last executing test programs: 2m29.44863364s ago: executing program 0 (id=874): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000002c0)='gre0\x00', 0x10) syz_open_dev$cec(0x0, 0x0, 0x180) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x9}]}, &(0x7f00000002c0)=0x10) getsockopt$inet_sctp6_SCTP_MAX_BURST(r2, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000300)=0x8) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, 0x0) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r1, 0x84, 0x77, &(0x7f00000000c0)=ANY=[@ANYRES32=r3], 0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xc, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r4 = socket$netlink(0x10, 0x3, 0x0) getpeername(r4, 0x0, &(0x7f0000001180)) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000000a00)=""/102384, 0x18ff0) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x16b601, 0x0) r6 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r6, 0x89f0, &(0x7f0000000000)={'bridge0\x00', &(0x7f0000000340)=@ethtool_regs={0x7}}) r7 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) bind$802154_raw(r7, &(0x7f0000000000)={0x24, @short={0x2, 0x2, 0xaaa2}}, 0x14) mremap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x3000, 0x3, &(0x7f0000ffc000/0x3000)=nil) ioperm(0x2, 0xe2, 0x401) socket$inet6_sctp(0xa, 0x1, 0x84) 2m25.926160026s ago: executing program 0 (id=880): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000d5e9bd40eb030200c0ba050000010902115c01000000000904000001b504b100090581"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000400)={0x44, &(0x7f0000000140)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_connect(0x1, 0x453, &(0x7f0000000880)={{0x12, 0x1, 0x250, 0x5, 0x9, 0xa3, 0x2e30c462ec3bf55b, 0x1e2d, 0x55, 0x50f3, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x441, 0x1, 0x39, 0x4, 0x0, 0x0, [{{0x9, 0x4, 0xbf, 0x9, 0x9, 0x2, 0x6, 0x0, 0x3, [@cdc_ncm={{0x7, 0x24, 0x6, 0x0, 0x1, "8a6d"}, {0x5, 0x24, 0x0, 0x1}, {0xd, 0x24, 0xf, 0x1, 0xe, 0x3, 0x7f, 0x3}, {0x6, 0x24, 0x1a, 0x9, 0x2}, [@call_mgmt={0x5, 0x24, 0x1, 0x2, 0x2}]}, @cdc_ncm={{0x6, 0x24, 0x6, 0x0, 0x1, 'g'}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0x9, 0xa, 0x1}, {0x6, 0x24, 0x1a, 0x8, 0x20}, [@obex={0x5, 0x24, 0x15, 0x90}, @call_mgmt={0x5, 0x24, 0x1, 0x1, 0x3}, @obex={0x5, 0x24, 0x15, 0x6}]}], [{{0x9, 0x5, 0xc, 0x8, 0x10, 0x10, 0x7, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0x7, 0x1000}]}}, {{0x9, 0x5, 0xd, 0x3, 0x3ff, 0xa, 0x68, 0x2, [@generic={0x9, 0xa, "43276cdcb7aa97"}, @uac_iso={0x7, 0x25, 0x1, 0x81, 0x2, 0x8}]}}, {{0x9, 0x5, 0x0, 0x10, 0x10, 0x2, 0x4, 0x7, [@generic={0x59, 0x8, "b7e25cb7e042a53b861165832d43efdd9d97e80063ef716516471f225a4801f4bef8f0d51c2135b329c47a7552668e532f2a80fbc2eb932292a04d3a438bb79379eb460a0e145fd51ae64011cb6f329b47f6aedd956e9e"}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0x12, 0x401}]}}, {{0x9, 0x5, 0xa, 0x3, 0x10, 0xe, 0x9, 0x4}}, {{0x9, 0x5, 0x8, 0x10, 0x3ff, 0xc, 0x0, 0x0, [@generic={0x71, 0x2, "56673f072775ad2321ce34661d580c0bd6cb32110b225830d2d3f624b9b027efb881d3c98bb2af67c33f0d311dc5afe29eeddd8170a924b03cfdf626045e1f99c6b1e0583933a4cc3a5e1ca5c137165037508a169e4fcf2212099c3cdb9f425b74aff5c76a83bd8a91ae4f8cc47632"}, @generic={0xd4, 0x5, "7a1c0a0d7fb462ab1f51edefd52668150e3cb25ea2df55014463f46667066dc777137ecaea89d7ea9bcee9957c1bef89fde1caa973cb75579c477c09ce929f2384ffff9628fa2829f4be6c985de12768e462f221dc54a80c6c68aa57eb680768635a709fe5b11f1f6de6c5ee9bbdc436cb2b5d7a096a4b6aa16335606a42bf77cdcc8db942552aa77404846dc2e01e6c9072cf9973e9e446056af17784cfd03bb36a5e6c2101f98759f136e084a43597f4cc5b5ce803c0c1bb270df1c29a06ebc38b25f7dd0a27b199b8323a2f48e1b5a28d"}]}}, {{0x9, 0x5, 0xe, 0x1, 0x20, 0x81, 0x2, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x83, 0x3, 0x3}]}}, {{0x9, 0x5, 0x2, 0x4, 0x8, 0x12, 0x5, 0x9, [@generic={0x11, 0x5, "c1c593b3ffc05f4f1eef13af7941ba"}]}}, {{0x9, 0x5, 0x80, 0x10, 0x8, 0x80, 0x5b, 0x0, [@generic={0xf9, 0x31, "100aece359b559b02f83d28d682a95eb0dfaa8b59e9efb56792a0a6678f5d94d70d8aa76ddf6ccada5b242197ff9a4fe5a3e0b1866a6113cd9ca88a14ded7ae91ed4a0673885355eaed9c3d6e5db69639df92c9c902732eed9883df3c917e270693733e1b547acb4b9e3a5bbc4bb8bb016bc5fc7d39f5700bd91388c06418ab75e3d69577140eb940ddc166003cd206cdaeeb4b5ac1afbb3b9095863f8b39a9dcaeeae984cfa970b4e000a0c84298262155389f194bb491fed23e5e0ff7279df1009c2d0397404f131565757beb2851484a35471a6f9d836e99d0566b34bdc3103cee37259ba2bef4fbc9c2ef6497796be752c919dd19b"}, @uac_iso={0x7, 0x25, 0x1, 0x4, 0xdc, 0x79}]}}, {{0x9, 0x5, 0x0, 0x10, 0x400, 0x80, 0x8, 0x8, [@generic={0xb9, 0xf, "369e7dc30b18fcce0c6402be460ee54b5c1187b803595a628907bb462c803cc6d16a065d860c2f0de30ef9f623b8b7b39f359f025e3e30501600248409f12526ce6f8d892c558de1ad2a64053c1073046ad5cacddb270bb4d57854e180527b52ef3d15a11f14193cfcac40634a99d8373ed361e27bf3a9e39acb10bb321a76eb1d68001614178c9853479fbc9d1239a1c1c1c5ab4fa020ddbaba3bf3e6700217c6a517823a053c5ad68276ca86ee45f371afc947e7e5ab"}]}}]}}]}}]}}, &(0x7f0000000740)={0xa, &(0x7f0000000480)={0xa, 0x6, 0x200, 0x9, 0x4, 0x4, 0x8}, 0x23, &(0x7f00000004c0)={0x5, 0xf, 0x23, 0x2, [@ss_container_id={0x14, 0x10, 0x4, 0x3, "6ef65c0a69dfee349389fb1582925cb7"}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x3, 0x8, 0x2, 0x6}]}, 0x7, [{0x4, &(0x7f0000000500)=@lang_id={0x4, 0x3, 0x1801}}, {0x4, &(0x7f0000000540)=@lang_id={0x4, 0x3, 0x42a}}, {0x83, &(0x7f0000000580)=@string={0x83, 0x3, "9db45b66fd6a11b8b30b910dda48ae561627d4cb12bbfb240885870e195f6f1992042477e016df540bddf5c9433d04029524810c7ba6f0d267c9ba77b206522a8a5d223e763206615d6962af3c2bc65cbbdef0e869b1324746081585e9332c617c49a175064397c39f5d9c7d71cc80eea52601d9c8c8eab36e8c56e57f2bc2df9c"}}, {0x4, &(0x7f0000000640)=@lang_id={0x4, 0x3, 0x416}}, {0x4, &(0x7f0000000680)=@lang_id={0x4, 0x3, 0x427}}, {0x4, &(0x7f00000006c0)=@lang_id={0x4, 0x3, 0x42c}}, {0x4, &(0x7f0000000700)=@lang_id={0x4, 0x3, 0x44b}}]}) syz_usb_control_io$uac1(r0, &(0x7f0000000140)={0x14, &(0x7f0000000000)={0x20, 0x1, 0xa, {0xa, 0x3, "696455e9b9c20596"}}, &(0x7f0000000040)={0x0, 0x3, 0x9c, @string={0x9c, 0x3, "81b1a032b9573540542cab1221452cf345ec99a6ea04a547515e55bcae763e3d186d85706e158b4147af7e37d01ba9a085fe00447cf56a9c4ede236bbbe16009b1efd89d5b790d2e02141b1832471937497dec66d1d868513c33ebf54c7b216adfbd0e2937fb7a20a7ed0055dbdad462b29bd77696e3cbec673d233f4b7a9400d3d426dec8cede01dfe7755c284d6550dea2fbf0cf5010ae06ee"}}}, &(0x7f0000000380)={0x44, &(0x7f0000000180)={0x0, 0x1, 0x38, "9588aaea49b494f1c4ccc294190ce515b38081b401c1c905da515d2914c371ad8ab004c0d8866345d3af18a8e9abc9edc9a3d30f1dc545a6"}, &(0x7f00000001c0)={0x0, 0xa, 0x1, 0xf7}, &(0x7f0000000200)={0x0, 0x8, 0x1, 0x1}, &(0x7f0000000240)={0x20, 0x81, 0x2, "d279"}, &(0x7f0000000280)={0x20, 0x82, 0x3, "ae00e5"}, &(0x7f00000002c0)={0x20, 0x83, 0x1, "0e"}, &(0x7f0000000300)={0x20, 0x84, 0x4, "681f80f4"}, &(0x7f0000000340)={0x20, 0x85, 0x3, "a49253"}}) syz_usb_control_io(r0, 0x0, &(0x7f00000007c0)={0x84, &(0x7f0000001040)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 2m22.575577135s ago: executing program 0 (id=896): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000002c0)='gre0\x00', 0x10) syz_open_dev$cec(0x0, 0x0, 0x180) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x9}]}, &(0x7f00000002c0)=0x10) getsockopt$inet_sctp6_SCTP_MAX_BURST(r2, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000300)=0x8) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, 0x0) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r1, 0x84, 0x77, &(0x7f00000000c0)=ANY=[@ANYRES32=r3], 0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xc, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r4 = socket$netlink(0x10, 0x3, 0x0) getpeername(r4, 0x0, &(0x7f0000001180)) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000000a00)=""/102384, 0x18ff0) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x16b601, 0x0) r6 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r6, 0x89f0, &(0x7f0000000000)={'bridge0\x00', &(0x7f0000000340)=@ethtool_regs={0x7}}) r7 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) bind$802154_raw(r7, &(0x7f0000000000)={0x24, @short={0x2, 0x2, 0xaaa2}}, 0x14) ioperm(0x2, 0xe2, 0x401) sendmmsg$inet(r7, &(0x7f0000000740)=[{{&(0x7f0000000000)={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x1c}}, 0x10, &(0x7f0000000100)=[{&(0x7f0000000040)="3a6aec1af1d5ac094101c6c30a30131becb62350b4e7e3c7cc0f59cc0ef840d2c2eab4a4c9e0426b2be3dbd380d091b16680044c37e106725ea4e570", 0x43}, {&(0x7f0000000180)="01", 0x1}, {&(0x7f00000000c0)="85cab1c2fecf7b8c", 0x8}], 0x3, &(0x7f0000000800)=ANY=[@ANYRESHEX], 0x138}}, {{&(0x7f0000000280)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x2e}}, 0x10, &(0x7f0000000400)=[{&(0x7f0000000300)="4fe880ef611c5cfe27c958cec01e200412b3bc9278411764bd45c20f492a0fbd7fc015b0fd17642a3509e218d3f9a6e882e149f0d6ee7ce286bc3fb3aa79b566413a6db8197ee670b9f355b45fecb0ccb1fb7e8760f0e6ad24c82aa5224010c039054db4695ab1a7a4c0f7f1d099f878c85a16b24db73b13bc57121ef584b12a3c7993f5c4ffffecb2033dd4516521e59b342347f9e6eca56f1ced8cf6c2ebc7d6a159d653962d58292165d4d34a8f9d6e364f8ce8f0835ea89b74496f4f6f0733e5b36f2d233838ef4d495fd3229677e4528c0bb792e5d4428351355685", 0xde}, {&(0x7f00000004c0)="e8c67bbbe874c6cd0436aec06d5f235f7b91da8096469cc8d4847ab21cead827c678ed878e6b97f67cc9f4f58e7e64666754c6580ccc88fe2e765ec435f0226a19f7fbdcc796b93d12706702473fdfc715e79dade6851d63136285186bc2d90120100b3504cdc637c9961688c2fef37966b41400e3817a61e4fd7ab74726458740ec3f6d9adaff5d276a806241af", 0x8e}], 0x2, &(0x7f0000019a00)=ANY=[@ANYBLOB="1100000000000000000000000100000071000000000000001c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="7f0000017f00000100000000d200000000000007000000940400004444cf03ac1414bb000000ffac1414aafffffffee0000002000005c9100014aa00000000e000000100000009ac1414aa00001000e000000200000200640101010000000a862d0000000206065c46a9ed0105af4e620012b805000000d09eb650003c893b840ff3050a44285d950f351f0544248be17f00000100000008e000000200000b8d0000000000000a5fe00000010000000201830f8cac1e0101e0000001e0000001443c67117f000001000001017f00000100000e250000000386ffef44dd9157c2bc182666000000027f000001004600b3927d9208d6a3970000030000000000000067640101010000007f640101010000000000000014bc62000000000000000000020000000900"/310, @ANYRES32, @ANYBLOB="7f000001e00000010000000014000000000000000000000001000000210a000000000000"], 0x180}}], 0x2, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) 2m20.574546449s ago: executing program 0 (id=900): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000400)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x7, [@restrict={0xf, 0x0, 0x0, 0xb, 0x4}, @float={0xf, 0x0, 0x0, 0x10, 0x4}]}, {0x0, [0x0, 0x5f, 0x2e, 0x2e, 0x30]}}, &(0x7f0000000180)=""/248, 0x37, 0xf8, 0x1, 0x0, 0x0, @void, @value}, 0x28) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000000c0)={0x1, &(0x7f00000005c0)=[{0x6}]}) socket$kcm(0x10, 0x2, 0x0) socket$kcm(0x29, 0x5, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0xfffffdca, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f00000000c0)={0x0, @in={{0x2, 0x4e23, @empty}}, 0x0, 0x2, 0x40020002, 0x0, 0xa17433da3c5d69ad, 0x2, 0x7f}, 0x9c) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r2, 0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r4}, 0x4) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x19, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000b7080000000000007b8af8ff00000000b7080000010000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r5}, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c000000020000000000000002000004080000000000000003000000000000000000000002000000000000000000000000000002000000000000000000000004"], 0x0, 0x56, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) mknodat(0xffffffffffffffff, 0x0, 0xc000, 0x0) r6 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000600)=ANY=[@ANYBLOB="140100002200010021000000000000000201"], 0x114}], 0x1}, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0x40) r7 = socket$netlink(0x10, 0x3, 0x0) writev(r7, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r7, &(0x7f0000000300)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000d00000000000006040000000000f93132", 0x39}], 0x1) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="300000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="040000000000000008003f006563060008001b"], 0x30}}, 0x0) 2m19.283648313s ago: executing program 0 (id=908): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000001600)=@newqdisc={0xa4, 0x24, 0xf0b, 0x0, 0xfffffffc, {0x0, 0x0, 0x12, r2, {0x0, 0xffe0}, {0xffff, 0xffff}, {0x1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x74, 0x2, [@TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8, 0x5, 0xb}, @TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [], 0x0, [0x8, 0x4], [0x0, 0x8, 0x0, 0xfffe, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x4000000}]}]}]}}]}, 0xa4}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000340)={'filter\x00', 0x7, 0x2, 0x408, 0x110, 0x0, 0x0, 0x320, 0x320, 0x320, 0x4, 0x0, {[{{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@multicast, @mac=@local, @initdev={0xac, 0x1e, 0x0, 0x0}, @loopback}}}, {{@arp={@loopback, @multicast2, 0x0, 0x0, 0x0, 0x0, {}, {@mac=@random}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ipvlan0\x00', 'bond0\x00'}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@link_local, @empty, @empty, @local}}}, {{@arp={@private, @multicast1, 0x0, 0x0, 0x0, 0x0, {}, {@mac=@multicast}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_to_team\x00', 'ipvlan0\x00'}, 0xc0, 0x100}, @unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "7fe0262a2c3f61d8b01499b0a06dbe1103006325eb3b9094dcaad5273454"}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x49b) unshare(0x400) r4 = socket$rds(0x15, 0x5, 0x0) bind$rds(r4, &(0x7f0000000840)={0x2, 0x0, @empty}, 0x10) r5 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000380)=@newqdisc={0x34, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r6, {0x0, 0x4}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x4}}]}, 0x34}}, 0x0) 2m17.767160031s ago: executing program 0 (id=916): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000640)={r0, 0xe0, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000100)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x40, 0x6, &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000100), 0x0, 0xf1, &(0x7f0000000380)=[{}], 0x3, 0x10, &(0x7f00000003c0), &(0x7f0000000400), 0x8, 0x57, 0x8, 0x8, &(0x7f0000000500)}}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@base={0x21, 0x0, 0x0, 0x100000, 0x400, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2000000, 0x0, 0x200000000000000, @void, @value, @void, @value}, 0x50) r3 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000780)=0x9) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000380)=0x9) r4 = syz_open_dev$dri(&(0x7f0000000140), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB2(r4, 0xc06864b8, &(0x7f0000000580)={0x0, 0x8c1, 0x80, 0x20203843, 0x3, [0x2], [0x810003, 0x0, 0x3ff], [0x5, 0x3, 0xffffffff, 0x46], [0x0, 0x0, 0x0, 0xfffffffffffffffd]}) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000000)=0x17) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x6, 0xc, &(0x7f00000006c0)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7, @void, @value}, 0x94) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000200)={{0x1, 0x1, 0x18, r1, {0xffffffffffffffff}}, './file0\x00'}) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000001f80), r6) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000002080)={&(0x7f0000000180)={0x44, r7, 0x1, 0x70bd2d, 0x0, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x7f}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0102}}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x2}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0xfffffffe}]}, 0x44}}, 0x0) ptrace(0x10, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x12, 0x4, &(0x7f0000000080)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x3a, '\x00', 0x0, @cgroup_sock_addr=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) connect$inet6(r5, &(0x7f00000000c0)={0xa, 0x4e23, 0x5, @dev={0xfe, 0x80, '\x00', 0x23}, 0x9}, 0x1c) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000640)={r0, 0xe0, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000100)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x40, 0x6, &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000100), 0x0, 0xf1, &(0x7f0000000380)=[{}], 0x3, 0x10, &(0x7f00000003c0), &(0x7f0000000400), 0x8, 0x57, 0x8, 0x8, &(0x7f0000000500)}}, 0x10) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@base={0x21, 0x0, 0x0, 0x100000, 0x400, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2000000, 0x0, 0x200000000000000, @void, @value, @void, @value}, 0x50) (async) syz_open_dev$tty20(0xc, 0x4, 0x0) (async) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000780)=0x9) (async) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000380)=0x9) (async) syz_open_dev$dri(&(0x7f0000000140), 0x1, 0x0) (async) ioctl$DRM_IOCTL_MODE_ADDFB2(r4, 0xc06864b8, &(0x7f0000000580)={0x0, 0x8c1, 0x80, 0x20203843, 0x3, [0x2], [0x810003, 0x0, 0x3ff], [0x5, 0x3, 0xffffffff, 0x46], [0x0, 0x0, 0x0, 0xfffffffffffffffd]}) (async) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000000)=0x17) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x6, 0xc, &(0x7f00000006c0)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7, @void, @value}, 0x94) (async) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000200)={{0x1, 0x1, 0x18, r1, {0xffffffffffffffff}}, './file0\x00'}) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$ieee802154(&(0x7f0000001f80), r6) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000002080)={&(0x7f0000000180)={0x44, r7, 0x1, 0x70bd2d, 0x0, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x7f}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0102}}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x2}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0xfffffffe}]}, 0x44}}, 0x0) (async) ptrace(0x10, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x12, 0x4, &(0x7f0000000080)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x3a, '\x00', 0x0, @cgroup_sock_addr=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async) connect$inet6(r5, &(0x7f00000000c0)={0xa, 0x4e23, 0x5, @dev={0xfe, 0x80, '\x00', 0x23}, 0x9}, 0x1c) (async) 2m4.372194365s ago: executing program 2 (id=955): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@ipv6_delrule={0x24, 0x21, 0x400, 0x0, 0x0, {}, [@FIB_RULE_POLICY=@FRA_PRIORITY={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) r1 = dup2(r0, 0xffffffffffffffff) r2 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$SNDCTL_DSP_SETFMT(r2, 0xc0045005, &(0x7f0000000080)=0x40000) ppoll(&(0x7f0000000000)=[{r2}], 0x1, 0x0, 0x0, 0x0) openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x129202, 0x0) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f0000000000)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES(0xffffffffffffffff, 0x3ba0, &(0x7f0000000140)={0x48, 0x7, 0xffffffffffffffff, 0x0, 0x1, 0x0, 0xfffffffffffffffc, 0x8}) ioctl$IOMMU_TEST_OP_DESTROY_ACCESS_PAGES(r1, 0x3ba0, &(0x7f00000001c0)={0x48, 0x6, r3, 0x0, r4}) 2m2.204628121s ago: executing program 32 (id=916): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000640)={r0, 0xe0, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000100)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x40, 0x6, &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000100), 0x0, 0xf1, &(0x7f0000000380)=[{}], 0x3, 0x10, &(0x7f00000003c0), &(0x7f0000000400), 0x8, 0x57, 0x8, 0x8, &(0x7f0000000500)}}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@base={0x21, 0x0, 0x0, 0x100000, 0x400, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2000000, 0x0, 0x200000000000000, @void, @value, @void, @value}, 0x50) r3 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000780)=0x9) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000380)=0x9) r4 = syz_open_dev$dri(&(0x7f0000000140), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB2(r4, 0xc06864b8, &(0x7f0000000580)={0x0, 0x8c1, 0x80, 0x20203843, 0x3, [0x2], [0x810003, 0x0, 0x3ff], [0x5, 0x3, 0xffffffff, 0x46], [0x0, 0x0, 0x0, 0xfffffffffffffffd]}) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000000)=0x17) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x6, 0xc, &(0x7f00000006c0)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7, @void, @value}, 0x94) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000200)={{0x1, 0x1, 0x18, r1, {0xffffffffffffffff}}, './file0\x00'}) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000001f80), r6) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000002080)={&(0x7f0000000180)={0x44, r7, 0x1, 0x70bd2d, 0x0, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x7f}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0102}}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x2}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0xfffffffe}]}, 0x44}}, 0x0) ptrace(0x10, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x12, 0x4, &(0x7f0000000080)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x3a, '\x00', 0x0, @cgroup_sock_addr=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) connect$inet6(r5, &(0x7f00000000c0)={0xa, 0x4e23, 0x5, @dev={0xfe, 0x80, '\x00', 0x23}, 0x9}, 0x1c) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000640)={r0, 0xe0, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000100)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x40, 0x6, &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000100), 0x0, 0xf1, &(0x7f0000000380)=[{}], 0x3, 0x10, &(0x7f00000003c0), &(0x7f0000000400), 0x8, 0x57, 0x8, 0x8, &(0x7f0000000500)}}, 0x10) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@base={0x21, 0x0, 0x0, 0x100000, 0x400, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2000000, 0x0, 0x200000000000000, @void, @value, @void, @value}, 0x50) (async) syz_open_dev$tty20(0xc, 0x4, 0x0) (async) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000780)=0x9) (async) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000380)=0x9) (async) syz_open_dev$dri(&(0x7f0000000140), 0x1, 0x0) (async) ioctl$DRM_IOCTL_MODE_ADDFB2(r4, 0xc06864b8, &(0x7f0000000580)={0x0, 0x8c1, 0x80, 0x20203843, 0x3, [0x2], [0x810003, 0x0, 0x3ff], [0x5, 0x3, 0xffffffff, 0x46], [0x0, 0x0, 0x0, 0xfffffffffffffffd]}) (async) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000000)=0x17) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x6, 0xc, &(0x7f00000006c0)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7, @void, @value}, 0x94) (async) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000200)={{0x1, 0x1, 0x18, r1, {0xffffffffffffffff}}, './file0\x00'}) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$ieee802154(&(0x7f0000001f80), r6) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000002080)={&(0x7f0000000180)={0x44, r7, 0x1, 0x70bd2d, 0x0, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x7f}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0102}}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x2}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0xfffffffe}]}, 0x44}}, 0x0) (async) ptrace(0x10, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x12, 0x4, &(0x7f0000000080)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x3a, '\x00', 0x0, @cgroup_sock_addr=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async) connect$inet6(r5, &(0x7f00000000c0)={0xa, 0x4e23, 0x5, @dev={0xfe, 0x80, '\x00', 0x23}, 0x9}, 0x1c) (async) 2m2.091813937s ago: executing program 2 (id=965): r0 = socket$netlink(0x10, 0x3, 0x0) memfd_create(&(0x7f0000000040)='\x00', 0x2) (async) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="240000001d00070f000200000000000007"], 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x0) 2m1.754129655s ago: executing program 2 (id=968): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000280), r0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="043e060c"], 0x9) ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x4) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) mount$overlay(0x0, 0x0, &(0x7f0000000180), 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newtaction={0x44, 0x30, 0xffff, 0x0, 0x0, {}, [{0x30, 0x1, [@m_ife={0x2c, 0x1, 0x0, 0x0, {{0x8}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x44}}, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)) chdir(&(0x7f00000003c0)='./bus\x00') open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) 1m58.92773174s ago: executing program 2 (id=973): mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x9}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, @void, @value}, 0x28) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) capset(&(0x7f0000000000)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000}) mkdir(&(0x7f0000000100)='./bus\x00', 0xe8) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000180)) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=@newtaction={0x64, 0x30, 0x9, 0x0, 0x0, {}, [{0x50, 0x1, [@m_mpls={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{}, 0x1}}]}, {0x4, 0x4}, {0xc}, {0xc}}}]}]}, 0x64}}, 0x0) r5 = syz_open_dev$vim2m(&(0x7f0000000080), 0x1, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r5, 0xc0405602, &(0x7f0000000280)={0x8, 0x1, 0x2, "8d419fc549095c47e855c17b54c90e5667b7a97353d86daa2f85c6a3c83478b0", 0x32314142}) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) ioctl$FBIOPUTCMAP(r3, 0x4605, &(0x7f00000003c0)={0x5, 0x7, &(0x7f0000000280)=[0x9, 0x0, 0x0, 0x5, 0x1ff, 0xff, 0x401], &(0x7f00000002c0)=[0x5], &(0x7f0000000300)=[0x5, 0x5, 0x7ff, 0x56, 0x1, 0x65, 0x8001], &(0x7f0000000380)=[0xb18c, 0xe, 0xff, 0x1]}) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000a00)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@nfs_export_on}]}) chdir(&(0x7f00000001c0)='./bus\x00') r6 = creat(&(0x7f0000001200)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xa) r7 = fanotify_init(0xf00, 0x0) fanotify_mark(r7, 0x105, 0x40009975, r6, 0x0) 1m57.651439431s ago: executing program 2 (id=977): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x6, &(0x7f0000000200)=0x7) ptrace$cont(0x20, r1, 0x4, 0xff) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r2, 0x84, 0x81, &(0x7f0000000000)="0000000000000002", 0x8) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r2, 0x84, 0x18, &(0x7f00000003c0), &(0x7f0000000400)=0x8) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000003100)={0x0, 0x0, &(0x7f00000030c0)={0x0}}, 0x20044001) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x4, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = syz_open_dev$vim2m(&(0x7f0000000000), 0x47b, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r4, 0xc008561c, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r5 = syz_open_dev$sndctrl(0x0, 0x0, 0x26c200) ioctl$SNDRV_CTL_IOCTL_TLV_READ(r5, 0xc008551a, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) syz_genetlink_get_family_id$netlbl_mgmt(0x0, 0xffffffffffffffff) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x42, 0x0}) epoll_create(0x2) getsockopt(r2, 0x200000000114, 0x271d, 0x0, 0x0) ioperm(0x5, 0x8, 0x4) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="040e04002920"], 0x7) 1m56.102036607s ago: executing program 2 (id=983): socket$inet_tcp(0x2, 0x1, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x0, 0xc, &(0x7f0000000800)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000e000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007300000095"], 0x0, 0x2, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0xffffffffffffff0a) bpf$TOKEN_CREATE(0x24, &(0x7f0000000000)={0x0, r1}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x4, 0xc, &(0x7f0000000800)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x9, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x8400, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa) sendmsg$NL802154_CMD_GET_SEC_LEVEL(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="01072bbd7000000000000500000071b7a6bd04c2cc14677ce5e0253734376234be7cd3b6fa3a9bbd29bd9f541380f9d02650b156d6edb4b7eb6e9737873b88e35c0054b2d6f01731e4f221149daadcdc370101569ed7082b31978722022e948fe94796f3e8b4e360267925932bd0a9b3863e798eccd9ff3eb50872cf717e00bbb00000"], 0x14}, 0x1, 0x0, 0x0, 0x20004074}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000580), 0xa, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, 0x0) r4 = syz_io_uring_setup(0x23be, &(0x7f0000000240)={0x0, 0xc36a, 0x4, 0xfffbfffd, 0x0, 0x0, r2}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="190000000400000004"], 0x50) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r7, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r7, 0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) io_uring_enter(r4, 0x2d3e, 0x0, 0x0, 0x0, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) write$sndseq(0xffffffffffffffff, &(0x7f0000000040)=[{0x13, 0x0, 0x0, 0xfd, @tick=0x6, {}, {0xfb}, @note={0x8, 0xff, 0x1, 0xcd, 0x8}}], 0x1c) ioctl$vim2m_VIDIOC_EXPBUF(0xffffffffffffffff, 0xc0405668, &(0x7f0000000100)={0x1, 0x401, 0x6}) sendmsg$NFC_CMD_DEACTIVATE_TARGET(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="040029bd7000fddbdf251e000000"], 0x14}, 0x1, 0x0, 0x0, 0x220488c1}, 0xc090) ioctl$FS_IOC_SETFLAGS(r2, 0x40186f40, &(0x7f0000000440)=0x1f) 1m55.071807097s ago: executing program 33 (id=983): socket$inet_tcp(0x2, 0x1, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x0, 0xc, &(0x7f0000000800)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000e000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007300000095"], 0x0, 0x2, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0xffffffffffffff0a) bpf$TOKEN_CREATE(0x24, &(0x7f0000000000)={0x0, r1}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x4, 0xc, &(0x7f0000000800)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x9, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x8400, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa) sendmsg$NL802154_CMD_GET_SEC_LEVEL(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="01072bbd7000000000000500000071b7a6bd04c2cc14677ce5e0253734376234be7cd3b6fa3a9bbd29bd9f541380f9d02650b156d6edb4b7eb6e9737873b88e35c0054b2d6f01731e4f221149daadcdc370101569ed7082b31978722022e948fe94796f3e8b4e360267925932bd0a9b3863e798eccd9ff3eb50872cf717e00bbb00000"], 0x14}, 0x1, 0x0, 0x0, 0x20004074}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000580), 0xa, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, 0x0) r4 = syz_io_uring_setup(0x23be, &(0x7f0000000240)={0x0, 0xc36a, 0x4, 0xfffbfffd, 0x0, 0x0, r2}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="190000000400000004"], 0x50) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r7, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r7, 0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) io_uring_enter(r4, 0x2d3e, 0x0, 0x0, 0x0, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) write$sndseq(0xffffffffffffffff, &(0x7f0000000040)=[{0x13, 0x0, 0x0, 0xfd, @tick=0x6, {}, {0xfb}, @note={0x8, 0xff, 0x1, 0xcd, 0x8}}], 0x1c) ioctl$vim2m_VIDIOC_EXPBUF(0xffffffffffffffff, 0xc0405668, &(0x7f0000000100)={0x1, 0x401, 0x6}) sendmsg$NFC_CMD_DEACTIVATE_TARGET(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="040029bd7000fddbdf251e000000"], 0x14}, 0x1, 0x0, 0x0, 0x220488c1}, 0xc090) ioctl$FS_IOC_SETFLAGS(r2, 0x40186f40, &(0x7f0000000440)=0x1f) 12.890553485s ago: executing program 6 (id=1395): accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/vlan/vlan0\x00') r1 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r1, 0x8923, &(0x7f0000000040)={'vlan0\x00', 0x40}) syz_io_uring_setup(0x3a, &(0x7f0000000100)={0x0, 0xaddc, 0x0, 0xb, 0x203}, 0x0, 0x0) r2 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000140)='2', 0x1}], 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000080)='proc\x00', 0x1, 0x0) mount$tmpfs(0x0, &(0x7f0000000240)='./file0\x00', 0x0, 0x1600424, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000180)=0xdb8) 10.916021091s ago: executing program 6 (id=1405): r0 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000400)={0x41}, 0x10) sendmsg$tipc(r0, &(0x7f0000002300)={&(0x7f0000000040)=@name={0x1e, 0x2, 0x3, {{0x43, 0x4}, 0x2}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x40000}, 0x0) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r2 = dup(r1) r3 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCSETSW(r3, 0x5403, &(0x7f0000000600)={0x800006da, 0x0, 0xfffffef9, 0x75e, 0x9, "6388080d00fffffffa00"}) ioctl$TIOCL_GETMOUSEREPORTING(r3, 0x5412, &(0x7f0000000040)=0xa) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r2, 0x2000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) write$binfmt_aout(r2, 0x0, 0xffffffdb) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x9) 8.895722099s ago: executing program 1 (id=1408): mount(&(0x7f0000000040)=@sg0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='9p\x00', 0xa00080, &(0x7f00000011c0)='\xaa\xaa\xaa\xaa\xaa') r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec8500000075000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x69703000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x210000000013, &(0x7f0000000040)=0x100000001, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r6, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000001440), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000001500)={0x34, r7, 0x1, 0x4000, 0x0, {}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_COALESCE_RX_MAX_FRAMES={0x8, 0x3, 0xa000000}]}, 0x34}}, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000024c0)={0x1a4, 0x3e, 0x107, 0x70bd2b, 0x0, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0x27, 0x1, 0x0, 0x1, [@generic="71eb5e95cf85a847d55c7cda1a3f0134f5640d7f07791e8deede9033f5aaf8155fc3b6"]}, @generic="3652ff5ee36defcbf2603278fdfbe0ea45267784bfb2cb81c4023b74cc2e8717c8", @typed={0x8, 0x13a, 0x0, 0x0, @pid}, @generic="7b8ba3a3fed6c1606885cc71a4bcaf52f5a3d9ae468d2daf9560bc267d0e142fd18230771b110e544de8f3a9304876fa34944692b04309ecfef91b1495a5b719921d38a637e5c60e030929180b6c13d3cae39840727d24e2d92f0129", @typed={0x8, 0xdd, 0x0, 0x0, @uid}, @nested={0xa0, 0x1, 0x0, 0x1, [@nested={0x4, 0x14b}, @nested={0x98, 0x11, 0x0, 0x1, [@nested={0x4, 0x10e}, @generic="0f5fcdd0474ffe227f750b34f3e3c0e4c4218c2da8e5b47bbffbd3127d133dcbc33ee4b0c6f5a9219a91efd7620561bdbd811c21fad8eb4a2a505751e3b10b0a3cc8fcaf15ad0a1eb478586acf69fc354e2d17edca23b93d0430047fe3c7c972c87b99c66ef6563f8588fc7755f45c14bf9a96d05b3c26ebdcc936af232ee76f04d2a40e", @typed={0xc, 0x8c, 0x0, 0x0, @u64=0x3}]}]}, @generic="e6c02e0251991c512ad7a6b0b6835d37869749a5af34bdd4c271278d631f3d0cc236cff50c03a517e20f5a3574659f7a6fa47b", @typed={0x4, 0xd3}]}, 0x1a4}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) syz_emit_ethernet(0xfc5, &(0x7f00000013c0)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x10}, @void, {@ipv4={0x800, @generic={{0x6, 0x4, 0x0, 0x0, 0xfb7, 0x0, 0x0, 0x0, 0x84, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0xe}, {[@noop, @noop, @noop]}}, "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"}}}}, 0x0) setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, &(0x7f0000000180)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7fe, 0xf83, 0x8}, 0x1c) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x55, 0x0, 0xffffffffffffffff, 0x3, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) 8.397138301s ago: executing program 6 (id=1410): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="18050000000000fe000000004b64ffec850000007d000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x4, 0x16, &(0x7f0000000140)=ANY=[@ANYBLOB="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"/467], &(0x7f0000000100)='GPL\x00', 0xffffffff, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) futex(0xffffffffffffffff, 0x5, 0x0, 0x0, 0x0, 0x5) 8.006716105s ago: executing program 3 (id=1411): r0 = io_uring_setup(0x41ad, &(0x7f0000000200)={0x0, 0x2bbd, 0x8000, 0x3, 0xa2}) syz_io_uring_setup(0x7ab1, &(0x7f0000000280)={0x0, 0x1d82, 0x20, 0x1, 0xc, 0x0, r0}, &(0x7f0000000040), &(0x7f0000000300)) r1 = syz_open_dev$I2C(&(0x7f000000adc0), 0x0, 0x60242) ioctl$I2C_TENBIT(r1, 0x704, 0x1) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1400000015000103000000000000000001"], 0x14}}, 0x0) read(r2, &(0x7f0000000080)=""/186, 0xba) r3 = socket$inet6(0xa, 0x5, 0x0) setsockopt$sock_int(r3, 0x1, 0x4000000000000002, &(0x7f0000fee000)=0x3fa, 0x4) bind$inet6(r3, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) connect$inet6(r3, &(0x7f0000000240)={0xa, 0x4e22, 0x0, @private1}, 0x1c) r4 = socket$inet6(0xa, 0x5, 0x0) setsockopt$sock_int(r4, 0x1, 0x4000000000000002, &(0x7f0000fee000)=0x3fa, 0x4) bind$inet6(r4, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) connect$inet6(r4, &(0x7f0000000240)={0xa, 0x4e22, 0x0, @private1}, 0x1c) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$BTRFS_IOC_INO_PATHS(0xffffffffffffffff, 0xc0389423, &(0x7f0000000380)={0x9, 0x18, [0x0, 0x1, 0x7, 0x4], &(0x7f0000000340)=[0x0, 0x0, 0x0]}) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="2000000044000701fcffff7c00000c0004"], 0x20}, 0x1, 0x0, 0x0, 0x488c0}, 0xc000) 7.075733856s ago: executing program 6 (id=1412): syz_usb_connect(0x0, 0x4f, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000075b21f408680630bf3ca0102030109023d0001000000000904"], 0x0) socket$netlink(0x10, 0x3, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0xf, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_device, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x319000, 0x80) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp_SCTP_RESET_STREAMS(r1, 0x84, 0x77, &(0x7f0000000040)={0x0, 0x6, 0x7, [0xfffe, 0x8, 0xd, 0x1, 0x8, 0xfc9, 0x3800]}, &(0x7f0000000080)=0x16) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000000c0)={r3, @in={{0x2, 0x4e24, @remote}}, 0x400, 0x5, 0x6, 0xfff, 0x0, 0x5, 0x14}, 0x9c) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000240)={0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f0000000280)=0x18) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000001c0)={r0, r1, 0x6, 0x0, @val=@iter={0x0, 0xfffffffffffffedc}}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000400)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) recvfrom$rxrpc(0xffffffffffffffff, 0x0, 0x0, 0xe8ce25b3ffff0000, 0x0, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r7, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c) listen(r7, 0x0) r8 = socket$netlink(0x10, 0x3, 0x4) chown(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) writev(r8, &(0x7f0000000480)=[{&(0x7f0000000180)="580000001400add427323b470c45b45602067fffffff81004e22030d00ff0028925aa8002000eaa57b00090080020efffeffe809020000ff0004f03a04000800ffffffffffffffffffffffe7ee0000000000000000020000", 0x58}], 0x1) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000180)={r0, r1, 0x6, 0x0, @val=@tracing}, 0x40) 6.988945529s ago: executing program 3 (id=1414): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r0, 0x1, 0x4c, &(0x7f0000000300), 0x4) write$binfmt_elf64(r1, &(0x7f0000000580)=ANY=[], 0x78) recvmmsg(r0, &(0x7f0000000500)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=""/8, 0xc}}], 0x4b, 0x0, 0x0) 6.804430903s ago: executing program 3 (id=1415): r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_clone3(&(0x7f0000000440)={0x200000800, &(0x7f0000000040), &(0x7f0000000180), 0x0, {0xc}, &(0x7f0000000300)=""/178, 0xb2, &(0x7f00000003c0)=""/16, &(0x7f0000000400)=[r2, r2, r2], 0x3}, 0x58) r4 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r4, 0x40345410, &(0x7f0000000380)={{0x3, 0x2}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r4, 0x40505412, &(0x7f00000000c0)={0x0, 0x0, 0x102, 0x0, 0x4}) ioctl$SNDRV_TIMER_IOCTL_START(r4, 0x54a0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendto$inet(r0, &(0x7f0000000100)='>', 0x1, 0x20004891, &(0x7f0000004ff0)={0x2, 0xfffd, @rand_addr=0xfffffffffffffffe}, 0x10) listen(r0, 0xda90) accept4$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @local}, 0x0, 0x800) 6.611847444s ago: executing program 5 (id=1416): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r0}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) close(r1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0xf, 0x4, 0x4, 0x12, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000780)=ANY=[@ANYRES32=r5, @ANYRES32=r4, @ANYBLOB='&'], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000009c0)={{r5}, &(0x7f00000007c0), &(0x7f0000000080)=r1}, 0x20) recvmsg$unix(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000006c0)=""/179, 0xb3}], 0x1}, 0x0) sendmsg$inet(r3, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x3e80}, 0x0) 5.190684658s ago: executing program 5 (id=1421): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, 0x0) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) r0 = eventfd(0xffffffff) ioctl$VHOST_SET_LOG_FD(0xffffffffffffffff, 0x4004af07, 0x0) ioctl$VHOST_SET_VRING_KICK(0xffffffffffffffff, 0x4008af20, &(0x7f0000000040)={0x1, r0}) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0}) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0xfffffeac, &(0x7f00000001c0)=""/115}]}) ioctl$VHOST_VSOCK_SET_RUNNING(0xffffffffffffffff, 0x4004af61, &(0x7f0000000000)=0x1) fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000a00)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@nfs_export_on}]}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="240000000706070600000000000000000300000a080006400000009c0500010007000000"], 0x24}}, 0x400c800) sendmsg$NFT_BATCH(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000100)={&(0x7f0000002080)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWRULE={0x114, 0x6, 0xa, 0x201, 0x0, 0x0, {0x7, 0x0, 0x2}, [@NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x4}, @NFTA_RULE_USERDATA={0xf4, 0x7, 0x1, 0x0, "d0b9d1d70adaddc0a3d9dfb7779b5ca4085147093626c7af0ce3c24b6705ef22b6de56f66ad2bb82bba42f0739652e401411a52a57e570cbd539e11ee39a4134ffa1e12096e9cc136e6a5716d68a4bdaa3f177a5733ab02057a2a3bf5d0acbca97be3642bb265694eae0542954a552cb84003f37e17f2f58e8a5ee4c9595291fe8b71a5644b4153ceff671a3958d41bfa7a4e7f22cacc06cad19654a683f040cc2868f25cd08240e836f596a9eab7984e4ed89936c2e4c2310b07cfd29b73f2cc41cc23b7334913d1a4a1a68fa9f952893a89df248a97f899ba62746669609e110cf992cef861c46db85464078eea3c5"}]}, @NFT_MSG_DELSETELEM={0x3fdc, 0xe, 0xa, 0x502, 0x0, 0x0, {0xd, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET_ID={0x8}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x7ec, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x45}]}, {0x18c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPRESSIONS={0x164, 0xb, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @target={{0xb}, @void}}, {0x34, 0x1, 0x0, 0x1, @numgen={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_NG_OFFSET={0x8, 0x4, 0x1, 0x0, 0x3}, @NFTA_NG_TYPE={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_NG_MODULUS={0x8, 0x2, 0x1, 0x0, 0xfffffc01}, @NFTA_NG_TYPE={0x8}]}}}, {0x10, 0x1, 0x0, 0x1, @counter={{0xc}, @void}}, {0x10, 0x1, 0x0, 0x1, @payload={{0xc}, @void}}, {0x38, 0x1, 0x0, 0x1, @nat={{0x8}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_NAT_FAMILY={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_NAT_REG_PROTO_MIN={0x8, 0x5, 0x1, 0x0, 0x17}, @NFTA_NAT_TYPE={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_NAT_REG_ADDR_MAX={0x8, 0x4, 0x1, 0x0, 0x9}, @NFTA_NAT_REG_PROTO_MIN={0x8, 0x5, 0x1, 0x0, 0x15}]}}}, {0x54, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x44, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_OFFSET={0x8, 0x3, 0x1, 0x0, 0xfa}, @NFTA_EXTHDR_OP={0x8, 0x6, 0x1, 0x0, 0x1}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0xb}, @NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0x11}, @NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_EXTHDR_OFFSET={0x8, 0x3, 0x1, 0x0, 0xb5}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}, @NFTA_EXTHDR_OFFSET={0x8, 0x3, 0x1, 0x0, 0x74}]}}}, {0x28, 0x1, 0x0, 0x1, @fib={{0x8}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_FIB_DREG={0x8, 0x1, 0x1, 0x0, 0x12}, @NFTA_FIB_FLAGS={0x8, 0x3, 0x1, 0x0, 0x11}, @NFTA_FIB_FLAGS={0x8, 0x3, 0x1, 0x0, 0x10}]}}}, {0x48, 0x1, 0x0, 0x1, @connlimit={{0xe}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_CONNLIMIT_COUNT={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_CONNLIMIT_FLAGS={0x8}, @NFTA_CONNLIMIT_FLAGS={0x8}, @NFTA_CONNLIMIT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_CONNLIMIT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x46528abda3e15ea6}, @NFTA_CONNLIMIT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}]}}}]}, @NFTA_SET_ELEM_KEY_END={0x24, 0xa, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x20, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}]}]}, {0xdc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz0\x00'}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x1800000000000}, @NFTA_SET_ELEM_EXPRESSIONS={0x90, 0xb, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @immediate={{0xe}, @void}}, {0x78, 0x1, 0x0, 0x1, @dynset={{0xb}, @val={0x68, 0x2, 0x0, 0x1, [@NFTA_DYNSET_SREG_KEY={0x8, 0x4, 0x1, 0x0, 0x1}, @NFTA_DYNSET_TIMEOUT={0xc, 0x6, 0x1, 0x0, 0x1}, @NFTA_DYNSET_EXPRESSIONS={0x1c, 0xa, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @dup_ipv4={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0x10}]}}}]}, @NFTA_DYNSET_SREG_DATA={0x8, 0x5, 0x1, 0x0, 0xd}, @NFTA_DYNSET_SREG_KEY={0x8, 0x4, 0x1, 0x0, 0x4}, @NFTA_DYNSET_FLAGS={0x8}, @NFTA_DYNSET_SREG_KEY={0x8, 0x4, 0x1, 0x0, 0x2}, @NFTA_DYNSET_SET_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_DYNSET_OP={0x8, 0x3, 0x1, 0x0, 0x1}]}}}]}, @NFTA_SET_ELEM_EXPR={0x24, 0x7, 0x0, 0x1, @tproxy={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_TPROXY_REG_ADDR={0x8, 0x2, 0x1, 0x0, 0x8}, @NFTA_TPROXY_REG_PORT={0x8}]}}}, @NFTA_SET_ELEM_EXPR={0xc, 0x7, 0x0, 0x1, @dup={{0x8}, @void}}]}, {0xb4, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x1c, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}]}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}]}]}, @NFTA_SET_ELEM_EXPRESSIONS={0x94, 0xb, 0x0, 0x1, [{0x90, 0x1, 0x0, 0x1, @target={{0xb}, @val={0x80, 0x2, 0x0, 0x1, [@NFTA_TARGET_REV={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_TARGET_INFO={0x74, 0x3, "fe2cd88fc9866282668a0129184e135b9c7b1fab453ecd6cdea464bc893d859b7f85b0c11a30f11ff1257e77d6d692592824cc85ca9b180fab6251caf5d5455e0eb3384e13acc774f389041517b1c0c6d59febb819a605ab8158d6534c077d9422f8307fa9f948a046f11ef4d9eb6221"}]}}}]}]}, {0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x3}]}, {0x49c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY_END={0x1e0, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0xd5, 0x1, "a40852b78bd3cf298962db71ab01fa34c981a03835f11d01d866e37751571c879ae72fbedb8311d77e74a40fe353e349eaa51902d9092191f884b757a33b1ed53b165a2877884f78099710c11f7060a529f346909627af84e812952e0baa7f5b3b281ecf0987c30e4b5da82415e9a458070d51a2b89b8482d08caa47ebf46d7d3e1eaf54d95a3e98114892ff6e02d009663f9ddd54b5ce09120ba4944e63881727bcd9feb12dec9ef3691ef02f9e97ffdad7755e8ef7860e1fae39b184eb65d1a44124b59f4a2e277b4b404ce61a623363"}, @NFTA_DATA_VERDICT={0x2c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VALUE={0x4}, @NFTA_DATA_VALUE={0xd2, 0x1, "ee5161c971485d0b14ce54e1c7784862a3c5250196e450de43b9c2b7bf56cc1686bf4762791d0d743f7fa73c4311230b4aa6f1a7fe0d094d5c38164379bff42b9850993b271d2eb62d2701635816f39cb82d93cb518280e6a1c042e59348ed9b0ebbe8449dbfefe0f0a473bb87bfc0795a965861e4d33a39d84fde7570f303cb0a09252fa90b1a85af3563978d00636806ed4392c58f6a5e17ebceb63100ecbc14b31904dec2a90b7471bff21d59f90b018a563f9d5f1e153af4baf3d30c51b71e44b0c4f52ef1d0ccdc409f89f4"}]}, @NFTA_SET_ELEM_DATA={0x30, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0x2c, 0x1, "a4648e6042b6de520e895ba86b05727efb4a1cd2abd28c7e89ed360b293858c885dec24a27461f68"}]}, @NFTA_SET_ELEM_KEY_END={0x1b4, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0x1c, 0x1, "127b7911063c640d91e63be61029e505a18d4ee84e5cdecb"}, @NFTA_DATA_VALUE={0x9b, 0x1, "06ca345379c447066841aa1963ff933459939f6443d7f5fe6717808f4ed1d0c33125fccc6dd5da12b3df3d4034cb0bd540edfcece797a40be51e9e21ac0a497d31eee78e7db71caef31e36bbc0c847d31cc412a3465b61895534e4f6aab8ad7d5ec2c9543dee70230bfe39cb9d130a678c06d2acd59f7f6016bb1a150873f627aded2692a615b05a43b02c8d46911d0a9fca9c9cb43434"}, @NFTA_DATA_VERDICT={0x28, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x8}]}, @NFTA_DATA_VERDICT={0x10, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VERDICT={0x48, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VERDICT={0x2c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}]}, @NFTA_DATA_VERDICT={0x4c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}]}]}, @NFTA_SET_ELEM_KEY_END={0x64, 0xa, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x2c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}]}, @NFTA_DATA_VALUE={0x31, 0x1, "b4d0989fe16f1b6e373690c5278a5d160ecb8c803f33019a46b851588ac3e1436f61ea9f90747bff60f7c00eb1"}]}, @NFTA_SET_ELEM_KEY={0x64, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}]}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}]}, @NFTA_DATA_VERDICT={0x14, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}]}, @NFTA_DATA_VALUE={0x4}, @NFTA_DATA_VERDICT={0x30, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}]}]}, @NFTA_SET_ELEM_EXPR={0xc, 0x7, 0x0, 0x1, @cmp={{0x8}, @void}}]}, {0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x7}]}]}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x16d4, 0x3, 0x0, 0x1, [{0x13e0, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_DATA={0x1174, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6d, 0x1, "44bd78eb0adfa5bb869f43c333a181b0c3190ea490696ab1e390bf14ca22e9bca5ef935ae8f2e99d7350338ca07bf8c7d0045cec99b231c989eaa545276527f4cfb3cb4a63c3b7d59c30e3b50a5255d8cbd0b9779821c06435ddba48c3171322de00cfb4926de9d85b"}, @NFTA_DATA_VERDICT={0x4c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VALUE={0x63, 0x1, "dfca7af1fe6a72075af4ff04ac92d758bf0fc6fe314c301285e811f75224e92364edf8136ef2a2187818b14603ef42d285aaaf51605a301a1828becd8b8ea02d1919b4aee84b845c566559081f1a88e91a0f01496ce1f3a465fe0f392a512e"}, @NFTA_DATA_VERDICT={0x3c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}]}, @NFTA_DATA_VALUE={0x1004, 0x1, "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"}, @NFTA_DATA_VALUE={0xf, 0x1, "105b6b593894d4888f7dc3"}]}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz0\x00'}, @NFTA_SET_ELEM_KEY_END={0x25c, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0x8f, 0x1, "5e0a282c30f33b299ea37a910974d51412164623aab1a7c353080652bfec278359b470cb04d77dc40ffbc2e34ed55d00f85ff095de8b2d436e731b453fca1c012a0f2948565d12a465d30c5965623de2c99626faa7376c4ef2090b33c911feac66ae9b9920c4763eaef113e191794f6f38e460bfa6ad6d7a4173fa6e98b3ecff1e792cd681f25144f9afd3"}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}]}, @NFTA_DATA_VALUE={0xc4, 0x1, "02536734f175b0bf6bf00f98af9fb0b7cccc413ace1b6470f454a3e2f577cf9d2e4ebc4a8873672cb500d22ef0ab146733e173d89974d2d8cbe34ad66de355dd5462a69473a90b665fb5e00e5c63b5dedb8232b51da35721cba052e9e6f46fd182fbd153da7359981104d4c0afac5cd7937f1134ce986174f40d2887e2727501183b84f2a34c3ff1b2d00627fe5c0d86ff37a2f75c730165936513c112e5cbbeb8f422318bb1233006186fdfc44f31af11aef9851847b34b7c2fdcdbf1cd09fe"}, @NFTA_DATA_VALUE={0x88, 0x1, "acf9063417ca7a80b5d9a9ecc4f1a4e64b990cbfeaecea796a714249ce8e7e4a5da0cc9d61d1d6a2a6c9a0e23f74912f6165de9c7712e72182ab54af46ccf23369ecb43aa834379396ae433d2ebf236880066735a5f2986f5b6a2b37cdd5a18beeac192409bdc48b7e92a0d1e2ea2d550ed4e6445d7e299f72082277b3bb23943d582dee"}, @NFTA_DATA_VALUE={0x4d, 0x1, "26ffd81c1edf337be220636b62e8e55f7dc504a4a8515228a0ad9d49ffcaaaa7fb0aad8c5f165125b362c39a4ca4595b754f5cb423cfd9d4208a1ae460e594f12dcd566de437740e23"}, @NFTA_DATA_VERDICT={0x20, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}]}]}]}, {0x4c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPRESSIONS={0x34, 0xb, 0x0, 0x1, [{0x30, 0x1, 0x0, 0x1, @byteorder={{0xe}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_BYTEORDER_DREG={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_BYTEORDER_SIZE={0x8, 0x5, 0x1, 0x0, 0xfb}, @NFTA_BYTEORDER_SREG={0x8, 0x1, 0x1, 0x0, 0xc}]}}}]}, @NFTA_SET_ELEM_EXPRESSIONS={0x14, 0xb, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @masq={{0x9}, @void}}]}]}, {0x188, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz2\x00'}, @NFTA_SET_ELEM_KEY={0x12c, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8}]}, @NFTA_DATA_VERDICT={0x50, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VALUE={0xc4, 0x1, "0cc1477d439092c0cf68d8f5b75536ffc74206268590b345600b8d3de828f629f6a7a5b86a6087c8b6c3e854d461c917ef9ed4c403191644a127438dab0301a2d8894ffd23d7839c056cf744528ab5380ce6dfd3d8fcc7c7a921ff574ca388ba13bd30fb9da2b4c9e1fc5a1a973f6a137adde823c3823b792ac06d14fffafda7be0d522f71ddcc929bf708bc946c3470478ddca4531ad5cc48c57e71c4500ab1703308a3e51e6151754bbe710e3786f17393720b5171be341dda4e811e9a8fb1"}, @NFTA_DATA_VALUE={0x6, 0x1, "1232"}]}, @NFTA_SET_ELEM_EXPR={0x4c, 0x7, 0x0, 0x1, @redir={{0xa}, @val={0x3c, 0x2, 0x0, 0x1, [@NFTA_REDIR_REG_PROTO_MAX={0x8, 0x2, 0x1, 0x0, 0xa}, @NFTA_REDIR_REG_PROTO_MAX={0x8, 0x2, 0x1, 0x0, 0x10}, @NFTA_REDIR_REG_PROTO_MAX={0x8, 0x2, 0x1, 0x0, 0x17}, @NFTA_REDIR_REG_PROTO_MAX={0x8, 0x2, 0x1, 0x0, 0x14}, @NFTA_REDIR_REG_PROTO_MIN={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_REDIR_REG_PROTO_MIN={0x8, 0x1, 0x1, 0x0, 0x15}, @NFTA_REDIR_FLAGS={0x8}]}}}]}, {0xd0, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_DATA={0x6c, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x58, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}]}, @NFTA_DATA_VERDICT={0x10, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}]}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz1\x00'}, @NFTA_SET_ELEM_KEY={0x54, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x34, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}]}, @NFTA_DATA_VALUE={0x1a, 0x1, "9119bc6e671f382000ed2ae60253ec5fa823763c8b5b"}]}]}, {0x4c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPRESSIONS={0x48, 0xb, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @meta={{0x9}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_META_SREG={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_META_SREG={0x8, 0x3, 0x1, 0x0, 0xf}, @NFTA_META_SREG={0x8, 0x3, 0x1, 0x0, 0x16}, @NFTA_META_DREG={0x8, 0x1, 0x1, 0x0, 0x3}]}}}, {0x10, 0x1, 0x0, 0x1, @last={{0x9}, @void}}]}]}]}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x20c4, 0x3, 0x0, 0x1, [{0x6dc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPRESSIONS={0x63c, 0xb, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @tproxy={{0xb}, @void}}, {0xc, 0x1, 0x0, 0x1, @ct={{0x7}, @void}}, {0x40, 0x1, 0x0, 0x1, @synproxy={{0xd}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_SYNPROXY_WSCALE={0x5, 0x2, 0x5c}, @NFTA_SYNPROXY_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_SYNPROXY_WSCALE={0x5, 0x2, 0x8}, @NFTA_SYNPROXY_WSCALE={0x5, 0x2, 0xc0}, @NFTA_SYNPROXY_WSCALE={0x5, 0x2, 0x7f}]}}}, {0x50, 0x1, 0x0, 0x1, @counter={{0xc}, @val={0x40, 0x2, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x9}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x219}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0xfffffffffffffffb}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x6}, @NFTA_COUNTER_BYTES={0xc}]}}}, {0xc, 0x1, 0x0, 0x1, @nat={{0x8}, @void}}, {0x10, 0x1, 0x0, 0x1, @hash={{0x9}, @void}}, {0x10, 0x1, 0x0, 0x1, @masq={{0x9}, @void}}, {0x560, 0x1, 0x0, 0x1, @dynset={{0xb}, @val={0x550, 0x2, 0x0, 0x1, [@NFTA_DYNSET_SET_ID={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_DYNSET_EXPRESSIONS={0x134, 0xa, 0x0, 0x1, [{0x48, 0x1, 0x0, 0x1, @connlimit={{0xe}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_CONNLIMIT_COUNT={0x8, 0x1, 0x1, 0x0, 0x7fffffff}, @NFTA_CONNLIMIT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_CONNLIMIT_COUNT={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_CONNLIMIT_COUNT={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_CONNLIMIT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_CONNLIMIT_COUNT={0x8, 0x1, 0x1, 0x0, 0x1ff}]}}}, {0x10, 0x1, 0x0, 0x1, @tunnel={{0xb}, @void}}, {0xc, 0x1, 0x0, 0x1, @rt={{0x7}, @void}}, {0x14, 0x1, 0x0, 0x1, @connlimit={{0xe}, @void}}, {0x14, 0x1, 0x0, 0x1, @synproxy={{0xd}, @void}}, {0x10, 0x1, 0x0, 0x1, @xfrm={{0x9}, @void}}, {0x10, 0x1, 0x0, 0x1, @bitwise={{0xc}, @void}}, {0x10, 0x1, 0x0, 0x1, @lookup={{0xb}, @void}}, {0x74, 0x1, 0x0, 0x1, @last={{0x9}, @val={0x64, 0x2, 0x0, 0x1, [@NFTA_LAST_SET={0x8, 0x1, 0x1, 0x0, 0x10000}, @NFTA_LAST_MSECS={0xc, 0x2, 0x1, 0x0, 0x4}, @NFTA_LAST_MSECS={0xc, 0x2, 0x1, 0x0, 0x100000000}, @NFTA_LAST_SET={0x8, 0x1, 0x1, 0x0, 0x38000}, @NFTA_LAST_MSECS={0xc, 0x2, 0x1, 0x0, 0x8}, @NFTA_LAST_SET={0x8, 0x1, 0x1, 0x0, 0xb}, @NFTA_LAST_MSECS={0xc, 0x2, 0x1, 0x0, 0xfffffffffffffffe}, @NFTA_LAST_MSECS={0xc, 0x2, 0x1, 0x0, 0x7f}, @NFTA_LAST_MSECS={0xc, 0x2, 0x1, 0x0, 0xf9}]}}}]}, @NFTA_DYNSET_EXPR={0x10, 0x7, 0x0, 0x1, {{0xb}, @void}}, @NFTA_DYNSET_TIMEOUT={0xc, 0x6, 0x1, 0x0, 0x6}, @NFTA_DYNSET_SET_ID={0x8}, @NFTA_DYNSET_EXPR={0x10, 0x7, 0x0, 0x1, {{0xb}, @void}}, @NFTA_DYNSET_EXPRESSIONS={0x3dc, 0xa, 0x0, 0x1, [{0x274, 0x1, 0x0, 0x1, @range={{0xa}, @val={0x264, 0x2, 0x0, 0x1, [@NFTA_RANGE_SREG={0x8, 0x1, 0x1, 0x0, 0x13}, @NFTA_RANGE_OP={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_RANGE_SREG={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_RANGE_TO_DATA={0x38, 0x4, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x14, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}]}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}]}, @NFTA_DATA_VERDICT={0x14, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}]}]}, @NFTA_RANGE_TO_DATA={0xa0, 0x4, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x1c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VERDICT={0x30, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}]}, @NFTA_DATA_VALUE={0x50, 0x1, "725a2b515432feb1ed1a92ed3eb638ba452360d5d48703e09a92561ec85c5b448a6628acb42133ca950869055754fed77715096f9e36f210118124ab6980a01b188085cec45212bda2cdb4f0"}]}, @NFTA_RANGE_SREG={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_RANGE_FROM_DATA={0x158, 0x3, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x28, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VALUE={0xee, 0x1, "66cd1e10754485f01b959057e1dca92e7b0b06847955611f70965e9f07c0c3cf783b931a1ac0bc39ef413442d49981e180ec5091c15a69f2a5c12fb573d3fb142869c3a4deaaea57f669c7b369090fd36b46b78a22608b8acaad068ec0f863ba69f14266f7cdba8a20c09b6be30ebf879385ad5487c4483b35962dfcd30cf571b18edf9473cc35ffa127c01d9daebe86c176087f790f3c88fd6ece27fcb266afe47e0495507edaf5e52a069917e9431f36fa77b460888f45c068061b10b88a76c10c0821dc3d32e8ea8770396cdbbe70aaff7ffd45203ac69cb1b4de061f040df34d71748e19fe91055a"}, @NFTA_DATA_VALUE={0x3a, 0x1, "49c2a779c093dd5cb95419e815c952e367ed73109bce8fad84a4abc404fd7bc357ac40955f7a0d3fae23607d4aabe4e1f7003337a87a"}]}, @NFTA_RANGE_SREG={0x8, 0x1, 0x1, 0x0, 0xd}, @NFTA_RANGE_SREG={0x8, 0x1, 0x1, 0x0, 0xa}]}}}, {0x158, 0x1, 0x0, 0x1, @target={{0xb}, @val={0x148, 0x2, 0x0, 0x1, [@NFTA_TARGET_INFO={0x5d, 0x3, "871396df44eace1c157f42962f933c95254a641fc3a9fd6f3e1092b27b252a04b1bd9dc8f0ffe1df03d5dd293218032f36ca45bf752c74cdb9ef9ba396777376ea29e521a136993a41821e6df31a01906fd813bdf2d200a7c0"}, @NFTA_TARGET_REV={0x8}, @NFTA_TARGET_INFO={0x4}, @NFTA_TARGET_NAME={0x9, 0x1, 'SNAT\x00'}, @NFTA_TARGET_NAME={0x7, 0x1, 'HL\x00'}, @NFTA_TARGET_INFO={0xba, 0x3, "a0a21e41cc6c042f70726f3f9548661d9ec6c29053e7308f2c280ae3042ad052781eecb4b744a11cbd57be5317ae4749151dde2c98b09b0d15d7dac0b0eb532de1c6a7f2c1be1f406ac82a5b7df7e2aed2c1a0bf05c9572d859d96dbd7310f5ab28dcbe17bd8502d2333e4ba1574d582cc9279a6e391872ae766c448dd8c8364b0b9040dd02e8f072362ac5bf0c9bc2f1973eaf28b50a2f34ffdfdad63fa44619b705d2cbfeb1e72cf79e02bc92e76c4a0300248d9c4"}, @NFTA_TARGET_INFO={0x8, 0x3, "841afc9f"}]}}}, {0xc, 0x1, 0x0, 0x1, @nat={{0x8}, @void}}]}]}}}]}, @NFTA_SET_ELEM_EXPR={0x44, 0x7, 0x0, 0x1, @numgen={{0xb}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_NG_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_NG_TYPE={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_NG_DREG={0x8, 0x1, 0x1, 0x0, 0x15}, @NFTA_NG_TYPE={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_NG_MODULUS={0x8, 0x2, 0x1, 0x0, 0x7}, @NFTA_NG_DREG={0x8, 0x1, 0x1, 0x0, 0x2}]}}}, @NFTA_SET_ELEM_EXPR={0x58, 0x7, 0x0, 0x1, @dup_ipv6={{0x8}, @val={0x4c, 0x2, 0x0, 0x1, [@NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0xe}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x9}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0xf}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x11}, @NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0x13}, @NFTA_DUP_SREG_ADDR={0x8}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x9}]}}}]}, {0x574, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPRESSIONS={0x44, 0xb, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_LIMIT_RATE={0xc, 0x1, 0x1, 0x0, 0x4}, @NFTA_LIMIT_TYPE={0x8, 0x4, 0x1, 0x0, 0x1}, @NFTA_LIMIT_RATE={0xc, 0x1, 0x1, 0x0, 0x69a}]}}}, {0xc, 0x1, 0x0, 0x1, @nat={{0x8}, @void}}]}, @NFTA_SET_ELEM_EXPRESSIONS={0x10, 0xb, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, @dup_ipv4={{0x8}, @void}}]}, @NFTA_SET_ELEM_DATA={0x200, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0x8d, 0x1, "2103e0314de4548c4b5b400a0bbbb848e72b91d589e371d8f0ec34ceea0f201fb5fae1c582f85a81f0f827c209a91250f3b4ff9e702801199b3399feeabac6a2b61557b741e48af5e3a678cb35632e5c1a8072129f6a9ec051fc32a3734f28e5b369f646825998596b3e51c09183eae1e05ef30ba6bb81924589ab7d9892f3436ad7cf3a40b4162593"}, @NFTA_DATA_VALUE={0xde, 0x1, "50c66a2ff679515a0b1bec7eda68537cfd0c3e4a3a201f7fcabc72e6a24bfe1060ce615af5d94cc12b27f04d812ce1c137769cc7f0843ee073d3170d5e8a3084be345fdb9bde607243842edee900341745f9ad2284624892b1af374c5f86fc58f47dda3d05ee2ddcfc520c4c3bbc9a59dd6959fd3b6b86553383a384fe70d8aadfb40869a47a2a71d8f1fb144417dbe9474f0a8e3e317aad2e07095f1fc07560c31304f8df73e5f39fe38b6884eec89431c2c22edfc9395678de3b649c46c37ff8672aa26dbbc6ff8695a4b545369cbe0724d12b38be6528d4e8"}, @NFTA_DATA_VALUE={0x80, 0x1, "0f2f99a704d2e634103e961866974c51557c5f0a720f5018a39a90f7401937974cfc5927b4e35694e7c035793cb8ca5e907d19936e206de966a21bc9568fd71cbc0e301f6d383f493bfd0f104e8c9b6f95401c154476c4d0650cb7f169dcafbf028bf909022ddcebdf39f6220f67bd634d438593e97116c4be1e4055"}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}]}]}, @NFTA_SET_ELEM_USERDATA={0xf3, 0x6, 0x1, 0x0, "d0859b4903542be78477b852f4384c9b8b256d980f572304011cd29300f4e37525192b6a81beef3308869d3e942da1a91259d9007b12b9c6d056af5ec5b56381184d8961de4c5e526687067b05cafa19739ebf273b2d69620559b49e4da0fc475cef5210524ae1d5aec000eee4a532b6a7b51c303d18c01d43c88328583109115f2afd2c6824086558220faa9c440a7bfd7a9b1169b3d7348fe1fbe0d94d61541168996e4b788d3901ae9fe6267811f02c32d8bf2d3a63d5be3da5b7bccf260577a2c7d099b4794fcfa2d1777d4ff43428bbfff75715eeb7348afbcff22ad95a3449b744017f562984bf8a420e29b7"}, @NFTA_SET_ELEM_KEY_END={0xf4, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0xaf, 0x1, "9c1bbeb875f71d2467feafcb3a90a3d8b8333df697170aef825ea9d15c752b447968b1587a896ad4148c0f634d0ce26f30628c4d57523553bf11037a9dad05eccd1c08bbb4848ddbc32d74a16bb22a49052656530753438fa187067b655d3058ab8e22215f586f23f854de24145bbfd0ed6175325f7d02a966ecd61ac3e84345f519c69cea3633b0c1f5d92fc95e4521203d043ee3eb6c3601f0d310f0cc4bb071ea47eba4db5f07385ac6"}, @NFTA_DATA_VALUE={0x3f, 0x1, "d0d5a57ad9407704c1cd2e98f4e01c427e374a5eed4b4a3c28ea98009316af4148c67622c6ec69cd094988fbe1d84b92b566ee22cdf9aefea6380b"}]}, @NFTA_SET_ELEM_EXPR={0x10, 0x7, 0x0, 0x1, @tproxy={{0xb}, @void}}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz2\x00'}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x3}, @NFTA_SET_ELEM_USERDATA={0x104, 0x6, 0x1, 0x0, "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"}]}, {0x260, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x4036}, @NFTA_SET_ELEM_DATA={0xa0, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0x90, 0x1, "d93856b5218c4fc0c6cdc6b8b13917bfdf145343566f9927cefeedcd836e5d52cb0c59da5c0936f4e34e3c1f06686201ec8cf9e9be0950193b22ca2baa3def78f446249985fd0a09f880c5a9fd03808f7cc1fe816db997be80108317dcaf265e578a5a68a61f8ad2fab4efa26ea69357376b88bef29b0a37bb3b8cd6241d3248caf4b64629f07555cbdf921e"}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}]}]}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz2\x00'}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x8b8}, @NFTA_SET_ELEM_FLAGS={0x8}, @NFTA_SET_ELEM_USERDATA={0x102, 0x6, 0x1, 0x0, "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"}, @NFTA_SET_ELEM_USERDATA={0x8a, 0x6, 0x1, 0x0, "8595d080343f77fcc7a4cde992282dec5d5a4c482a29d92167d0f6356cdae75419ad90d8c164e9e6ea611f54c767af437b7f6189de632c7519421a245180abfff913f66730fe9d13ea75ecd444f101e0ae6ff70ef83bd61e1c845fb8d39eb93758f90763dcc5109a75d140a9dbde956024951c52ae875ec12738b1dfe3ac38cfdabd8d15c363"}]}, {0x1210, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPRESSIONS={0xfc, 0xb, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @rt={{0x7}, @val={0x4}}}, {0x14, 0x1, 0x0, 0x1, @immediate={{0xe}, @void}}, {0x28, 0x1, 0x0, 0x1, @osf={{0x8}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_OSF_TTL={0x5, 0x2, 0xb8}, @NFTA_OSF_DREG={0x8, 0x1, 0x1, 0x0, 0x17}, @NFTA_OSF_DREG={0x8, 0x1, 0x1, 0x0, 0xe}]}}}, {0x54, 0x1, 0x0, 0x1, @log={{0x8}, @val={0x48, 0x2, 0x0, 0x1, [@NFTA_LOG_SNAPLEN={0x8, 0x3, 0x1, 0x0, 0xba15}, @NFTA_LOG_LEVEL={0x8, 0x5, 0x1, 0x0, 0x5fd}, @NFTA_LOG_QTHRESHOLD={0x6, 0x4, 0x1, 0x0, 0x3}, @NFTA_LOG_QTHRESHOLD={0x6, 0x4, 0x1, 0x0, 0xfff7}, @NFTA_LOG_SNAPLEN={0x8, 0x3, 0x1, 0x0, 0x6ba1}, @NFTA_LOG_FLAGS={0x8, 0x6, 0x1, 0x0, 0x2}, @NFTA_LOG_PREFIX={0xc, 0x2, 0x1, 0x0, 'overlay\x00'}, @NFTA_LOG_LEVEL={0x8, 0x5, 0x1, 0x0, 0xc}]}}}, {0x48, 0x1, 0x0, 0x1, @synproxy={{0xd}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_SYNPROXY_WSCALE={0x5, 0x2, 0x8}, @NFTA_SYNPROXY_MSS={0x6, 0x1, 0x1, 0x0, 0x81}, @NFTA_SYNPROXY_MSS={0x6, 0x1, 0x1, 0x0, 0x9}, @NFTA_SYNPROXY_MSS={0x6, 0x1, 0x1, 0x0, 0x1}, @NFTA_SYNPROXY_MSS={0x6, 0x1, 0x1, 0x0, 0x7ff}, @NFTA_SYNPROXY_FLAGS={0x8}]}}}, {0x10, 0x1, 0x0, 0x1, @payload={{0xc}, @void}}]}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz1\x00'}, @NFTA_SET_ELEM_KEY={0x10fc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x1004, 0x1, "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"}, @NFTA_DATA_VALUE={0xf4, 0x1, "fc7e68043a69cc943922b3a0d42e5440de1319fefab4e53da261c878af52ca00c34a323454600ae18faf7af9676d928b7c643fc6fa8d55dc3384aa04360dbc542bf8d3335457fdd94823e00fe987757f50d5b14e82562bdd8ffdc7fc994aa3bc8730ffa9d76b7f251fcaa2e61d047567fd615a418969c148e05532ae72ad11877a73ab0402cd239f26af51f930f6c0614630547cf8a6f89ef7729f144d34b9c75eaab652f6ed1aeb7939279aa29b8a010f95f1f7bac58c62c5fa8e4bd65be68eec167fd721a2bc17e9ac0df4679bb8aebeefe007ddfcef94ef8965a68c48621879a806fcdd926399e299d0381797ce2e"}]}]}]}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWOBJ={0x20, 0x12, 0xa, 0xa00, 0x0, 0x0, {0x7, 0x0, 0x4}, @NFT_OBJECT_TUNNEL=@NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x5}}, @NFT_MSG_NEWRULE={0x34, 0x6, 0xa, 0x5, 0x0, 0x0, {0x1, 0x0, 0x5}, [@NFTA_RULE_COMPAT={0xc, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x88f8}]}, @NFTA_RULE_COMPAT={0x14, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0x21}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x416c}, 0x1, 0x0, 0x0, 0x40041}, 0x20000010) chdir(&(0x7f00000001c0)='./bus\x00') 5.068466259s ago: executing program 3 (id=1422): syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) openat$ipvs(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/sys/net/ipv4/vs/secure_tcp\x00', 0x2, 0x0) pselect6(0x40, &(0x7f0000000180)={0x1f, 0x0, 0x8001, 0x3}, 0x0, 0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) unshare(0x2040400) r0 = eventfd(0x3) sync_file_range(r0, 0xffffffffffff0700, 0xfffffffffffffffd, 0x7) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000002, 0x50032, 0xffffffffffffffff, 0x0) mlock(&(0x7f00007d8000/0x800000)=nil, 0x800000) syz_clone(0x100, 0x0, 0x0, 0x0, 0x0, 0x0) mlock(&(0x7f00007d8000/0x800000)=nil, 0x800000) setresgid(0xee00, 0xee01, 0x0) setgroups(0x0, 0x0) shmget$private(0x0, 0x4000, 0x800, &(0x7f0000007000/0x4000)=nil) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00'}) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_REMOVE(r3, &(0x7f0000002500)={0x0, 0x0, &(0x7f00000024c0)={&(0x7f0000002480)=ANY=[@ANYRES16, @ANYBLOB="010029bd7000fedbdf25020000000b0001000d245b2121290000"], 0x20}, 0x1, 0x0, 0x0, 0x2404c080}, 0x20040880) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000a80)=ANY=[@ANYBLOB="140000001000010000050000000000000000000a88000000000a010100000000000000000a00000008000240000000010c00044000000000000000030c00044000000000000000031f0006006cdcbf1cfe826d48bf25307caf3c613751de9e05155995167f1ba4000c00044000000000000000020900010073797a3100090000040006000900010073797a31000000000900010073797a30000000002c000000030a010300000000000000000a0000000900030073797a31000000000900010073797a300000000028000000000a010400000000000000000a0000000900010073797a3000000000080002"], 0x104}}, 0x0) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000bc0), r4) 5.026638196s ago: executing program 4 (id=1423): r0 = socket$unix(0x1, 0x1, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xb}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x2}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000001300)=@newtfilter={0x40, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, {0x0, 0x5}, {}, {0x7, 0x5}}, [@filter_kind_options=@f_route={{0xa}, {0x10, 0x2, [@TCA_ROUTE4_IIF={0x8, 0x4, r3}, @TCA_ROUTE4_POLICE={0x4}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x10}, 0x0) 4.870342683s ago: executing program 5 (id=1424): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_SET(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010028bd7000fbdbdf2505000000200001800d0001007564703a732cb5380512"], 0x34}, 0x1, 0x0, 0x0, 0x48c05}, 0x4040140) r3 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x0) r4 = fsopen(&(0x7f0000000040)='adfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = bpf$ITER_CREATE(0x21, &(0x7f00000000c0), 0x8) mkdir(&(0x7f0000000580)='./file0\x00', 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000005c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x4008050) sendmsg$NFT_BATCH(r6, &(0x7f0000000240)={0x0, 0x10, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a09000000000000000000020000000900020073797a320000000008000440040000000900010073797a30000000000800034000000007"], 0x64}}, 0x0) r7 = syz_open_dev$tty1(0xc, 0x4, 0x1) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r8) ioctl$VT_DISALLOCATE(r7, 0x5608) r9 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x5, &(0x7f0000000140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r9, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB="2c00a044e1abdb331e106991eda78a2f406c0a5d1a2b7d69acce457ce79db309281783b97dc73abdb87f78a9554bdefaa93c4f176482888d37d97eebfc248c2d3f92b1c44285ab4d4c82bb3c"]) setregid(0xee00, 0x0) setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0x7, &(0x7f0000000100)={0x818, 0x6, 0x1, 0x8f9}, 0x10) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r3, 0xc1205531, 0x0) r10 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8b19, &(0x7f0000000080)={'wlan0\x00'}) 4.765023274s ago: executing program 1 (id=1425): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r0, 0x1, 0x4c, &(0x7f0000000300), 0x4) write$binfmt_elf64(r1, &(0x7f0000000580)=ANY=[], 0x78) recvmmsg(r0, &(0x7f0000000500)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=""/8, 0xc}}], 0x4b, 0x0, 0x0) 4.716884644s ago: executing program 3 (id=1426): syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1e7d, 0x319c, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}}}]}}]}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xf, 0x4, 0x4, 0x4, 0x4, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=@base={0x2, 0x4, 0x2, 0xc, 0x1400, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000208500000001000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 4.52156792s ago: executing program 1 (id=1427): r0 = socket$inet_sctp(0x2, 0x5, 0x84) sendmmsg$inet(r0, &(0x7f00000033c0)=[{{&(0x7f0000000000)={0x2, 0x0, @private=0xa010101}, 0x10, &(0x7f0000000280)=[{&(0x7f0000000040)="93", 0x1}], 0x1}}, {{&(0x7f0000000300)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x44}}, 0x10, &(0x7f0000000440)=[{&(0x7f00000004c0)="3b6445482e44bd3ed51be95167796a38ad305fc19cadf1ff92cfa51620d6c7c6d84ae320798bacfc856ac3364339cb68899db1e4aef27c373a808c4542df2cdd659e0d74ed7d42c7d4467b37e03980", 0x4f}, {&(0x7f0000000540)="7e3ccf7fea048a093fc236f6fcb6b2886f5793c1bbe3eacbc3bcdf7d34efcab187b244518a39f8373796ebf8e352e4fe5eeb1cc81665d4ab6d4a77a976bab4d3faa2d9ebf4", 0x45}, {&(0x7f00000005c0)="c35e7265689c6353e3dd2d0e0f741c54c4c0bb9c0c801a2dd2f4e0cf18583a6355031bc41a9601366a47f91fa45020746fd4ab579a5a48e79eaa0dbbc9e6b50d0b0375116b4fbe7d8107ef3232571a1fbf71032eb0c2a26cd5b773ac0fe45740b1d95d0138689b3a574ff4acf9aa33f6f827dc22f38f189700520036e692f016c7145bd23fb36e6259def5824169b00f78ac2486240f56f01d888fcaa64ab2de034e23f2d73f18a47d4d9cdb850c7661b2478871ed84b809bfe430643ae7e32ad53a2f93d70bb8a2e93ddcca70ecd27b107549cd58a749838f0bafe1ff48048e4baf8884e617d7145e3671010e7c142a545f", 0xf2}, {&(0x7f0000000340)="a5bc185362fe0f43ab2822abee24dad43e14215b4649cd44f0893672b1ff", 0x1e}], 0x4, &(0x7f00000006c0)=[@ip_tos_int={{0x14, 0x0, 0x1, 0xfffffff8}}], 0x18}}, {{&(0x7f0000000700)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0xd}}, 0x10, &(0x7f0000000c80)=[{&(0x7f0000000740)="baf9fa56da448acf9d6b16ee28488e950d9d6cb627949dcf6aa2e863a3a9b95f2e06e1f5e7618e15e78eaf9550cfb62ca40e7e4c9abf8c9fa11f4d36e4fb81dbe6bb622606e13eb4d2f722f35b0c04af09c84a9ccc8d1a1dfb2644b62685026e7b894c8691e7ded933d1e27e6f975f6db2ba4353dcdc3fe3a16989ddb1d796e05c433ce97614724bb7d9b7df37e6ae9fc029e9fd52ee28eea21002cd7c3cb39acb843c186385ebcec903bb7892304c119330f22ca409975bdd85b3c7c58ee854ec6f", 0xc2}, {&(0x7f0000000840)="0c29ed3849fca170963ebb648343ca8c40df41d717f1a45a8b28a5f7fd84925e2bc533d2cff9c8f9a8a8fbd71fea1831d490d61cf5ea6b725d303d36edb2dca6a3da7aaaca20dee7a9596f159ef85941f70da03472168339a0f10450c1716658008091263594acc2150f21fc9259c4d314709e8904e373550b6cc3acbf3c51407a8ea5f7db83a23a00bf9c72e8f1cd6d0000e304f36b92c706639e0951afe946da48e304b0334fb99c976ebe3906ce8d811910304df1a2f073c60f305427180b50884fc8f8aa3bb60fd8cf49f77d94386ac16cf6eacfaf071308a12ed8c1ea5052240f809327cae2d80ef34d39e795f759072d3779123424b6", 0xf9}, {&(0x7f0000000980)="ea210fb433d43da69064b616e881c094051332d795e8aefaafaaaee9f8072c40", 0x20}, {&(0x7f00000009c0)="aebca4", 0x3}, {&(0x7f0000000a00)="42c6df8a1e00b0afa06dd03bf53620a44b0a3e427500a320a27a24e0b5901e2084361bfbe216540e02111317a5e9f7bff4753e76307714d1b74bbb4007504c5d95c1725d7ac64364e3ccada2cec482af6c075dc1367c84a56c9a93ed4d7bbe31ba62265e528fc402b29ada31eb608e9e2c4103c6c279956c3ecc12f7cf9e4e1be294da559c713c7608d77ee3aab385ed13d7f972fcc6749f2fed2f1c96019fdfe34271a69f6a1dafa1c1d897ef296f152f8e3638ebbf8aac1d83", 0xba}, {&(0x7f0000000ac0)="936318de2abb0bc3116a79748d776a701f35c5494e50e446897c9ac0797d", 0x1e}, {&(0x7f0000000b00)="ff1af882cb8324692b633dfdebf41775a72f6e168eacc9dd03d0ef89474ae19f88b18fe1949798c855291adff2d7aa472a2b88be029224ea85ecc7", 0x3b}, {&(0x7f0000000b40)="09be39dc1cdd3a8b530930964c4683bb3c9316d1e849c5034fcf860998fb1e3d05de32f360640b7c3195fa589b438c9a82de683d01ef4d9b0271c4c7f741f773d5a1947c7865af05bd0d9b6fbe9d6f23c36970a99d2cc0579b887d76de593eb5ac962aaf7d14eb5c35d7188ec580c41f980411649e1b34cc5aec33addc61d8fe75d0e91a99d5ec0894f858cd6302019fba20058353394ddd6a4c2a5900e13c663ce705f2b8698ef6d45da87c798b83765b2387ceaba5311fa9cc631a", 0xbc}, {&(0x7f0000000c00)="c04d74d0691403eae75204c382684dfa96e66389f1bde8f5919354be527c484e7443df6e516b2525667c13d5806528f408b6d78a586196f59d39c7a016136a3116e62bdb51f66a97108672246c82bf5dfae941374c104094f1fc74f351a5017a57f9e3247a87ff32", 0x68}], 0x9, &(0x7f0000000d40)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x4}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x13}}, @ip_retopts={{0x64, 0x0, 0x7, {[@noop, @timestamp_addr={0x44, 0x4, 0x5e, 0x1, 0x1}, @noop, @timestamp_addr={0x44, 0x2c, 0xc1, 0x1, 0x1, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0x68e}, {@private=0xa010100, 0x8}, {@remote, 0x1}, {@empty, 0x8}, {@loopback, 0x2}]}, @lsrr={0x83, 0x1f, 0xc8, [@loopback, @empty, @rand_addr=0x64010102, @loopback, @multicast2, @broadcast, @multicast1]}]}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @rand_addr=0x64010101, @broadcast}}}, @ip_retopts={{0xd4, 0x0, 0x7, {[@ssrr={0x89, 0x2b, 0xc2, [@multicast1, @dev={0xac, 0x14, 0x14, 0x40}, @initdev={0xac, 0x1e, 0x0, 0x0}, @empty, @remote, @initdev={0xac, 0x1e, 0x1, 0x0}, @empty, @empty, @initdev={0xac, 0x1e, 0x1, 0x0}, @private=0xa010100]}, @lsrr={0x83, 0xb, 0xdb, [@private=0xa010101, @rand_addr=0x64010100]}, @timestamp={0x44, 0x20, 0x7, 0x0, 0x5, [0x10, 0x2000000, 0x80000000, 0x6, 0x2, 0x3ff, 0x1650]}, @cipso={0x86, 0x6e, 0x3, [{0x2, 0x2}, {0x2, 0x11, "a8cdbc57586184106c5dd35a8f3222"}, {0x5, 0xc, "41b6be0df4e99ce6ca1e"}, {0x5, 0xb, "0ae1d7b2dad81419b7"}, {0x6, 0x4, "0606"}, {0x2, 0x12, "16158a01ec28e5be9c3e6e80de50d4ed"}, {0x0, 0x7, "c6b9567d49"}, {0x0, 0x11, "a6b6f4c487b92fa36032f72aa9157f"}, {0x27795e1a78956bd3, 0xe, "484d7c754552612af98231d5"}, {0x6, 0x2}]}]}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x7fff}}, @ip_tos_u8={{0x11}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x400}}, @ip_retopts={{0xa8, 0x0, 0x7, {[@cipso={0x86, 0x16, 0x0, [{0x5, 0x4, '_A'}, {0x1, 0x7, "5608f0aa48"}, {0x5, 0x5, "f98fa5"}]}, @cipso={0x86, 0x27, 0xffffffffffffffff, [{0x7, 0xf, "469b728b6a8b7f84dc8b04b9b8"}, {0x2, 0x4, "ce0c"}, {0x2, 0xe, "f53156409d4c9ea95a9d9bd7"}]}, @end, @cipso={0x86, 0x53, 0x0, [{0x2, 0xe, "a6fffaa1aa7e19b25c690571"}, {0x1, 0x2}, {0x0, 0x7, "4e88018ae3"}, {0x6, 0x12, "af068803790334750e3149ca36bdff05"}, {0x2, 0x9, "0905b8f994dd2d"}, {0x1, 0xf, "052b0bf38d28b4b966a36aaaf5"}, {0x5, 0xc, "c93bd27330d3266980a1"}]}, @end, @ra={0x94, 0x4, 0x1}]}}}], 0x280}}, {{&(0x7f0000000fc0)={0x2, 0x4e22, @local}, 0x10, &(0x7f0000001180)=[{&(0x7f0000001000)="861227f40475fd8e862df024afdf066e9b16837432552ee77a7a7894f567ff8688ed8662d3f4438d7361709e75f38836a55db0e18dd6aacbc6671b33d81aab", 0x3f}, {&(0x7f0000001040)="e3d4f8738aa471e38862d1196e0bf42d1e2bda4272636cb76e33daa4549965355ab16cf976c8d320c96eff166fa00cf43c54bc5a906a75243144aca4e8fcee5ba250613253f636f177094faf300a535c80580075b2c5e7de62c71852a1f5d4d4ff24388b61aa893d65d8c0183bf817460907348000680feda8ce196748645bb12e7451e9e92dd61c3d5c60c650348679ed8f325ca4cc955d2e8d4dd4991bc8f6ac61b329facb611d78731a8fb8659940aa", 0xb1}, {&(0x7f0000001100)="ab2690b5ba80562ab13c58b3d35e2c88799497f07aa1ac177abd2caef8e59143e37d6cd601de9a6744d55ffadc4a2d89d2771c063ba2c36f55a63c7db10e1b0397a3c06a8b19b4f5aca2eb5438e42ada53201118c9462d5a4b8000e3d9030ad03d852ab75a7636887e2981ba20537e9ed257bbabdd00eb21", 0x78}, {&(0x7f0000001300)="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", 0x1000}], 0x4, &(0x7f00000011c0)=[@ip_ttl={{0x14, 0x0, 0x2, 0x6}}], 0x18}}, {{&(0x7f0000001200)={0x2, 0x4e23, @multicast1}, 0x10, &(0x7f0000001280)=[{&(0x7f0000002300)}], 0x1, &(0x7f0000003340)=[@ip_ttl={{0x14}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x81}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @empty}}}], 0x50}}], 0x5, 0x49850) 4.511916532s ago: executing program 5 (id=1428): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1f, 0x2, &(0x7f0000001c40)=ANY=[@ANYBLOB="85000000a800000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x13, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000"], 0x66) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0c000000040000000400000009"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000024c0), &(0x7f0000001280), 0xffffffff, r1, 0x700, 0x300}, 0x38) 4.346497112s ago: executing program 5 (id=1429): madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r0 = io_uring_setup(0x3450, &(0x7f0000000080)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) mremap(&(0x7f00003eb000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f0000003000/0x1000)=nil) r1 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) ioctl$EVIOCGMASK(r1, 0x80104592, &(0x7f0000000300)={0x0, 0xffffffffffffff36, &(0x7f0000000200)="952bb3e006ae9a4c3a"}) ioctl$EVIOCRMFF(r1, 0x40044581, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x20000, 0x2) 4.345674951s ago: executing program 1 (id=1430): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x9}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3) sched_setaffinity(r0, 0x8, &(0x7f00000001c0)=0x9) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)={0x60, r2, 0x1, 0x100, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x4c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xf}}}, {0x20, 0x2, @in6={0xa, 0x4e21, 0x2, @dev={0xfe, 0x80, '\x00', 0x35}, 0x1a12}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x60}}, 0x0) sendmsg$TIPC_NL_BEARER_SET(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x34, r2, 0x1, 0x70bd28, 0x25dfdbfb, {}, [@TIPC_NLA_BEARER={0x20, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1000}]}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x48c05}, 0x4040140) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000180), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) bind$bt_rfcomm(r4, &(0x7f0000000080)={0x1f, @none, 0xff}, 0xa) connect$bt_rfcomm(r4, &(0x7f00000000c0)={0x1f, @none, 0x6}, 0xa) 4.08558686s ago: executing program 4 (id=1431): r0 = socket(0x2, 0x2, 0x1) bind$unix(r0, &(0x7f0000000000)=@abs, 0x6e) r1 = socket(0x2, 0x2, 0x1) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r2, 0x8932, &(0x7f00000002c0)={'ip6_vti0\x00', 0x0}) bind$unix(r1, &(0x7f0000000000)=@abs, 0x6e) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/icmp\x00') r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000100), r1) sendmsg$BATADV_CMD_GET_GATEWAYS(r1, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x2c, r4, 0x4, 0x70bd2a, 0x25dfdbff, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x3}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x4}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x9}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8810}, 0x20040814) preadv(r3, &(0x7f0000000700)=[{&(0x7f0000000640)=""/165, 0xa5}], 0x1, 0x180, 0x9) 3.853565763s ago: executing program 3 (id=1432): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x169802, 0x0) r1 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000240)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x4f3, 0x755, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x40, 0xb1, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x101, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0xc}}}}}]}}]}}, 0x0) syz_usb_control_io(r1, 0x0, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r2, 0x107, 0xa, &(0x7f0000000080)=0x1, 0x4) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, {0x4}}, './file0\x00'}) setsockopt$packet_rx_ring(r3, 0x107, 0x5, &(0x7f0000000180)=@req3={0x1003, 0x3e, 0x1000, 0x8, 0x7fe, 0x4, 0x8}, 0x1c) r4 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000340)={'vxcan1\x00', 0x0}) sendto$packet(r4, &(0x7f0000000040)="c8", 0x1, 0x0, &(0x7f0000000200)={0x11, 0x88a8, r5, 0x1, 0x7, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x14) syz_usb_control_io(r1, &(0x7f00000000c0)={0x2c, &(0x7f0000000040)={0x20, 0x23, 0x7, {0x7, 0x1, "00f4000000"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) r6 = syz_open_dev$hidraw(&(0x7f0000000b40), 0x82, 0x2) ioctl$HIDIOCGRDESC(r6, 0x90044802, &(0x7f0000000b80)) r7 = dup2(0xffffffffffffffff, 0xffffffffffffffff) r8 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r8, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x1c, &(0x7f00000002c0)=[@in6={0xa, 0x4e22, 0xfffffff9, @private1, 0xa2}]}, &(0x7f0000000080)=0x10) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r7, 0x84, 0x1a, &(0x7f00000001c0), &(0x7f0000000380)=0x8) ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$BLKROTATIONAL(r0, 0x127e, &(0x7f0000000140)) 3.799666528s ago: executing program 6 (id=1433): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_GETFLAGS(r3, 0x80086601, &(0x7f0000001180)) ioctl$EVIOCSABS2F(r3, 0x401845ef, &(0x7f0000000040)={0xd2c, 0x3, 0x1, 0x3ff, 0x8001, 0x80}) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004bc311ec8500000075000000a70000000800000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000000c0)='percpu_alloc_percpu\x00', r4}, 0x10) syz_io_uring_setup(0x111, &(0x7f0000000340)={0x0, 0x0, 0x2, 0x4}, 0x0, 0x0) 3.329193621s ago: executing program 4 (id=1434): prctl$PR_CAPBSET_READ(0x17, 0xfff) prctl$PR_CAPBSET_READ(0x17, 0x9) prctl$PR_CAPBSET_READ(0x17, 0x11) prctl$PR_CAPBSET_READ(0x17, 0x27) r0 = open$dir(&(0x7f0000000000)='./file0\x00', 0x48000, 0x1a9) mknodat$null(r0, &(0x7f0000000040)='./file0\x00', 0x20, 0x103) prctl$PR_CAPBSET_READ(0x17, 0x1d) prctl$PR_CAPBSET_READ(0x17, 0x20) prctl$PR_CAPBSET_READ(0x17, 0x27) prctl$PR_CAPBSET_READ(0x17, 0x2) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000080)=0x0) r2 = syz_pidfd_open(r1, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000004c0)={'gre0\x00', &(0x7f0000000480)={'gre0\x00', 0x0, 0x40, 0x80, 0x2, 0x9, {{0x8, 0x4, 0x1, 0x2, 0x20, 0x64, 0x0, 0x9, 0x2f, 0x0, @local, @empty, {[@ssrr={0x89, 0xb, 0x82, [@remote, @loopback]}]}}}}}) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000b00)=[{{&(0x7f00000000c0)={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000400)=[{&(0x7f0000000100)="542a09f9a0f3902d36e60bf0e1eb64e495af1174f34ecc4ca680f0d543e02b04ef177e5f4e04d7f18701548c37bdf912adbfec7b0551de7f29", 0x39}, {&(0x7f0000000140)="27c22e66163cf34e99bd0e137c6f9a75339c855c6564873e8824a2a76cf41fac01dcdd0e2177cdb9016481907a64b83b89f5b6d576c87b998ecf61880c72f11ed609a245d6a33f3bb042d96d225785f57c24054431d0f20c604db010d7a4dca50d417b019a0ca1b09d8ba63c9fbf8fdfaeeebf9b2f19dd12034a05e0583eda0ea32cac0405a6bd18cedfe69d6875eeba073353d1af4f43", 0x97}, {&(0x7f0000000200)="76df00c77a81fbfbff37619b87f4deb368115127f95d51a42d7d18126438383e0996fc1032cd96", 0x27}, {&(0x7f0000000240)="8f18e9f1012c9c4c6f1ae65cd78ed4ac6399fbfa5c82e19f790db38ceff8a1c3457bf74808236efefea381f31c4d0108ae5ad2bff2b17e585c4377ff887a42f222d373f5c74e346e05e898fcb1b3c23089c69a69b427c54a0382433f3d743e19de86d137711ef09ac943727eac49e0e84165adcd53", 0x75}, {&(0x7f00000002c0)}, {&(0x7f0000000300)="4133db9191311ebba4c229b2da1991ca67c80bf07d7b91c51cf1bf75ec8b02fc1a5b5bd2f31b51cc215e224e53c7a24c29869309afff53f16798761e97628fcf6559926ea7cb9818cae51455209c06d59fbfdbdd6a0c4457d220343e019c92c40d0803bef34672127eee680c349656a86c19abe6130fad568a2c60ac9d67ddefd306ef84f45af55acecb58208d37767999ca1f7091aba5bb24f3fbe156b0754ca6a2d961ff8399d64fb4b4867421f79ff56051984a3f9b4e", 0xb8}, {&(0x7f00000003c0)="57c63a65e6fc330a75419cb960fcce1272ea4b5563e92e21be282ddde5d07a924993a2c4c07ac0aeec175a92c03b5d4554fc300e", 0x34}], 0x7, &(0x7f0000000500)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x80}}, @ip_retopts={{0x18, 0x0, 0x7, {[@generic={0x88, 0x2}, @ra={0x94, 0x4}]}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r3, @rand_addr=0x64010101, @initdev={0xac, 0x1e, 0x1, 0x0}}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x4}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x81}}], 0x80}}, {{&(0x7f0000000580)={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x19}}, 0x10, &(0x7f0000000a00)=[{&(0x7f00000005c0)="79cb12841dc57624753868be8904da9949cc9e2f54d9f6ab114ec77063762a94863b9b799af05f88f9e5c78f2cc5bd45a8ed33c237a160878d", 0x39}, {&(0x7f0000000600)="993bd7a86efb7d23f92b74974d4116cfe7fd16dfb8ad89209809955b4fb1568d1cbd3ee4cd0ae49b621ccc659e4fbf3803e9f53d6a3b9cad340360e0fb2ad27fb7ae4f847bb9ce6f5c6a411f1012c5146210290faec3e976daa5ec28facd54d99486a04ad6749f65b5a4f5fb95be2ada0173369a92fdba65fb97e64ce48fd49a6020ba7022dfb55cfe35eba19a032beaf3cf4b20b7f25df5eeb899df9c45d26871c789e62c63553de39c04026241905bdd9519f24087269c8249b645acd31118f76a336affdb2d5c16302f6d564c2602ed726ef2d57fa1b244f8a3e130ba8f3bdfbd42dc35db90ab385797eaf28461455fcb", 0xf2}, {&(0x7f0000000700)="dde3079345d77398a73b51bc8d715bac85dc07c9272655e283aecfbdf15c65e0e57517ed199b0543f3fd", 0x2a}, {&(0x7f0000000740)="de6d8f2df92fc3726a94dee888a541d043b305c5a9dafbb4b516a5399dd18d3740bb77cf2199e13f78a17cb58bce4eca213acfd01db89d7d29694ceef7958ef459bcb272846436889204828d8d8f36d9da9c7be5e7c49057fdc9c385b9f06140dfceb54c1570c4d3e5b64da455d16c8b3e31c792b2a55b2b232af2b89dede094782772301b501fe529a0990c243242719a7b4252dc86f3c4533d5a05d0e5a1de5ed43a27d675a3e7ece06b7ae004e41271cc671aa587b6269813de9d7dcc9c3410d08562a44e5ba61957ef7c3a964fd95fa3345763d1dd479e87ae2b03d411fe4468", 0xe2}, {&(0x7f0000000840)="99b529f2579349062f678f2abdb8a3427ac88fb3da631a8b0ce88f2ad531f36992dd643d103dacb1863e9d7b28392e5d4d08b91d7be3a559eb1c6c64c9eea13f44ca5b3daffb6cc8ca964b7ce8a8ab92593a42c706f57da7240a26738f354df316e3111576ab63bddf92a5d4116a3b931d6dcbe4e1b5d91baa4c75bea8a75f814ae15cbc9b1983bdbcd9567d490952fa4a7424b3e1e11f230d7fbb0fb9ea96010e109c4a343db7cdfffd0aa426ea5ba6f6f50c0d246dede5b9b8e2bb71f0e2b7912ae9c0e8fc85e0d258d879f1d1f58cd20c8a34d070401440", 0xd9}, {&(0x7f0000000940)="94ab1c77a4bda2c733170a87719ce755c7c2e3579306f485b69cc2e4ac5ed9c08b078a95466de24901c93f86e1692bf184f05f3a5ce26b6e9f2ba561fd9a9bfa2998e6ff59aaf8fd0927891d787f57810055d2a5ad8b80456dcbcde790448179b104cada96a4a0a40fff44ebb8b7a0cb8fa6d1a9d38aa2ced55637be855707a6286e", 0x82}], 0x6, &(0x7f0000000a80)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @dev={0xac, 0x14, 0x14, 0x10}}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0xfe}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x1}}, @ip_ttl={{0x14, 0x0, 0x2, 0x10}}], 0x68}}], 0x2, 0x4000000) openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000000b80), 0x2, 0x0) faccessat2(r0, &(0x7f0000000bc0)='./file0\x00', 0x105, 0x0) prctl$PR_CAPBSET_READ(0x17, 0x13) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000c40)={{{@in=@loopback, @in6=@private0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@private0}, 0x0, @in=@loopback}}, &(0x7f0000000d40)=0xe8) r5 = getgid() chown(&(0x7f0000000c00)='./file0\x00', r4, r5) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000dc0)=@o_path={&(0x7f0000000d80)='\x00', 0x0, 0x4000, r2}, 0x18) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000e00)='statm\x00') socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_CAPBSET_READ(0x17, 0x12) ioctl$SNDCTL_TMR_SOURCE(0xffffffffffffffff, 0xc0045406) prctl$PR_CAPBSET_READ(0x17, 0xf) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_RTOINFO(r6, 0x84, 0x0, &(0x7f0000000e40)={0x0, 0x8, 0x3, 0xd}, &(0x7f0000000e80)=0x10) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r7, 0x84, 0x10, &(0x7f0000000ec0)=@assoc_value={r8, 0x9}, 0x8) keyctl$KEYCTL_MOVE(0x1e, 0x0, 0xffffffffffffffff, 0x0, 0x1) 2.323349823s ago: executing program 6 (id=1435): mount(&(0x7f0000000040)=@sg0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='9p\x00', 0xa00080, &(0x7f00000011c0)='\xaa\xaa\xaa\xaa\xaa') r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec8500000075000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x69703000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x210000000013, &(0x7f0000000040)=0x100000001, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r6, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000001440), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000001500)={0x34, r7, 0x1, 0x4000, 0x0, {}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_COALESCE_RX_MAX_FRAMES={0x8, 0x3, 0xa000000}]}, 0x34}}, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000024c0)={0x1a4, 0x3e, 0x107, 0x70bd2b, 0x0, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0x27, 0x1, 0x0, 0x1, [@generic="71eb5e95cf85a847d55c7cda1a3f0134f5640d7f07791e8deede9033f5aaf8155fc3b6"]}, @generic="3652ff5ee36defcbf2603278fdfbe0ea45267784bfb2cb81c4023b74cc2e8717c8", @typed={0x8, 0x13a, 0x0, 0x0, @pid}, @generic="7b8ba3a3fed6c1606885cc71a4bcaf52f5a3d9ae468d2daf9560bc267d0e142fd18230771b110e544de8f3a9304876fa34944692b04309ecfef91b1495a5b719921d38a637e5c60e030929180b6c13d3cae39840727d24e2d92f0129", @typed={0x8, 0xdd, 0x0, 0x0, @uid}, @nested={0xa0, 0x1, 0x0, 0x1, [@nested={0x4, 0x14b}, @nested={0x98, 0x11, 0x0, 0x1, [@nested={0x4, 0x10e}, @generic="0f5fcdd0474ffe227f750b34f3e3c0e4c4218c2da8e5b47bbffbd3127d133dcbc33ee4b0c6f5a9219a91efd7620561bdbd811c21fad8eb4a2a505751e3b10b0a3cc8fcaf15ad0a1eb478586acf69fc354e2d17edca23b93d0430047fe3c7c972c87b99c66ef6563f8588fc7755f45c14bf9a96d05b3c26ebdcc936af232ee76f04d2a40e", @typed={0xc, 0x8c, 0x0, 0x0, @u64=0x3}]}]}, @generic="e6c02e0251991c512ad7a6b0b6835d37869749a5af34bdd4c271278d631f3d0cc236cff50c03a517e20f5a3574659f7a6fa47b", @typed={0x4, 0xd3}]}, 0x1a4}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) syz_emit_ethernet(0xfc5, &(0x7f00000013c0)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x10}, @void, {@ipv4={0x800, @generic={{0x6, 0x4, 0x0, 0x0, 0xfb7, 0x0, 0x0, 0x0, 0x84, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0xe}, {[@noop, @noop, @noop]}}, "dd9dec79219eb5499325e16c96335bc5ff0e043319357749084ca9d0ae1378f4e88112a2f7c10fd1523b9007773fd2b2bd0ebabccd2e5c35fb3baff587585840f2530c6f4d025f118440ac22a8b34da7b5e1e873bd429686be3ef84439e05fc0fefedb8b897b09445a9e10cf24aec2ff3ca6a86d94df0c4a928ed904dcfb02e6c6c5918a839d33cb9b55dfb3cd89d80eb18dc06415d313b4ea240a65eff4b941ac018e8f81de044239960271333255291b5fbfdcf8db25e175640f36986b859aeb3370ca17e6a20aeeb5c5d27eb097fc1fab796a7ff8fcbe119bbe4be2c8a5c58890191c59bea20bfe4edf9c5453e59f610d3bd1d6eb49b02e464aee0480187c5717936add1347b08cdf5b056adb941708e8a0498900419e98b75658c6dd00f88eebf8c9aaee2e38c80eafcf6ca08ea305da9c7050948ef78a1457a2e933287fe8d2e100cb00078ed829985f8812d543cc5cdb71521f4113829551efe915e4d6773f2d285cc1e8813919356ca5ef202b0d2b8a3d7de51e4635e761ffd7efe5d51dd1325596f0e4e1c0b1ce73240cb931227892d66f3629c9d152372d5790c1c25e2f6f850a5eb83654f423b84adbbf4169d472b2cddaa7137ff14c2944ade3a57613806810707a2e6c078beb4b87cf8cf39c9950bcb3f9bb42308bd5e68d81f7f4d9e528541703059787f5e342be8ebb9841d587f7455b409115d511c130d9641fc74391228bda52d2fa58e2ca74b26583e73e2cfb881945d8ecbc77eb35e783057f6c35ba06b7f639ec516ee54bf3645f6ec436ba859e22ed480a862285aa21f3d5cd3734dde388a7f8920c4a6b4a952f830e0d2811f2f2714e660e961de0b3e0b8d5fd1007690a61e414e82245dbe4e47c73465ed40af1cee2eae4801ee408ad1fce81ff8db77082c5efd93fa9a1a3e3d78eff84f326df1c6fa656cc7d4dab842fe8e0d9ce47ad0a7e74dfe1a53776a346a22dc7a0e476754d385d99aa9cbd3f445ffb2ed61e01b28fc071d706ad204b1e8014481dba0cbc460b67e64d6e955184271cedef7f951021e3595ebe9c3384b53efafb67cbed2aa1ede5d7fcff3a9d27d05766fb8894d7948609441759f4c4dfa33b6d486d4fb7e231f04d4f0f9e98f4b156129d9307fb9ebf3b278232062e7fe9ec2db7c4c991f83733368a107bf5798a1df45c919d71cce45ed907240c2f2fa6a4227e8e11cef2e7968c63e7a1adc3edec2170c17ed2cc54d0ea2b34e99b81015ffe51a501c2b73ddac5223e69d0dd451d358c0cd2ff7db256850ec1e9e349901f168d854284da68d80c68298a75c5d859008c82fe08b4cf2e68a2c0190760a03aff1be2c9425b6d5ef5c67bafb6d16fffeeb0211d90abbade4db9d6a9e9c981dde14c1d54e9138f9760bcdccbf17e7416042cfe7bbd8bba2f739f7f900ee45b965316b950e8474f3be92081fb63f43a4858b39e20e14d5a38c0973d680f2fda9e310d0e088523bdcbb728bcd0074447b4ace876da5642cd7d781cdb023a31446e0a0c59d5388674a5c8a97927e014a73d0330bd5c5187db79f1c546a8bcca008263509c23b246dea58fb36c44d373c1c92ffdd1600c27d4b10b3fc86b88ecefe8743bb59a6b8e443f06d2ae3a6908b6bc25b647deee13262225b8879dd79413ffa3d4aef91a0a04d4dc3030b5beb081c5fdf9152c3a17e6b24457fd580d84d3006af27ff44d6ec3664c4955a1d1dc5eb041682644ae564390a3d0aa602b2a18cdd3f8a1efff7b8f3afc31c283c9b74b806a98bd9f1ad8ecce410160c0a27f7ef90a2b0c1bea64e187adc04a04bff7c435659bc4c3ce5c2730e121972541062102e93d2a136e1aaaf3e25d547cad6e2b0874500fc098469494d2654808ee88588fd167f4332061a9b4cae6b22d87624e325e89a269f61ce0d26465ddfedc1f0fa2a5cf1ee7fe3e6cb375f1ff04cf8d22667debe574b8395023bde9a8302376af2e119c4c88433d1722011ade605f3a4201860742b0392ac96cc138d9ddb952f4e4742a7fd9d625465dac35347c1662b2085c357120c6ff69dedc013c5fe46555a4448b0be41e21ad73162bf9aa1cfb70f4702c7051c0a13fae918133f123d33c5c02e66ae8fceb3109b2e13a7a3e71484d59dfcba16db2d21549be1ba6cd5ad7610eefda427982384961f18bd6857ad97e868c2914d0ba934a296eda52646031c4504864061f3cba1df65cd04ef6b1050fb30b5abbbe28f8f7adb8073e452f4c0c5492a5f8d427ddf451ae303a86639e5dbccfe2b2bedb911d534a77c012e2f8a24917d98ab14557caf3e66040f21767685644f0003459762d4ab25a0e33a92b54748cf46a977505074b79b9b0746b2b5b168876a2ca10bb903edc1d1992a4a94c0ee0dd7b37add092163b5fbaf16090f8143187d060b19e3822f3def14717e41558f9582467a5a5f89148450fde235e7a5bb900e4e9d14e2147bfd2a52f84a115eb170bf3d3b9b3de9781960be4e53025c7dce005e1458140bb9cf9da8fa1124ac558fb220d57c23a7f120f5171eb2208d9e6ab7186ae457973da564f1fd45b241c15596035f55034c3995a587b4471068076839420df947f10ab2fc211732d768c135d63cc5eeda1bdfc780e7ed90855fa5a364e63f529703cd0f691b0b6a41232bfd1c1f61ef6b16ed3b9055ca888c8ebcd16a0623ede9e4e37b7d6175e3d0ddba8e7d87639eb8b0ba246131951a581575f1adf4c598a9f2f087d5eb2a0a5834d8cb12b0ad76d9381a838ccfbfcc20bbb970474c48677f10aa57be1d607d5b049d397178035f7f3393cd9000336c83218850ecd64142a22f7ae7e6a7e62013d6d105eb7c862e13979698681d44121ee9e2e552315d4d3913ff7bcd90d6bed72d50107a971a37d5a1d75efeebf03cc91239b7e427fba8df6b79674c15acd2093289fe6155063af81d85840abf4635f66083b3707d34b2149dfdf95cb4deb71e1574118c242b160c770347e6b1f135a985e89fe8e6d7f40281cfb6dc05cd8b9d4f6680c0863acb34516092acdf2bea67f54ab4282ba2d898287f34d9384e335b2ddbb87aaea8cadb8f0b397e99a68a7a214fae5a1f56c95bcd901534c23cd5cff3c168813d7fa1191dd7437c96b07324a7b21b48e205b859dcd080bd62ab7cca4bd7a73959218d0eeb21c887483201eaf3afb19efe1741b57332c5441685a7bb8324d9e85faafc785312b58aabef2eef6a8048663bf13db9ae9edd4b1dcebc99890693f11b354b1f1aad19b66251b4bcaed0daed73b87dedd140fd680e7d3355362844d1d7ba2ae6be7ffae59d7b3c679b890448b0de1acf591abfe6f3096794b7e142e0ac0862ab8cb76eb79b17d1138be3747f907c3f11c636a0f0e0d315d1ff05aab0ce62fbac03a2b4ddeac7ee192bba2da93b7a926271f6d594aa14de2c294ad0c77770a624d1ce24cc8d8f5e9b629604fa7897f0cbd641f76a85dc8df33b5715eb100e30e53b85110d2252c22575a7365eb08006b4d62d305e780101965094ce2aaad170df470870e687fb280b772d41ad5d470b71e256af3a0d2c02df95821d38f28cdff26fa7a3f6e920edbd3174d2d2bde854ef68dae8a0a4a63753c825930903a2ca75d4321bad0ad9ff6852f94dd04972a45bb9625b3726dfbcc959e85242f0d327b181aee0fdab7af064dd97151b131a5c4a51a66692cbbd9f1348a16470cedef1b255e172cd2b15184177ad43744de941869af884ff8e59ef0e63ac5e1b99c851e0f915359ce12d9c380bb6f9c2bc773267157afeda7abcc120a31a1b72af6662bff7f5f194dad00b4ebfdcbb4dfc39854412db1ae99b449d741f841239159ea467cf1e38b95bcb7603ebcb400cb31410b2a4e25126caade0019bf667cc998bc4582578da0f8a6268f6d114ccf9dd8379995e8be1b934bb5645d72f97e05628129a7d2bc548e08796341f43dc3c9fcbe89d8284dc6633bee0d17e99f600425f0172b6bc478f5117dadf15e36e850ecc0ca75664ef8e4877a44b4ffa22a6f1d6719f8d81f9937928caa0690b77406a3298aaf446e2f78343267399bb7f64c60f82bf5d07210281eaad09a3810790720c98a041332c809be7aea1480b9e5eb989085c23b4aee75143068def3e89d1c417b63321e68d340a1472d2504088c17cd75de0e700508c55a7246ca9a762cc50ca35cbcaa7dcf4ae3264c32ff2cd67566ed501fb8182b5f16c58295783f3b2b554b06aae700f198c71ad7519868c1e6fbeb0246569b04beeb8b71bcbb9af93372bee365efb1d7424689e8241b1dc346a73a84b5773487f388356b8dbec1a108846e3f8dc74865b156e8ad18b353efc4ad0b11412a381fec8f5d45678b4f8b680591be8077303e7aff71acf9052ae3b73e41e19668f9b53bfd75b778970831b6891a78ffe0d4863e62cbbf6cf8c085032864479cd3a250842984dcc2860f057f86c8e2d4d2afefb8a45b7d5b8c94e752f369a1b434c827cd26cd0276a8b40019a95ebe7c16de4c1ce8efbd5c70e0c507631818aa4fbc937d212e428aefa895069656babdbd921af974da32c49f4ca6d1e1e28319b427c8bad4d650809c673ec6073770b4097e5700a8071110fd07acbc5a59f8d7b0735a98fd40ce03718a9a93c035948859215c59f54343b08bfd95a35d73c5f09a9ebe63c509fe8443fa74e6efd0fd87defc7cb16725ce3c3d5f7664cfe253faf2cbeb307052dd2269b6266acdb31e2006b9355f673ca5c9cb907605ce071824254b139607a069531f9598f4040ddeb9cd018e9dfa1808032dfb65a4af0820da810a7b58fbb65ac8e65b017a40ec2d445a5c7b78d1f0e717b19427ef1fe6cc08c5e9da5a7d1d508fd939854589dcba8d75ff3d8d1c1fb28af1ed6900bcd4cedbe42fd6243c81264fe81be756bfd71ebcd4d96bd7ec50a676bc57e130bd8da21bb6e888eb6c8402516f6fe6dfe25be9a3e33f2cdbed9de00efb867cbe80ec2309458f41924b967d254166e5a0a5f776395214a67900d180704b9fb09f9c4c4c62fd382fcd5efe099e22d2c82f198a39d193f65b68e09454e2ab8f2d7413c64563742f1c34ca9285e501bff5efa30a0da946f875d23162eaa53c4008bed38e9a190b08ff8bfb6bfb91553c4c329fc73b8be308b00347dee2afdc08bab311c75386f452b706d1820c9038998924665010a548c09743a16167b0b09373b5cd2fb1da4f6c9ea5b1f1dd7775f6fcb23eab4fd1990364dacb2a1656b9bcf1c4866b7222872a3a3a03d397499222a3f31a35d3aeaf6a6d39f0fbee1e0f6e1e10ba0774f15f245d955cc8132d86c2d768f8a06274caa5a12c46e9e08ee556c1da49830f1e6c0a0c53a9ef1489c3fba0251c3e6839e891ac298108f3ed05066e48b8bda2c5f6e691c7a7425b7019e0a547f6560a0af41831a4a790c3a8eac9a3a9119da3eef85cb12f3f3115f04ae95534ac847b4ee2cc2fc43cdba382ecae7c4f499ce1be1ca1907313ff665c2fd7d4c8f36716f33b6861f5cf3f1c878feadfa9a664b8d629a16c750c466326a951efaa830e4f328270041f2ca0be49f0affe5806b94b027033f008957e83d167d6fe4168ec4fb79385cc06e257bba807ecfccaba56cf751dac996b7a347d36ec52b0f5d16425402416c735530bd7c545f8c753fb3b1054b82bc3"}}}}, 0x0) setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, &(0x7f0000000180)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7fe, 0xf83, 0x8}, 0x1c) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x55, 0x0, 0xffffffffffffffff, 0x3, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) 1.487822276s ago: executing program 1 (id=1436): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f00000000c0)={0x101ff, 0x2, 0x1000, 0x2000, &(0x7f0000ffb000/0x2000)=nil}) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010040000000000002034400000008000300", @ANYRES32=r2, @ANYBLOB="08002600851600000a00180000000000000000001c005a8018000180140002"], 0x4c}}, 0x0) 1.177000456s ago: executing program 5 (id=1437): r0 = socket$netlink(0x10, 0x3, 0x2) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = socket(0x10, 0x3, 0x0) r4 = syz_genetlink_get_family_id$nbd(0x0, 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000180)=ANY=[@ANYRESOCT=r1, @ANYRES16=r4, @ANYBLOB="010000000000000000000100000008000100400000000c000200700f"], 0x6c}, 0x1, 0x0, 0x0, 0x40080}, 0x14) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = syz_open_dev$loop(&(0x7f0000000240), 0x259, 0x0) ioctl$LOOP_CLR_FD(r6, 0x4c01) r7 = socket$kcm(0x10, 0x3, 0x10) r8 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r9 = getpid() sched_setscheduler(r9, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r10 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000340), 0x63682, 0x0) fallocate(r10, 0x3, 0x0, 0x100000800000000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r11, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000002680)=[{{&(0x7f0000000440)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f00000003c0), 0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=r9, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=r9, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="1000000000b006552d0000000100002001141000", @ANYRES32, @ANYRES32=r10, @ANYRES32, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=r9, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0xa0, 0x24008c90}}, {{&(0x7f0000000c00)=@abs={0x1, 0x0, 0x4e22}, 0x6e, &(0x7f0000001ec0)=[{&(0x7f0000000c80)="f1b0acc24857ac0732b38233413adcf8a9f8054cf5393124c2764a111cf0fa57a955feb02d7e112418400c979a243ed27d20639d0232c1f04081d914d665bd78b707807e0e6657c9598058a431f0a95dd61d4876a0fa2f87a8664838b1c1f3bc09d7ec17fc9d888eab06688325ccb288a90e474b54c53ae1ee2cae6b9f8e37dc61a45ce984956d5c621ec6169bba7ce0c39b7e67012874eca4443f5873b5c1eb879450ea319f2a16d881c5823f63dd6a52c91d80f8482e3de328b6fe775d14631e829767c5cf7e97a15f5abe8b138407e7bdd7e8206d569ad859b7b614768da06ac19e7f6ced0305985a94a86f60dc8bc626ac", 0xf3}, {&(0x7f0000000d80)="98ca3f141349576bf2f85a1ec80a8837520ec617bb35652a287c", 0x1a}, {&(0x7f0000000dc0)="5825024d57d74771f176a71cda0e7f94b84a9d6df87c406527c6e4c3e5e5765fe4c0c8824b50726c48310be508113b6fcbcebfa4fbf08882", 0x38}, {&(0x7f0000000e00)="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", 0x1000}, {&(0x7f0000001e00)="c8aef10c6a757e7e2b6423de28f1af520d091d2fa0852ce88007913d80b85c28bced8a9cf6a7e4a26803a927e8c4cb73f3a1262e07dcc9847b8e1a4c582e0e31707c672a1c55b7164c846f0ce0fb35974f50419cff995f591bee544ad3ea7cd449d2c402e2c8dbfcbf27b1d841ea525a6213c1d1f3ad3c00abc4e77fe76fcca8498c8063c73f7eb1045a24dd71004885fc1f4b3ddfb0f978485ea8857139f006d54d3c4a8665865fbdcc0384af", 0xad}], 0x5, &(0x7f0000001fc0)=[@rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, r1, 0xffffffffffffffff, r3]}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, r1, r10, r3]}}, @rights={{0x34, 0x1, 0x1, [r6, r5, 0xffffffffffffffff, r0, r2, r8, 0xffffffffffffffff, r11, r11]}}], 0x98, 0x4000000}}, {{&(0x7f0000002080)=@abs={0x0, 0x0, 0x4e20}, 0x6e, &(0x7f00000021c0), 0x0, &(0x7f0000002600)=ANY=[@ANYBLOB="24000000000000000100000001000000", @ANYRES32=r5, @ANYRES32=r11, @ANYRES32=r6, @ANYRES32=r6, @ANYRES32=r3, @ANYBLOB="0000000020000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32=r7, @ANYRES32=r3, @ANYBLOB="1400000000f26bfd2d62d81b18000000", @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00'], 0x60, 0x80}}], 0x3, 0x2400c084) recvmmsg(r11, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r12, 0x1, 0x4c, &(0x7f0000000300), 0x4) r14 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000400)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r14}, 0x10) write$binfmt_elf64(r13, &(0x7f0000000580)=ANY=[], 0x78) recvmmsg(r12, &(0x7f0000000500)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=""/8, 0xc}}], 0x4b, 0x0, 0x0) 976.21366ms ago: executing program 4 (id=1438): add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000280)={'syz', 0x1}, &(0x7f00000002c0)="1d", 0xfe3a, 0xfffffffffffffffe) add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000340)={'syz', 0x1}, &(0x7f00000002c0)="1d", 0x1, 0xfffffffffffffffe) (fail_nth: 4) 975.389611ms ago: executing program 1 (id=1439): unshare(0x4040400) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000200)={0x3, 0xf, 0x2, 0x6, 0xa, 0x1}) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x0, 0xc, &(0x7f0000000800)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000e000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007300000095"], 0x0, 0x2, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0xffffffffffffff0a) bpf$TOKEN_CREATE(0x24, &(0x7f0000000000)={0x0, r1}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x4, 0xc, &(0x7f0000000800)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x9, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x8400, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa) sendmsg$NL802154_CMD_GET_SEC_LEVEL(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="01072bbd7000000000000500000071b7a6bd04c2cc14677ce5e0253734376234be7cd3b6fa3a9bbd29bd9f541380f9d02650b156d6edb4b7eb6e9737873b88e35c0054b2d6f01731e4f221149daadcdc370101569ed7082b31978722022e948fe94796f3e8b4e360267925932bd0a9b3863e798eccd9ff3eb50872cf717e00bbb00000"], 0x14}, 0x1, 0x0, 0x0, 0x20004074}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000580), 0xa, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, 0x0) r4 = syz_io_uring_setup(0x23be, &(0x7f0000000240)={0x0, 0x0, 0x10100, 0xfffbfffd, 0x0, 0x0, r2}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="190000000400000004"], 0x50) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r7, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r7, 0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) io_uring_enter(r4, 0x2d3e, 0x0, 0x0, 0x0, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) write$sndseq(0xffffffffffffffff, &(0x7f0000000040)=[{0x13, 0x0, 0x0, 0xfd, @tick=0x6, {}, {0xfb}, @note={0x8, 0xff, 0x1, 0xcd, 0x8}}], 0x1c) ioctl$vim2m_VIDIOC_EXPBUF(0xffffffffffffffff, 0xc0405668, &(0x7f0000000100)={0x1, 0x401, 0x6}) sendmsg$NFC_CMD_DEACTIVATE_TARGET(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="040029bd7000fddbdf251e000000"], 0x14}, 0x1, 0x0, 0x0, 0x220488c1}, 0xc090) ioctl$FS_IOC_SETFLAGS(r2, 0x40186f40, &(0x7f0000000440)=0x1f) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x9) 543.785104ms ago: executing program 4 (id=1440): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1f, 0x2, &(0x7f0000001c40)=ANY=[@ANYBLOB="85000000a800000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x13, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000"], 0x66) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0c000000040000000400000009"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000024c0), &(0x7f0000001280), 0xffffffff, r1, 0x700, 0x300}, 0x38) 0s ago: executing program 4 (id=1441): r0 = socket$unix(0x1, 0x1, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xb}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x2}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000001300)=@newtfilter={0x40, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, {0x0, 0x5}, {}, {0x7, 0x5}}, [@filter_kind_options=@f_route={{0xa}, {0x10, 0x2, [@TCA_ROUTE4_IIF={0x8, 0x4, r3}, @TCA_ROUTE4_POLICE={0x4}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x10}, 0x0) kernel console output (not intermixed with test programs): T7916] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 543.792186][ T7916] RIP: 0033:0x7fb75958e969 [ 543.792207][ T7916] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 543.792227][ T7916] RSP: 002b:00007fb75a3dc038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 543.792250][ T7916] RAX: ffffffffffffffda RBX: 00007fb7597b6160 RCX: 00007fb75958e969 [ 543.792267][ T7916] RDX: 0000200000000440 RSI: 0000000040186f40 RDI: 0000000000000003 [ 543.792282][ T7916] RBP: 00007fb75a3dc090 R08: 0000000000000000 R09: 0000000000000000 [ 543.792296][ T7916] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 543.792310][ T7916] R13: 0000000000000000 R14: 00007fb7597b6160 R15: 00007fffb74fdb08 [ 543.792345][ T7916] [ 543.792381][ T7916] ERROR: Out of memory at tomoyo_realpath_from_path. [ 544.056142][ T7916] ubi: mtd0 is already attached to ubi31 [ 545.129362][ T5983] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 546.007105][ T5983] usb 3-1: Using ep0 maxpacket: 8 [ 546.016455][ T5983] usb 3-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 546.793894][ T5983] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 546.949489][ T5983] pvrusb2: Hardware description: Terratec Grabster AV400 [ 546.956884][ T5983] pvrusb2: ********** [ 546.960904][ T5983] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 546.971109][ T5983] pvrusb2: Important functionality might not be entirely working. [ 546.979425][ T5983] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 546.992969][ T5983] pvrusb2: ********** [ 547.136090][ T7953] nfs4: Unknown parameter '' [ 547.153588][ T2343] pvrusb2: Invalid write control endpoint [ 547.316917][ T5915] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 547.338738][ T2343] pvrusb2: Invalid write control endpoint [ 547.376466][ T2343] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 547.409587][ T2343] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 547.429532][ T2343] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 547.517354][ T5915] usb 2-1: Using ep0 maxpacket: 32 [ 547.525940][ T2343] pvrusb2: Device being rendered inoperable [ 547.534078][ T7923] pvrusb2: Attempted to execute control transfer when device not ok [ 547.539125][ T5915] usb 2-1: config 0 has an invalid interface number: 226 but max is 0 [ 547.570531][ T2343] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 547.579541][ T2343] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_b) [ 547.587476][ T5916] usb 3-1: USB disconnect, device number 28 [ 547.590280][ T2343] pvrusb2: Attached sub-driver cx25840 [ 547.600330][ T2343] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 547.611412][ T2343] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 547.637382][ T5915] usb 2-1: config 0 has no interface number 0 [ 547.643561][ T5915] usb 2-1: config 0 interface 226 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 547.647556][ T5983] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 547.698463][ T5915] usb 2-1: config 0 interface 226 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 547.734018][ T5915] usb 2-1: New USB device found, idVendor=5543, idProduct=0081, bcdDevice= 0.00 [ 547.743845][ T5915] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 547.754928][ T5915] usb 2-1: config 0 descriptor?? [ 547.892090][ T7965] netlink: 24 bytes leftover after parsing attributes in process `syz.4.534'. [ 547.916680][ T5983] usb 1-1: config 0 has an invalid interface number: 171 but max is 0 [ 547.935302][ T5983] usb 1-1: config 0 has no interface number 0 [ 547.949740][ T5983] usb 1-1: config 0 interface 171 has no altsetting 0 [ 548.189267][ T7967] overlayfs: failed to resolve './file0': -2 [ 548.266918][ T5983] usb 1-1: New USB device found, idVendor=10d6, idProduct=2200, bcdDevice= 1.00 [ 548.302048][ T5983] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 548.424018][ T5983] usb 1-1: Product: syz [ 548.460631][ T5983] usb 1-1: Manufacturer: syz [ 548.465315][ T5983] usb 1-1: SerialNumber: syz [ 548.499406][ T5983] usb 1-1: config 0 descriptor?? [ 548.531344][ T5983] usb-storage 1-1:0.171: USB Mass Storage device detected [ 548.575870][ T30] audit: type=1326 audit(1748689504.814:269): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7973 comm="syz.2.537" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb75958e969 code=0x0 [ 548.609227][ T7949] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 548.629149][ T7949] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 550.799690][ T5915] usbhid 2-1:0.226: can't add hid device: -71 [ 550.878455][ T5915] usbhid 2-1:0.226: probe with driver usbhid failed with error -71 [ 550.937458][ T7983] kvm: pic: non byte write [ 551.021133][ T977] usb 1-1: USB disconnect, device number 17 [ 551.148157][ T5915] usb 2-1: USB disconnect, device number 20 [ 553.726583][ T8005] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 556.395517][ T977] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 556.726991][ T977] usb 5-1: Using ep0 maxpacket: 8 [ 557.378414][ T977] usb 5-1: device descriptor read/all, error -71 [ 558.597560][ T5983] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 559.107190][ T5983] usb 1-1: device descriptor read/64, error -71 [ 559.489932][ T5983] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 559.877700][ T5983] usb 1-1: device descriptor read/64, error -71 [ 559.991913][ T5983] usb usb1-port1: attempt power cycle [ 560.091273][ T5916] usb 5-1: new full-speed USB device number 11 using dummy_hcd [ 560.279987][ T5916] usb 5-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 560.304115][ T5916] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 560.332752][ T5916] usb 5-1: Product: syz [ 560.343126][ T5916] usb 5-1: Manufacturer: syz [ 560.353038][ T5916] usb 5-1: SerialNumber: syz [ 560.366155][ T5916] usb 5-1: config 0 descriptor?? [ 560.376931][ T5983] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 560.418067][ T5983] usb 1-1: device descriptor read/8, error -71 [ 560.573447][ T30] audit: type=1326 audit(1748689516.814:270): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8071 comm="syz.2.571" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb75958e969 code=0x0 [ 560.604451][ T8060] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 560.616383][ T8060] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 560.632379][ T5916] airspy 5-1:0.0: usb_control_msg() failed -71 request 09 [ 560.642174][ T5916] airspy 5-1:0.0: Could not detect board [ 560.650575][ T5916] airspy 5-1:0.0: probe with driver airspy failed with error -71 [ 560.658514][ T5983] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 560.686914][ T5983] usb 1-1: device descriptor read/8, error -71 [ 560.737963][ T5915] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 560.784184][ T5916] usb 5-1: USB disconnect, device number 11 [ 560.836701][ T5983] usb usb1-port1: unable to enumerate USB device [ 560.897959][ T5915] usb 2-1: Using ep0 maxpacket: 8 [ 560.929926][ T5915] usb 2-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 561.011812][ T5915] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 561.258672][ T5915] pvrusb2: Hardware description: Terratec Grabster AV400 [ 561.283451][ T5915] pvrusb2: ********** [ 561.293031][ T5915] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 561.321892][ T5915] pvrusb2: Important functionality might not be entirely working. [ 561.346292][ T5915] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 561.378232][ T5915] pvrusb2: ********** [ 561.561448][ T2343] pvrusb2: Invalid write control endpoint [ 561.717723][ T2343] pvrusb2: Invalid write control endpoint [ 561.751685][ T2343] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 561.776913][ T2343] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 561.793839][ T2343] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 561.819202][ T2343] pvrusb2: Device being rendered inoperable [ 561.825517][ T8067] pvrusb2: Attempted to execute control transfer when device not ok [ 561.835244][ T2343] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 561.844509][ T5983] usb 2-1: USB disconnect, device number 21 [ 561.860090][ T2343] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_b) [ 561.876535][ T2343] pvrusb2: Attached sub-driver cx25840 [ 561.884331][ T2343] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 561.895084][ T2343] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 562.498621][ T8095] netlink: 44 bytes leftover after parsing attributes in process `syz.0.577'. [ 562.668502][ T5915] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 562.858964][ T5915] usb 5-1: config 0 has an invalid interface number: 212 but max is 0 [ 562.893428][ T5915] usb 5-1: config 0 has no interface number 0 [ 562.906965][ T5915] usb 5-1: New USB device found, idVendor=061d, idProduct=c170, bcdDevice=b1.88 [ 562.926385][ T5915] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 562.970035][ T5915] usb 5-1: config 0 descriptor?? [ 563.010382][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.014594][ T5915] quatech2 5-1:0.212: Quatech 2nd gen USB to Serial Driver converter detected [ 563.016917][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.216764][ T8091] bond0: (slave bond_slave_0): Releasing backup interface [ 563.240488][ T8103] netlink: 96 bytes leftover after parsing attributes in process `syz.0.580'. [ 563.341305][ T8104] netlink: 20 bytes leftover after parsing attributes in process `syz.0.580'. [ 563.839196][ T8091] netlink: 20 bytes leftover after parsing attributes in process `syz.4.575'. [ 563.972079][ T5915] usb 5-1: qt2_attach - failed to power on unit: -71 [ 564.027847][ T5915] quatech2 5-1:0.212: probe with driver quatech2 failed with error -71 [ 564.095396][ T5915] usb 5-1: USB disconnect, device number 12 [ 565.328018][ T980] usb 2-1: new full-speed USB device number 22 using dummy_hcd [ 565.507715][ T980] usb 2-1: device descriptor read/64, error -71 [ 565.786997][ T980] usb 2-1: new full-speed USB device number 23 using dummy_hcd [ 565.937124][ T980] usb 2-1: device descriptor read/64, error -71 [ 566.120653][ T980] usb usb2-port1: attempt power cycle [ 566.739444][ T980] usb 2-1: new full-speed USB device number 24 using dummy_hcd [ 566.780914][ T30] audit: type=1326 audit(1748689523.014:271): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8146 comm="syz.2.593" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb75958e969 code=0x0 [ 566.817535][ T980] usb 2-1: device descriptor read/8, error -71 [ 567.106172][ T8156] netlink: 24 bytes leftover after parsing attributes in process `syz.4.594'. [ 567.116692][ T8156] netlink: 24 bytes leftover after parsing attributes in process `syz.4.594'. [ 567.159731][ T980] usb 2-1: new full-speed USB device number 25 using dummy_hcd [ 567.276427][ T980] usb 2-1: device descriptor read/8, error -71 [ 567.288454][ T8161] netlink: 24 bytes leftover after parsing attributes in process `syz.3.595'. [ 567.435084][ T980] usb usb2-port1: unable to enumerate USB device [ 570.227128][ T30] audit: type=1326 audit(1748689526.454:272): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8182 comm="syz.3.603" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f3f9d78e969 code=0x0 [ 572.191301][ T8205] netlink: 28 bytes leftover after parsing attributes in process `syz.0.607'. [ 572.202244][ T8202] netlink: 28 bytes leftover after parsing attributes in process `syz.0.607'. [ 572.222113][ T8205] netlink: 8 bytes leftover after parsing attributes in process `syz.0.607'. [ 572.263037][ T8202] netlink: 8 bytes leftover after parsing attributes in process `syz.0.607'. [ 572.347007][ T30] audit: type=1326 audit(1748689528.584:273): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8207 comm="syz.1.609" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f7cdcd8e969 code=0x0 [ 572.393668][ T5927] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 572.471714][ T8210] 9pnet_fd: Insufficient options for proto=fd [ 572.606925][ T5927] usb 3-1: Using ep0 maxpacket: 8 [ 572.785863][ T5927] usb 3-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 573.010593][ T5927] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 573.201384][ T5927] pvrusb2: Hardware description: Terratec Grabster AV400 [ 573.231456][ T5927] pvrusb2: ********** [ 573.235509][ T5927] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 573.255130][ T5927] pvrusb2: Important functionality might not be entirely working. [ 573.265652][ T5927] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 573.978714][ T5927] pvrusb2: ********** [ 574.003462][ T2343] pvrusb2: Invalid write control endpoint [ 574.227022][ T5861] usb 3-1: USB disconnect, device number 29 [ 574.249060][ T2343] pvrusb2: Invalid write control endpoint [ 574.254855][ T2343] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 574.314658][ T2343] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 574.337484][ T2343] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 574.383662][ T2343] pvrusb2: Device being rendered inoperable [ 574.400480][ T2343] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 574.416980][ T2343] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_b) [ 574.434765][ T2343] pvrusb2: Attached sub-driver cx25840 [ 574.457707][ T2343] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 574.477062][ T2343] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 575.593600][ T8246] netlink: 212408 bytes leftover after parsing attributes in process `syz.1.620'. [ 575.626907][ T8246] netlink: zone id is out of range [ 575.632114][ T8246] netlink: zone id is out of range [ 575.651507][ T8247] netlink: 16 bytes leftover after parsing attributes in process `syz.1.620'. [ 575.660682][ T8246] netlink: zone id is out of range [ 575.660698][ T8246] netlink: zone id is out of range [ 575.660708][ T8246] netlink: zone id is out of range [ 575.660719][ T8246] netlink: zone id is out of range [ 575.660728][ T8246] netlink: zone id is out of range [ 575.660747][ T8246] netlink: zone id is out of range [ 575.660761][ T8246] netlink: get zone limit has 8 unknown bytes [ 575.691670][ T8246] netlink: 16 bytes leftover after parsing attributes in process `syz.1.620'. [ 575.770221][ T8248] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 575.836944][ T5915] usb 3-1: new full-speed USB device number 30 using dummy_hcd [ 575.839088][ T8248] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 575.986105][ T8253] bridge0: port 2(bridge_slave_1) entered disabled state [ 576.007245][ T5915] usb 3-1: device descriptor read/64, error -71 [ 576.119017][ T30] audit: type=1326 audit(1748689532.364:274): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8259 comm="syz.1.625" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f7cdcd8e969 code=0x0 [ 576.277581][ T5915] usb 3-1: new full-speed USB device number 31 using dummy_hcd [ 576.537054][ T5915] usb 3-1: device descriptor read/64, error -71 [ 576.739863][ T5915] usb usb3-port1: attempt power cycle [ 577.117423][ T5915] usb 3-1: new full-speed USB device number 32 using dummy_hcd [ 577.157939][ T5915] usb 3-1: device descriptor read/8, error -71 [ 577.293192][ C1] vcan0: j1939_tp_rxtimer: 0xffff888073c60c00: rx timeout, send abort [ 577.390256][ T8286] ip6erspan0: entered promiscuous mode [ 577.590769][ T5915] usb 3-1: new full-speed USB device number 33 using dummy_hcd [ 577.794363][ C1] vcan0: j1939_tp_rxtimer: 0xffff888073c61000: rx timeout, send abort [ 577.807622][ C1] vcan0: j1939_tp_rxtimer: 0xffff888073c60c00: abort rx timeout. Force session deactivation [ 578.302680][ C1] vcan0: j1939_tp_rxtimer: 0xffff888073c61000: abort rx timeout. Force session deactivation [ 578.328426][ T5915] usb 3-1: device descriptor read/8, error -71 [ 578.357723][ T5861] usb 5-1: new full-speed USB device number 13 using dummy_hcd [ 578.447386][ T5915] usb usb3-port1: unable to enumerate USB device [ 578.594851][ T5861] usb 5-1: config index 0 descriptor too short (expected 62, got 34) [ 578.609342][ T5861] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 578.687020][ T5861] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xD9, changing to 0x89 [ 578.736961][ T5861] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 578.985837][ T5861] usb 5-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=ed.ae [ 579.004049][ T5861] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 579.547309][ T5861] usb 5-1: Product: syz [ 579.551684][ T5861] usb 5-1: Manufacturer: syz [ 579.557631][ T5861] usb 5-1: SerialNumber: syz [ 579.577548][ T5869] Bluetooth: hci2: Received unexpected HCI Event 0x00 [ 579.601197][ T5861] usb 5-1: config 0 descriptor?? [ 579.655779][ T30] audit: type=1326 audit(1748689535.894:275): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8320 comm="syz.0.642" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f2719d8e969 code=0x0 [ 579.676828][ C1] vkms_vblank_simulate: vblank timer overrun [ 579.815342][ T5861] usb 5-1: USB disconnect, device number 13 [ 580.027254][ T8329] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 587.697831][ T8383] bond_slave_0: entered promiscuous mode [ 587.703842][ T8383] bond_slave_1: entered promiscuous mode [ 587.758993][ T8383] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 587.938634][ T8383] bond_slave_0: left promiscuous mode [ 587.944256][ T8383] bond_slave_1: left promiscuous mode [ 588.762183][ T8397] netlink: 4 bytes leftover after parsing attributes in process `syz.0.659'. [ 589.231013][ T8397] 8021q: adding VLAN 0 to HW filter on device team1 [ 589.559428][ T8412] netlink: 356 bytes leftover after parsing attributes in process `syz.2.661'. [ 589.568681][ T8412] openvswitch: netlink: Flow actions attr not present in new flow. [ 590.046947][ T5927] usb 2-1: new full-speed USB device number 26 using dummy_hcd [ 590.267680][ T5927] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 590.313696][ T8420] netlink: 4 bytes leftover after parsing attributes in process `syz.0.666'. [ 590.317121][ T5927] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 590.372574][ T5927] usb 2-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 590.388227][ T30] audit: type=1326 audit(1748689546.624:276): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8421 comm="syz.4.669" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fafd4b8e969 code=0x0 [ 590.411937][ T5927] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 590.444007][ T5927] usb 2-1: config 0 descriptor?? [ 590.490180][ T5927] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 590.491237][ T8426] overlayfs: failed to resolve './file1': -2 [ 590.536361][ T5927] dvb-usb: bulk message failed: -22 (3/0) [ 590.581110][ T5927] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 590.656621][ T5927] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 590.674655][ T8405] dvb-usb: bulk message failed: -22 (2/0) [ 590.752695][ T5927] usb 2-1: media controller created [ 590.794370][ T5927] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 590.842404][ T5927] dvb-usb: bulk message failed: -22 (6/0) [ 590.851896][ T5927] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 590.893098][ T5927] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input9 [ 590.932558][ T5927] dvb-usb: schedule remote query interval to 150 msecs. [ 590.946454][ T5927] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 590.966771][ T5927] usb 2-1: USB disconnect, device number 26 [ 591.000981][ T5927] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 591.526031][ T8437] ieee802154 phy0 wpan0: encryption failed: -22 [ 591.787209][ T8442] netlink: 68 bytes leftover after parsing attributes in process `syz.3.673'. [ 592.053035][ T8444] overlayfs: missing 'workdir' [ 593.227049][ T8442] syz.3.673 (8442) used greatest stack depth: 17096 bytes left [ 593.462367][ T8457] netlink: 4 bytes leftover after parsing attributes in process `syz.2.675'. [ 593.569565][ T8451] netlink: 24 bytes leftover after parsing attributes in process `syz.1.676'. [ 593.606936][ T5927] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 594.619956][ T5927] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 594.632715][ T5927] usb 1-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 594.643500][ T5927] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 594.663822][ T5927] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 594.686269][ T5927] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 594.706365][ T5927] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 594.737237][ T11] usb 2-1: new full-speed USB device number 27 using dummy_hcd [ 594.746898][ T5927] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 594.778125][ T5927] usb 1-1: Product: syz [ 594.782389][ T5927] usb 1-1: Manufacturer: syz [ 594.839000][ T5927] cdc_wdm 1-1:1.0: skipping garbage [ 594.844342][ T5927] cdc_wdm 1-1:1.0: skipping garbage [ 594.863371][ T5927] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 594.869964][ T5927] cdc_wdm 1-1:1.0: Unknown control protocol [ 594.905485][ T8475] mmap: syz.3.683 (8475): VmData 45985792 exceed data ulimit 0. Update limits or use boot option ignore_rlimit_data. [ 594.939154][ T11] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 594.956877][ T11] usb 2-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 594.987580][ T11] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 595.020897][ T11] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 595.044408][ T11] usb 2-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 22 [ 595.061149][ T11] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 595.070764][ T11] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 595.079116][ T11] usb 2-1: SerialNumber: syz [ 595.097165][ C1] cdc_wdm 1-1:1.0: nonzero urb status received: -EPIPE [ 595.421667][ T8488] netlink: 44 bytes leftover after parsing attributes in process `syz.3.687'. [ 595.974152][ T11] usb 2-1: USB disconnect, device number 27 [ 596.994147][ T5861] usb 1-1: USB disconnect, device number 22 [ 597.160477][ T8500] netlink: 'syz.1.692': attribute type 1 has an invalid length. [ 597.182712][ T8500] netlink: 4 bytes leftover after parsing attributes in process `syz.1.692'. [ 597.237126][ T30] audit: type=1804 audit(1748689553.474:277): pid=8504 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.3.690" name="file0" dev="tmpfs" ino=904 res=1 errno=0 [ 597.304741][ T8505] netlink: 8 bytes leftover after parsing attributes in process `syz.1.692'. [ 597.437392][ T5861] usb 1-1: new full-speed USB device number 23 using dummy_hcd [ 598.152108][ T8507] veth0_to_team: entered promiscuous mode [ 598.158710][ T8507] veth0_to_team: entered allmulticast mode [ 598.329052][ T5861] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 598.364365][ T5861] usb 1-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 598.396619][ T5861] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 598.489781][ T5861] usb 1-1: config 0 descriptor?? [ 598.531119][ T8499] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 598.690716][ T8517] netlink: 44 bytes leftover after parsing attributes in process `syz.2.698'. [ 598.707008][ T5916] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 598.882202][ T5916] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 598.891444][ T5916] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 598.901012][ T5916] usb 2-1: Product: syz [ 598.905415][ T5916] usb 2-1: Manufacturer: syz [ 598.927677][ T5916] usb 2-1: SerialNumber: syz [ 599.123375][ T5916] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 599.149580][ T5861] elan 0003:04F3:0755.0002: hidraw0: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.0-1/input0 [ 599.284193][ T5915] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 599.495196][ C1] usb 2-1: ath9k_htc: invalid pkt_len (ff31) [ 599.708346][ T5927] usb 2-1: USB disconnect, device number 28 [ 600.447240][ T5915] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive [ 600.939130][ T5915] ath9k_htc: Failed to initialize the device [ 600.972323][ T5927] usb 2-1: ath9k_htc: USB layer deinitialized [ 600.984023][ T8529] netlink: 12 bytes leftover after parsing attributes in process `syz.3.700'. [ 601.007263][ T5861] usb 1-1: reset full-speed USB device number 23 using dummy_hcd [ 601.887470][ T5916] usb 1-1: USB disconnect, device number 23 [ 602.078877][ T8547] netlink: 12 bytes leftover after parsing attributes in process `syz.4.706'. [ 602.831726][ T8555] netlink: 44 bytes leftover after parsing attributes in process `syz.4.709'. [ 602.928480][ T8560] FAULT_INJECTION: forcing a failure. [ 602.928480][ T8560] name failslab, interval 1, probability 0, space 0, times 0 [ 603.002586][ T8560] CPU: 0 UID: 0 PID: 8560 Comm: syz.0.710 Not tainted 6.15.0-syzkaller-09113-g8477ab143069 #0 PREEMPT(full) [ 603.002616][ T8560] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 603.002630][ T8560] Call Trace: [ 603.002638][ T8560] [ 603.002647][ T8560] dump_stack_lvl+0x189/0x250 [ 603.002684][ T8560] ? __pfx____ratelimit+0x10/0x10 [ 603.002718][ T8560] ? __pfx_dump_stack_lvl+0x10/0x10 [ 603.002749][ T8560] ? __pfx__printk+0x10/0x10 [ 603.002773][ T8560] ? __pfx___might_resched+0x10/0x10 [ 603.002797][ T8560] ? fs_reclaim_acquire+0x7d/0x100 [ 603.002826][ T8560] should_fail_ex+0x414/0x560 [ 603.002854][ T8560] should_failslab+0xa8/0x100 [ 603.002889][ T8560] __kmalloc_noprof+0xcb/0x4f0 [ 603.002929][ T8560] ? sock_kmalloc+0xd6/0x160 [ 603.002963][ T8560] sock_kmalloc+0xd6/0x160 [ 603.002996][ T8560] ____sys_sendmsg+0x1b5/0x830 [ 603.003030][ T8560] ? __pfx_____sys_sendmsg+0x10/0x10 [ 603.003067][ T8560] ? import_iovec+0x74/0xa0 [ 603.003099][ T8560] ___sys_sendmsg+0x21f/0x2a0 [ 603.003130][ T8560] ? __pfx____sys_sendmsg+0x10/0x10 [ 603.003201][ T8560] ? __might_fault+0xb0/0x130 [ 603.003237][ T8560] __sys_sendmmsg+0x227/0x430 [ 603.003271][ T8560] ? __pfx___sys_sendmmsg+0x10/0x10 [ 603.003296][ T8560] ? __mutex_unlock_slowpath+0x1cd/0x700 [ 603.003343][ T8560] ? ksys_write+0x22a/0x250 [ 603.003374][ T8560] ? __pfx_ksys_write+0x10/0x10 [ 603.003401][ T8560] ? rcu_is_watching+0x15/0xb0 [ 603.003431][ T8560] __x64_sys_sendmmsg+0xa0/0xc0 [ 603.003461][ T8560] do_syscall_64+0xfa/0x3b0 [ 603.003481][ T8560] ? lockdep_hardirqs_on+0x9c/0x150 [ 603.003500][ T8560] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 603.003520][ T8560] ? clear_bhb_loop+0x60/0xb0 [ 603.003544][ T8560] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 603.003565][ T8560] RIP: 0033:0x7f2719d8e969 [ 603.003584][ T8560] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 603.003613][ T8560] RSP: 002b:00007f271abf4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 603.003634][ T8560] RAX: ffffffffffffffda RBX: 00007f2719fb5fa0 RCX: 00007f2719d8e969 [ 603.003650][ T8560] RDX: 0000000000000002 RSI: 0000200000000640 RDI: 0000000000000003 [ 603.003662][ T8560] RBP: 00007f271abf4090 R08: 0000000000000000 R09: 0000000000000000 [ 603.003672][ T8560] R10: 00000000000c8000 R11: 0000000000000246 R12: 0000000000000001 [ 603.003684][ T8560] R13: 0000000000000000 R14: 00007f2719fb5fa0 R15: 00007ffcd5129b08 [ 603.003715][ T8560] [ 604.541199][ T5927] IPVS: starting estimator thread 0... [ 604.667625][ T8572] IPVS: using max 27 ests per chain, 64800 per kthread [ 605.641789][ T8593] netlink: 12 bytes leftover after parsing attributes in process `syz.0.719'. [ 606.701811][ T8604] netlink: 'syz.2.721': attribute type 21 has an invalid length. [ 607.027787][ T8604] netlink: 132 bytes leftover after parsing attributes in process `syz.2.721'. [ 610.727110][ T5861] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 610.967186][ T5861] usb 5-1: Using ep0 maxpacket: 32 [ 611.062807][ T5861] usb 5-1: config 1 has an invalid interface number: 185 but max is 3 [ 611.182344][ T5861] usb 5-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 611.368574][ T5861] usb 5-1: config 1 has an invalid interface number: 209 but max is 3 [ 611.508615][ T5861] usb 5-1: config 1 has an invalid interface number: 101 but max is 3 [ 611.635272][ T5861] usb 5-1: config 1 has no interface number 0 [ 611.698099][ T5861] usb 5-1: config 1 has no interface number 1 [ 611.718426][ T5861] usb 5-1: config 1 has no interface number 3 [ 611.740034][ T5861] usb 5-1: config 1 interface 2 altsetting 4 has an invalid descriptor for endpoint zero, skipping [ 611.964784][ T5861] usb 5-1: config 1 interface 2 altsetting 4 endpoint 0x5 has invalid maxpacket 1024, setting to 64 [ 612.151091][ T5861] usb 5-1: config 1 interface 185 altsetting 6 has an invalid descriptor for endpoint zero, skipping [ 612.467761][ T8649] netlink: 8 bytes leftover after parsing attributes in process `syz.1.737'. [ 612.477057][ T8649] netlink: 12 bytes leftover after parsing attributes in process `syz.1.737'. [ 612.504416][ T5861] usb 5-1: config 1 interface 185 altsetting 6 endpoint 0xF has invalid maxpacket 1023, setting to 64 [ 612.606183][ T5861] usb 5-1: config 1 interface 185 altsetting 6 endpoint 0x1 has an invalid bInterval 87, changing to 10 [ 612.634795][ T5861] usb 5-1: config 1 interface 185 altsetting 6 endpoint 0x1 has invalid wMaxPacketSize 0 [ 612.682289][ T5861] usb 5-1: config 1 interface 185 altsetting 6 has an invalid descriptor for endpoint zero, skipping [ 612.724704][ T5861] usb 5-1: config 1 interface 185 altsetting 6 has a duplicate endpoint with address 0xA, skipping [ 612.761090][ T5861] usb 5-1: config 1 interface 185 altsetting 6 endpoint 0x2 has invalid maxpacket 512, setting to 64 [ 612.799135][ T5861] usb 5-1: config 1 interface 209 altsetting 239 has a duplicate endpoint with address 0xF, skipping [ 612.908552][ T5861] usb 5-1: config 1 interface 101 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 612.942299][ T5861] usb 5-1: config 1 interface 101 altsetting 0 has a duplicate endpoint with address 0x5, skipping [ 612.971452][ T5861] usb 5-1: config 1 interface 101 altsetting 0 has a duplicate endpoint with address 0xF, skipping [ 612.996425][ T5861] usb 5-1: config 1 interface 101 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 613.008232][ T5861] usb 5-1: config 1 interface 2 has no altsetting 0 [ 613.036425][ T5861] usb 5-1: config 1 interface 185 has no altsetting 0 [ 613.064221][ T5861] usb 5-1: config 1 interface 209 has no altsetting 0 [ 613.078025][ T5861] usb 5-1: New USB device found, idVendor=1bc7, idProduct=1060, bcdDevice=ab.70 [ 613.087797][ T5861] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 613.105457][ T5861] usb 5-1: Product: syz [ 613.113320][ T5861] usb 5-1: Manufacturer: syz [ 613.122700][ T5861] usb 5-1: SerialNumber: syz [ 613.124355][ T8663] Invalid source name [ 613.132934][ T8663] UBIFS error (pid: 8663): cannot open "ubifs", error -22 [ 613.342296][ T5861] option 5-1:1.185: GSM modem (1-port) converter detected [ 613.358378][ T5916] usb 3-1: new full-speed USB device number 34 using dummy_hcd [ 613.412280][ T5861] option 5-1:1.101: GSM modem (1-port) converter detected [ 613.431632][ T5861] usb 5-1: USB disconnect, device number 14 [ 613.645900][ T8673] trusted_key: encrypted key: instantiation of keys using provided decrypted data is disabled since CONFIG_USER_DECRYPTED_DATA is set to false [ 613.647724][ T5861] option 5-1:1.185: device disconnected [ 613.732579][ T5916] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 613.785124][ T5861] option 5-1:1.101: device disconnected [ 613.792828][ T5916] usb 3-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 613.909075][ T5916] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 614.223751][ T5916] usb 3-1: config 0 descriptor?? [ 614.265474][ T8661] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 614.590760][ T8684] netlink: 8 bytes leftover after parsing attributes in process `syz.4.749'. [ 614.614605][ T8684] netlink: 12 bytes leftover after parsing attributes in process `syz.4.749'. [ 614.718844][ T5916] elan 0003:04F3:0755.0003: hidraw0: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.2-1/input0 [ 614.905643][ T5916] usb 3-1: USB disconnect, device number 34 [ 614.952652][ T8689] fido_id[8689]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/3-1/report_descriptor': No such file or directory [ 615.350388][ T8699] overlayfs: failed to clone upperpath [ 616.774839][ T8717] warning: `syz.3.758' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 616.894978][ T8721] sctp: [Deprecated]: syz.3.758 (pid 8721) Use of struct sctp_assoc_value in delayed_ack socket option. [ 616.894978][ T8721] Use struct sctp_sack_info instead [ 617.047694][ T8724] netlink: 8 bytes leftover after parsing attributes in process `syz.0.760'. [ 617.321883][ T8720] netlink: 44 bytes leftover after parsing attributes in process `syz.1.753'. [ 617.991536][ T5983] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 618.022952][ T8743] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 618.029191][ T8743] syzkaller1: Refused to change device type [ 618.155689][ T5927] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 618.165632][ T5983] usb 1-1: device descriptor read/64, error -71 [ 618.495430][ T5927] usb 3-1: Using ep0 maxpacket: 8 [ 618.583819][ T5927] usb 3-1: New USB device found, idVendor=10c4, idProduct=8244, bcdDevice=dc.00 [ 618.593050][ T5927] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 618.607048][ T5983] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 618.810326][ T5927] usb 3-1: Product: syz [ 618.838131][ T5927] usb 3-1: Manufacturer: syz [ 618.852934][ T5927] usb 3-1: SerialNumber: syz [ 618.858602][ T5983] usb 1-1: device descriptor read/64, error -71 [ 618.884256][ T5927] usb 3-1: config 0 descriptor?? [ 618.905015][ T5927] radio-usb-si4713 3-1:0.0: Si4713 development board discovered: (10C4:8244) [ 619.131978][ T8756] FAULT_INJECTION: forcing a failure. [ 619.131978][ T8756] name failslab, interval 1, probability 0, space 0, times 0 [ 619.144687][ T8756] CPU: 0 UID: 0 PID: 8756 Comm: syz.1.769 Not tainted 6.15.0-syzkaller-09113-g8477ab143069 #0 PREEMPT(full) [ 619.144708][ T8756] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 619.144717][ T8756] Call Trace: [ 619.144724][ T8756] [ 619.144731][ T8756] dump_stack_lvl+0x189/0x250 [ 619.144759][ T8756] ? __pfx____ratelimit+0x10/0x10 [ 619.144788][ T8756] ? __pfx_dump_stack_lvl+0x10/0x10 [ 619.144812][ T8756] ? __pfx__printk+0x10/0x10 [ 619.144829][ T8756] ? __pfx___might_resched+0x10/0x10 [ 619.144848][ T8756] ? fs_reclaim_acquire+0x7d/0x100 [ 619.144869][ T8756] should_fail_ex+0x414/0x560 [ 619.144889][ T8756] should_failslab+0xa8/0x100 [ 619.144915][ T8756] __kmalloc_noprof+0xcb/0x4f0 [ 619.144938][ T8756] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 619.144955][ T8756] ? sock_kmalloc+0xd6/0x160 [ 619.144981][ T8756] sock_kmalloc+0xd6/0x160 [ 619.145006][ T8756] hash_recvmsg+0x1d4/0x840 [ 619.145029][ T8756] ? __pfx_hash_recvmsg+0x10/0x10 [ 619.145046][ T8756] sock_recvmsg_nosec+0x183/0x1c0 [ 619.145065][ T8756] ____sys_recvmsg+0x3aa/0x460 [ 619.145095][ T8756] ? __pfx_____sys_recvmsg+0x10/0x10 [ 619.145130][ T8756] ? import_iovec+0x74/0xa0 [ 619.145155][ T8756] ___sys_recvmsg+0x1b5/0x510 [ 619.145182][ T8756] ? __pfx____sys_recvmsg+0x10/0x10 [ 619.145230][ T8756] ? __might_fault+0xb0/0x130 [ 619.145257][ T8756] do_recvmmsg+0x307/0x770 [ 619.145286][ T8756] ? __pfx_do_recvmmsg+0x10/0x10 [ 619.145319][ T8756] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 619.145350][ T8756] __x64_sys_recvmmsg+0x190/0x240 [ 619.145375][ T8756] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 619.145402][ T8756] ? do_syscall_64+0xbe/0x3b0 [ 619.145420][ T8756] do_syscall_64+0xfa/0x3b0 [ 619.145437][ T8756] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 619.145452][ T8756] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 619.145473][ T8756] ? clear_bhb_loop+0x60/0xb0 [ 619.145492][ T8756] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 619.145507][ T8756] RIP: 0033:0x7f7cdcd8e969 [ 619.145533][ T8756] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 619.145547][ T8756] RSP: 002b:00007f7cddb8d038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 619.145563][ T8756] RAX: ffffffffffffffda RBX: 00007f7cdcfb5fa0 RCX: 00007f7cdcd8e969 [ 619.145575][ T8756] RDX: 0000000000000600 RSI: 0000200000003700 RDI: 0000000000000006 [ 619.145584][ T8756] RBP: 00007f7cddb8d090 R08: 0000000000000000 R09: 0000000000000000 [ 619.145594][ T8756] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 619.145603][ T8756] R13: 0000000000000000 R14: 00007f7cdcfb5fa0 R15: 00007ffe4006df18 [ 619.145627][ T8756] [ 619.410441][ C0] vkms_vblank_simulate: vblank timer overrun [ 619.435120][ T5983] usb usb1-port1: attempt power cycle [ 619.739752][ T5927] radio-usb-si4713 3-1:0.0: probe with driver radio-usb-si4713 failed with error -71 [ 619.756512][ T5927] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 619.776731][ T5927] usb 3-1: USB disconnect, device number 35 [ 619.806913][ T5983] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 619.837763][ T5983] usb 1-1: device descriptor read/8, error -71 [ 620.324516][ T5983] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 621.526953][ T5983] usb 1-1: device descriptor read/8, error -71 [ 621.687794][ T5983] usb usb1-port1: unable to enumerate USB device [ 622.141161][ T8785] netlink: 44 bytes leftover after parsing attributes in process `syz.2.777'. [ 622.334322][ T8790] kvm: pic: non byte write [ 622.876929][ T980] usb 5-1: new full-speed USB device number 15 using dummy_hcd [ 623.052296][ T980] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 623.092765][ T980] usb 5-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 623.154574][ T980] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 623.200798][ T980] usb 5-1: config 0 descriptor?? [ 623.212103][ T8794] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 623.512880][ T8803] dvmrp8: entered allmulticast mode [ 623.550196][ T8803] loop8: detected capacity change from 0 to 1 [ 623.583265][ T8803] Dev loop8: unable to read RDB block 1 [ 623.616931][ T8803] loop8: unable to read partition table [ 623.658396][ T8803] loop8: partition table beyond EOD, truncated [ 623.701347][ T980] elan 0003:04F3:0755.0004: hidraw0: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.4-1/input0 [ 623.750078][ T8803] loop_reread_partitions: partition scan of loop8 (被x^>~) failed (rc=-5) [ 623.842114][ T8803] dvmrp8: left allmulticast mode [ 623.920378][ T5983] usb 5-1: USB disconnect, device number 15 [ 623.976196][ T8808] fido_id[8808]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 624.475673][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.482184][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 625.567079][ T5865] Bluetooth: hci4: command 0x0405 tx timeout [ 627.246994][ T980] usb 3-1: new full-speed USB device number 36 using dummy_hcd [ 628.985582][ T980] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 629.117300][ T980] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 629.156983][ T980] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 629.190274][ T980] usb 3-1: config 0 descriptor?? [ 629.458262][ T8833] ======================================================= [ 629.458262][ T8833] WARNING: The mand mount option has been deprecated and [ 629.458262][ T8833] and is ignored by this kernel. Remove the mand [ 629.458262][ T8833] option from the mount to silence this warning. [ 629.458262][ T8833] ======================================================= [ 629.493935][ T8833] overlayfs: missing 'lowerdir' [ 630.699896][ T8840] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 630.952415][ T8843] netlink: 44 bytes leftover after parsing attributes in process `syz.3.793'. [ 631.705917][ T980] ath6kl: Failed to read usb control message: -71 [ 631.715049][ T980] ath6kl: Unable to read the bmi data from the device: -71 [ 631.731571][ T980] ath6kl: Unable to recv target info: -71 [ 631.788471][ T980] ath6kl: Failed to init ath6kl core: -71 [ 631.823179][ T980] ath6kl_usb 3-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 631.868946][ T980] usb 3-1: USB disconnect, device number 36 [ 637.309609][ T8888] x_tables: duplicate underflow at hook 3 [ 637.672019][ T8896] netlink: 356 bytes leftover after parsing attributes in process `syz.4.804'. [ 637.681170][ T8896] openvswitch: netlink: Flow actions attr not present in new flow. [ 637.977375][ T5861] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 638.437039][ T5861] usb 1-1: device descriptor read/64, error -71 [ 639.016906][ T8916] netlink: 'syz.2.808': attribute type 10 has an invalid length. [ 639.528723][ T5861] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 639.569055][ T8916] 8021q: adding VLAN 0 to HW filter on device team0 [ 639.578170][ T8916] team_slave_0: entered promiscuous mode [ 639.584192][ T8916] team_slave_1: entered promiscuous mode [ 639.590793][ T8916] bond0: (slave team0): Enslaving as an active interface with an up link [ 639.746599][ T8891] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 639.753128][ T5861] usb 1-1: device descriptor read/64, error -71 [ 639.771549][ T8891] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 639.914232][ T5861] usb usb1-port1: attempt power cycle [ 640.235684][ T8891] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 640.379131][ T5861] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 640.447013][ T8891] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 640.469175][ T5861] usb 1-1: device descriptor read/8, error -71 [ 640.497114][ T8924] 9pnet_virtio: no channels available for device 127.0.0.1 [ 640.511125][ T8891] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 640.536994][ T8891] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 640.643974][ T8891] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 641.807651][ T5865] Bluetooth: hci0: command 0x0406 tx timeout [ 641.868389][ T8937] netlink: 52 bytes leftover after parsing attributes in process `syz.1.817'. [ 641.874884][ T5916] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 642.076892][ T5916] usb 3-1: Using ep0 maxpacket: 8 [ 642.123910][ T5916] usb 3-1: New USB device found, idVendor=05ac, idProduct=0247, bcdDevice=b0.23 [ 642.147341][ T5916] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 642.194398][ T5916] usb 3-1: config 0 descriptor?? [ 642.287829][ T5865] Bluetooth: hci2: command 0x0406 tx timeout [ 642.348283][ T5916] input: bcm5974 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input10 [ 642.376474][ T8951] (unnamed net_device) (uninitialized): option lacp_rate: mode dependency failed, not supported in mode balance-rr(0) [ 642.527059][ T5865] Bluetooth: hci4: command 0x0405 tx timeout [ 642.535226][ T5916] usb 3-1: USB disconnect, device number 37 [ 642.537590][ T5172] bcm5974 3-1:0.0: could not read from device [ 642.699293][ T8949] ieee802154 phy0 wpan0: encryption failed: -22 [ 643.513615][ T6881] udevd[6881]: Error opening device "/dev/input/event4": No such file or directory [ 643.605568][ T6881] udevd[6881]: Unable to EVIOCGABS device "/dev/input/event4" [ 643.650746][ T6881] udevd[6881]: Unable to EVIOCGABS device "/dev/input/event4" [ 643.704990][ T6881] udevd[6881]: Unable to EVIOCGABS device "/dev/input/event4" [ 643.744467][ T6881] udevd[6881]: Unable to EVIOCGABS device "/dev/input/event4" [ 643.891222][ T5865] Bluetooth: hci0: command 0x0406 tx timeout [ 644.367009][ T5865] Bluetooth: hci2: command 0x0406 tx timeout [ 644.607184][ T5865] Bluetooth: hci4: command 0x0405 tx timeout [ 646.567960][ T8988] dummy0: entered promiscuous mode [ 646.602802][ T8988] dummy0: entered allmulticast mode [ 646.804025][ T5865] Bluetooth: hci4: command 0x0405 tx timeout [ 646.930686][ T8992] netlink: 356 bytes leftover after parsing attributes in process `syz.4.832'. [ 646.939897][ T8992] openvswitch: netlink: Flow actions attr not present in new flow. [ 648.276991][ T5916] usb 3-1: new full-speed USB device number 38 using dummy_hcd [ 648.283069][ T9000] kvm: pic: non byte write [ 648.295835][ T9005] trusted_key: encrypted_key: insufficient parameters specified [ 650.786339][ T5916] usb 3-1: device descriptor read/all, error -71 [ 655.273484][ T9073] QAT: Invalid ioctl 21531 [ 656.176945][ T5915] usb 5-1: new full-speed USB device number 16 using dummy_hcd [ 657.287910][ T9101] netlink: 356 bytes leftover after parsing attributes in process `syz.1.863'. [ 657.297109][ T9101] openvswitch: netlink: Flow actions attr not present in new flow. [ 658.266834][ T9105] netlink: 580 bytes leftover after parsing attributes in process `syz.4.865'. [ 659.964268][ T9132] netlink: 356 bytes leftover after parsing attributes in process `syz.4.871'. [ 659.973435][ T9132] openvswitch: netlink: Flow actions attr not present in new flow. [ 662.864088][ T9142] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 662.871610][ T9142] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 662.888810][ T9142] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 663.377174][ T5983] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 663.598824][ T5983] usb 1-1: config index 0 descriptor too short (expected 23569, got 27) [ 663.611158][ T5983] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 663.625448][ T5983] usb 1-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 663.673401][ T9173] kAFS: No cell specified [ 663.694916][ T5983] usb 1-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 663.741560][ T5983] usb 1-1: Manufacturer: syz [ 663.796337][ T5983] usb 1-1: config 0 descriptor?? [ 663.977220][ T5865] Bluetooth: hci0: command 0x0406 tx timeout [ 664.695606][ T9179] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 664.722992][ T9179] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 664.837961][ T5983] rc_core: IR keymap rc-hauppauge not found [ 664.880926][ T9181] kvm: pic: non byte write [ 664.895805][ T5983] Registered IR keymap rc-empty [ 664.912185][ T5983] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 664.927313][ T5865] Bluetooth: hci4: command 0x0405 tx timeout [ 664.933570][ T5869] Bluetooth: hci2: command 0x0406 tx timeout [ 664.968251][ T5983] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input11 [ 665.078937][ C0] igorplugusb 1-1:0.0: receive overflow invalid: 170 [ 665.356063][ T5916] usb 1-1: USB disconnect, device number 32 [ 665.520610][ T9194] TCP: TCP_TX_DELAY enabled [ 665.624773][ T9196] netlink: 16 bytes leftover after parsing attributes in process `syz.2.891'. [ 665.643952][ T9196] SET target dimension over the limit! [ 665.962944][ T9206] netlink: 44 bytes leftover after parsing attributes in process `syz.2.893'. [ 666.137038][ T5916] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 666.420469][ T5916] usb 5-1: config index 0 descriptor too short (expected 23569, got 27) [ 666.509098][ T5916] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 666.567947][ T5916] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 0 [ 666.585391][ T5916] usb 5-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 666.609480][ T5916] usb 5-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 666.618338][ T5916] usb 5-1: Manufacturer: syz [ 666.636144][ T5916] usb 5-1: config 0 descriptor?? [ 666.646383][ T5916] igorplugusb 5-1:0.0: endpoint incorrect [ 666.968667][ T9212] ieee802154 phy0 wpan0: encryption failed: -22 [ 667.285566][ T30] audit: type=1326 audit(1748689623.514:278): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9213 comm="syz.1.897" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f7cdcd8e969 code=0x0 [ 667.500675][ T9221] netlink: 256 bytes leftover after parsing attributes in process `syz.1.897'. [ 667.527235][ T9221] FAULT_INJECTION: forcing a failure. [ 667.527235][ T9221] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 667.540726][ T9221] CPU: 0 UID: 0 PID: 9221 Comm: syz.1.897 Not tainted 6.15.0-syzkaller-09113-g8477ab143069 #0 PREEMPT(full) [ 667.540757][ T9221] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 667.540770][ T9221] Call Trace: [ 667.540779][ T9221] [ 667.540787][ T9221] dump_stack_lvl+0x189/0x250 [ 667.540824][ T9221] ? __pfx____ratelimit+0x10/0x10 [ 667.540857][ T9221] ? __pfx_dump_stack_lvl+0x10/0x10 [ 667.540886][ T9221] ? __pfx__printk+0x10/0x10 [ 667.540908][ T9221] ? __might_fault+0xb0/0x130 [ 667.540951][ T9221] should_fail_ex+0x414/0x560 [ 667.540978][ T9221] _copy_from_iter+0x1db/0x16f0 [ 667.541008][ T9221] ? rcu_is_watching+0x15/0xb0 [ 667.541033][ T9221] ? kmem_cache_alloc_node_noprof+0x217/0x3c0 [ 667.541065][ T9221] ? __pfx__copy_from_iter+0x10/0x10 [ 667.541093][ T9221] ? __build_skb_around+0x257/0x3e0 [ 667.541123][ T9221] ? netlink_sendmsg+0x642/0xb30 [ 667.541158][ T9221] ? skb_put+0x11b/0x210 [ 667.541188][ T9221] netlink_sendmsg+0x6b2/0xb30 [ 667.541224][ T9221] ? __pfx_netlink_sendmsg+0x10/0x10 [ 667.541278][ T9221] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 667.541299][ T9221] ? __pfx_netlink_sendmsg+0x10/0x10 [ 667.541327][ T9221] __sock_sendmsg+0x21c/0x270 [ 667.541352][ T9221] sock_write_iter+0x258/0x330 [ 667.541387][ T9221] ? __pfx_sock_write_iter+0x10/0x10 [ 667.541431][ T9221] ? rcu_read_unlock_special+0x3fe/0x4c0 [ 667.541475][ T9221] do_iter_readv_writev+0x518/0x6e0 [ 667.541510][ T9221] ? __pfx_do_iter_readv_writev+0x10/0x10 [ 667.541547][ T9221] ? bpf_lsm_file_permission+0x9/0x20 [ 667.541569][ T9221] ? security_file_permission+0x75/0x290 [ 667.541594][ T9221] ? rw_verify_area+0x258/0x650 [ 667.541624][ T9221] vfs_writev+0x31a/0x960 [ 667.541649][ T9221] ? __lock_acquire+0xab9/0xd20 [ 667.541673][ T9221] ? __pfx_vfs_writev+0x10/0x10 [ 667.541709][ T9221] ? __fget_files+0x2a/0x420 [ 667.541734][ T9221] ? __fget_files+0x3a0/0x420 [ 667.541752][ T9221] ? __fget_files+0x2a/0x420 [ 667.541782][ T9221] do_writev+0x14d/0x2d0 [ 667.541807][ T9221] ? __pfx_do_writev+0x10/0x10 [ 667.541835][ T9221] ? do_syscall_64+0xbe/0x3b0 [ 667.541860][ T9221] do_syscall_64+0xfa/0x3b0 [ 667.541882][ T9221] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 667.541902][ T9221] ? asm_sysvec_call_function_single+0x1a/0x20 [ 667.541923][ T9221] ? clear_bhb_loop+0x60/0xb0 [ 667.541947][ T9221] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 667.541966][ T9221] RIP: 0033:0x7f7cdcd8e969 [ 667.541986][ T9221] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 667.542004][ T9221] RSP: 002b:00007f7cddb4b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 667.542026][ T9221] RAX: ffffffffffffffda RBX: 00007f7cdcfb6160 RCX: 00007f7cdcd8e969 [ 667.542040][ T9221] RDX: 0000000000000001 RSI: 00002000000003c0 RDI: 0000000000000009 [ 667.542053][ T9221] RBP: 00007f7cddb4b090 R08: 0000000000000000 R09: 0000000000000000 [ 667.542066][ T9221] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 667.542078][ T9221] R13: 0000000000000000 R14: 00007f7cdcfb6160 R15: 00007ffe4006df18 [ 667.542109][ T9221] [ 667.850293][ C0] vkms_vblank_simulate: vblank timer overrun [ 668.545480][ T30] audit: type=1326 audit(1748689624.784:279): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9225 comm="syz.0.900" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f2719d8e969 code=0x0 [ 668.611987][ T5915] usb 5-1: USB disconnect, device number 17 [ 668.717069][ T5916] usb 3-1: new full-speed USB device number 40 using dummy_hcd [ 668.936162][ T5916] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 668.946813][ T9233] netlink: 256 bytes leftover after parsing attributes in process `syz.0.900'. [ 669.016242][ T5916] usb 3-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 669.029305][ T9233] netlink: 'syz.0.900': attribute type 4 has an invalid length. [ 669.036299][ T5916] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 669.047212][ T9237] kvm: pic: non byte write [ 669.282750][ T5916] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 669.306867][ T9238] netlink: 'syz.0.900': attribute type 4 has an invalid length. [ 669.310439][ T5916] usb 3-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 22 [ 669.362289][ T5916] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 669.382122][ T5916] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 669.392455][ T5916] usb 3-1: SerialNumber: syz [ 669.632102][ T9220] program syz.2.899 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 669.648459][ T977] usb 3-1: USB disconnect, device number 40 [ 669.902759][ T9254] netlink: 356 bytes leftover after parsing attributes in process `syz.3.907'. [ 669.912008][ T9254] openvswitch: netlink: Flow actions attr not present in new flow. [ 670.620448][ T9256] netlink: 44 bytes leftover after parsing attributes in process `syz.1.909'. [ 671.229006][ T9273] FAULT_INJECTION: forcing a failure. [ 671.229006][ T9273] name failslab, interval 1, probability 0, space 0, times 0 [ 671.241829][ T9273] CPU: 1 UID: 0 PID: 9273 Comm: syz.4.915 Not tainted 6.15.0-syzkaller-09113-g8477ab143069 #0 PREEMPT(full) [ 671.241848][ T9273] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 671.241858][ T9273] Call Trace: [ 671.241864][ T9273] [ 671.241870][ T9273] dump_stack_lvl+0x189/0x250 [ 671.241895][ T9273] ? __pfx____ratelimit+0x10/0x10 [ 671.241920][ T9273] ? __pfx_dump_stack_lvl+0x10/0x10 [ 671.241942][ T9273] ? __pfx__printk+0x10/0x10 [ 671.241954][ T9273] ? ipt_do_table+0x2a3/0x1630 [ 671.241978][ T9273] ? iptable_mangle_hook+0x189/0x4c0 [ 671.242001][ T9273] should_fail_ex+0x414/0x560 [ 671.242020][ T9273] should_failslab+0xa8/0x100 [ 671.242046][ T9273] kmem_cache_alloc_noprof+0x73/0x3c0 [ 671.242068][ T9273] ? dst_alloc+0x105/0x170 [ 671.242094][ T9273] dst_alloc+0x105/0x170 [ 671.242119][ T9273] rt_dst_clone+0x52/0x680 [ 671.242144][ T9273] ip_mc_finish_output+0x10a/0x5f0 [ 671.242171][ T9273] ip_mc_output+0x3a3/0x590 [ 671.242198][ T9273] ip_send_skb+0x74/0x100 [ 671.242213][ T9273] udp_send_skb+0xaf1/0x14c0 [ 671.242242][ T9273] udp_sendmsg+0x195b/0x2300 [ 671.242269][ T9273] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 671.242284][ T9273] ? __pfx_udp_sendmsg+0x10/0x10 [ 671.242303][ T9273] ? __lock_acquire+0xab9/0xd20 [ 671.242318][ T9273] ? smack_socket_sendmsg+0x1a7/0x520 [ 671.242340][ T9273] ? __lock_acquire+0xab9/0xd20 [ 671.242363][ T9273] ? __lock_acquire+0xab9/0xd20 [ 671.242383][ T9273] ? sock_rps_record_flow+0x19/0x410 [ 671.242400][ T9273] ? inet_sendmsg+0x29c/0x370 [ 671.242415][ T9273] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 671.242432][ T9273] __sock_sendmsg+0x19c/0x270 [ 671.242449][ T9273] ____sys_sendmsg+0x52d/0x830 [ 671.242473][ T9273] ? __pfx_____sys_sendmsg+0x10/0x10 [ 671.242501][ T9273] ? import_iovec+0x74/0xa0 [ 671.242524][ T9273] ___sys_sendmsg+0x21f/0x2a0 [ 671.242547][ T9273] ? __pfx____sys_sendmsg+0x10/0x10 [ 671.242593][ T9273] ? __fget_files+0x2a/0x420 [ 671.242606][ T9273] ? __fget_files+0x3a0/0x420 [ 671.242628][ T9273] __sys_sendmmsg+0x227/0x430 [ 671.242671][ T9273] ? __pfx___sys_sendmmsg+0x10/0x10 [ 671.242691][ T9273] ? __mutex_unlock_slowpath+0x1cd/0x700 [ 671.242726][ T9273] ? ksys_write+0x22a/0x250 [ 671.242750][ T9273] ? __pfx_ksys_write+0x10/0x10 [ 671.242770][ T9273] ? rcu_is_watching+0x15/0xb0 [ 671.242799][ T9273] __x64_sys_sendmmsg+0xa0/0xc0 [ 671.242823][ T9273] do_syscall_64+0xfa/0x3b0 [ 671.242837][ T9273] ? lockdep_hardirqs_on+0x9c/0x150 [ 671.242851][ T9273] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 671.242866][ T9273] ? clear_bhb_loop+0x60/0xb0 [ 671.242885][ T9273] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 671.242900][ T9273] RIP: 0033:0x7fafd4b8e969 [ 671.242914][ T9273] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 671.242927][ T9273] RSP: 002b:00007fafd5a3b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 671.242943][ T9273] RAX: ffffffffffffffda RBX: 00007fafd4db5fa0 RCX: 00007fafd4b8e969 [ 671.242955][ T9273] RDX: 0000000000000300 RSI: 0000200000004d00 RDI: 0000000000000005 [ 671.242965][ T9273] RBP: 00007fafd5a3b090 R08: 0000000000000000 R09: 0000000000000000 [ 671.242974][ T9273] R10: 0000000000000f00 R11: 0000000000000246 R12: 0000000000000001 [ 671.242983][ T9273] R13: 0000000000000000 R14: 00007fafd4db5fa0 R15: 00007ffc8fb26ef8 [ 671.243006][ T9273] [ 672.083804][ T9281] tipc: Enabled bearer , priority 10 [ 672.512835][ T9289] netlink: 356 bytes leftover after parsing attributes in process `syz.1.920'. [ 672.521985][ T9289] openvswitch: netlink: Flow actions attr not present in new flow. [ 673.437180][ T9294] netlink: 44 bytes leftover after parsing attributes in process `syz.3.924'. [ 675.219364][ T9315] overlayfs: failed to resolve './file1': -2 [ 676.213040][ T9323] netlink: 356 bytes leftover after parsing attributes in process `syz.4.933'. [ 676.222165][ T9323] openvswitch: netlink: Flow actions attr not present in new flow. [ 677.243600][ T9334] netlink: 44 bytes leftover after parsing attributes in process `syz.3.937'. [ 682.151253][ T9365] vxcan0: tx address claim with different name [ 682.701999][ T9371] netlink: 356 bytes leftover after parsing attributes in process `syz.3.949'. [ 682.711282][ T9371] openvswitch: netlink: Flow actions attr not present in new flow. [ 683.145683][ T9376] netlink: 44 bytes leftover after parsing attributes in process `syz.2.951'. [ 684.455415][ T9382] kvm: pic: non byte write [ 684.954673][ T9396] overlayfs: failed to resolve './file1': -2 [ 685.893817][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.900498][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 686.903813][ T9414] netlink: 8 bytes leftover after parsing attributes in process `syz.2.965'. [ 688.699187][ T9434] overlayfs: missing 'lowerdir' [ 690.017327][ T5869] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 690.026413][ T5869] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 690.035208][ T5869] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 690.044605][ T5869] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 690.071148][ T5869] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 690.458157][ T9449] overlayfs: missing 'lowerdir' [ 691.543471][ T9462] netlink: 356 bytes leftover after parsing attributes in process `syz.1.976'. [ 691.552977][ T9462] openvswitch: netlink: Flow actions attr not present in new flow. [ 692.207840][ T5865] Bluetooth: hci5: command tx timeout [ 693.625476][ T6755] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 693.729703][ T9438] chnl_net:caif_netlink_parms(): no params data found [ 693.886008][ T9486] overlayfs: failed to resolve './file1': -2 [ 693.925897][ T9489] netlink: 4 bytes leftover after parsing attributes in process `syz.3.986'. [ 693.953886][ T6755] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 694.002439][ T9485] tipc: Started in network mode [ 694.008588][ T9485] tipc: Node identity , cluster identity 4711 [ 694.157274][ T980] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 694.215798][ T6755] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 694.259622][ T9491] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 694.267229][ T9491] IPv6: NLM_F_CREATE should be set when creating new route [ 694.324630][ T9491] lo: entered allmulticast mode [ 694.329052][ T980] usb 5-1: New USB device found, idVendor=0c45, idProduct=62a0, bcdDevice=a8.22 [ 694.342185][ T9491] tunl0: entered allmulticast mode [ 694.358126][ T980] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 694.364681][ T9491] gre0: entered allmulticast mode [ 694.380569][ T9491] gretap0: entered allmulticast mode [ 694.391943][ T980] usb 5-1: config 0 descriptor?? [ 694.408099][ T9491] erspan0: entered allmulticast mode [ 694.417898][ T9491] ip_vti0: entered allmulticast mode [ 694.432989][ T980] gspca_main: gspca_sn9c20x-2.14.0 probing 0c45:62a0 [ 694.439186][ T9491] ip6_vti0: entered allmulticast mode [ 694.446930][ T5865] Bluetooth: hci5: command tx timeout [ 694.460614][ T9491] sit0: entered allmulticast mode [ 694.482438][ T9491] ip6tnl0: entered allmulticast mode [ 694.491482][ T9491] ip6gre0: entered allmulticast mode [ 694.502232][ T9491] ip6gretap0: entered allmulticast mode [ 694.522550][ T9491] bridge0: port 2(bridge_slave_1) entered disabled state [ 694.530728][ T9491] bridge0: port 1(bridge_slave_0) entered disabled state [ 694.558211][ T9491] bridge0: entered allmulticast mode [ 694.580031][ T9491] vcan0: entered allmulticast mode [ 694.599950][ T9491] bond0: entered allmulticast mode [ 694.611503][ T9491] bond_slave_0: entered allmulticast mode [ 694.612664][ T5869] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 694.617477][ T9491] bond_slave_1: entered allmulticast mode [ 694.625730][ T9491] team0: entered allmulticast mode [ 694.653908][ T5869] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 694.655924][ T9491] team_slave_0: entered allmulticast mode [ 694.678333][ T5869] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 694.703167][ T5869] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 694.706895][ T9491] team_slave_1: entered allmulticast mode [ 694.717129][ T5869] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 694.778555][ T9491] dummy0: left promiscuous mode [ 694.799802][ T9491] nlmon0: entered allmulticast mode [ 694.810450][ T980] gspca_sn9c20x: Write register 1000 failed -71 [ 694.820578][ T980] gspca_sn9c20x: Device initialization failed [ 694.827479][ T980] gspca_sn9c20x 5-1:0.0: probe with driver gspca_sn9c20x failed with error -71 [ 694.829501][ T9491] caif0: entered allmulticast mode [ 694.841394][ T980] usb 5-1: USB disconnect, device number 18 [ 694.902623][ T9491] batadv0: entered allmulticast mode [ 694.936517][ T9491] vxcan0: entered allmulticast mode [ 694.961830][ T9491] vxcan1: entered allmulticast mode [ 694.970398][ T9491] veth0: entered allmulticast mode [ 694.984955][ T9491] veth1: entered allmulticast mode [ 694.999612][ T9491] wg0: entered allmulticast mode [ 695.013856][ T9491] wg1: entered allmulticast mode [ 695.032097][ T9491] wg2: entered allmulticast mode [ 695.053411][ T9491] veth0_to_bridge: entered allmulticast mode [ 695.085228][ T9491] veth1_to_bridge: entered allmulticast mode [ 695.113301][ T9491] veth0_to_bond: entered allmulticast mode [ 695.125980][ T9491] veth1_to_bond: entered allmulticast mode [ 695.138373][ T9491] veth0_to_team: entered allmulticast mode [ 695.154255][ T9491] veth1_to_team: entered allmulticast mode [ 695.168306][ T9491] veth0_to_batadv: entered allmulticast mode [ 695.178482][ T9491] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 695.187954][ T9491] batadv_slave_0: entered allmulticast mode [ 695.198390][ T9491] veth1_to_batadv: entered allmulticast mode [ 695.209263][ T9491] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 695.218392][ T9491] batadv_slave_1: entered allmulticast mode [ 695.230466][ T9491] xfrm0: entered allmulticast mode [ 695.242263][ T9491] veth0_to_hsr: entered allmulticast mode [ 695.252923][ T9491] hsr_slave_0: entered allmulticast mode [ 695.271107][ T9491] veth1_to_hsr: entered allmulticast mode [ 695.283047][ T9491] hsr_slave_1: entered allmulticast mode [ 695.299511][ T9491] hsr0: entered allmulticast mode [ 695.312361][ T9491] veth1_virt_wifi: entered allmulticast mode [ 695.324887][ T9491] veth0_virt_wifi: entered allmulticast mode [ 695.344127][ T9491] net veth1_virt_wifi virt_wifi0: entered allmulticast mode [ 695.355232][ T9491] veth1_vlan: entered allmulticast mode [ 695.384140][ T9491] veth0_vlan: entered allmulticast mode [ 695.421675][ T9491] vlan0: entered allmulticast mode [ 695.431833][ T9491] vlan1: entered allmulticast mode [ 695.451453][ T9491] macvlan0: entered allmulticast mode [ 695.465367][ T9491] macvlan1: entered allmulticast mode [ 695.475081][ T9491] ipvlan0: entered allmulticast mode [ 695.490238][ T9491] ipvlan1: entered allmulticast mode [ 695.496579][ T9491] veth1_macvtap: entered allmulticast mode [ 695.521150][ T9491] veth0_macvtap: entered allmulticast mode [ 695.589437][ T9491] macvtap0: entered allmulticast mode [ 695.628866][ T9491] macsec0: entered allmulticast mode [ 695.679693][ T9491] geneve0: entered allmulticast mode [ 695.722215][ T9491] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 695.745009][ T9491] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 695.782745][ T9491] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 696.073949][ T9491] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 696.104647][ T9491] geneve1: entered allmulticast mode [ 696.112701][ T9491] netdevsim netdevsim1 netdevsim0: left promiscuous mode [ 696.131001][ T9491] netdevsim netdevsim1 netdevsim1: entered allmulticast mode [ 696.172473][ T9491] netdevsim netdevsim1 netdevsim2: entered allmulticast mode [ 696.213995][ T9491] netdevsim netdevsim1 netdevsim3: entered allmulticast mode [ 696.251916][ T9491] mac80211_hwsim hwsim3 wlan0: entered allmulticast mode [ 696.286474][ T9491] mac80211_hwsim hwsim5 wlan1: entered allmulticast mode [ 696.305317][ T9491] syztnl2: entered allmulticast mode [ 696.310945][ T9491] macsec1: entered allmulticast mode [ 696.487639][ T5915] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 696.517428][ T6755] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 696.536926][ T5869] Bluetooth: hci5: command tx timeout [ 696.580383][ T9438] bridge0: port 1(bridge_slave_0) entered blocking state [ 696.590133][ T9438] bridge0: port 1(bridge_slave_0) entered disabled state [ 696.597892][ T9438] bridge_slave_0: entered allmulticast mode [ 696.605773][ T9438] bridge_slave_0: entered promiscuous mode [ 696.637997][ T9438] bridge0: port 2(bridge_slave_1) entered blocking state [ 696.649545][ T9438] bridge0: port 2(bridge_slave_1) entered disabled state [ 696.657458][ T9438] bridge_slave_1: entered allmulticast mode [ 696.665528][ T9438] bridge_slave_1: entered promiscuous mode [ 696.700124][ T5915] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 696.721555][ T5915] usb 5-1: New USB device found, idVendor=8086, idProduct=0b63, bcdDevice=ca.f3 [ 696.739037][ T5915] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 696.767319][ T5869] Bluetooth: hci1: command tx timeout [ 696.775021][ T5915] usb 5-1: Product: syz [ 696.779780][ T5915] usb 5-1: Manufacturer: syz [ 696.788411][ T5915] usb 5-1: SerialNumber: syz [ 696.801744][ T5915] usb 5-1: config 0 descriptor?? [ 696.815277][ T5915] ljca 5-1:0.0: bulk endpoints not found [ 696.929684][ T9438] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 696.961044][ T9438] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 697.317152][ T6755] bridge_slave_1: left allmulticast mode [ 697.323129][ T6755] bridge_slave_1: left promiscuous mode [ 697.506800][ T6755] bridge0: port 2(bridge_slave_1) entered disabled state [ 698.035803][ T6755] bridge_slave_0: left allmulticast mode [ 698.050184][ T6755] bridge_slave_0: left promiscuous mode [ 698.115573][ T9522] overlayfs: failed to resolve './file1': -2 [ 698.281919][ T6755] bridge0: port 1(bridge_slave_0) entered disabled state [ 698.405640][ T9526] netlink: 'syz.3.995': attribute type 3 has an invalid length. [ 698.413556][ T9526] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.995'. [ 698.425290][ T9526] 9pnet_fd: Insufficient options for proto=fd [ 698.452597][ T6755] bond_slave_0: left promiscuous mode [ 698.471981][ T6755] bond_slave_1: left promiscuous mode [ 698.490868][ T6755] team_slave_0: left promiscuous mode [ 698.496700][ T6755] team_slave_1: left promiscuous mode [ 698.607322][ T5869] Bluetooth: hci5: command tx timeout [ 698.847179][ T5869] Bluetooth: hci1: command tx timeout [ 699.332826][ T980] usb 5-1: USB disconnect, device number 19 [ 700.961619][ T5869] Bluetooth: hci1: command tx timeout [ 703.010391][ T5869] Bluetooth: hci1: command tx timeout [ 703.502292][ T6755] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 703.541661][ T6755] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 703.554492][ T6755] bond0 (unregistering): (slave team0): Releasing backup interface [ 703.594663][ T6755] bond0 (unregistering): Released all slaves [ 703.725932][ T9438] team0: Port device team_slave_0 added [ 703.993045][ T9538] ieee802154 phy0 wpan0: encryption failed: -22 [ 704.042016][ T9438] team0: Port device team_slave_1 added [ 704.222116][ T9546] overlayfs: overlapping lowerdir path [ 704.424304][ T9438] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 704.436027][ T9438] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 704.462092][ C1] vkms_vblank_simulate: vblank timer overrun [ 704.544571][ T9438] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 704.604652][ T9438] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 704.614236][ T9558] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1005'. [ 704.637212][ T9438] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 704.663176][ C1] vkms_vblank_simulate: vblank timer overrun [ 704.712160][ T9438] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 704.850617][ T9495] chnl_net:caif_netlink_parms(): no params data found [ 705.193987][ T9566] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1007'. [ 705.415830][ T6755] hsr_slave_0: left promiscuous mode [ 705.449195][ T6755] hsr_slave_1: left promiscuous mode [ 705.477400][ T6755] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 705.485165][ T6755] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 705.514930][ T980] hid-generic FFFA:0008:0008.0005: unknown main item tag 0x4 [ 705.540490][ T6755] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 705.543777][ T980] hid-generic FFFA:0008:0008.0005: unexpected long global item [ 705.578594][ T6755] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 705.595689][ T980] hid-generic FFFA:0008:0008.0005: probe with driver hid-generic failed with error -22 [ 705.646724][ T6755] veth1_macvtap: left promiscuous mode [ 706.361465][ T6755] veth0_macvtap: left promiscuous mode [ 706.394820][ T6755] veth1_vlan: left promiscuous mode [ 706.401427][ T6755] veth0_vlan: left promiscuous mode [ 709.229167][ T6755] team0 (unregistering): Port device team_slave_1 removed [ 709.484831][ T6755] team0 (unregistering): Port device team_slave_0 removed [ 710.456546][ T9604] FAULT_INJECTION: forcing a failure. [ 710.456546][ T9604] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 710.469765][ T9604] CPU: 1 UID: 0 PID: 9604 Comm: syz.4.1014 Not tainted 6.15.0-syzkaller-09113-g8477ab143069 #0 PREEMPT(full) [ 710.469807][ T9604] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 710.469820][ T9604] Call Trace: [ 710.469827][ T9604] [ 710.469836][ T9604] dump_stack_lvl+0x189/0x250 [ 710.469871][ T9604] ? __pfx____ratelimit+0x10/0x10 [ 710.469904][ T9604] ? __pfx_dump_stack_lvl+0x10/0x10 [ 710.469933][ T9604] ? __pfx__printk+0x10/0x10 [ 710.469954][ T9604] ? __might_fault+0xb0/0x130 [ 710.469996][ T9604] should_fail_ex+0x414/0x560 [ 710.470023][ T9604] _copy_from_iter+0x1db/0x16f0 [ 710.470052][ T9604] ? rcu_is_watching+0x15/0xb0 [ 710.470077][ T9604] ? kmem_cache_alloc_node_noprof+0x217/0x3c0 [ 710.470110][ T9604] ? __pfx__copy_from_iter+0x10/0x10 [ 710.470137][ T9604] ? __build_skb_around+0x257/0x3e0 [ 710.470166][ T9604] ? netlink_sendmsg+0x642/0xb30 [ 710.470196][ T9604] ? skb_put+0x11b/0x210 [ 710.470226][ T9604] netlink_sendmsg+0x6b2/0xb30 [ 710.470261][ T9604] ? __pfx_netlink_sendmsg+0x10/0x10 [ 710.470296][ T9604] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 710.470315][ T9604] ? __pfx_netlink_sendmsg+0x10/0x10 [ 710.470342][ T9604] __sock_sendmsg+0x21c/0x270 [ 710.470366][ T9604] ____sys_sendmsg+0x505/0x830 [ 710.470399][ T9604] ? __pfx_____sys_sendmsg+0x10/0x10 [ 710.470436][ T9604] ? import_iovec+0x74/0xa0 [ 710.470467][ T9604] ___sys_sendmsg+0x21f/0x2a0 [ 710.470497][ T9604] ? __pfx____sys_sendmsg+0x10/0x10 [ 710.470561][ T9604] ? __fget_files+0x2a/0x420 [ 710.470597][ T9604] ? __fget_files+0x3a0/0x420 [ 710.470629][ T9604] __x64_sys_sendmsg+0x19b/0x260 [ 710.470661][ T9604] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 710.470720][ T9604] ? __pfx_ksys_write+0x10/0x10 [ 710.470765][ T9604] ? rcu_is_watching+0x15/0xb0 [ 710.470797][ T9604] ? do_syscall_64+0xbe/0x3b0 [ 710.470824][ T9604] do_syscall_64+0xfa/0x3b0 [ 710.470845][ T9604] ? lockdep_hardirqs_on+0x9c/0x150 [ 710.470866][ T9604] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 710.470888][ T9604] ? clear_bhb_loop+0x60/0xb0 [ 710.470915][ T9604] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 710.470936][ T9604] RIP: 0033:0x7fafd4b8e969 [ 710.470956][ T9604] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 710.470976][ T9604] RSP: 002b:00007fafd59f9038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 710.471000][ T9604] RAX: ffffffffffffffda RBX: 00007fafd4db6160 RCX: 00007fafd4b8e969 [ 710.471016][ T9604] RDX: 0000000020040080 RSI: 0000200000000140 RDI: 0000000000000003 [ 710.471031][ T9604] RBP: 00007fafd59f9090 R08: 0000000000000000 R09: 0000000000000000 [ 710.471045][ T9604] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 710.471057][ T9604] R13: 0000000000000000 R14: 00007fafd4db6160 R15: 00007ffc8fb26ef8 [ 710.471091][ T9604] [ 710.950045][ T9438] hsr_slave_0: entered promiscuous mode [ 710.957245][ T9438] hsr_slave_1: entered promiscuous mode [ 710.963745][ T9438] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 710.971510][ T9438] Cannot create hsr debugfs directory [ 711.493582][ T9621] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 712.076533][ T9495] bridge0: port 1(bridge_slave_0) entered blocking state [ 712.099870][ T9495] bridge0: port 1(bridge_slave_0) entered disabled state [ 712.109256][ T9495] bridge_slave_0: entered allmulticast mode [ 712.120037][ T9495] bridge_slave_0: entered promiscuous mode [ 712.250626][ T9495] bridge0: port 2(bridge_slave_1) entered blocking state [ 712.280485][ T9495] bridge0: port 2(bridge_slave_1) entered disabled state [ 712.297575][ T9495] bridge_slave_1: entered allmulticast mode [ 712.305345][ T9495] bridge_slave_1: entered promiscuous mode [ 712.474667][ T9495] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 712.513390][ T9495] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 712.800854][ T9640] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1022'. [ 713.061355][ T9495] team0: Port device team_slave_0 added [ 713.280013][ T9495] team0: Port device team_slave_1 added [ 713.504636][ T9495] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 713.557014][ T9495] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 713.616843][ T9495] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 713.652438][ T9649] binder: BINDER_SET_CONTEXT_MGR already set [ 713.671074][ T9649] binder: 9648:9649 ioctl 4018620d 200000000040 returned -16 [ 713.679853][ T9653] overlayfs: failed to resolve './file1': -2 [ 713.695098][ T9649] binder: 9648:9649 ioctl 89e8 2000000011c0 returned -22 [ 713.703549][ T9649] binder: 9648:9649 ioctl c0306201 2000000003c0 returned -14 [ 713.813714][ T9495] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 713.833286][ T9495] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 713.906826][ T9495] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 714.050900][ T6755] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 714.179421][ T9661] syz.1.1027: attempt to access beyond end of device [ 714.179421][ T9661] nbd1: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 714.195458][ T9661] SQUASHFS error: Failed to read block 0x0: -5 [ 714.206820][ T9661] unable to read squashfs_super_block [ 714.715896][ T6755] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 714.747387][ T9660] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes. [ 714.823252][ T6755] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 714.859401][ T9438] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 714.894382][ T9495] hsr_slave_0: entered promiscuous mode [ 714.906457][ T9495] hsr_slave_1: entered promiscuous mode [ 714.933826][ T9495] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 714.963467][ T9495] Cannot create hsr debugfs directory [ 715.000409][ T9438] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 715.141194][ T9681] netlink: 'syz.4.1033': attribute type 7 has an invalid length. [ 715.155602][ T9681] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1033'. [ 715.163528][ T6755] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 715.410724][ T9438] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 715.460583][ T9438] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 715.593471][ T977] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 715.791062][ T9438] 8021q: adding VLAN 0 to HW filter on device bond0 [ 715.928288][ T977] usb 5-1: Using ep0 maxpacket: 16 [ 715.936929][ T977] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 715.964734][ T977] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 716.002316][ T977] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 716.023114][ T977] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 716.034625][ T977] usb 5-1: Product: syz [ 716.040896][ T977] usb 5-1: Manufacturer: syz [ 716.051328][ T977] usb 5-1: SerialNumber: syz [ 716.087890][ T9438] 8021q: adding VLAN 0 to HW filter on device team0 [ 716.095373][ T6755] bridge_slave_1: left allmulticast mode [ 716.101815][ T6755] bridge_slave_1: left promiscuous mode [ 716.107669][ T6755] bridge0: port 2(bridge_slave_1) entered disabled state [ 716.122140][ T6755] bridge_slave_0: left allmulticast mode [ 716.127923][ T6755] bridge_slave_0: left promiscuous mode [ 716.135745][ T6755] bridge0: port 1(bridge_slave_0) entered disabled state [ 716.471315][ T977] usb 5-1: 0:2 : does not exist [ 716.771923][ T6755] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 716.792035][ T6755] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 716.803136][ T6755] bond0 (unregistering): Released all slaves [ 716.950124][ T6752] bridge0: port 1(bridge_slave_0) entered blocking state [ 716.957347][ T6752] bridge0: port 1(bridge_slave_0) entered forwarding state [ 717.017752][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 717.023667][ T977] usb 5-1: 5:0: failed to get current value for ch 0 (-22) [ 717.024942][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 717.099615][ T977] usb 5-1: USB disconnect, device number 20 [ 717.195454][ T9355] udevd[9355]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 717.223180][ T9495] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 717.265299][ T9495] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 717.323074][ T9495] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 717.472031][ T9495] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 717.622738][ T6755] hsr_slave_0: left promiscuous mode [ 717.666016][ T6755] hsr_slave_1: left promiscuous mode [ 717.672150][ T6755] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 717.721374][ T6755] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 717.752053][ T6755] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 717.782546][ T6755] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 717.823560][ T6755] veth1_macvtap: left promiscuous mode [ 717.830515][ T6755] veth0_macvtap: left promiscuous mode [ 717.836399][ T6755] veth1_vlan: left promiscuous mode [ 717.841769][ T6755] veth0_vlan: left promiscuous mode [ 717.975726][ T980] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 718.137174][ T980] usb 2-1: config 1 interface 0 altsetting 8 bulk endpoint 0x1 has invalid maxpacket 32 [ 718.157414][ T980] usb 2-1: config 1 interface 0 altsetting 8 bulk endpoint 0x82 has invalid maxpacket 64 [ 718.168461][ T980] usb 2-1: config 1 interface 0 has no altsetting 0 [ 718.178673][ T980] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 718.187965][ T980] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 718.198288][ T980] usb 2-1: Product: Я [ 718.202543][ T980] usb 2-1: Manufacturer: ␁ [ 718.207448][ T980] usb 2-1: SerialNumber: 埘ꂧ᠒陙裆㓓鋜嗱ᚮ뮝ཫㇻ쇃㣜낛⇸鉚豒㬅畷쿔퓨ᙤ錈횮㷊锴㹻蠴䜻粢ṙ볫㙾ｏ጗垒랸欑꥛❁Î뒻⓸ꔠ䥑␰뫌揶粻誴獞쯪Ṿ의嫇핅偄₈黄䐺ꪠ읺恒ᬥ湤䥟庬溹Nꊀ࿡䨻㝥㡄蹉蝗醄潀⠒㒳쟬ꔣȋﬣꦕžﴊ엄䵢梜篨骣똏☮㳉︱੕䱓폵吞﹧ൽ鉍שׁ [ 718.242878][ C1] vkms_vblank_simulate: vblank timer overrun [ 718.277462][ T9709] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 718.285479][ T9709] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 718.728183][ T980] usblp 2-1:1.0: usblp0: USB Bidirectional printer dev 29 if 0 alt 8 proto 2 vid 0x0525 pid 0xA4A8 [ 718.758775][ T980] usb 2-1: USB disconnect, device number 29 [ 718.780560][ T980] usblp0: removed [ 719.476306][ T9730] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1049'. [ 719.709520][ T6755] team0 (unregistering): Port device team_slave_1 removed [ 720.157465][ T6755] team0 (unregistering): Port device team_slave_0 removed [ 721.564721][ T9730] vlan0: entered promiscuous mode [ 721.570008][ T9730] vlan0: left allmulticast mode [ 721.577610][ T9738] ieee802154 phy0 wpan0: encryption failed: -22 [ 721.864540][ T9495] 8021q: adding VLAN 0 to HW filter on device bond0 [ 721.921431][ T9495] 8021q: adding VLAN 0 to HW filter on device team0 [ 722.011361][ T5972] bridge0: port 1(bridge_slave_0) entered blocking state [ 722.018596][ T5972] bridge0: port 1(bridge_slave_0) entered forwarding state [ 722.045900][ T5972] bridge0: port 2(bridge_slave_1) entered blocking state [ 722.053150][ T5972] bridge0: port 2(bridge_slave_1) entered forwarding state [ 722.366077][ T6755] IPVS: stop unused estimator thread 0... [ 722.482683][ T9438] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 722.831710][ T9495] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 723.084154][ T9781] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1059'. [ 724.068081][ T980] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 724.254350][ T980] usb 5-1: Using ep0 maxpacket: 16 [ 724.285239][ T980] usb 5-1: New USB device found, idVendor=1397, idProduct=00bd, bcdDevice=c5.66 [ 724.298141][ T980] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 724.324498][ T9438] veth0_vlan: entered promiscuous mode [ 724.345423][ T980] usb 5-1: config 0 descriptor?? [ 724.374167][ T980] usb 5-1: invalid MIDI EP [ 724.391872][ T980] usb 5-1: snd-bcd2000: error during probing [ 724.400266][ T980] snd-bcd2000 5-1:0.0: probe with driver snd-bcd2000 failed with error -22 [ 724.602342][ T9802] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 724.623264][ T9438] veth1_vlan: entered promiscuous mode [ 724.638244][ T9802] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 724.688327][ T11] usb 5-1: USB disconnect, device number 21 [ 724.791360][ T9495] veth0_vlan: entered promiscuous mode [ 724.817836][ T9438] veth0_macvtap: entered promiscuous mode [ 724.857582][ T9495] veth1_vlan: entered promiscuous mode [ 724.869829][ T9438] veth1_macvtap: entered promiscuous mode [ 724.914351][ T9438] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 724.948362][ T9495] veth0_macvtap: entered promiscuous mode [ 724.962893][ T9438] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 724.997470][ T9438] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 725.006977][ T9438] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 725.017523][ T9438] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 725.026473][ T9438] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 725.098150][ T9495] veth1_macvtap: entered promiscuous mode [ 725.159966][ T9495] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 725.174440][ T9495] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 725.186806][ T9495] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 725.211734][ T9495] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 725.235338][ T9495] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 725.248433][ T9495] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 725.502633][ T5972] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 725.522130][ T5972] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 725.610309][ T30] audit: type=1326 audit(1748689688.847:280): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9818 comm="syz.3.1070" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f9d78e969 code=0x7ffc0000 [ 725.681120][ T5972] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 725.693325][ T30] audit: type=1326 audit(1748689688.847:281): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9818 comm="syz.3.1070" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f9d78e969 code=0x7ffc0000 [ 725.717646][ T30] audit: type=1326 audit(1748689688.857:282): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9818 comm="syz.3.1070" exe="/root/syz-executor" sig=0 arch=c000003e syscall=250 compat=0 ip=0x7f3f9d78e969 code=0x7ffc0000 [ 725.743935][ T30] audit: type=1326 audit(1748689688.857:283): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9818 comm="syz.3.1070" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f9d78e969 code=0x7ffc0000 [ 725.788398][ T30] audit: type=1326 audit(1748689688.887:284): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9818 comm="syz.3.1070" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f3f9d78e969 code=0x7ffc0000 [ 725.802777][ T5972] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 726.599499][ T30] audit: type=1326 audit(1748689688.887:285): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9818 comm="syz.3.1070" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f9d78e969 code=0x7ffc0000 [ 726.720326][ T30] audit: type=1326 audit(1748689688.887:286): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9818 comm="syz.3.1070" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f9d78e969 code=0x7ffc0000 [ 726.789953][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 726.813187][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 726.820736][ T30] audit: type=1326 audit(1748689688.887:287): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9818 comm="syz.3.1070" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f3f9d78e969 code=0x7ffc0000 [ 726.966938][ T6767] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 727.010592][ T6767] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 728.465291][ T9858] 9pnet_fd: Insufficient options for proto=fd [ 729.306215][ T5927] hid-generic FFFA:0008:0008.0006: unknown main item tag 0x4 [ 729.382833][ T5927] hid-generic FFFA:0008:0008.0006: unexpected long global item [ 729.411682][ T5927] hid-generic FFFA:0008:0008.0006: probe with driver hid-generic failed with error -22 [ 729.978878][ T30] audit: type=1326 audit(1748689693.219:288): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9866 comm="syz.3.1083" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f3f9d78e969 code=0x0 [ 731.938494][ T9470] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 731.952255][ T5915] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 732.301789][ T9470] usb 6-1: New USB device found, idVendor=0c45, idProduct=62a0, bcdDevice=a8.22 [ 732.311304][ T5915] usb 7-1: New USB device found, idVendor=055d, idProduct=9002, bcdDevice=31.44 [ 732.322798][ T9470] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 732.332182][ T5915] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 732.348137][ T9470] usb 6-1: config 0 descriptor?? [ 732.354782][ T5915] usb 7-1: config 0 descriptor?? [ 732.369690][ T9470] gspca_main: gspca_sn9c20x-2.14.0 probing 0c45:62a0 [ 732.391160][ T5915] pwc: Samsung SNC-35E (v3.0) USB webcam detected. [ 732.713733][ T9916] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 732.849559][ T5915] pwc: Failed to set LED on/off time (-71) [ 732.858837][ T5915] pwc: send_video_command error -71 [ 732.864105][ T5915] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 732.875793][ T5915] Philips webcam 7-1:0.0: probe with driver Philips webcam failed with error -71 [ 732.888283][ T9470] gspca_sn9c20x: Write register 1000 failed -110 [ 732.897018][ T5915] usb 7-1: USB disconnect, device number 2 [ 732.905573][ T9470] gspca_sn9c20x: Device initialization failed [ 732.916104][ T9470] gspca_sn9c20x 6-1:0.0: probe with driver gspca_sn9c20x failed with error -110 [ 732.997446][ T9470] usb 6-1: USB disconnect, device number 2 [ 733.034621][ T977] hid-generic FFFA:0008:0008.0007: unknown main item tag 0x4 [ 733.065391][ T977] hid-generic FFFA:0008:0008.0007: unexpected long global item [ 733.078165][ T977] hid-generic FFFA:0008:0008.0007: probe with driver hid-generic failed with error -22 [ 733.696045][ T9926] overlayfs: missing 'lowerdir' [ 735.237582][ T9945] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 735.328920][ T9945] CIFS mount error: No usable UNC path provided in device string! [ 735.328920][ T9945] [ 735.876914][ T9945] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 737.572984][ T9980] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1112'. [ 738.553739][ T977] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 738.579895][ T9994] FAULT_INJECTION: forcing a failure. [ 738.579895][ T9994] name failslab, interval 1, probability 0, space 0, times 0 [ 738.598615][ T9994] CPU: 1 UID: 0 PID: 9994 Comm: syz.1.1117 Not tainted 6.15.0-syzkaller-09113-g8477ab143069 #0 PREEMPT(full) [ 738.598645][ T9994] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 738.598658][ T9994] Call Trace: [ 738.598666][ T9994] [ 738.598684][ T9994] dump_stack_lvl+0x189/0x250 [ 738.598721][ T9994] ? __pfx____ratelimit+0x10/0x10 [ 738.598756][ T9994] ? __pfx_dump_stack_lvl+0x10/0x10 [ 738.598787][ T9994] ? __pfx__printk+0x10/0x10 [ 738.598815][ T9994] ? __pfx___might_resched+0x10/0x10 [ 738.598840][ T9994] ? fs_reclaim_acquire+0x7d/0x100 [ 738.598869][ T9994] should_fail_ex+0x414/0x560 [ 738.598897][ T9994] should_failslab+0xa8/0x100 [ 738.598933][ T9994] kmem_cache_alloc_lru_noprof+0x78/0x3d0 [ 738.598964][ T9994] ? __d_alloc+0x31/0x6f0 [ 738.598993][ T9994] __d_alloc+0x31/0x6f0 [ 738.599016][ T9994] ? inode_set_ctime_current+0x277/0xb40 [ 738.599044][ T9994] d_alloc_pseudo+0x1f/0xb0 [ 738.599068][ T9994] alloc_file_pseudo+0xcc/0x210 [ 738.599107][ T9994] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 738.599137][ T9994] ? alloc_anon_inode+0x1c1/0x360 [ 738.599172][ T9994] aio_setup_ring+0x1e7/0xd80 [ 738.599201][ T9994] ? pcpu_alloc_noprof+0xfdb/0x16b0 [ 738.599221][ T9994] ? __pfx_aio_setup_ring+0x10/0x10 [ 738.599251][ T9994] ioctx_alloc+0x32f/0x7a0 [ 738.599289][ T9994] __se_sys_io_setup+0x7b/0x1a0 [ 738.599337][ T9994] do_syscall_64+0xfa/0x3b0 [ 738.599358][ T9994] ? lockdep_hardirqs_on+0x9c/0x150 [ 738.599377][ T9994] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 738.599398][ T9994] ? clear_bhb_loop+0x60/0xb0 [ 738.599424][ T9994] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 738.599444][ T9994] RIP: 0033:0x7f7cdcd8e969 [ 738.599463][ T9994] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 738.599482][ T9994] RSP: 002b:00007f7cddb8d038 EFLAGS: 00000246 ORIG_RAX: 00000000000000ce [ 738.599503][ T9994] RAX: ffffffffffffffda RBX: 00007f7cdcfb5fa0 RCX: 00007f7cdcd8e969 [ 738.599518][ T9994] RDX: 0000000000000000 RSI: 0000200000000680 RDI: 0000000000002004 [ 738.599531][ T9994] RBP: 00007f7cddb8d090 R08: 0000000000000000 R09: 0000000000000000 [ 738.599544][ T9994] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 738.599555][ T9994] R13: 0000000000000000 R14: 00007f7cdcfb5fa0 R15: 00007ffe4006df18 [ 738.599588][ T9994] [ 738.904915][ T977] usb 7-1: device descriptor read/64, error -71 [ 739.041200][T10003] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 739.158565][T10007] netlink: 100 bytes leftover after parsing attributes in process `syz.5.1121'. [ 739.165093][ T977] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 739.214446][ T30] audit: type=1326 audit(1748689702.464:289): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10008 comm="syz.4.1122" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fafd4b8e969 code=0x7ffc0000 [ 739.236062][ C0] vkms_vblank_simulate: vblank timer overrun [ 739.265222][ T30] audit: type=1326 audit(1748689702.464:290): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10008 comm="syz.4.1122" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fafd4b8e969 code=0x7ffc0000 [ 739.286835][ C0] vkms_vblank_simulate: vblank timer overrun [ 739.293995][ T30] audit: type=1326 audit(1748689702.474:291): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10008 comm="syz.4.1122" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7fafd4b8e969 code=0x7ffc0000 [ 739.324822][ T30] audit: type=1326 audit(1748689702.474:292): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10008 comm="syz.4.1122" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fafd4b8e969 code=0x7ffc0000 [ 739.341415][ T977] usb 7-1: device descriptor read/64, error -71 [ 739.353034][ T30] audit: type=1326 audit(1748689702.474:293): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10008 comm="syz.4.1122" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fafd4b8e969 code=0x7ffc0000 [ 739.353141][ T30] audit: type=1326 audit(1748689702.474:294): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10008 comm="syz.4.1122" exe="/root/syz-executor" sig=0 arch=c000003e syscall=431 compat=0 ip=0x7fafd4b8e969 code=0x7ffc0000 [ 739.353237][ T30] audit: type=1326 audit(1748689702.474:295): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10008 comm="syz.4.1122" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fafd4b8e969 code=0x7ffc0000 [ 739.479354][T10015] vivid-007: ================= START STATUS ================= [ 739.502362][T10015] vivid-007: Generate PTS: true [ 739.513159][ T977] usb usb7-port1: attempt power cycle [ 739.521605][ T30] audit: type=1326 audit(1748689702.474:296): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10008 comm="syz.4.1122" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fafd4b8e969 code=0x7ffc0000 [ 739.524871][T10014] syz_tun: entered allmulticast mode [ 739.564695][ T30] audit: type=1326 audit(1748689702.474:297): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10008 comm="syz.4.1122" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fafd4b8d2d0 code=0x7ffc0000 [ 739.593453][T10015] vivid-007: Generate SCR: true [ 739.599392][T10015] tpg source WxH: 320x240 (Y'CbCr) [ 739.609586][ T30] audit: type=1326 audit(1748689702.474:298): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10008 comm="syz.4.1122" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7fafd4b90197 code=0x7ffc0000 [ 739.624575][T10015] tpg field: 1 [ 739.651602][T10013] syz_tun: left allmulticast mode [ 739.688483][T10015] tpg crop: (0,0)/320x240 [ 739.755154][T10015] tpg compose: (0,0)/320x240 [ 739.759833][T10015] tpg colorspace: 8 [ 739.763676][T10015] tpg transfer function: 0/0 [ 739.787688][T10015] tpg Y'CbCr encoding: 0/0 [ 739.792193][T10015] tpg quantization: 0/0 [ 739.800187][T10015] tpg RGB range: 0/2 [ 739.804267][T10015] vivid-007: ================== END STATUS ================== [ 739.874539][ T977] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 739.905733][ T977] usb 7-1: device descriptor read/8, error -71 [ 740.167543][ T977] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 740.214979][ T977] usb 7-1: device descriptor read/8, error -71 [ 740.300317][T10031] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1128'. [ 740.324718][ T977] usb usb7-port1: unable to enumerate USB device [ 740.344463][ T5927] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 740.524204][ T5927] usb 2-1: Using ep0 maxpacket: 16 [ 740.534938][ T5927] usb 2-1: config 8 has an invalid interface number: 206 but max is 0 [ 740.543462][ T5927] usb 2-1: config 8 has no interface number 0 [ 740.557181][ T5927] usb 2-1: config 8 interface 206 altsetting 1 has an endpoint descriptor with address 0xF7, changing to 0x87 [ 740.584124][ T5927] usb 2-1: config 8 interface 206 altsetting 1 endpoint 0x87 has invalid maxpacket 33058, setting to 1024 [ 740.609778][ T5927] usb 2-1: config 8 interface 206 altsetting 1 endpoint 0xC has invalid wMaxPacketSize 0 [ 740.630941][ T5927] usb 2-1: config 8 interface 206 altsetting 1 bulk endpoint 0xC has invalid maxpacket 0 [ 740.650850][ T5927] usb 2-1: config 8 interface 206 altsetting 1 has 2 endpoint descriptors, different from the interface descriptor's value: 9 [ 740.670630][ T5927] usb 2-1: config 8 interface 206 has no altsetting 0 [ 740.681622][ T5927] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=35.bb [ 740.691012][ T5927] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 740.704705][ T5927] usb 2-1: Product: syz [ 740.714030][ T5927] usb 2-1: Manufacturer: syz [ 740.723977][ T5927] usb 2-1: SerialNumber: syz [ 740.975192][ T5927] garmin_gps 2-1:8.206: Garmin GPS usb/tty converter detected [ 740.999566][ T5927] garmin_gps ttyUSB0: garmin_write_bulk - usb_submit_urb(write bulk) failed with status = -90 [ 741.086690][ T5927] garmin_gps ttyUSB0: probe with driver garmin_gps failed with error -90 [ 741.088239][T10037] netdevsim netdevsim5 netdevsim0: entered promiscuous mode [ 741.137845][ T5927] usb 2-1: USB disconnect, device number 30 [ 741.145458][T10037] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 741.170352][T10034] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1129'. [ 741.191205][ T5927] garmin_gps 2-1:8.206: device disconnected [ 741.224763][T10044] sg_write: data in/out 218103772/10 bytes for SCSI command 0xfc-- guessing data in; [ 741.224763][T10044] program syz.4.1132 not setting count and/or reply_len properly [ 742.044747][T10072] netlink: 'syz.3.1141': attribute type 29 has an invalid length. [ 744.623443][T10113] netlink: 'syz.4.1151': attribute type 1 has an invalid length. [ 744.662311][T10113] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1151'. [ 744.714508][T10113] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1151'. [ 744.726825][T10114] fuse: Bad value for 'fd' [ 745.314349][T10117] 9pnet: Could not find request transport: fd00000000000000000010 [ 745.436086][T10123] FAULT_INJECTION: forcing a failure. [ 745.436086][T10123] name failslab, interval 1, probability 0, space 0, times 0 [ 745.449358][T10123] CPU: 1 UID: 0 PID: 10123 Comm: syz.5.1155 Not tainted 6.15.0-syzkaller-09113-g8477ab143069 #0 PREEMPT(full) [ 745.449389][T10123] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 745.449404][T10123] Call Trace: [ 745.449415][T10123] [ 745.449426][T10123] dump_stack_lvl+0x189/0x250 [ 745.449463][T10123] ? __pfx____ratelimit+0x10/0x10 [ 745.449499][T10123] ? __pfx_dump_stack_lvl+0x10/0x10 [ 745.449532][T10123] ? __pfx__printk+0x10/0x10 [ 745.449561][T10123] ? ref_tracker_alloc+0x318/0x460 [ 745.449590][T10123] should_fail_ex+0x414/0x560 [ 745.449619][T10123] should_failslab+0xa8/0x100 [ 745.449656][T10123] kmem_cache_alloc_noprof+0x73/0x3c0 [ 745.449688][T10123] ? skb_clone+0x212/0x3a0 [ 745.449726][T10123] skb_clone+0x212/0x3a0 [ 745.449762][T10123] __netlink_deliver_tap+0x404/0x850 [ 745.449801][T10123] ? netlink_deliver_tap+0x2e/0x1b0 [ 745.449830][T10123] netlink_deliver_tap+0x19c/0x1b0 [ 745.449860][T10123] netlink_unicast+0x72f/0x8d0 [ 745.449898][T10123] netlink_sendmsg+0x805/0xb30 [ 745.449948][T10123] ? __pfx_netlink_sendmsg+0x10/0x10 [ 745.449985][T10123] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 745.450005][T10123] ? __pfx_netlink_sendmsg+0x10/0x10 [ 745.450034][T10123] __sock_sendmsg+0x21c/0x270 [ 745.450058][T10123] ____sys_sendmsg+0x52d/0x830 [ 745.450107][T10123] ? __pfx_____sys_sendmsg+0x10/0x10 [ 745.450147][T10123] ? import_iovec+0x74/0xa0 [ 745.450181][T10123] ___sys_sendmsg+0x21f/0x2a0 [ 745.450214][T10123] ? __pfx____sys_sendmsg+0x10/0x10 [ 745.450284][T10123] ? __fget_files+0x2a/0x420 [ 745.450303][T10123] ? __fget_files+0x3a0/0x420 [ 745.450335][T10123] __sys_sendmmsg+0x227/0x430 [ 745.450368][T10123] ? __pfx___sys_sendmmsg+0x10/0x10 [ 745.450395][T10123] ? __mutex_unlock_slowpath+0x1cd/0x700 [ 745.450447][T10123] ? ksys_write+0x22a/0x250 [ 745.450474][T10123] ? __pfx_ksys_write+0x10/0x10 [ 745.450496][T10123] ? rcu_is_watching+0x15/0xb0 [ 745.450521][T10123] __x64_sys_sendmmsg+0xa0/0xc0 [ 745.450545][T10123] do_syscall_64+0xfa/0x3b0 [ 745.450561][T10123] ? lockdep_hardirqs_on+0x9c/0x150 [ 745.450577][T10123] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 745.450593][T10123] ? clear_bhb_loop+0x60/0xb0 [ 745.450613][T10123] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 745.450629][T10123] RIP: 0033:0x7f197f18e969 [ 745.450644][T10123] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 745.450659][T10123] RSP: 002b:00007f198005a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 745.450677][T10123] RAX: ffffffffffffffda RBX: 00007f197f3b5fa0 RCX: 00007f197f18e969 [ 745.450689][T10123] RDX: 0492492492492627 RSI: 00002000000000c0 RDI: 0000000000000003 [ 745.450700][T10123] RBP: 00007f198005a090 R08: 0000000000000000 R09: 0000000000000000 [ 745.450711][T10123] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 745.450720][T10123] R13: 0000000000000000 R14: 00007f197f3b5fa0 R15: 00007ffd13a041c8 [ 745.450745][T10123] [ 746.278056][T10140] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1161'. [ 747.010933][ T5983] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 747.181382][ T5983] usb 6-1: device descriptor read/64, error -71 [ 747.314863][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.401231][T10166] 9pnet: Could not find request transport: fd=rfdno=Ay)*kPK2zƝzYڞm9?'~WyXJ`@YQ EVolj9qBGZ!Ϲt7h8.SC2GA|dz/d*S-Sס/ηƽR d?XΪ [ 747.401231][T10166] +e:6P [ 747.443478][ T5983] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 747.518479][T10169] overlayfs: failed to resolve './file1': -2 [ 747.590818][ T5983] usb 6-1: device descriptor read/64, error -71 [ 747.711122][ T5983] usb usb6-port1: attempt power cycle [ 748.109913][ T5983] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 748.160926][ T5983] usb 6-1: device descriptor read/8, error -71 [ 748.450143][ T5983] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 748.468244][T10190] netlink: 'syz.3.1175': attribute type 5 has an invalid length. [ 748.710861][ T5983] usb 6-1: device descriptor read/8, error -71 [ 749.200148][ T5983] usb usb6-port1: unable to enumerate USB device [ 754.318342][T10270] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1202'. [ 754.500434][T10274] block device autoloading is deprecated and will be removed. [ 755.263482][T10295] netlink: 'syz.4.1212': attribute type 8 has an invalid length. [ 755.484780][T10299] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1215'. [ 755.586720][T10307] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1214'. [ 755.762344][T10302] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1214'. [ 755.789510][T10313] netlink: 136 bytes leftover after parsing attributes in process `syz.4.1220'. [ 755.813117][T10313] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 757.746616][ T11] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 757.938825][T10331] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 758.690096][ T11] usb 7-1: Using ep0 maxpacket: 8 [ 758.697433][ T11] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 758.718464][ T11] usb 7-1: config 0 has no interfaces? [ 758.804929][ T11] usb 7-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 758.826522][ T11] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 758.848859][ T11] usb 7-1: config 0 descriptor?? [ 759.179092][ T11] usb 7-1: can't set config #0, error -71 [ 759.188440][ T11] usb 7-1: USB disconnect, device number 7 [ 761.223303][T10371] netlink: 96 bytes leftover after parsing attributes in process `syz.3.1241'. [ 761.256489][T10373] Cannot find set identified by id 65535 to match [ 761.272143][T10371] xt_TCPMSS: Only works on TCP SYN packets [ 761.323066][T10377] netlink: 'syz.5.1242': attribute type 29 has an invalid length. [ 761.356651][T10377] netlink: 'syz.5.1242': attribute type 29 has an invalid length. [ 761.678276][T10382] netlink: 'syz.6.1243': attribute type 10 has an invalid length. [ 761.690397][T10382] team0: Device hsr_slave_0 failed to register rx_handler [ 762.185844][ T11] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 762.352164][ T11] usb 6-1: Using ep0 maxpacket: 32 [ 762.356732][ T11] usb 6-1: config 0 has an invalid interface number: 2 but max is 0 [ 762.356764][ T11] usb 6-1: config 0 has no interface number 0 [ 762.356809][ T11] usb 6-1: config 0 interface 2 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 762.356839][ T11] usb 6-1: config 0 interface 2 altsetting 4 endpoint 0x81 has invalid wMaxPacketSize 0 [ 762.356864][ T11] usb 6-1: config 0 interface 2 altsetting 4 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 762.356894][ T11] usb 6-1: config 0 interface 2 has no altsetting 0 [ 762.356930][ T11] usb 6-1: New USB device found, idVendor=5543, idProduct=0781, bcdDevice= 0.00 [ 762.356956][ T11] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 762.360152][ T11] usb 6-1: config 0 descriptor?? [ 762.890418][ T11] uclogic 0003:5543:0781.0008: unknown main item tag 0x0 [ 762.917925][ T11] uclogic 0003:5543:0781.0008: unknown main item tag 0x0 [ 762.935766][T10077] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 762.948619][ T11] uclogic 0003:5543:0781.0008: unknown main item tag 0x0 [ 762.967099][ T11] uclogic 0003:5543:0781.0008: unknown main item tag 0x0 [ 762.984432][ T11] uclogic 0003:5543:0781.0008: unknown main item tag 0x0 [ 763.004716][ T11] uclogic 0003:5543:0781.0008: unknown main item tag 0x0 [ 763.014873][ T11] uclogic 0003:5543:0781.0008: unknown main item tag 0x0 [ 763.042910][ T11] uclogic 0003:5543:0781.0008: No inputs registered, leaving [ 763.076959][T10393] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 763.087414][T10393] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 763.111565][ T11] uclogic 0003:5543:0781.0008: hidraw0: USB HID v0.07 Device [HID 5543:0781] on usb-dummy_hcd.5-1/input2 [ 763.151226][T10393] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 763.196106][T10393] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 763.303991][T10077] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 763.324926][T10077] usb 7-1: New USB device found, idVendor=8086, idProduct=0b63, bcdDevice=ca.f3 [ 763.334539][T10077] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 763.355536][T10077] usb 7-1: Product: syz [ 763.359852][T10077] usb 7-1: Manufacturer: syz [ 763.364480][T10077] usb 7-1: SerialNumber: syz [ 763.745379][T10434] netlink: 256 bytes leftover after parsing attributes in process `syz.1.1258'. [ 763.807474][T10077] usb 7-1: config 0 descriptor?? [ 763.812766][T10434] netlink: 72 bytes leftover after parsing attributes in process `syz.1.1258'. [ 763.815555][T10077] ljca 7-1:0.0: bulk endpoints not found [ 763.856967][T10434] netlink: 'syz.1.1258': attribute type 30 has an invalid length. [ 763.875072][T10434] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1258'. [ 763.971931][T10434] (unnamed net_device) (uninitialized): option arp_missed_max: invalid value (0) [ 763.981218][T10434] (unnamed net_device) (uninitialized): option arp_missed_max: allowed values 1 - 255 [ 765.006394][ T977] usb 6-1: USB disconnect, device number 7 [ 766.267425][T10077] usb 7-1: USB disconnect, device number 8 [ 766.464065][T10458] overlayfs: failed to resolve './file1': -2 [ 767.178690][ T30] kauditd_printk_skb: 62 callbacks suppressed [ 767.185638][ T30] audit: type=1326 audit(1748689730.384:361): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10457 comm="syz.6.1264" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f390758e969 code=0x0 [ 767.829919][T10475] Invalid ELF header magic: != ELF [ 768.330775][ T30] audit: type=1800 audit(1748689731.594:362): pid=10485 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.6.1267" name=A0F29C1437B3CFF8C3A25729EB7393A7C721518FF6ECA56673F56C7B548772D22972A7D6084F9A98F5323A22F412C0542BCD9F767C8DD5B24476638E93D8D6A0C536D278E3633A dev="mqueue" ino=30225 res=0 errno=0 [ 768.802752][T10496] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1275'. [ 769.154935][ T977] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 769.198885][T10508] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1279'. [ 769.340194][ T977] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 769.358163][ T977] usb 2-1: New USB device found, idVendor=8086, idProduct=0b63, bcdDevice=ca.f3 [ 769.358301][T10511] 9pnet_fd: Insufficient options for proto=fd [ 769.377966][ T977] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 769.394871][ T977] usb 2-1: Product: syz [ 769.409370][ T977] usb 2-1: Manufacturer: syz [ 769.424927][ T977] usb 2-1: SerialNumber: syz [ 769.451075][ T977] usb 2-1: config 0 descriptor?? [ 769.496930][ T977] ljca 2-1:0.0: bulk endpoints not found [ 772.021492][T10078] usb 2-1: USB disconnect, device number 31 [ 773.442312][T10558] overlayfs: failed to resolve './file1': -2 [ 774.538317][ T11] hid-generic FFFA:0008:0008.0009: unknown main item tag 0x4 [ 774.552800][ T11] hid-generic FFFA:0008:0008.0009: unexpected long global item [ 774.668905][ T11] hid-generic FFFA:0008:0008.0009: probe with driver hid-generic failed with error -22 [ 775.296831][T10568] delete_channel: no stack [ 776.065267][ T30] audit: type=1326 audit(1748689739.335:363): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10594 comm="syz.4.1306" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fafd4b8e969 code=0x0 [ 776.143274][T10596] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1306'. [ 776.181861][T10596] IPVS: Error joining to the multicast group [ 778.907950][T10629] netlink: 64 bytes leftover after parsing attributes in process `syz.3.1318'. [ 779.442484][T10650] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1322'. [ 780.481318][T10658] netlink: 'syz.5.1326': attribute type 21 has an invalid length. [ 780.489442][T10658] netlink: 'syz.5.1326': attribute type 6 has an invalid length. [ 780.497810][T10658] netlink: 132 bytes leftover after parsing attributes in process `syz.5.1326'. [ 780.702663][T10665] netlink: 356 bytes leftover after parsing attributes in process `syz.6.1320'. [ 780.711938][T10665] openvswitch: netlink: Flow actions attr not present in new flow. [ 782.134171][ T11] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 782.347082][ T11] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 782.389391][ T11] usb 6-1: New USB device found, idVendor=8086, idProduct=0b63, bcdDevice=ca.f3 [ 782.420897][ T11] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 782.445901][ T11] usb 6-1: Product: syz [ 782.455542][ T11] usb 6-1: Manufacturer: syz [ 782.465540][ T11] usb 6-1: SerialNumber: syz [ 782.559463][ T11] usb 6-1: config 0 descriptor?? [ 782.570642][ T11] ljca 6-1:0.0: bulk endpoints not found [ 782.593724][T10690] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1337'. [ 782.683540][ T977] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 782.853303][ T977] usb 2-1: config 0 interface 0 altsetting 128 bulk endpoint 0xB has invalid maxpacket 1023 [ 782.961519][ T977] usb 2-1: config 0 interface 0 has no altsetting 0 [ 783.026633][ T977] usb 2-1: New USB device found, idVendor=0451, idProduct=f430, bcdDevice=42.7a [ 783.630244][ T977] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 783.911827][ T977] usb 2-1: config 0 descriptor?? [ 784.026750][T10687] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 785.005164][ T977] ti_usb_3410_5052 2-1:0.0: TI USB 3410 1 port adapter converter detected [ 785.079989][ T977] usb 2-1: Direct firmware load for ti_usb-v0451-pf430.fw failed with error -2 [ 785.095530][T10701] loop2: detected capacity change from 0 to 7 [ 785.116892][ T977] usb 2-1: Falling back to sysfs fallback for: ti_usb-v0451-pf430.fw [ 785.142702][T10701] loop2: p1 [ 785.169840][T10701] loop2: partition table partially beyond EOD, truncated [ 785.230706][T10701] loop2: p1 size 17018 extends beyond EOD, truncated [ 785.328259][ T11] usb 6-1: USB disconnect, device number 8 [ 785.465681][T10703] syz.1.1336: attempt to access beyond end of device [ 785.465681][T10703] loop1: rw=0, sector=16, nr_sectors = 2 limit=0 [ 785.780603][T10713] overlayfs: failed to resolve './file1': -2 [ 786.254585][T10720] wg1: entered promiscuous mode [ 786.259539][T10720] wg1: entered allmulticast mode [ 786.318185][T10722] netlink: 356 bytes leftover after parsing attributes in process `syz.4.1339'. [ 786.328721][T10722] openvswitch: netlink: Flow actions attr not present in new flow. [ 787.602320][T10738] xt_TPROXY: Can be used only with -p tcp or -p udp [ 787.608934][T10739] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1350'. [ 788.874175][T10747] overlayfs: failed to resolve './file1': -2 [ 789.408408][T10766] netlink: 252 bytes leftover after parsing attributes in process `syz.4.1360'. [ 789.669440][T10769] kvm: pic: non byte write [ 789.841211][T10780] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1364'. [ 789.951784][T10782] overlayfs: failed to resolve './file1': -2 [ 790.687161][ T5927] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 790.984752][ T5927] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 791.730526][ T5927] usb 7-1: New USB device found, idVendor=8086, idProduct=0b63, bcdDevice=ca.f3 [ 791.780488][ T5927] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 791.825076][ T5927] usb 7-1: Product: syz [ 791.851917][ T5927] usb 7-1: Manufacturer: syz [ 791.886958][ T5927] usb 7-1: SerialNumber: syz [ 791.920679][ T5927] usb 7-1: config 0 descriptor?? [ 791.950282][ T5927] ljca 7-1:0.0: bulk endpoints not found [ 792.356359][T10817] kvm: pic: non byte write [ 793.210069][T10826] 9pnet_fd: Insufficient options for proto=fd [ 793.954161][T10838] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1381'. [ 794.204903][ T5927] usb 7-1: USB disconnect, device number 9 [ 794.230136][T10840] block nbd1: NBD_DISCONNECT [ 794.555440][T10848] sp0: Synchronizing with TNC [ 795.408331][T10855] delete_channel: no stack [ 795.510256][T10859] overlay: ./bus is not a directory [ 795.832063][T10871] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1393'. [ 795.867563][T10871] CIFS mount error: No usable UNC path provided in device string! [ 795.867563][T10871] [ 795.890315][T10871] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 796.077153][T10877] @: renamed from vlan0 (while UP) [ 796.136816][T10878] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1396'. [ 796.841813][T10079] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 797.031809][T10079] usb 6-1: Using ep0 maxpacket: 16 [ 797.051294][T10079] usb 6-1: config 8 has an invalid interface number: 39 but max is 0 [ 797.060007][T10079] usb 6-1: config 8 has no interface number 0 [ 797.077423][T10079] usb 6-1: config 8 interface 39 altsetting 1 has an endpoint descriptor with address 0xDF, changing to 0x8F [ 797.110120][T10079] usb 6-1: config 8 interface 39 altsetting 1 endpoint 0x8F has invalid wMaxPacketSize 0 [ 797.124527][T10079] usb 6-1: config 8 interface 39 altsetting 1 bulk endpoint 0x8F has invalid maxpacket 0 [ 797.175472][T10079] usb 6-1: config 8 interface 39 has no altsetting 0 [ 797.216879][T10079] usb 6-1: New USB device found, idVendor=05ac, idProduct=c704, bcdDevice=62.77 [ 797.244939][T10079] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 797.372841][T10079] usb 6-1: Product: syz [ 797.378022][T10079] usb 6-1: Manufacturer: syz [ 797.382957][T10079] usb 6-1: SerialNumber: syz Stopping sshd: stopped /usr/sbin/sshd (pid 5573) OK [ 797.742293][T10877] syz.6.1395 (10877): drop_caches: 2 [ 797.855379][T10885] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 797.874802][T10885] misc raw-gadget: fail, usb_gadget_register_driver returned -16 Stopping crond: stopped /usr/sbin/crond (pid 5559) OK [ 798.330599][ T30] audit: type=1800 audit(1748689761.587:364): pid=10909 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.4.1401" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0 [ 798.586374][T10914] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1404'. [ 799.093599][T10914] syz.3.1404 (10914) used greatest stack depth: 16872 bytes left [ 799.337677][T10079] ipheth 6-1:8.39: ipheth_get_macaddr: usb_control_msg: -71 [ 799.345397][T10079] ipheth 6-1:8.39: probe with driver ipheth failed with error -71 [ 799.372734][T10079] usb 6-1: USB disconnect, device number 9 Stopping dhcpcd... no /sbin/dhcpcd found; none killed [ 801.459572][T10935] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1411'. Stopping network: [ 802.111150][T10076] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 802.242096][T10954] netlink: 356 bytes leftover after parsing attributes in process `syz.1.1408'. [ 802.265541][T10954] openvswitch: netlink: Flow actions attr not present in new flow. [ 802.535832][T10076] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 802.549159][T10076] usb 7-1: New USB device found, idVendor=8086, idProduct=0b63, bcdDevice=ca.f3 [ 802.580993][T10076] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 802.600992][T10076] usb 7-1: Product: syz [ 802.605461][T10076] usb 7-1: Manufacturer: syz [ 802.631258][T10076] usb 7-1: SerialNumber: syz [ 802.650369][T10076] usb 7-1: config 0 descriptor?? [ 802.682965][T10076] ljca 7-1:0.0: bulk endpoints not found [ 802.885397][T10966] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1418'. [ 803.832931][T10979] overlayfs: failed to resolve './file1': -2 OK Stopping iptables: OK Stopping system message bus: [ 804.972626][T10076] usb 7-1: USB disconnect, device number 10 [ 805.429707][T11006] tipc: Enabling of bearer rejected, failed to enable media [ 807.555062][T11024] sctp: [Deprecated]: syz.4.1434 (pid 11024) Use of struct sctp_assoc_value in delayed_ack socket option. [ 807.555062][T11024] Use struct sctp_sack_info instead Unknown signal 33 done [ 808.792907][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 The system is going down NOW! Sent SIGTERM to all processes Connection to 10.128.0.28 closed by remote host. acpid: exiting Sent SIGKILL to all processes Requesting system poweroff [ 810.525493][T10700] bridge_slave_1: left promiscuous mode [ 810.536466][T10700] bridge0: port 2(bridge_slave_1) entered disabled state [ 810.547218][T10700] bridge_slave_0: left promiscuous mode [ 810.556395][T10700] bridge0: port 1(bridge_slave_0) entered disabled state [ 810.944377][T10700] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 810.954502][T10700] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 810.964666][T10700] bond0 (unregistering): Released all slaves [ 811.087903][ T977] usb 2-1: Direct firmware load for ti_3410.fw failed with error -2 [ 811.096216][ T977] usb 2-1: Falling back to sysfs fallback for: ti_3410.fw [ 811.104402][ T977] ------------[ cut here ]------------ [ 811.111232][ T977] WARNING: CPU: 0 PID: 977 at drivers/base/firmware_loader/fallback.c:148 firmware_fallback_sysfs+0x746/0x9b0 [ 811.123064][ T977] Modules linked in: [ 811.127210][ T977] CPU: 0 UID: 0 PID: 977 Comm: kworker/0:2 Not tainted 6.15.0-syzkaller-09113-g8477ab143069 #0 PREEMPT(full) [ 811.138900][ T977] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 811.149527][ T977] Workqueue: usb_hub_wq hub_event [ 811.155001][ T977] RIP: 0010:firmware_fallback_sysfs+0x746/0x9b0 [ 811.161415][ T977] Code: cc fb e9 5d fc ff ff e8 68 a4 cc fb c6 05 32 e8 95 09 01 48 c7 c7 e0 2c 08 8c e8 05 f3 33 fb e9 85 fc ff ff e8 4b a4 cc fb 90 <0f> 0b 90 4c 89 f7 48 c7 c6 c0 2d 08 8c 4c 89 e2 e8 a5 bc 38 fb e9 [ 811.181236][ T977] RSP: 0018:ffffc900038068d0 EFLAGS: 00010283 [ 811.187354][ T977] RAX: ffffffff85f39875 RBX: dffffc0000000000 RCX: 0000000000100000 [ 811.195502][ T977] RDX: ffffc900195d7000 RSI: 000000000003441b RDI: 000000000003441c [ 811.203891][ T977] RBP: 0000000000000001 R08: ffffffff8f9f7ef7 R09: 1ffffffff1f3efde [ 811.212490][ T977] R10: dffffc0000000000 R11: fffffbfff1f3efdf R12: ffffc90003806bd0 [ 811.221045][ T977] R13: 0000000000001770 R14: ffff888020ed20b0 R15: 00000000fffffff5 [ 811.229095][ T977] FS: 0000000000000000(0000) GS:ffff888125c99000(0000) knlGS:0000000000000000 [ 811.238104][ T977] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 811.244755][ T977] CR2: 00007f772a7b2de0 CR3: 0000000034d36000 CR4: 00000000003526f0 [ 811.253363][ T977] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 811.261832][ T977] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 811.269963][ T977] Call Trace: [ 811.273283][ T977] [ 811.276271][ T977] ? kmem_cache_free+0x18f/0x400 [ 811.281329][ T977] ? _request_firmware+0x6be/0x15b0 [ 811.286605][ T977] _request_firmware+0xf83/0x15b0 [ 811.291718][ T977] ? __asan_memcpy+0x40/0x70 [ 811.296413][ T977] ? __pfx__request_firmware+0x10/0x10 [ 811.302592][ T977] ? __pfx_sprintf+0x10/0x10 [ 811.307273][ T977] request_firmware+0x36/0x50 [ 811.312044][ T977] ti_startup+0x925/0x1580 [ 811.316969][ T977] ? __pfx_ti_startup+0x10/0x10 [ 811.322337][ T977] ? rcu_is_watching+0x15/0xb0 [ 811.327230][ T977] ? trace_kmalloc+0x1f/0xd0 [ 811.331888][ T977] ? usb_serial_probe+0x1c39/0x2d20 [ 811.337120][ T977] usb_serial_probe+0x2509/0x2d20 [ 811.342191][ T977] ? __pfx_ti_bulk_out_callback+0x10/0x10 [ 811.347960][ T977] ? __pfx_ti_bulk_out_callback+0x10/0x10 [ 811.354221][ T977] ? pm_runtime_enable+0x1f3/0x340 [ 811.359359][ T977] usb_probe_interface+0x641/0xbc0 [ 811.364951][ T977] ? __pfx_usb_probe_interface+0x10/0x10 [ 811.370701][ T977] really_probe+0x26a/0x9a0 [ 811.375250][ T977] __driver_probe_device+0x18c/0x2f0 [ 811.380922][ T977] driver_probe_device+0x4f/0x430 [ 811.386007][ T977] __device_attach_driver+0x2ce/0x530 [ 811.391490][ T977] bus_for_each_drv+0x251/0x2e0 [ 811.396381][ T977] ? __pfx___device_attach_driver+0x10/0x10 [ 811.402343][ T977] ? __pfx_bus_for_each_drv+0x10/0x10 [ 811.407754][ T977] __device_attach+0x2b8/0x400 [ 811.412649][ T977] ? __pfx___device_attach+0x10/0x10 [ 811.418346][ T977] ? do_raw_spin_unlock+0x122/0x240 [ 811.424141][ T977] bus_probe_device+0x185/0x260 [ 811.429042][ T977] device_add+0x7b6/0xb50 [ 811.433460][ T977] usb_set_configuration+0x1a87/0x20e0 [ 811.438974][ T977] usb_generic_driver_probe+0x8d/0x150 [ 811.444507][ T977] usb_probe_device+0x1c4/0x390 [ 811.449380][ T977] ? __pfx_usb_probe_device+0x10/0x10 [ 811.455302][ T977] really_probe+0x26a/0x9a0 [ 811.460420][ T977] __driver_probe_device+0x18c/0x2f0 [ 811.465757][ T977] driver_probe_device+0x4f/0x430 [ 811.470857][ T977] __device_attach_driver+0x2ce/0x530 [ 811.476299][ T977] bus_for_each_drv+0x251/0x2e0 [ 811.481622][ T977] ? __pfx___device_attach_driver+0x10/0x10 [ 811.487522][ T977] ? __pfx_bus_for_each_drv+0x10/0x10 [ 811.492995][ T977] __device_attach+0x2b8/0x400 [ 811.497928][ T977] ? __pfx___device_attach+0x10/0x10 [ 811.503284][ T977] bus_probe_device+0x185/0x260 [ 811.508155][ T977] device_add+0x7b6/0xb50 [ 811.512603][ T977] usb_new_device+0xa39/0x16c0 [ 811.517967][ T977] ? __pfx_usb_new_device+0x10/0x10 [ 811.523667][ T977] ? _raw_spin_unlock_irq+0x23/0x50 [ 811.528917][ T977] ? lockdep_hardirqs_on+0x9c/0x150 [ 811.534231][ T977] hub_event+0x2941/0x4a00 [ 811.538724][ T977] ? __pfx_hub_event+0x10/0x10 [ 811.543772][ T977] ? process_scheduled_works+0x9ef/0x17b0 [ 811.549540][ T977] ? _raw_spin_unlock_irq+0x23/0x50 [ 811.555302][ T977] ? process_scheduled_works+0x9ef/0x17b0 [ 811.561577][ T977] ? process_scheduled_works+0x9ef/0x17b0 [ 811.567338][ T977] process_scheduled_works+0xae1/0x17b0 [ 811.572984][ T977] ? __pfx_process_scheduled_works+0x10/0x10 [ 811.579005][ T977] worker_thread+0x8a0/0xda0 [ 811.583659][ T977] kthread+0x70e/0x8a0 [ 811.587756][ T977] ? __pfx_worker_thread+0x10/0x10 [ 811.592924][ T977] ? __pfx_kthread+0x10/0x10 [ 811.597546][ T977] ? _raw_spin_unlock_irq+0x23/0x50 [ 811.602793][ T977] ? lockdep_hardirqs_on+0x9c/0x150 [ 811.608004][ T977] ? __pfx_kthread+0x10/0x10 [ 811.612687][ T977] ret_from_fork+0x3fc/0x770 [ 811.617331][ T977] ? __pfx_ret_from_fork+0x10/0x10 [ 811.623236][ T977] ? __switch_to_asm+0x39/0x70 [ 811.628102][ T977] ? __switch_to_asm+0x33/0x70 [ 811.633380][ T977] ? __pfx_kthread+0x10/0x10 [ 811.638036][ T977] ret_from_fork_asm+0x1a/0x30 [ 811.642887][ T977] [ 811.645922][ T977] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 811.653217][ T977] CPU: 0 UID: 0 PID: 977 Comm: kworker/0:2 Not tainted 6.15.0-syzkaller-09113-g8477ab143069 #0 PREEMPT(full) [ 811.664873][ T977] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 811.674950][ T977] Workqueue: usb_hub_wq hub_event [ 811.680014][ T977] Call Trace: [ 811.683299][ T977] [ 811.686234][ T977] dump_stack_lvl+0x99/0x250 [ 811.690847][ T977] ? __asan_memcpy+0x40/0x70 [ 811.695447][ T977] ? __pfx_dump_stack_lvl+0x10/0x10 [ 811.700668][ T977] ? __pfx__printk+0x10/0x10 [ 811.705317][ T977] panic+0x2db/0x790 [ 811.709241][ T977] ? __pfx_panic+0x10/0x10 [ 811.713685][ T977] ? ret_from_fork_asm+0x1a/0x30 [ 811.718643][ T977] __warn+0x31b/0x4b0 [ 811.722642][ T977] ? firmware_fallback_sysfs+0x746/0x9b0 [ 811.728292][ T977] ? firmware_fallback_sysfs+0x746/0x9b0 [ 811.733942][ T977] report_bug+0x2be/0x4f0 [ 811.738305][ T977] ? firmware_fallback_sysfs+0x746/0x9b0 [ 811.743956][ T977] ? firmware_fallback_sysfs+0x746/0x9b0 [ 811.749605][ T977] ? firmware_fallback_sysfs+0x748/0x9b0 [ 811.755261][ T977] handle_bug+0x84/0x160 [ 811.759514][ T977] exc_invalid_op+0x1a/0x50 [ 811.764026][ T977] asm_exc_invalid_op+0x1a/0x20 [ 811.768885][ T977] RIP: 0010:firmware_fallback_sysfs+0x746/0x9b0 [ 811.775141][ T977] Code: cc fb e9 5d fc ff ff e8 68 a4 cc fb c6 05 32 e8 95 09 01 48 c7 c7 e0 2c 08 8c e8 05 f3 33 fb e9 85 fc ff ff e8 4b a4 cc fb 90 <0f> 0b 90 4c 89 f7 48 c7 c6 c0 2d 08 8c 4c 89 e2 e8 a5 bc 38 fb e9 [ 811.794843][ T977] RSP: 0018:ffffc900038068d0 EFLAGS: 00010283 [ 811.800924][ T977] RAX: ffffffff85f39875 RBX: dffffc0000000000 RCX: 0000000000100000 [ 811.808919][ T977] RDX: ffffc900195d7000 RSI: 000000000003441b RDI: 000000000003441c [ 811.816915][ T977] RBP: 0000000000000001 R08: ffffffff8f9f7ef7 R09: 1ffffffff1f3efde [ 811.824892][ T977] R10: dffffc0000000000 R11: fffffbfff1f3efdf R12: ffffc90003806bd0 [ 811.832887][ T977] R13: 0000000000001770 R14: ffff888020ed20b0 R15: 00000000fffffff5 [ 811.840926][ T977] ? firmware_fallback_sysfs+0x745/0x9b0 [ 811.846608][ T977] ? kmem_cache_free+0x18f/0x400 [ 811.851567][ T977] ? _request_firmware+0x6be/0x15b0 [ 811.856802][ T977] _request_firmware+0xf83/0x15b0 [ 811.861980][ T977] ? __asan_memcpy+0x40/0x70 [ 811.866611][ T977] ? __pfx__request_firmware+0x10/0x10 [ 811.872087][ T977] ? __pfx_sprintf+0x10/0x10 [ 811.876738][ T977] request_firmware+0x36/0x50 [ 811.881441][ T977] ti_startup+0x925/0x1580 [ 811.885883][ T977] ? __pfx_ti_startup+0x10/0x10 [ 811.890751][ T977] ? rcu_is_watching+0x15/0xb0 [ 811.895533][ T977] ? trace_kmalloc+0x1f/0xd0 [ 811.900144][ T977] ? usb_serial_probe+0x1c39/0x2d20 [ 811.905358][ T977] usb_serial_probe+0x2509/0x2d20 [ 811.910398][ T977] ? __pfx_ti_bulk_out_callback+0x10/0x10 [ 811.916142][ T977] ? __pfx_ti_bulk_out_callback+0x10/0x10 [ 811.921884][ T977] ? pm_runtime_enable+0x1f3/0x340 [ 811.927027][ T977] usb_probe_interface+0x641/0xbc0 [ 811.932186][ T977] ? __pfx_usb_probe_interface+0x10/0x10 [ 811.937832][ T977] really_probe+0x26a/0x9a0 [ 811.942359][ T977] __driver_probe_device+0x18c/0x2f0 [ 811.947663][ T977] driver_probe_device+0x4f/0x430 [ 811.952740][ T977] __device_attach_driver+0x2ce/0x530 [ 811.958120][ T977] bus_for_each_drv+0x251/0x2e0 [ 811.962981][ T977] ? __pfx___device_attach_driver+0x10/0x10 [ 811.968884][ T977] ? __pfx_bus_for_each_drv+0x10/0x10 [ 811.974290][ T977] __device_attach+0x2b8/0x400 [ 811.979074][ T977] ? __pfx___device_attach+0x10/0x10 [ 811.984383][ T977] ? do_raw_spin_unlock+0x122/0x240 [ 811.989603][ T977] bus_probe_device+0x185/0x260 [ 811.994470][ T977] device_add+0x7b6/0xb50 [ 811.998818][ T977] usb_set_configuration+0x1a87/0x20e0 [ 812.004320][ T977] usb_generic_driver_probe+0x8d/0x150 [ 812.009804][ T977] usb_probe_device+0x1c4/0x390 [ 812.014689][ T977] ? __pfx_usb_probe_device+0x10/0x10 [ 812.020075][ T977] really_probe+0x26a/0x9a0 [ 812.024590][ T977] __driver_probe_device+0x18c/0x2f0 [ 812.029900][ T977] driver_probe_device+0x4f/0x430 [ 812.034931][ T977] __device_attach_driver+0x2ce/0x530 [ 812.040314][ T977] bus_for_each_drv+0x251/0x2e0 [ 812.045181][ T977] ? __pfx___device_attach_driver+0x10/0x10 [ 812.051082][ T977] ? __pfx_bus_for_each_drv+0x10/0x10 [ 812.056476][ T977] __device_attach+0x2b8/0x400 [ 812.061264][ T977] ? __pfx___device_attach+0x10/0x10 [ 812.066578][ T977] bus_probe_device+0x185/0x260 [ 812.071448][ T977] device_add+0x7b6/0xb50 [ 812.075803][ T977] usb_new_device+0xa39/0x16c0 [ 812.080595][ T977] ? __pfx_usb_new_device+0x10/0x10 [ 812.085804][ T977] ? _raw_spin_unlock_irq+0x23/0x50 [ 812.091027][ T977] ? lockdep_hardirqs_on+0x9c/0x150 [ 812.096236][ T977] hub_event+0x2941/0x4a00 [ 812.100716][ T977] ? __pfx_hub_event+0x10/0x10 [ 812.105579][ T977] ? process_scheduled_works+0x9ef/0x17b0 [ 812.111318][ T977] ? _raw_spin_unlock_irq+0x23/0x50 [ 812.116641][ T977] ? process_scheduled_works+0x9ef/0x17b0 [ 812.122376][ T977] ? process_scheduled_works+0x9ef/0x17b0 [ 812.128106][ T977] process_scheduled_works+0xae1/0x17b0 [ 812.133689][ T977] ? __pfx_process_scheduled_works+0x10/0x10 [ 812.139709][ T977] worker_thread+0x8a0/0xda0 [ 812.144343][ T977] kthread+0x70e/0x8a0 [ 812.148445][ T977] ? __pfx_worker_thread+0x10/0x10 [ 812.153652][ T977] ? __pfx_kthread+0x10/0x10 [ 812.158261][ T977] ? _raw_spin_unlock_irq+0x23/0x50 [ 812.163474][ T977] ? lockdep_hardirqs_on+0x9c/0x150 [ 812.168683][ T977] ? __pfx_kthread+0x10/0x10 [ 812.173289][ T977] ret_from_fork+0x3fc/0x770 [ 812.177888][ T977] ? __pfx_ret_from_fork+0x10/0x10 [ 812.183010][ T977] ? __switch_to_asm+0x39/0x70 [ 812.187778][ T977] ? __switch_to_asm+0x33/0x70 [ 812.192557][ T977] ? __pfx_kthread+0x10/0x10 [ 812.197298][ T977] ret_from_fork_asm+0x1a/0x30 [ 812.202114][ T977] [ 812.205283][ T977] Kernel Offset: disabled [ 812.209706][ T977] Rebooting in 86400 seconds..