_mbim 2-1:1.0: skipping garbage [ 403.917688][ T47] usb usb6-port1: attempt power cycle [ 404.070220][ T6630] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 404.159987][ T6642] netlink: 'syz.2.170': attribute type 13 has an invalid length. [ 404.173145][ T6642] netlink: 4 bytes leftover after parsing attributes in process `syz.2.170'. [ 404.351974][ T47] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 404.658641][ T47] usb 6-1: device descriptor read/8, error -71 [ 404.684845][ T6630] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 404.914188][ T5853] cdc_mbim 2-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 404.923667][ T5853] cdc_mbim 2-1:1.0: dwNtbInMaxSize=0 is too small. Using 2048 [ 404.939768][ T5853] cdc_mbim 2-1:1.0: setting rx_max = 2048 [ 405.119893][ T5853] cdc_mbim 2-1:1.0: setting tx_max = 184 [ 405.202872][ T5853] cdc_ncm 2-1:1.1: probe with driver cdc_ncm failed with error -71 [ 405.242375][ T5853] cdc_mbim 2-1:1.1: probe with driver cdc_mbim failed with error -71 [ 405.271283][ T5853] usbtest 2-1:1.1: probe with driver usbtest failed with error -71 [ 405.315043][ T5853] usb 2-1: USB disconnect, device number 10 [ 405.353188][ T120] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 405.365629][ T5910] usb 1-1: USB disconnect, device number 5 [ 405.551564][ T6671] netlink: 28 bytes leftover after parsing attributes in process `syz.5.175'. [ 405.552587][ T120] usb 5-1: too many configurations: 9, using maximum allowed: 8 [ 405.579236][ T120] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 405.611823][ T120] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 405.648079][ T120] usb 5-1: config 0 interface 0 has no altsetting 0 [ 405.678856][ T120] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 405.693621][ T120] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 405.706620][ T120] usb 5-1: config 0 interface 0 has no altsetting 0 [ 405.722560][ T120] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 405.731536][ T120] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 405.787064][ T120] usb 5-1: config 0 interface 0 has no altsetting 0 [ 405.821897][ T120] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 405.868688][ T120] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 405.920580][ T120] usb 5-1: config 0 interface 0 has no altsetting 0 [ 405.943741][ T120] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 405.957748][ T120] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 405.970430][ T120] usb 5-1: config 0 interface 0 has no altsetting 0 [ 405.978553][ T120] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 406.010021][ T120] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 406.022868][ T120] usb 5-1: config 0 interface 0 has no altsetting 0 [ 406.041109][ T6682] batadv0: entered promiscuous mode [ 406.050903][ T6682] macvtap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 406.050932][ T120] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 406.068980][ T120] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 406.079537][ T6682] macvtap1: entered allmulticast mode [ 406.090836][ T6682] batadv0: entered allmulticast mode [ 406.091416][ T6687] netlink: 'syz.5.177': attribute type 11 has an invalid length. [ 406.104403][ T120] usb 5-1: config 0 interface 0 has no altsetting 0 [ 406.112603][ T120] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 406.116077][ T6682] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 406.132606][ T120] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 406.147784][ T120] usb 5-1: config 0 interface 0 has no altsetting 0 [ 406.157562][ T120] usb 5-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 406.169243][ T120] usb 5-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 406.177836][ T120] usb 5-1: Product: syz [ 406.209654][ T120] usb 5-1: Manufacturer: syz [ 406.216845][ T120] usb 5-1: SerialNumber: syz [ 406.239283][ T120] usb 5-1: config 0 descriptor?? [ 406.269054][ T120] yurex 5-1:0.0: USB YUREX device now attached to Yurex #0 [ 406.483890][ T47] usb 5-1: USB disconnect, device number 15 [ 406.515445][ T47] yurex 5-1:0.0: USB YUREX #0 now disconnected [ 406.934754][ T5915] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 406.992047][ T47] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 407.201833][ T5915] usb 3-1: Using ep0 maxpacket: 16 [ 407.222948][ T5915] usb 3-1: New USB device found, idVendor=0483, idProduct=1234, bcdDevice=ff.76 [ 407.252469][ T47] usb 5-1: too many configurations: 9, using maximum allowed: 8 [ 407.286315][ T5915] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 407.302093][ T120] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 407.319514][ T47] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 407.345890][ T5915] usb 3-1: Product: syz [ 407.351302][ T47] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 407.374151][ T5915] usb 3-1: Manufacturer: syz [ 407.463553][ T120] usb 2-1: Using ep0 maxpacket: 32 [ 407.471019][ T120] usb 2-1: config 0 has no interfaces? [ 407.480015][ T120] usb 2-1: New USB device found, idVendor=2040, idProduct=4901, bcdDevice=47.77 [ 407.493407][ T120] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 407.508790][ T120] usb 2-1: Product: syz [ 407.511640][ T5915] usb 3-1: SerialNumber: syz [ 407.515162][ T120] usb 2-1: Manufacturer: syz [ 407.528834][ T47] usb 5-1: config 0 interface 0 has no altsetting 0 [ 407.566763][ T120] usb 2-1: SerialNumber: syz [ 407.581158][ T120] usb 2-1: config 0 descriptor?? [ 407.642426][ T5915] usb 3-1: config 0 descriptor?? [ 407.655483][ T47] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 407.751088][ T47] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 407.853884][ T6716] xt_nfacct: accounting object `syz0' does not exists [ 407.894247][ T47] usb 5-1: config 0 interface 0 has no altsetting 0 [ 407.935954][ T47] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 407.956772][ T47] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 407.985632][ T47] usb 5-1: config 0 interface 0 has no altsetting 0 [ 408.051320][ T47] usb 5-1: unable to read config index 3 descriptor/start: -71 [ 408.088458][ T47] usb 5-1: can't read configurations, error -71 [ 408.230757][ T6732] netlink: 80 bytes leftover after parsing attributes in process `syz.4.187'. [ 408.321833][ T5947] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 408.324096][ T6732] netlink: 12 bytes leftover after parsing attributes in process `syz.4.187'. [ 408.361705][ T5915] usb_8dev 3-1:0.0 can0: sending command message failed [ 408.381860][ T5915] usb_8dev 3-1:0.0 can0: can't get firmware version [ 408.392308][ T6732] netlink: 16 bytes leftover after parsing attributes in process `syz.4.187'. [ 408.529373][ T5947] usb 1-1: config 0 has an invalid interface number: 246 but max is 0 [ 408.583979][ T5947] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 408.686575][ T5947] usb 1-1: config 0 has no interface number 0 [ 408.743691][ T5947] usb 1-1: New USB device found, idVendor=28a7, idProduct=71ab, bcdDevice=df.39 [ 408.755137][ T5915] usb_8dev 3-1:0.0: probe with driver usb_8dev failed with error -22 [ 408.801104][ T5947] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 408.838589][ T5915] usb 3-1: USB disconnect, device number 13 [ 408.843171][ T5947] usb 1-1: Product: syz [ 408.864618][ T5947] usb 1-1: Manufacturer: syz [ 408.878197][ T5947] usb 1-1: SerialNumber: syz [ 408.912920][ T5947] usb 1-1: config 0 descriptor?? [ 408.967811][ T5947] cdc_wdm 1-1:0.246: More than one union descriptor, skipping ... [ 409.009853][ T5947] cdc_wdm 1-1:0.246: probe with driver cdc_wdm failed with error -22 [ 409.191750][ T47] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 409.263797][ T6752] netlink: 2048 bytes leftover after parsing attributes in process `syz.5.192'. [ 409.278835][ T6752] netlink: 4 bytes leftover after parsing attributes in process `syz.5.192'. [ 409.298378][ T6753] netlink: 4 bytes leftover after parsing attributes in process `syz.0.186'. [ 409.424478][ T47] usb 5-1: Using ep0 maxpacket: 32 [ 409.440052][ T47] usb 5-1: New USB device found, idVendor=052b, idProduct=1803, bcdDevice= c.62 [ 409.470154][ T47] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 409.529156][ T47] usb 5-1: config 0 descriptor?? [ 409.551824][ T5947] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 409.571121][ T47] gspca_main: sunplus-2.14.0 probing 052b:1803 [ 409.589316][ T120] usb 1-1: USB disconnect, device number 6 [ 409.713779][ T5947] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 409.727092][ T5947] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 409.775434][ T5947] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 512, setting to 64 [ 409.837599][ T5947] usb 6-1: New USB device found, idVendor=2040, idProduct=2000, bcdDevice=65.72 [ 409.859701][ T5947] usb 6-1: New USB device strings: Mfr=151, Product=0, SerialNumber=0 [ 409.885824][ T6761] vlan2: entered allmulticast mode [ 409.891342][ T6761] bond0: entered allmulticast mode [ 409.898889][ T6761] bond_slave_0: entered allmulticast mode [ 409.912127][ T5947] usb 6-1: Manufacturer: syz [ 409.919260][ T6761] bond_slave_1: entered allmulticast mode [ 409.933972][ T5947] usb 6-1: config 0 descriptor?? [ 409.952429][ T6761] team0: entered allmulticast mode [ 409.969356][ T5947] smsusb:smsusb_probe: board id=9, interface number 0 [ 409.994895][ T6761] team_slave_0: entered allmulticast mode [ 410.007923][ T5947] smsusb:siano_media_device_register: media controller created [ 410.029438][ T6761] team_slave_1: entered allmulticast mode [ 410.043212][ T6763] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 410.053740][ T6763] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 410.072354][ T5947] smsusb:smsusb_start_streaming: smsusb_submit_urb(...) failed [ 410.117201][ T5947] smsusb:smsusb_init_device: smsusb_start_streaming(...) failed [ 410.182939][ T5947] ------------[ cut here ]------------ [ 410.188513][ T5947] WARNING: CPU: 0 PID: 5947 at mm/slub.c:4752 free_large_kmalloc+0x165/0x200 [ 410.197462][ T5947] Modules linked in: [ 410.201634][ T5947] CPU: 0 UID: 0 PID: 5947 Comm: kworker/0:6 Not tainted 6.15.0-rc5-syzkaller #0 PREEMPT(full) [ 410.212087][ T5947] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025 [ 410.222236][ T5947] Workqueue: usb_hub_wq hub_event [ 410.227294][ T5947] RIP: 0010:free_large_kmalloc+0x165/0x200 [ 410.233208][ T5947] Code: 75 08 48 89 df e8 db e9 e2 ff 65 48 8b 05 33 12 5e 10 48 3b 44 24 08 75 53 48 83 c4 10 5b 41 5e 41 5f 5d c3 cc cc cc cc cc 90 <0f> 0b 90 65 48 8b 05 10 12 5e 10 48 3b 44 24 08 75 30 48 89 df 48 [ 410.253059][ T5947] RSP: 0018:ffffc9000b09eba8 EFLAGS: 00010206 [ 410.259172][ T5947] RAX: 00000000ff000000 RBX: ffffea0001a53880 RCX: ffffea0000000000 [ 410.267248][ T5947] RDX: ffffc900195ab000 RSI: ffff8880694e2000 RDI: ffffea0001a53880 [ 410.275301][ T5947] RBP: 0000000000000100 R08: ffff888026bc2e03 R09: 1ffff11004d785c0 [ 410.284938][ T5947] R10: dffffc0000000000 R11: ffffed1004d785c1 R12: 1ffff1100ad8ee82 [ 410.294242][ T5947] R13: 0000000000000000 R14: ffff888026bc2e60 R15: dffffc0000000000 [ 410.302278][ T5947] FS: 0000000000000000(0000) GS:ffff8881260cb000(0000) knlGS:0000000000000000 [ 410.311254][ T5947] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 410.317984][ T5947] CR2: 000055556241d5c8 CR3: 000000003263e000 CR4: 00000000003526f0 [ 410.326041][ T5947] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 410.334116][ T5947] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 410.342162][ T5947] Call Trace: [ 410.345468][ T5947] [ 410.348428][ T5947] usb_free_urb+0xd0/0x120 [ 410.352919][ T5947] smsusb_term_device+0x1d6/0x3b0 [ 410.357989][ T5947] smsusb_probe+0x1a04/0x2060 [ 410.362773][ T5947] ? __pfx_smsusb_probe+0x10/0x10 [ 410.367854][ T5947] ? __pfx_smsusb_sendrequest+0x10/0x10 [ 410.373669][ T5947] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 410.379608][ T5947] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 410.387895][ T5947] ? __pm_runtime_set_status+0x785/0xa50 [ 410.395056][ T5947] usb_probe_interface+0x641/0xbc0 [ 410.400239][ T5947] ? __pfx_usb_probe_interface+0x10/0x10 [ 410.406065][ T5947] really_probe+0x26a/0x9a0 [ 410.410622][ T5947] __driver_probe_device+0x18c/0x2f0 [ 410.416031][ T5947] driver_probe_device+0x4f/0x430 [ 410.421109][ T5947] __device_attach_driver+0x2ce/0x530 [ 410.424853][ T47] gspca_sunplus: reg_r err -110 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 410.426595][ T5947] bus_for_each_drv+0x24e/0x2e0 [ 410.436351][ T5947] ? __pfx___device_attach_driver+0x10/0x10 [ 410.437218][ T47] sunplus 5-1:0.0: probe with driver sunplus failed with error -110 [ 410.442308][ T5947] ? __pfx_bus_for_each_drv+0x10/0x10 [ 410.442358][ T5947] __device_attach+0x2b8/0x400 [ 410.442387][ T5947] ? __pfx___device_attach+0x10/0x10 [ 410.442415][ T5947] ? do_raw_spin_unlock+0x122/0x240 [ 410.442446][ T5947] bus_probe_device+0x185/0x260 [ 410.442471][ T5947] device_add+0x7b6/0xb50 [ 410.480534][ T5947] usb_set_configuration+0x1a87/0x20e0 [ 410.486303][ T5947] usb_generic_driver_probe+0x8d/0x150 [ 410.493127][ T5947] usb_probe_device+0x1c1/0x390 [ 410.498034][ T5947] ? __pfx_usb_probe_device+0x10/0x10 [ 410.504442][ T5947] really_probe+0x26a/0x9a0 [ 410.508967][ T5947] __driver_probe_device+0x18c/0x2f0 [ 410.514308][ T5947] driver_probe_device+0x4f/0x430 [ 410.519349][ T5947] __device_attach_driver+0x2ce/0x530 [ 410.524765][ T5947] bus_for_each_drv+0x24e/0x2e0 [ 410.529663][ T5947] ? __pfx___device_attach_driver+0x10/0x10 [ 410.535613][ T5947] ? __pfx_bus_for_each_drv+0x10/0x10 [ 410.541004][ T5947] __device_attach+0x2b8/0x400 [ 410.545824][ T5947] ? __pfx___device_attach+0x10/0x10 [ 410.551120][ T5947] ? do_raw_spin_unlock+0x122/0x240 [ 410.556386][ T5947] bus_probe_device+0x185/0x260 [ 410.561245][ T5947] device_add+0x7b6/0xb50 [ 410.565626][ T5947] usb_new_device+0xa39/0x16c0 [ 410.570428][ T5947] ? __pfx_usb_new_device+0x10/0x10 [ 410.575738][ T5947] ? _raw_spin_unlock_irq+0x23/0x50 [ 410.580964][ T5947] ? lockdep_hardirqs_on+0x9c/0x150 [ 410.586301][ T5947] hub_event+0x2941/0x4a00 [ 410.592044][ T5947] ? __pfx_hub_event+0x10/0x10 [ 410.596829][ T5947] ? process_scheduled_works+0x9ec/0x17a0 [ 410.603562][ T5947] ? _raw_spin_unlock_irq+0x23/0x50 [ 410.608777][ T5947] ? process_scheduled_works+0x9ec/0x17a0 [ 410.614571][ T5947] ? process_scheduled_works+0x9ec/0x17a0 [ 410.620316][ T5947] process_scheduled_works+0xadb/0x17a0 [ 410.625977][ T5947] ? __pfx_process_scheduled_works+0x10/0x10 [ 410.632046][ T5947] worker_thread+0x8a0/0xda0 [ 410.636664][ T5947] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 410.644157][ T5947] ? __kthread_parkme+0x7b/0x200 [ 410.649483][ T5947] kthread+0x70e/0x8a0 [ 410.653648][ T5947] ? __pfx_worker_thread+0x10/0x10 [ 410.658794][ T5947] ? __pfx_kthread+0x10/0x10 [ 410.663509][ T5947] ? __pfx_kthread+0x10/0x10 [ 410.668122][ T5947] ? _raw_spin_unlock_irq+0x23/0x50 [ 410.673410][ T5947] ? lockdep_hardirqs_on+0x9c/0x150 [ 410.678632][ T5947] ? __pfx_kthread+0x10/0x10 [ 410.683304][ T5947] ret_from_fork+0x4b/0x80 [ 410.687751][ T5947] ? __pfx_kthread+0x10/0x10 [ 410.693803][ T5947] ret_from_fork_asm+0x1a/0x30 [ 410.698607][ T5947] [ 410.702651][ T5947] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 410.709940][ T5947] CPU: 0 UID: 0 PID: 5947 Comm: kworker/0:6 Not tainted 6.15.0-rc5-syzkaller #0 PREEMPT(full) [ 410.720277][ T5947] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025 [ 410.730346][ T5947] Workqueue: usb_hub_wq hub_event [ 410.735385][ T5947] Call Trace: [ 410.738665][ T5947] [ 410.741625][ T5947] dump_stack_lvl+0x99/0x250 [ 410.746239][ T5947] ? __asan_memcpy+0x40/0x70 [ 410.750836][ T5947] ? __pfx_dump_stack_lvl+0x10/0x10 [ 410.756051][ T5947] ? __pfx__printk+0x10/0x10 [ 410.760654][ T5947] panic+0x2db/0x790 [ 410.764564][ T5947] ? __pfx_panic+0x10/0x10 [ 410.768990][ T5947] ? show_trace_log_lvl+0x4fb/0x550 [ 410.774209][ T5947] ? ret_from_fork_asm+0x1a/0x30 [ 410.779162][ T5947] __warn+0x31b/0x4b0 [ 410.783169][ T5947] ? free_large_kmalloc+0x165/0x200 [ 410.788393][ T5947] ? free_large_kmalloc+0x165/0x200 [ 410.793606][ T5947] report_bug+0x2be/0x4f0 [ 410.797953][ T5947] ? free_large_kmalloc+0x165/0x200 [ 410.803184][ T5947] ? free_large_kmalloc+0x165/0x200 [ 410.808400][ T5947] ? free_large_kmalloc+0x167/0x200 [ 410.813616][ T5947] handle_bug+0x84/0x160 [ 410.817881][ T5947] exc_invalid_op+0x1a/0x50 [ 410.822399][ T5947] asm_exc_invalid_op+0x1a/0x20 [ 410.827256][ T5947] RIP: 0010:free_large_kmalloc+0x165/0x200 [ 410.833080][ T5947] Code: 75 08 48 89 df e8 db e9 e2 ff 65 48 8b 05 33 12 5e 10 48 3b 44 24 08 75 53 48 83 c4 10 5b 41 5e 41 5f 5d c3 cc cc cc cc cc 90 <0f> 0b 90 65 48 8b 05 10 12 5e 10 48 3b 44 24 08 75 30 48 89 df 48 [ 410.852703][ T5947] RSP: 0018:ffffc9000b09eba8 EFLAGS: 00010206 [ 410.858791][ T5947] RAX: 00000000ff000000 RBX: ffffea0001a53880 RCX: ffffea0000000000 [ 410.866783][ T5947] RDX: ffffc900195ab000 RSI: ffff8880694e2000 RDI: ffffea0001a53880 [ 410.875039][ T5947] RBP: 0000000000000100 R08: ffff888026bc2e03 R09: 1ffff11004d785c0 [ 410.883022][ T5947] R10: dffffc0000000000 R11: ffffed1004d785c1 R12: 1ffff1100ad8ee82 [ 410.891003][ T5947] R13: 0000000000000000 R14: ffff888026bc2e60 R15: dffffc0000000000 [ 410.899020][ T5947] usb_free_urb+0xd0/0x120 [ 410.903459][ T5947] smsusb_term_device+0x1d6/0x3b0 [ 410.908523][ T5947] smsusb_probe+0x1a04/0x2060 [ 410.913226][ T5947] ? __pfx_smsusb_probe+0x10/0x10 [ 410.918265][ T5947] ? __pfx_smsusb_sendrequest+0x10/0x10 [ 410.923829][ T5947] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 410.929746][ T5947] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 410.936094][ T5947] ? __pm_runtime_set_status+0x785/0xa50 [ 410.941743][ T5947] usb_probe_interface+0x641/0xbc0 [ 410.946882][ T5947] ? __pfx_usb_probe_interface+0x10/0x10 [ 410.952538][ T5947] really_probe+0x26a/0x9a0 [ 410.957072][ T5947] __driver_probe_device+0x18c/0x2f0 [ 410.962376][ T5947] driver_probe_device+0x4f/0x430 [ 410.967416][ T5947] __device_attach_driver+0x2ce/0x530 [ 410.972808][ T5947] bus_for_each_drv+0x24e/0x2e0 [ 410.977675][ T5947] ? __pfx___device_attach_driver+0x10/0x10 [ 410.983577][ T5947] ? __pfx_bus_for_each_drv+0x10/0x10 [ 410.988975][ T5947] __device_attach+0x2b8/0x400 [ 410.993753][ T5947] ? __pfx___device_attach+0x10/0x10 [ 410.999070][ T5947] ? do_raw_spin_unlock+0x122/0x240 [ 411.004306][ T5947] bus_probe_device+0x185/0x260 [ 411.009167][ T5947] device_add+0x7b6/0xb50 [ 411.013510][ T5947] usb_set_configuration+0x1a87/0x20e0 [ 411.019044][ T5947] usb_generic_driver_probe+0x8d/0x150 [ 411.024521][ T5947] usb_probe_device+0x1c1/0x390 [ 411.029388][ T5947] ? __pfx_usb_probe_device+0x10/0x10 [ 411.034774][ T5947] really_probe+0x26a/0x9a0 [ 411.039298][ T5947] __driver_probe_device+0x18c/0x2f0 [ 411.044611][ T5947] driver_probe_device+0x4f/0x430 [ 411.049656][ T5947] __device_attach_driver+0x2ce/0x530 [ 411.055046][ T5947] bus_for_each_drv+0x24e/0x2e0 [ 411.059915][ T5947] ? __pfx___device_attach_driver+0x10/0x10 [ 411.065825][ T5947] ? __pfx_bus_for_each_drv+0x10/0x10 [ 411.071229][ T5947] __device_attach+0x2b8/0x400 [ 411.076016][ T5947] ? __pfx___device_attach+0x10/0x10 [ 411.081317][ T5947] ? do_raw_spin_unlock+0x122/0x240 [ 411.086553][ T5947] bus_probe_device+0x185/0x260 [ 411.091418][ T5947] device_add+0x7b6/0xb50 [ 411.095776][ T5947] usb_new_device+0xa39/0x16c0 [ 411.100561][ T5947] ? __pfx_usb_new_device+0x10/0x10 [ 411.105787][ T5947] ? _raw_spin_unlock_irq+0x23/0x50 [ 411.111083][ T5947] ? lockdep_hardirqs_on+0x9c/0x150 [ 411.116294][ T5947] hub_event+0x2941/0x4a00 [ 411.120773][ T5947] ? __pfx_hub_event+0x10/0x10 [ 411.125551][ T5947] ? process_scheduled_works+0x9ec/0x17a0 [ 411.131295][ T5947] ? _raw_spin_unlock_irq+0x23/0x50 [ 411.136501][ T5947] ? process_scheduled_works+0x9ec/0x17a0 [ 411.142252][ T5947] ? process_scheduled_works+0x9ec/0x17a0 [ 411.147990][ T5947] process_scheduled_works+0xadb/0x17a0 [ 411.153581][ T5947] ? __pfx_process_scheduled_works+0x10/0x10 [ 411.159591][ T5947] worker_thread+0x8a0/0xda0 [ 411.164198][ T5947] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 411.170543][ T5947] ? __kthread_parkme+0x7b/0x200 [ 411.175513][ T5947] kthread+0x70e/0x8a0 [ 411.179605][ T5947] ? __pfx_worker_thread+0x10/0x10 [ 411.184816][ T5947] ? __pfx_kthread+0x10/0x10 [ 411.189418][ T5947] ? __pfx_kthread+0x10/0x10 [ 411.194019][ T5947] ? _raw_spin_unlock_irq+0x23/0x50 [ 411.199257][ T5947] ? lockdep_hardirqs_on+0x9c/0x150 [ 411.204470][ T5947] ? __pfx_kthread+0x10/0x10 [ 411.209071][ T5947] ret_from_fork+0x4b/0x80 [ 411.213506][ T5947] ? __pfx_kthread+0x10/0x10 [ 411.218117][ T5947] ret_from_fork_asm+0x1a/0x30 [ 411.222905][ T5947] [ 411.226272][ T5947] Kernel Offset: disabled [ 411.230611][ T5947] Rebooting in 86400 seconds..