last executing test programs: 10.886159658s ago: executing program 1 (id=3966): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) socket$packet(0x11, 0x3, 0x300) r2 = socket$can_bcm(0x1d, 0x2, 0x2) r3 = syz_io_uring_setup(0x837, &(0x7f0000000180)={0x0, 0x779a, 0x80, 0x2000004, 0x3ce}, &(0x7f0000000000)=0x0, &(0x7f0000000140)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f0000000100)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r2, 0x0, &(0x7f0000000240)="144024aeae8b2b5d63f7449a372e1406d4defe495b5744eed6801d1d51e1d3fcdcf25bdf4a5f2ef4b45d6898757795c858f0c3d4b26bd64485", 0x39, 0x2400c0c7, 0x1}) io_uring_enter(r3, 0x3516, 0x0, 0x69, 0x0, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r6, &(0x7f0000000300)=@file={0x0, './bus/file0\x00'}, 0x6e) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) 7.248052451s ago: executing program 3 (id=3983): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) rt_sigprocmask(0x2, &(0x7f0000000100)={[0xd1429c4]}, &(0x7f0000000300), 0x8) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) r3 = socket(0x10, 0x3, 0x0) syz_usb_connect(0x5, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x14, 0xed, 0xe6, 0x8, 0x5ac, 0x243, 0x96a7, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x44, [{{0x9, 0x4, 0xea, 0x0, 0x0, 0x3, 0x1, 0x2}}]}}]}}, 0x0) r4 = socket$inet(0x2, 0x3, 0xd) syz_open_dev$vim2m(&(0x7f0000000000), 0x9, 0x2) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x7, 0x0, 0x0, 0xfffffffb}]}) getsockopt$inet_mreqsrc(r4, 0x0, 0x53, &(0x7f0000000000)={@dev, @local, @broadcast}, &(0x7f0000000040)=0x28) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000600)=@newqdisc={0x40, 0x24, 0x3fe3aa0262d8c583, 0x70bd2b, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x8, 0x2, [@TCA_HHF_EVICT_TIMEOUT={0x8, 0x6, 0x8}]}}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x5}]}, 0x40}}, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d000000850000000800000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0xe, 0x3}, {}, {0x5, 0x3}}}, 0x24}}, 0x40004) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="340000003e000900000000000008000003000000040004001c000180180010"], 0x34}}, 0x84) r8 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r8, &(0x7f00005f5000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000580)=ANY=[@ANYBLOB="020320001300000000000000000000000400030000000000000000000000000000000000000000010000000000000000030006000000000002004e206401010000000000000000000400040000000000feffffffffffffff00000000000000000000000000000000020001000000000000000000000000000300058b894d4753fa177621ff000000000000000000000001001800055f0000"], 0x98}}, 0x0) munmap(&(0x7f0000950000/0x2000)=nil, 0x2000) 5.617747432s ago: executing program 1 (id=3988): r0 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000380)=@newqdisc={0xc8, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r1, {0x0, 0x2}, {0xffff, 0xffff}, {0x0, 0xb}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x74, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x1], 0x0, [0x8, 0x4, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80], [0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x400]}}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x4000001}]}]}]}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x16, 0x5, 0x1, 0x5, 0x0, 0xffffffff, 0x7fffffff}}, {0x4}}]}]}, 0xc8}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 5.244448052s ago: executing program 1 (id=3991): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) io_setup(0x7, &(0x7f0000000280)=0x0) io_submit(r1, 0x1, &(0x7f0000000440)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x8, 0x6da7, r0, &(0x7f00000041c0)='\x00\x00\x00\x00\x00\x00\x00', 0x7, 0x10000, 0x0, 0x2}]) syz_usb_connect$uac1(0x0, 0xb1, &(0x7f0000000580)=ANY=[@ANYBLOB="12010000000000106b1d010140010102030109029f0003010000000904000000010100000a24010000000201020d24060000030800000031ce21c798329740594c137d0000000c24020201010608000010000c2402000000030000000000092406000601000000092403000000000500092406050001", @ANYBLOB="5964c94201d439b07fb67990cbc16d917ee6883e207ac936a414065390aff7239f8f0b1dc9ecb89f25108ea98daa7cec5c7ed4e02109b19f93fcc013a75a461c9ecac0939d5d490eea22ee90e7064bce55bea3f28a0539bd089a02d86baa5971e2948d1107bd9ecff7969caa25435634f768d1cc8a2f21279543b7b60f56ec851b4d82aa0527cc9a51775286966bd3e64ca46a52a6c6ec4ba6f60efd4edc2f9012c554383fc096cf053300"], 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'netdevsim0\x00'}) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000300), r2) sendmsg$ETHTOOL_MSG_PAUSE_GET(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)={0x14, r3, 0x1, 0x70bd25, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x4040000) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB="0000000300"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000000080)=0x5f3a, 0x4) r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f0000000380)={0xc}) r6 = getpid() r7 = syz_pidfd_open(r6, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB="38000000000101040000000000000900022000002400028014000180f7860100e000000108000200e00000010c0002800500010000000000"], 0x38}}, 0x0) setns(r7, 0x24020000) creat(&(0x7f0000000240)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) pipe2$9p(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x88800) write$P9_RVERSION(r11, &(0x7f0000000500)=ANY=[@ANYBLOB="1500000065ffff048000000800395032303030"], 0x15) r12 = dup(r10) write$FUSE_BMAP(r12, &(0x7f0000000100)={0x18, 0xffffffffffffffda}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r12, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x800000, &(0x7f0000000480)=ANY=[@ANYRESHEX=r9, @ANYBLOB=',wfdno=', @ANYRESHEX=r12, @ANYBLOB="2c6e6f78617474722c6331505331c6feae6bafa468652c616e616d653d402c70726976706f72742c63616368657461673d2f6465762f7474795333002c6b"]) umount2(&(0x7f0000000540)='.\x00', 0x2) r13 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x8, &(0x7f0000000780)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a800000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000700)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r13, 0x0, 0xc, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x10000}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800"/12], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20}, 0x94) 4.637997836s ago: executing program 0 (id=3994): r0 = memfd_create(&(0x7f0000000140)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdb\x00b\xe1br\xb6\xea7\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\xcf\xe1\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\xc7\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x04\xa7I\v\x86EZ\x96\xd5\x14OD\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38U\xcb\xfa\xb3j\x92\f\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\xd9w\\\xf8\xce\xb0j\x9d\'\x93\xef\x1d\xa0H\xcd\xbd\xd9\xaf\x12$\x8d\x16%\x8b\x00', 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='kmem_cache_free\x00', r2}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc9ffb}]}) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="1e00000010000000001000004105000010000000", @ANYRES32, @ANYBLOB="08000000000000000000000000000000000000004df7de5c05e6c0c0ed0ce42ce62c55954d7c22ab93950ab5bdb4721d3e70b1e3658f05", @ANYRES32=0x0, @ANYRES32, @ANYRES8=r0], 0x50) process_madvise(0xffffffffffffffff, &(0x7f0000000200), 0x1000000000000276, 0x0, 0x0) r3 = fanotify_init(0x4, 0x800) r4 = dup(r0) fanotify_mark(r3, 0x1, 0x4000101a, r4, 0x0) r5 = memfd_create(&(0x7f0000000340)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdb\x00b\xe1br\xb6\x008\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\xcf\xe1\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\xc7\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x04\xa7I\v\x86EZ\x96\xd5\x14OD\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38U\xcb\xfa\xb3j\x92\f\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\xd9w\\\xf8\xce\xb0j\x9d\'\x93\xef\x1d\xa0H\xd9\xbd\xd9\xaf\x12$\x8d\x16%\x8b\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000280), 0x8, &(0x7f0000000500)=ANY=[@ANYBLOB='gid']) ftruncate(r5, 0xffff) copy_file_range(r5, 0x0, r5, &(0x7f0000000080)=0x1000, 0x7, 0x0) 4.375753243s ago: executing program 2 (id=3996): r0 = syz_usb_connect$hid(0x0, 0x6c, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x27b8, 0x1ed, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000006c0)={0x24, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="00222d0f0000368daf452c173a38041574c015f307690fd792ef12392b65e4b1608978a223f982c3d33fb541a0ab12f22af4026e00a69d238af561d06b586cd688d02821c887b4ada0f15c163c0a0196cab0387c8a9449aa5c38e7bc13bc37a024894fd8e3a3a20ddc4cdad5cbfa8828fab35e41f983c2f768034fb354d9b077136a2833c5f6effe37c43039916c9281dd067eaa83e028f1bfd7745d6418bea92b9447d18c3c3d82d68cd2312d51b47c3c8e92734850cfbdc377fda3672129a78faf2ff2afb800"/209], 0x0}, 0x0) r1 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) getgroups(0x2, &(0x7f0000001080)=[0xee01, 0xffffffffffffffff]) keyctl$chown(0x4, r1, 0xee01, r3) setgroups(0x0, 0x0) keyctl$setperm(0x5, r1, 0x30925) keyctl$chown(0x4, r1, 0x0, r2) syz_usb_control_io(r0, 0x0, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB='$', @ANYBLOB], 0x24}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x2b38094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @mcast1, 0xa}, 0x1c) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f00000000c0)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') mkdir(&(0x7f0000000300)='./bus\x00', 0x0) chdir(&(0x7f0000000140)='./bus\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r5 = syz_init_net_socket$ax25(0x3, 0x2, 0xcf) r6 = socket(0x40000000015, 0x5, 0x0) bind$inet6(r6, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendto$inet6(r6, 0x0, 0x0, 0x0, &(0x7f0000000040)={0xa, 0x1, 0xfffffffc, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0xe79}, 0x1c) ioctl$sock_ax25_SIOCADDRT(r5, 0x890b, 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(0xffffffffffffffff, 0x40049366, &(0x7f0000000180)) syz_usb_connect(0x1, 0xb57, &(0x7f0000001340)={{0x12, 0x1, 0x300, 0x11, 0xf8, 0x1d, 0x40, 0x83a, 0xe503, 0x8cbd, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xb45, 0x4, 0x2, 0x8, 0xd0, 0xfe, [{{0x9, 0x4, 0x7a, 0xd, 0xd, 0x28, 0x2c, 0x2, 0x0, [@cdc_ncm={{0xb, 0x24, 0x6, 0x0, 0x1, "07182e0b3bac"}, {0x5, 0x24, 0x0, 0x9}, {0xd, 0x24, 0xf, 0x1, 0x4, 0x7, 0x2, 0x6}, {0x6, 0x24, 0x1a, 0x1ff, 0x4}, [@acm={0x4}, @network_terminal={0x7, 0x24, 0xa, 0x7, 0x5, 0x81, 0x1}, @mdlm={0x15, 0x24, 0x12, 0x1}, @mdlm={0x15, 0x24, 0x12, 0x180}, @network_terminal={0x7, 0x24, 0xa, 0xfc, 0x4, 0xf8, 0x7f}]}, @uac_as={[@format_type_i_discrete={0x11, 0x24, 0x2, 0x1, 0xf7, 0x2, 0x5, 0x6, "aff5ec6f2894e98370"}, @format_type_i_continuous={0xb, 0x24, 0x2, 0x1, 0x7, 0x3, 0x5, 0x81, "", "eb1aa9"}, @format_type_i_discrete={0x10, 0x24, 0x2, 0x1, 0x18, 0x3, 0xf, 0x1, "f7c47762f3e23e16"}, @as_header={0x7, 0x24, 0x1, 0x5, 0x89, 0x3}, @as_header={0x7, 0x24, 0x1, 0x80, 0x81, 0x2}]}], [{{0x9, 0x5, 0x4, 0x10, 0x3ff, 0xc, 0xe, 0xbd, [@generic={0x5f, 0x4, "ec426af3230c1e25957fbb5c495a8acb918dff0cf7903846725ff8f3d9127db173a5a387d01f58bfe6bf7350ee5b0bd6142dff8ea184cc0ada3e621328382d29991311b8b7b586403a7c7a1b8480ae54b59065bda0a12fd18e2878bef0"}, @uac_iso={0x7, 0x25, 0x1, 0x80, 0x2}]}}, {{0x9, 0x5, 0x80, 0x0, 0x400, 0xff, 0x4a, 0x8, [@generic={0x13, 0xb, "db080099655c3da2b1fbc1247e898e12b4"}]}}, {{0x9, 0x5, 0x5, 0x12, 0x200, 0xfa, 0x2, 0x40}}, {{0x9, 0x5, 0x4, 0x0, 0x20, 0x9, 0x7, 0x2, [@generic={0x3b, 0x2, "25678f6405fba979835d2bcb4b28626d762c32842ac0f9258fbeabb714a8ad6d8900c727bd408a8bfe74c9ef2a1070760edd4272ed2115becf"}, @generic={0x3e, 0xe, "107c46f74d333a1d699f0c889195281b851f18cd0bf07509f453baf295b9b3d84687f53c3a63ef48350f0b74e175d0ba24961a315268237d035d78a6"}]}}, {{0x9, 0x5, 0x3, 0xc, 0x10, 0x0, 0xc, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x7}]}}, {{0x9, 0x5, 0xa, 0x4, 0x40, 0x9, 0x30, 0x4}}, {{0x9, 0x5, 0x80, 0x10, 0x200, 0x0, 0xf6, 0x81, [@generic={0xc, 0x6, "8ffa1cd7b86c35810f0d"}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0x8}]}}, {{0x9, 0x5, 0x5, 0x8, 0x1a0cc7d8bb580945, 0x8c, 0xf2, 0x3}}, {{0x9, 0x5, 0x6, 0x2, 0x8, 0x1, 0x2, 0x9}}, {{0x9, 0x5, 0xa, 0x0, 0x8, 0x5, 0x80, 0xf0, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x7, 0x4e}]}}, {{0x9, 0x5, 0xb, 0x0, 0x400, 0x40, 0xe, 0x5, [@generic={0x4c, 0x30, "c5194282be27c74742fd263c24fdccf753c2eda749591cf8408ac62a5e84d31ce20b3e669614ff80e9f18de652ef40aeb2262b3d4a191232f82f863a116a205c7fa0039221fcab18b211"}, @uac_iso={0x7, 0x25, 0x1, 0x3, 0x3, 0xff}]}}, {{0x9, 0x5, 0x80, 0x0, 0x20, 0x7, 0x7, 0x7}}, {{0x9, 0x5, 0x2, 0x10, 0x10, 0x59, 0x93, 0xa9}}]}}, {{0x9, 0x4, 0x36, 0x7, 0x9, 0xa2, 0x22, 0xcd, 0x7, [@generic={0x1f, 0xe, "b9e65944d76ad02042c965388bf723f08544483525d53dda4da92558a5"}], [{{0x9, 0x5, 0x7, 0x10, 0x8, 0x9, 0x6, 0x8, [@generic={0xb4, 0x30, "6a9e4446e0144dee9b46185186eae87ca17f8fe111347aedb5739394de91c4810e20bbaa1ab23c5ab064554db954fbec1f3582c0e151b8d9e75696a76a80aa9f449bf5eebae3e35eb019a0c80e7a092e8c879ceb7b4e36e09ff6accc1efa8f40f122d630935f55b701bba2229ab320de04cae2c273a7acce8e325b56b1d6263dfb4044b9f3c692c8a555e2ba1e683ad4b1347242dc86ced95122a813b1bebc8495d06b9fd7ded9a668acc7cde08f5b0ed594"}]}}, {{0x9, 0x5, 0xa, 0xd, 0x40, 0x2, 0x1, 0xfd, [@generic={0x2b, 0x23, "330df3114c51bc94ce77bd3a17a37c18fe0901d54d0955d72ca5651d3b6b427d38c1fc590bc1a7bb85"}]}}, {{0x9, 0x5, 0x8, 0x0, 0x10, 0x2, 0x5, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x83, 0x3, 0x6}]}}, {{0x9, 0x5, 0x8, 0x3, 0x40, 0x7, 0x4, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x3, 0xfe8f}, @generic={0x5d, 0x31, "281ddc14bba22ee7e0f953b7d652d9b95ff7ec5c6b048d0c70a842f4e90d76e4db6f4e327c873a047bf2eb1ac39bd65b53f8f7bdbc91a5e30096c1f1df46083b365cc97267b791863cdd5c9a4a6d3d725d960249abd836bbb0b1f8"}]}}, {{0x9, 0x5, 0x4, 0x3, 0x20, 0x1, 0x1, 0xcf, [@generic={0xa6, 0x4, "f975b81e747c1e797fa0b30acd7ff23913c86fe5f70df8c6c495c0732e3edd0f920ae7eebbc66b8289a0077d4b8be406f0e724034e5423fcc7293778fdabad09d2931d0767b0f889c69e64126a4c18230515692cdc4264ef50fa30e56ec3332ecba3b243517ea6a6669cff6d82034d093007c7b5c9a5f3cad4d2b8a85a72ab481693af3b0955df9da0603eb5a5d0adfe93abdebd66747c163d77a1be3780f11e5454e6a7"}]}}, {{0x9, 0x5, 0x4, 0x0, 0x28, 0x7f, 0x8, 0xf, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x0, 0x1}, @generic={0x94, 0xd, "0e7070aa38b3a14ff50f3ea0dc11926c17df6f35449fbfc7de4ef829691a21e211c2f6011f15708f0e0a1afdcd9cb3df7ba47b5c547fd96187008d67c9804c1a28cae02a63506efec81a3c767920a938f6ba272c39b7df73e8a12e099b54bdadfb8f97dca09abf5ee13e66f8a014c633384d4bb402e1fe398325a31b3b07ff60616b750dbfde8a9d63a29756eef0524ef40a"}]}}, {{0x9, 0x5, 0x80, 0x3, 0x400, 0x45, 0x19}}, {{0x9, 0x5, 0x80, 0x3, 0x8, 0x7, 0x7f, 0x9}}, {{0x9, 0x5, 0x1, 0x0, 0x3ff, 0x1, 0xd1, 0x7f}}]}}, {{0x9, 0x4, 0x4, 0x9b, 0x3, 0x1d, 0xd0, 0x10, 0xdb, [@cdc_ecm={{0x9, 0x24, 0x6, 0x0, 0x0, "2a0930a0"}, {0x5, 0x24, 0x0, 0x8}, {0xd, 0x24, 0xf, 0x1, 0xb, 0x10, 0x1, 0x7}}], [{{0x9, 0x5, 0x7, 0x20, 0x20, 0x8, 0x5, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0x11, 0x3}, @generic={0xdd, 0xd, "38a255e5b2afdb5386cc36ad789a1dae00431c9adbba092de15daf20884e6f94719b5d1a83b0c67d33e7a79003253e481ed78c2bae2a6a0f24b04a9be62c626596ae180eee934b03fb6476085ada7996fcb3d1350c67222341f65552bcee4d3b7babd8baad033aa4d2752879f33cfae39505f1d582ea792a8f70e0d4bab0c3d72cc360ea78b56d4be0df955e477dda8a96efa8edb3d64f985ecb82f1f8089f924f5b5f37ddbbca878c52697f5e16483f0a5eda7022f6a4f5486059be890eb773f7cc62f7cc1a104ff78961cf7f3f974b5ce9579ca01cb94abfe7b9"}]}}, {{0x9, 0x5, 0x8, 0x1, 0x40, 0x3, 0xfd, 0x7, [@generic={0xd4, 0x1, "f696622341a34cc584dd7938f1511fdff5ba366ff298912a80cee321b586d9211d3c670c9de7f6e2d40d0bc1ff8e861689d1e7147ec4bca781a45f215e6f770ddf762873e0e85b25f9a70051e45a450ea1cb8f4e2cd422cc994eaf665807935e9e3918eed8346cc98d994eb633dd5952f0d2d199c90dfcf8443ccf6f66c8819467ed381314c24684456e3a6fe832d2f24ef47388bdbd7d0524b817a752cf75ca95d2055dabfd6bcb2ecaab7207125741e67cb90d328c12c90c823aa2f336f02da78a7944c67dca82c6ccec1442cd97958709"}, @uac_iso={0x7, 0x25, 0x1, 0x3, 0x6}]}}, {{0x9, 0x5, 0x3, 0x10, 0x8, 0x3, 0x67, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x5, 0x3}, @generic={0xe8, 0x3, "dac90d4097e529fecf36d9df18171446999daadd95a9439d1284e1e1b545e44643217400dcb0755366845ddef224415fe155b3ca923e99aaeb486e3e814ceec38b2fec1c7ad3792b2ce35f738c07c9b33e7a64c23e2c56a8f6b8d65615953889fd0c827751098100882e1f012d480bc648a33b69131f8f0c251ffd2ef55f93bc915574ba36c7b79b82abb3962f31d4c3ad7c4fc7b0f6f51236adc0cff3906fc14b69f7eb1429086824339d84ad498a1896fe96efc6862c09a2500e2eeb3e6bfbbf0f0e0788a414739e0b7fa988ef680ea13ea374a7013535b6afef2655d89dc0cae18ad29a58"}]}}]}}, {{0x9, 0x4, 0x84, 0x9, 0x4, 0xd8, 0x2a, 0xe7, 0x1, [], [{{0x9, 0x5, 0x0, 0x1, 0x10, 0xe, 0x6, 0x9, [@generic={0xc, 0x4, "068a61681264af0eaaa8"}, @generic={0x30, 0xe, "4b753200953b9e7db3130c9106314336873ae3b814427ec6eef29bc07413a7b6ac47fdc598d6bfaaa0adb0d92154"}]}}, {{0x9, 0x5, 0xf, 0x3, 0x8, 0xf7, 0xff, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x102, 0x8f, 0x2}, @generic={0x100, 0x10, "c498c2fcc191110e353c634da696f2a1e6df6334d327b5691a4dc07fcb856cf977de5d1ef3aa945a91b5f7b5155720852c25e7b5cc429a1a52b197ad41feb699b697f288e604213f29c70221caf2bcbdea5fa6cd3d404690229dcc2838af6d4e103c2170a4ed8b689be1562c09cadff94ee6e8534e2ff8d475b1c931028f0ee609de714b4ab82f07c41d3b3727a7893d2dad8d3dae3c272d1bcd4b50e69b73b26b15e156b187634ae1f35fc8ab5937b65974f2ced2a16c6a1becef0749689a44f54eb189b8e0459602202354642e5ae6fedf80dd868ff0f6610239828a295277806a7a258c4c16070e7008540dcd794bd7ebc89a93010dae6f879870c91b"}]}}, {{0x9, 0x5, 0xe, 0x0, 0x200, 0x3, 0x5, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x9, 0xfffa}, @generic={0x42, 0x6, "3e2700595dbeb3e99edb16b3434d7f18e9b63c29877861d1ee344361d72ee86e7a446fd7aeb518343cfeafe199e64d2dabab10c5285570988ac2ffc5bd5db6d9"}]}}, {{0x9, 0x5, 0x7, 0x0, 0x10, 0x3, 0x5, 0x3, [@generic={0x35, 0x24, "264efc61dbee776fc781d67f5c04c9ca50342a087d327ddfaa85776dd2f0c74609cdfcbaefd79955ec1a2fd2914ca40d6f076d"}, @generic={0xe0, 0xe, "0d7b09aa85bc77930af5a9873cbcd4b94b24821984f8bd2ae7b21ee72d3999dd1d3952a68f8ef0858e8e55b2b78d2ec282c1163d45b8c7e06dfe35b57c422b21bbaa4de4871a994e386a21548997ada0346563877ab85497cfbede8828aa0ee49660bacac476c6623f9c491e5e7bc9339b6012f9b76a8dcb95cf7e77e25bac3ea66ec5592556ddeff28030760500e9bcea549889a445d43bcc2d90e07f377a9170be590a8e8532b7d5953647c7ca9bee45c78b5a99fe5abce2434cfe723bfc6f0b4f7f9590d46644ce95419f65b510fe89f83f1c9ddde30ce6c182bcb4b0"}]}}]}}]}}]}}, &(0x7f0000000100)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x310, 0x0, 0x2, 0x4, 0x20, 0xb}, 0x5, &(0x7f0000000040)={0x5, 0xf, 0x5}}) 4.375040704s ago: executing program 0 (id=3997): r0 = socket$pppoe(0x18, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) faccessat(0xffffffffffffffff, 0x0, 0x1b9) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) process_vm_writev(0x0, 0x0, 0xffffffffffffffa6, 0x0, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/tty/drivers\x00', 0x0, 0x0) read$FUSE(r4, &(0x7f0000000480)={0x2020}, 0x2020) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={r6}, 0x4) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0x18, &(0x7f0000000380)=@framed={{}, [@printk={@i, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x7}, {0x85, 0x0, 0x0, 0xb0}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x10001}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r6}}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x32}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) fsetxattr(0xffffffffffffffff, &(0x7f0000000000)=@known='security.selinux\x00', 0x0, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000004c0)={r7, 0xe0, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000180)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f00000001c0), &(0x7f0000000240)=[0x0, 0x0, 0x0], 0x0, 0x2e, &(0x7f0000000280)=[{}, {}, {}], 0x18, 0x10, &(0x7f0000000300), &(0x7f0000000440), 0x8, 0x23, 0x8, 0x8, &(0x7f0000000480)}}, 0x10) connect$pppoe(r0, &(0x7f0000000000)={0x18, 0x0, {0x1, @broadcast, 'lo\x00'}}, 0x1e) ioctl$PPPOEIOCSFWD(r0, 0x4008b100, &(0x7f00000002c0)={0x18, 0x0, {0x1, @broadcast, 'lo\x00'}}) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 4.356753842s ago: executing program 1 (id=3998): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) socket$packet(0x11, 0x3, 0x300) connect$can_bcm(0xffffffffffffffff, &(0x7f0000000140), 0x10) r2 = syz_io_uring_setup(0x837, &(0x7f0000000180)={0x0, 0x779a, 0x80, 0x2000004, 0x3ce}, &(0x7f0000000000)=0x0, &(0x7f0000000140)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000100)=@IORING_OP_SEND={0x1a, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000240)="144024aeae8b2b5d63f7449a372e1406d4defe495b5744eed6801d1d51e1d3fcdcf25bdf4a5f2ef4b45d6898757795c858f0c3d4b26bd64485", 0x39, 0x2400c0c7, 0x1}) io_uring_enter(r2, 0x3516, 0x0, 0x69, 0x0, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r5, &(0x7f0000000300)=@file={0x0, './bus/file0\x00'}, 0x6e) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) 3.655498748s ago: executing program 4 (id=3999): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x24}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000840)="3373e24019261c1d65fbe0dfef043e3e004dad0b69cbf8d4bfb5f45785587c2c3b570f8ef27794355485cffeb3232da6300ca4b68a89ec401e54b152d94ab39d1639903c724d3705415942e93e6719a1bd478ffa4551b4f7316dfb3384fbde3421a103c6480d112862dc898d850fe83320b39da00cfc75301b10bac53172d96c5848ea9e00dd35d4954bd41e8b17d87de3112e998186361cb3d0602f5e57cb893ff86819cccd254324baee8f", 0xac) r2 = accept4(r1, 0x0, 0x0, 0x800) openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0x109140, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000580)={&(0x7f00000007c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000ac0000000090a05000000000000000000050000092c0011800b0001002f626a72656600001c0002800800034000000008080001400000000608000340000000120900020073797a3100"], 0xe8}, 0x1, 0x0, 0x0, 0x20014840}, 0xc010) r3 = socket$rds(0x15, 0x5, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$SEG6_CMD_SETHMAC(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x34, r5, 0x1, 0x0, 0x0, {}, [@SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x1}, @SEG6_ATTR_SECRET={0x8, 0x4, [0x0]}, @SEG6_ATTR_ALGID={0x5}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x1}]}, 0x34}}, 0x0) sendmsg$SEG6_CMD_SETHMAC(r2, &(0x7f0000000680)={&(0x7f00000002c0), 0xc, &(0x7f0000000340)={&(0x7f0000000740)={0x48, r5, 0x100, 0x70bd29, 0x25dfdbfc, {}, [@SEG6_ATTR_ALGID={0x5, 0x6, 0x8}, @SEG6_ATTR_DST={0x14, 0x1, @mcast1}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x10001}, @SEG6_ATTR_SECRET={0x10, 0x4, [0x2, 0x5, 0x1ff]}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000) sendmsg$rds(r3, &(0x7f0000000640)={&(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x0) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f00000006c0)=ANY=[@ANYBLOB="0c070000ca210adcb590246cd221b267d9d7e7b77ab461f6e5d120097d8c9944ef55d50126859361844161e210d8", @ANYRES16=r6, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r7, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 3.523748698s ago: executing program 2 (id=4000): socket$inet_udp(0x2, 0x2, 0x0) socket$inet6(0xa, 0x1, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socket(0xa, 0x3, 0x3a) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)=ANY=[@ANYBLOB="01000000000000000f478ef8ed"]) r0 = openat$kvm(0xffffff9c, &(0x7f0000000500), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa"], 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x2, 0x9, 0x0, 0x2, 0x10000, 0x0, 0x4002004c4, 0x1000, 0x0, 0x200, 0x0, 0x0, 0x3, 0x0, 0x0, 0x8c], 0xeeee8000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) socket$netlink(0x10, 0x3, 0x0) socket(0x2c, 0x803, 0x0) socket$tipc(0x1e, 0x4, 0x0) socket$tipc(0x1e, 0x5, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) socket$inet6_sctp(0xa, 0x1, 0x84) openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) socket(0x2c, 0x3, 0x0) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x20c01, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/meminfo\x00', 0x0, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000013c0)=ANY=[@ANYBLOB="640000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c0002001c0000001f000000060001000000000008000500", @ANYRES32=r3, @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYBLOB="0a000100000070"], 0x64}}, 0x0) 3.520870968s ago: executing program 3 (id=4001): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) clock_gettime(0x0, &(0x7f0000000280)) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000040)={@map, 0xffffffffffffffff, 0x12, 0x4000, 0x0}, 0x20) pipe(&(0x7f0000000080)={0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) splice(r1, 0x0, r2, 0x0, 0x4ffe6, 0x0) r3 = socket(0x10, 0x803, 0xffffffff) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f00000002c0)={'veth0_to_bond\x00', &(0x7f0000000000)=@ethtool_channels={0x3d, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2}}) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000060a0b040000000000000000020000002c0004802800018007000100637400001c0002800800014000000002080002400000000b05000300000000000900010073797a30000000000900020073797a320000000014000000110001"], 0x80}}, 0x0) socket$unix(0x1, 0x3, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) getsockopt$bt_BT_RCVMTU(r3, 0x112, 0xd, &(0x7f0000000180)=0xfff9, &(0x7f0000000240)=0x2) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000001480)={{0x7f, 0x45, 0x4c, 0x46, 0x9, 0x2, 0x0, 0xb, 0xffffffffffffffcd, 0x3, 0x3, 0x53d1, 0xf0, 0x40, 0x300, 0x6, 0xfff, 0x38, 0x2, 0x4, 0x4, 0x7}, [{0x5, 0x9, 0x6, 0x7, 0x5, 0x4, 0x2, 0x8}, {0x6474e551, 0x6, 0xc, 0xa36, 0x3, 0x3, 0x3, 0x8}], "f8ca2c73ae36629002835013fba8a37031a6284dbb2b37727167623987eebd6673e392fafd9ce3d6a3592126ced582e325e5081c4535766117588c00f9127889fb40f605262ca1cab9b94df3fd7b07197bf949115b11b319bf8ab9c441ab70081a38c25e2e9bfe3915451ed09ceb1fd633d4b599236bb6879ab5e464946ed4952b82ff8232c90ffe0503471d86b7f4e05b752fc5416b38d6decc52be3ed2ed462798b4a0e33fe3d07600c1231d03a543106badafbc30a58b721429dc2367aed3f93cc36fde12d26d2c67e1db3a", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0x87d) bind$can_raw(0xffffffffffffffff, &(0x7f00000001c0)={0x1d, r5}, 0x10) recvmmsg(0xffffffffffffffff, &(0x7f0000003a00)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000480)=""/4096, 0x1000}, {0x0}], 0x2}, 0x6}], 0x1, 0x40000002, 0x0) setsockopt$CAN_RAW_RECV_OWN_MSGS(0xffffffffffffffff, 0x65, 0x4, &(0x7f00000003c0)=0x1, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000280)=0x2, 0x4) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x16c}}, 0x24) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x11, 0x4, 0x4, 0x5}, 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000157b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000240)={r7, 0xffffffffffffffff, 0x500}, 0x57) sendmsg$can_raw(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=@can={{0x4, 0x0, 0x0, 0x1}, 0x6, 0x0, 0x0, 0x0, "0300"}, 0x10}, 0x1, 0x0, 0x0, 0x4000}, 0x0) socket$kcm(0x2, 0xa, 0x2) r8 = syz_usb_connect(0x3, 0x2d, &(0x7f0000000040)={{0x12, 0x1, 0x310, 0x11, 0x39, 0x5b, 0x40, 0x5d8, 0x810c, 0x185f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x6, 0x1, 0xf0, 0x8, [{{0x9, 0x4, 0xc8, 0x8, 0x1, 0x7f, 0xf8, 0xae, 0x4c, [], [{{0x9, 0x5, 0x1, 0x3, 0x200, 0x7, 0x5, 0x6}}]}}]}}]}}, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r8, &(0x7f0000000880)={0x14, 0x0, &(0x7f0000000840)=ANY=[@ANYBLOB='\n ']}, 0x0) syz_usb_control_io$printer(r8, &(0x7f0000002900)={0x14, 0x0, &(0x7f00000028c0)={0x0, 0x3, 0x2, @string={0x2}}}, 0x0) syz_usb_ep_read(r8, 0x1, 0xc7, &(0x7f0000000080)=""/199) 3.33222414s ago: executing program 0 (id=4002): r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) bind$inet(r0, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) (async) bind$inet(r0, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x0) getsockopt(r0, 0x200000000114, 0x2713, &(0x7f0000000580)=""/102379, &(0x7f00000000c0)=0x18feb) (async) getsockopt(r0, 0x200000000114, 0x2713, &(0x7f0000000580)=""/102379, &(0x7f00000000c0)=0x18feb) socket(0x2, 0x2, 0x1) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) (async) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mremap(&(0x7f000020e000/0x2000)=nil, 0x2000, 0x400000, 0x3, &(0x7f000082a000/0x400000)=nil) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) (async) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x7, 0xe, &(0x7f00000011c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000340)}, 0x42) 3.268584595s ago: executing program 0 (id=4003): bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x4000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) mmap(&(0x7f0000fa1000/0x4000)=nil, 0x4000, 0xb, 0x13, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) madvise(&(0x7f00001ff000/0x3000)=nil, 0x3000, 0x4) chown(&(0x7f0000000240)='./file0\x00', 0xee00, 0x0) munmap(&(0x7f0000002000/0x2000)=nil, 0x2000) io_uring_enter(0xffffffffffffffff, 0x2ded, 0x4000, 0x0, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x14, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = io_uring_setup(0x4d40, &(0x7f0000000240)={0x0, 0xca66, 0x40, 0x1, 0x4}) io_uring_register$IORING_REGISTER_RESTRICTIONS(r5, 0xb, &(0x7f0000000480), 0x61) connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) 3.207355755s ago: executing program 4 (id=4004): r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000500), 0x40401, 0x0) socket$kcm(0x10, 0x400000002, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xf, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000200b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000080)='mm_page_alloc\x00', r2}, 0x10) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x39000, 0x0) r3 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000200)={'veth1_to_team\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)=@newqdisc={0x34, 0x24, 0x3fe3aa0262d8c583, 0xfffff7fd, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xc}, {0xffff, 0xffff}, {0x8, 0xd}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x4, 0x8002}}]}, 0x34}}, 0x68010) ppoll(&(0x7f0000000380)=[{r0, 0xa6aa}], 0x200000000000001e, 0x0, 0x0, 0x0) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r6}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000400)=0x7) r7 = getpid() syz_init_net_socket$netrom(0x6, 0x5, 0x0) r8 = syz_pidfd_open(r7, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r9 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) writev(r9, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) pselect6(0x40, &(0x7f0000000000)={0x3, 0x1000000000000000, 0x8000000000000000, 0x0, 0x0, 0x0, 0x0, 0x10000000}, 0x0, &(0x7f00000002c0)={0x3ff, 0xfff, 0x0, 0x8, 0x0, 0x0, 0x2, 0x100000000004}, 0x0, 0x0) close_range(r8, 0xffffffffffffffff, 0x0) setresuid(0x0, 0xee00, 0x0) r10 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x8, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007baaf8ff00000000b5080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0fdffffb70200000800000018230000", @ANYRES32=r10, @ANYBLOB="0000000000000000b705000008000000850000006900000095"], &(0x7f0000000300)='GPL\x00', 0x8, 0xff7, &(0x7f0000001e00)=""/4087}, 0x90) dup(r5) lseek(r5, 0x5, 0x1) 3.161750638s ago: executing program 2 (id=4005): r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x3, 0x2) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=@newlink={0x4c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x215, 0xffe}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_MTU={0x8, 0x4, 0x8}]}, 0x4c}, 0x1, 0xba01, 0x0, 0x4010}, 0x4000000) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x2, 0x2, 0x4}) keyctl$set_reqkey_keyring(0xe, 0x5) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000100), 0x0, 0x0) read$msr(r3, &(0x7f0000032680)=""/102400, 0x19000) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, 0x0) write$cgroup_devices(r4, &(0x7f0000000840)=ANY=[@ANYBLOB="1e03"], 0xffdd) socketpair$tipc(0x1e, 0x2, 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000040)=ANY=[], 0x38}, 0x1, 0x0, 0x0, 0x20044004}, 0x20000084) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="f80000003e000701feffffff00000000017c0000040042800c00018006000600800a0000d1000280cb0014"], 0xf8}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) socket$kcm(0x2b, 0x1, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x40800, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r8, 0x4020ae46, 0x0) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r9, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000100)=0xa45) ioctl$KVM_RUN(r9, 0xae80, 0x0) r10 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_SET(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000880)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="01002cbd7000fbdbdf2505000000200001800d0001007564703a73797a3000000000050002800800040002000000"], 0x34}, 0x1, 0x0, 0x0, 0x48c05}, 0x4040140) 2.895980842s ago: executing program 2 (id=4006): openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000600)={0x0, 0x0, @pic={0x9, 0xcc, 0x1, 0x4, 0x2, 0x1, 0x1, 0xff, 0x5, 0x1, 0xe, 0x9, 0xa, 0x2, 0xd, 0x5}}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x8, 0x0, 0x0}, 0x94) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r2 = epoll_create1(0x0) epoll_pwait2(r2, &(0x7f0000000640)=[{}], 0x1, &(0x7f0000000080)={0x0, 0x3938700}, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x68040, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x0, 0x7, 0xfffffffffffffffe, 0x40, 0x0, 0x7, 0x2000000000044, 0x0, 0x8000000000000, 0x5, 0x0, 0x9, 0x0, 0x0, 0x7, 0x1], 0x6000, 0x3c2a10}) syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000340)={0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="0100000000000000560000000000000066ba2000b0e2ee41"], 0x6e}) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000000)={0x0, &(0x7f0000000940)=ANY=[@ANYBLOB="010000000000000000000000000000000f20e035000010000f22e066baa00066b8080066ef66440ff23746a80265410f30"], 0x1d6}) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000440)=ANY=[@ANYBLOB="24000000240035b90000000000000000070000000600040000ef"], 0x24}}, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r4, 0x4010ae67, &(0x7f0000000040)={0x0, 0x12000, 0x1}) ioctl$KVM_RUN(r6, 0xae80, 0x0) 2.518453665s ago: executing program 3 (id=4007): r0 = syz_usb_connect$uac1(0x0, 0xad, &(0x7f0000000400)=ANY=[@ANYBLOB="12010000000000106b1d010140000102030109029b00030100000009040000000101"], 0x0) syz_usb_control_io(r0, &(0x7f0000000040)={0x2c, 0x0, &(0x7f0000002080)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x5b}}, 0x0, 0x0, 0x0}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000020c0)={0x1994, 0x3d, 0x9, 0xffffffff, 0x0, {0x1}, [@nested={0x1969, 0x115, 0x0, 0x1, [@generic="a1cbfcdd86945415549e2272f8eec2594f3d432116f58c1e80a1069057d511c29d0e700e59b9bc1c28de07b21ddb7a51ca11f704a45fb48a38fa2391ffe930f7b5fbd7924614fc589bac3ccf28eab2855961f761954f56e394954cc8f957fbd2eec23e961d423a079a2717d2c24814", @typed={0xc, 0x8a, 0x0, 0x0, @u64=0x5}, @generic="c4a38f8aca8be8f0ed88b8ecce111fc596f71509719809fd4ebba64388258b4ba87207044be3bde3389897722f5c6689b48f27467885af527e367a018ec4cb2e9c2be952ed14d5672c45950c57b6ec710a2b1d9f51eee045c6aec93c2340e9693e60d404e49be16b29b27d1bbb99a6b02b979fbb90c8", @generic="f15e10b7369a8342ec3a01c1c4b390130d7d1910b6e1f5aef941b4bd4227978e465a206e6bcb90b2116859bb0035962730c22b108021a38b4eb3e42bbff74be16c94d0b9c863af3a500eb136a6a7ad10", @generic="f591d3a42ff5a7c65335d81e744d4af4667afafc915c8d8068c3c104c0e2adc7b3d3e0363d4a62511925417fe3037d190ffb008fad6ccff1dc47619af038d7401a588b16fbfd957446888f8f2c1beb353d2bfcaa837d66151ab40d3943b4c0bf08780673e033d8059ef6444d2ecf33a6b18a1f31added6a053fc23dd7e25c12a91d223b08df95c5ec569f768d6c0748f92c5fc75a15b01c83aeb056df8b1a1db", @nested={0x1783, 0xd5, 0x0, 0x1, [@typed={0x4, 0x6d}, @typed={0x8, 0x64, 0x0, 0x0, @ipv4=@remote}, @generic="0e415150b171b419dc7ca15025c525a101f52ca92f3785b67c6ef0b0bf5023bfcab327f311f11442c8b6820004f282d62d3669f1696b4af080d8cf5dcc8c618fb5292d5507cb60", @nested={0x1718, 0xe6, 0x0, 0x1, [@typed={0x7, 0x134, 0x0, 0x0, @str='#,\x00'}, @generic="186b54986e35ac09135b70c8598583990e1eef80adf26bb4eeac2cd9f77344e5e992c9b0783d85ffdcc4ea6f9d5c0f10d3cc7f266e7d2b08e95efea107d1c3b08a252aa7afaa9ef7a09c7a6b842ff79400cd39617931915e0907a03fa8a29075f873a8175e57112c5e5b9f7d9f", @nested={0x1433, 0x8b, 0x0, 0x1, [@generic="fc592a6105dfa0aa6e9c0fac6d346800dc6e04bf7305b39e404c3eac1696d1b153db280edb1df50be4be5cbe62ecfc91e2b5742fd717da24aeea92f95c39c150bd580d34eaa57bba5d3df6d48fd0efcc8d74c1b0a0b5a44ae537c8679eaa27ab4eb4415447c4e87c1e5ba7632d09f99376112d178d69cf9ed2cd231f0dcbad03ab5f05b15ca2243c69957c391285450f8e89dc5e649e6f", @generic="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", @generic="b785f744313669f1fc35ca24029c30d30b93a05ab4f9644374fa6887085c1b5759d3371eeca02adc6deb10af048d1d609dc891276a043f345145a111a67d18a09477e89422f9faf93be793d5611dd3d3aedf8f261c2f76593c43e82b54e4501e878d4fcc6fb29fcb19d2a5741b3c44982bc911bb99826275f937651fe398f2c1c7816b4dbb74d93089beb2d36a990d6444607fae1350cc000f965fb96f3dec217971752e353c6d382bc5c51598be40c089e3eba70cc857eee4052aaf2c10af74", @typed={0xc, 0x137, 0x0, 0x0, @u64=0x401}, @generic="c04acfe914da2ef5e70ecf0c018dc72a0cdc27f52d6b4205fc228fe5cb450054965f654ae3405fcf805782371d2248a5a7190ef426d84c73861bd44182c9f93bc5b422dc39f3c876916037d50cb80174c073aa21eea024d5c7e16f3eea6c316e65d2fffbce874baf8deb6c4483a1f91ecc8d33403f3aa3c0654d2c24bd59be50690898ff133aeb9e439d7a20d68c39c4e29266c083333d1ce6035049e0a4d2f0ab6297f9e159f08d5b74a5ca6868255173dbba87ccddcc1ab959f84101e18bcae6ff1c5486c3", @generic="52f1555580a658bf6841ad0c5fd43e04c2dea5031408065026a07b33f100257fb34e11f0235a82e81a498d4651e446b0104b69aa80c912ff1fc88388384b3fa51ca9be99196f618ae2cca31d07a140939e39773aae43a5c06af587b33708907862ad757ed09448631121db7c4e0c25a1188723731aa2a8c3bd40d83a9f09952281eea115c0dff0e4d8293a8381283b1f686699137ce82ef2031b874336", @generic="24e3f579ec58b85ed31bd45fcde32601555ec36a83af04419b3c40ca26fe3194a2c5539b08d820727a1ad4fe826b7386b559c19c3f1d3e2f85b9dd39786478ea457055f4c3b04c9fd2bc01b06abeaad63ebed4d0f17c39ddfbeec8df4e9575b93a6e3680ceae5e967347fd6e7750bf932e795c5a94b4f89e6179e82a250069b5ec56019efe0e44ede3fc029907c4ae050ed96b41667d96c5d0459d71966f6bd300ddbb1c494be2e4a493e4c0ccd17709b7d74240fb8f6998f001af3c0fc869c1ffebf4ec13decd63733d5f21c19b4cf1f711c0c54bd1a3de", @generic="18696f85971647bd5fe152ce6d89d2d8977b5f93790e28fa696dafc3f60e88554a33f6bc319701ae45e25dbf2a936f9e0ccd3cb3dcfa6f706a20ada38848e8f50354b4f1f50d56ec8a94908c2b37c9a782cf2221c07a6e0a54f09f3786bd615a34cd03c3f6bed27b0a42e6374d23ab912aadfe7f4c2cc73a4e2f88656f7b0bb0c927fc1fe1ac4a76d544b2f0e3ffe98fed"]}, @typed={0x8, 0xd7, 0x0, 0x0, @ipv4=@loopback}, @nested={0x101, 0x11a, 0x0, 0x1, [@typed={0x14, 0xea, 0x0, 0x0, @ipv6=@loopback}, @nested={0x4, 0x96}, @generic="66a5054910fd865378db8d7d73bc1de0818d0df4ae7add85edd5e2976ec9fb0d2cc2e6544fd1da9d0e0f114ecd2ba0a4ef09f5192ff404ef715021e71a00400901e420cdb9be275011e2fdaf2096e380f13d28f352ed360c5a10e2bb05af22ccc213d9cf3aa6c3b2a65cec74895b6b0f3b5d88871d291f1a23d6145eb416896fee40fe6911b4aa2365440f7a550a7c30ca072d3c53496c1004478c6545a2af1b84cb33e18310aff8e5db5c09232b5d57e6f8f270d93a68abefc88f92d7a32f224027a7e8e7388a506b7dad4dfd743f6fb5fa8548f38c1f3fb3b5ebe6aa18ab4bc0e3400fa6"]}, @generic="918bf285994f5a73b690c7e4bdda2cf0637593062e9d73703b07e998eea8a1ace222a0d0f9b558213f260bec4f32c7710336ae2a5461503c6b8a21c1daf36426a22a9d435767c176def2b04bc3c833107a03b982a243ee17390713f006887814d0ed29daab4a6761b6938903c5c2a852698320739e9c3a880bd8f6811bcd27e159c4bc86650dbda242672aa872eeb525563688475ffc4f3b56eb91677e3be471614fac2749343911a247d47f3c3cceb395126c51", @generic="59fbaadc1b44a77fa61fdf54cba984f17bf7d79299044319d2193aba2d0b9cc955b19b6ca906b7bc04436fd113a08c61d54a7130217f54c0329f420bcb2bfa498a12742b55c7c283d70da72487b5a0b1837896645dd39a0d54788749c400a49141aa04b47375e7872b6fafa25b417dcdfcd5aa83f548b8cf9ecbc4ceea46cff90a122225f57b3ce6dde7e92ed305bc5084bdc91b639023116962ce024f5eaddf22b90ad152fe4fb3be5e10"]}, @typed={0x8, 0x56, 0x0, 0x0, @fd}, @typed={0xc, 0x69, 0x0, 0x0, @u64=0x1fe}]}]}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x8, 0x22, 0x0, 0x0, @ipv4=@rand_addr=0x64010100}]}, @typed={0x8, 0xb, 0x0, 0x0, @pid}]}, 0x1994}, 0x1, 0x0, 0x0, 0x8000}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, 0x0, {0xfff1, 0x3}, {0x6}, {0x4, 0x10}}}, 0x24}, 0x1, 0x0, 0x0, 0x20040080}, 0x40004) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="340000003e000900000000000008000003000000040004001c000180180010"], 0x34}}, 0x84) r2 = socket$packet(0x11, 0x2, 0x300) bind$packet(r2, &(0x7f0000000040)={0x11, 0x4}, 0x14) syz_emit_ethernet(0x86, &(0x7f0000000280)={@broadcast, @remote, @void, {@generic={0x6007, "0d839d2e2ca78aaf8f445ee45e5d3075737be2926f942ff9866e45892f51d5ab9a99178cb3eaf21297759356af4805b39aa854f3f22dfe8a7c0467f45574552fe82ff276cabded61151ca9d5a74ed41817127bf0a6ec526f974bd2e9fc57602ea472dc851b8c5f9796af79ddafba287a24e38043522a1315"}}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) r3 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r3, 0x0, &(0x7f0000000040)) prctl$PR_GET_NAME(0x10, 0x0) 2.300210069s ago: executing program 4 (id=4008): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) io_setup(0x7, &(0x7f0000000280)=0x0) io_submit(r1, 0x1, &(0x7f0000000440)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x8, 0x6da7, r0, &(0x7f00000041c0)='\x00\x00\x00\x00\x00\x00\x00', 0x7, 0x10000, 0x0, 0x2}]) syz_usb_connect$uac1(0x0, 0xb1, &(0x7f0000000580)=ANY=[@ANYBLOB="12010000000000106b1d010140010102030109029f0003010000000904000000010100000a24010000000201020d24060000030800000031ce21c798329740594c137d0000000c24020201010608000010000c2402000000030000000000092406000601000000092403000000000500092406050001", @ANYBLOB="5964c94201d439b07fb67990cbc16d917ee6883e207ac936a414065390aff7239f8f0b1dc9ecb89f25108ea98daa7cec5c7ed4e02109b19f93fcc013a75a461c9ecac0939d5d490eea22ee90e7064bce55bea3f28a0539bd089a02d86baa5971e2948d1107bd9ecff7969caa25435634f768d1cc8a2f21279543b7b60f56ec851b4d82aa0527cc9a51775286966bd3e64ca46a52a6c6ec4ba6f60efd4edc2f9012c554383fc096cf053300"], 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'netdevsim0\x00'}) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000300), r2) sendmsg$ETHTOOL_MSG_PAUSE_GET(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)={0x14, r3, 0x1, 0x70bd25, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x4040000) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB="0000000300"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000000080)=0x5f3a, 0x4) r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f0000000380)={0xc}) r6 = getpid() r7 = syz_pidfd_open(r6, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB="38000000000101040000000000000900022000002400028014000180f7860100e000000108000200e00000010c0002800500010000000000"], 0x38}}, 0x0) setns(r7, 0x24020000) creat(&(0x7f0000000240)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) pipe2$9p(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x88800) write$P9_RVERSION(r11, &(0x7f0000000500)=ANY=[@ANYBLOB="1500000065ffff048000000800395032303030"], 0x15) r12 = dup(r10) write$FUSE_BMAP(r12, &(0x7f0000000100)={0x18, 0xffffffffffffffda}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r12, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x800000, &(0x7f0000000480)=ANY=[@ANYRESHEX=r9, @ANYBLOB=',wfdno=', @ANYRESHEX=r12, @ANYBLOB="2c6e6f78617474722c6331505331c6feae6bafa468652c616e616d653d402c70726976706f72742c63616368657461673d2f6465762f7474795333002c6b"]) umount2(&(0x7f0000000540)='.\x00', 0x2) r13 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x8, &(0x7f0000000780)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a800000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000700)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r13, 0x0, 0xc, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x10000}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800"/12], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20}, 0x94) 2.181130941s ago: executing program 0 (id=4009): r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x3e, &(0x7f00000000c0)=0xcac2, 0x4) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000340)='oom_adj\x00') readv(r1, &(0x7f0000000080)=[{&(0x7f0000000440)=""/144, 0x90}], 0x1) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1c, 0x15, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x3f45}, [@cb_func={0x18, 0x2}, @initr0={0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1}, @map_idx_val={0x18, 0x2, 0x6, 0x0, 0xc, 0x0, 0x0, 0x0, 0x7ff}, @printk={@u, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1}}, @map_val={0x18, 0x2, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff8}, @generic={0x3, 0xe, 0x1, 0x4, 0x23}]}, &(0x7f0000000000)='syzkaller\x00', 0x2, 0x1e, &(0x7f0000000080)=""/30, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2, &(0x7f00000001c0)=[0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x1, 0x1], &(0x7f0000000200)=[{0x4, 0x4, 0xc, 0xd}, {0x1, 0x4, 0xe, 0x7}], 0x10, 0x414}, 0x94) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeea, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='smaps\x00') r4 = memfd_create(&(0x7f0000000140)='v\xa6\xf5lj6,r\xaf\xe8\x10/\xecg\xed\xe3h\x80\xb8!y6w\xda\xdd\xb9\nR\xe8@\x99\xb9\x8a\x0fZ\t\x90\x8bp\x10\x84\x86t\x8a\xba\xc6\xfb\xd2\f\xef&\xad\xa8M\xe8\b\xb0#\xac)\x81\x1e\x8a\f\x11D\xe3l\x87\\\x15Hd~\\\x11\x95\xf8\xe6\xa7\xc3\xbc\x18+\x92\x92N\a\xa7\x7fN\x9bL\xf8\xebQs\x02\xf9\xadi\x8f\x0f\xff\x02n\x9d\x85\xea\x1a*\x1bI\xd8\x1c\xe8\x9bYS%\x1d\x10\x86\xa0\v\xea\xd9\x89\xda\xa7Wd\xa4Eu\x8csm\xa1.\xd1\xb2I\x1a\xb2\xfdA\x98\x16\xca\x83y\xf9\x1a\xe7\x06h\av\xa8\xd8\xceY\xc0\xe6v\xb5\xf5\x9d\xbe\xa58\xb42\xd8V$\xe6\xc8\x1c\xaf\x8e\xa1\xefa\xb1/\xee1=\xbfM\xeaw\f\xa2\x87\x1c(\x1a-\xeb\xfbV\xeb4\xd4C]\xc7{t\xf9\xd5`IZ\x03H\xd9\x86\xe12N\x1f\xd8{\xf5z@\xe0\x00\x00\x00\x00', 0x0) mlockall(0x7) mmap(&(0x7f00001d1000/0x3000)=nil, 0x3000, 0x6, 0x12, r4, 0x6a360000) read$FUSE(r3, &(0x7f0000000640)={0x2020}, 0x2020) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000300)=r2, 0x4) bind$llc(r0, &(0x7f0000000040)={0x1a, 0x0, 0x0, 0x54}, 0x10) 1.83606497s ago: executing program 3 (id=4010): r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x34, 0x70, 0x9d, 0x40, 0x55f, 0xc230, 0xb6ac, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xf2, 0xa7, 0xcc}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000dc0)={0x2c, &(0x7f0000000ac0)={0x0, 0x9, 0x1, "af"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000340)={0x1c, &(0x7f0000000280)={0x40, 0x3}, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000000)={0x44, &(0x7f0000000640)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, &(0x7f00000003c0)={0x34, &(0x7f0000001800)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000480)={0x34, &(0x7f0000000240)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0xfffffffffffffe01) setsockopt$inet6_int(r1, 0x29, 0x2, &(0x7f0000000c40)=0x2, 0x4) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$inet(0x2, 0x4000000000000001, 0x0) socket$inet6(0xa, 0x2, 0x0) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000006c0), 0x48200, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000100)=0x2) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000040)=0xe) ioctl$TIOCVHANGUP(r3, 0x5437, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x0, 0x80, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x8, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) r4 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) ioctl$KVM_SET_VCPU_EVENTS(r4, 0x4040aea0, &(0x7f0000000080)=@x86={0x8, 0x5, 0x7f, 0x0, 0x100, 0x4, 0x0, 0x0, 0x38, 0x3, 0x5, 0xd, 0x0, 0x0, 0x3ff, 0x9, 0xc, 0xb4, 0x80, '\x00', 0x6, 0x8}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000680)={0x2c, &(0x7f0000000140)=ANY=[@ANYBLOB="4007f4b28f51fad9bd523f00000000c6"], 0x0, 0x0, 0x0, 0x0}) 1.707334094s ago: executing program 1 (id=4011): r0 = syz_usb_connect$hid(0x0, 0x6c, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x27b8, 0x1ed, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000006c0)={0x24, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="00222d0f0000368daf452c173a38041574c015f307690fd792ef12392b65e4b1608978a223f982c3d33fb541a0ab12f22af4026e00a69d238af561d06b586cd688d02821c887b4ada0f15c163c0a0196cab0387c8a9449aa5c38e7bc13bc37a024894fd8e3a3a20ddc4cdad5cbfa8828fab35e41f983c2f768034fb354d9b077136a2833c5f6effe37c43039916c9281dd067eaa83e028f1bfd7745d6418bea92b9447d18c3c3d82d68cd2312d51b47c3c8e92734850cfbdc377fda3672129a78faf2ff2afb800"/209], 0x0}, 0x0) r1 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) getgroups(0x2, &(0x7f0000001080)=[0xee01, 0xffffffffffffffff]) keyctl$chown(0x4, r1, 0xee01, r3) setgroups(0x0, 0x0) keyctl$setperm(0x5, r1, 0x30925) keyctl$chown(0x4, r1, 0x0, r2) syz_usb_control_io(r0, 0x0, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB='$', @ANYBLOB], 0x24}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x2b38094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @mcast1, 0xa}, 0x1c) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f00000000c0)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') mkdir(&(0x7f0000000300)='./bus\x00', 0x0) chdir(&(0x7f0000000140)='./bus\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r5 = syz_init_net_socket$ax25(0x3, 0x2, 0xcf) r6 = socket(0x40000000015, 0x5, 0x0) bind$inet6(r6, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendto$inet6(r6, 0x0, 0x0, 0x0, &(0x7f0000000040)={0xa, 0x1, 0xfffffffc, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0xe79}, 0x1c) ioctl$sock_ax25_SIOCADDRT(r5, 0x890b, 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(0xffffffffffffffff, 0x40049366, &(0x7f0000000180)) syz_usb_connect(0x1, 0xb57, &(0x7f0000001340)={{0x12, 0x1, 0x300, 0x11, 0xf8, 0x1d, 0x40, 0x83a, 0xe503, 0x8cbd, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xb45, 0x4, 0x2, 0x8, 0xd0, 0xfe, [{{0x9, 0x4, 0x7a, 0xd, 0xd, 0x28, 0x2c, 0x2, 0x0, [@cdc_ncm={{0xb, 0x24, 0x6, 0x0, 0x1, "07182e0b3bac"}, {0x5, 0x24, 0x0, 0x9}, {0xd, 0x24, 0xf, 0x1, 0x4, 0x7, 0x2, 0x6}, {0x6, 0x24, 0x1a, 0x1ff, 0x4}, [@acm={0x4}, @network_terminal={0x7, 0x24, 0xa, 0x7, 0x5, 0x81, 0x1}, @mdlm={0x15, 0x24, 0x12, 0x1}, @mdlm={0x15, 0x24, 0x12, 0x180}, @network_terminal={0x7, 0x24, 0xa, 0xfc, 0x4, 0xf8, 0x7f}]}, @uac_as={[@format_type_i_discrete={0x11, 0x24, 0x2, 0x1, 0xf7, 0x2, 0x5, 0x6, "aff5ec6f2894e98370"}, @format_type_i_continuous={0xb, 0x24, 0x2, 0x1, 0x7, 0x3, 0x5, 0x81, "", "eb1aa9"}, @format_type_i_discrete={0x10, 0x24, 0x2, 0x1, 0x18, 0x3, 0xf, 0x1, "f7c47762f3e23e16"}, @as_header={0x7, 0x24, 0x1, 0x5, 0x89, 0x3}, @as_header={0x7, 0x24, 0x1, 0x80, 0x81, 0x2}]}], [{{0x9, 0x5, 0x4, 0x10, 0x3ff, 0xc, 0xe, 0xbd, [@generic={0x5f, 0x4, "ec426af3230c1e25957fbb5c495a8acb918dff0cf7903846725ff8f3d9127db173a5a387d01f58bfe6bf7350ee5b0bd6142dff8ea184cc0ada3e621328382d29991311b8b7b586403a7c7a1b8480ae54b59065bda0a12fd18e2878bef0"}, @uac_iso={0x7, 0x25, 0x1, 0x80, 0x2}]}}, {{0x9, 0x5, 0x80, 0x0, 0x400, 0xff, 0x4a, 0x8, [@generic={0x13, 0xb, "db080099655c3da2b1fbc1247e898e12b4"}]}}, {{0x9, 0x5, 0x5, 0x12, 0x200, 0xfa, 0x2, 0x40}}, {{0x9, 0x5, 0x4, 0x0, 0x20, 0x9, 0x7, 0x2, [@generic={0x3b, 0x2, "25678f6405fba979835d2bcb4b28626d762c32842ac0f9258fbeabb714a8ad6d8900c727bd408a8bfe74c9ef2a1070760edd4272ed2115becf"}, @generic={0x3e, 0xe, "107c46f74d333a1d699f0c889195281b851f18cd0bf07509f453baf295b9b3d84687f53c3a63ef48350f0b74e175d0ba24961a315268237d035d78a6"}]}}, {{0x9, 0x5, 0x3, 0xc, 0x10, 0x0, 0xc, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x7}]}}, {{0x9, 0x5, 0xa, 0x4, 0x40, 0x9, 0x30, 0x4}}, {{0x9, 0x5, 0x80, 0x10, 0x200, 0x0, 0xf6, 0x81, [@generic={0xc, 0x6, "8ffa1cd7b86c35810f0d"}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0x8}]}}, {{0x9, 0x5, 0x5, 0x8, 0x1a0cc7d8bb580945, 0x8c, 0xf2, 0x3}}, {{0x9, 0x5, 0x6, 0x2, 0x8, 0x1, 0x2, 0x9}}, {{0x9, 0x5, 0xa, 0x0, 0x8, 0x5, 0x80, 0xf0, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x7, 0x4e}]}}, {{0x9, 0x5, 0xb, 0x0, 0x400, 0x40, 0xe, 0x5, [@generic={0x4c, 0x30, "c5194282be27c74742fd263c24fdccf753c2eda749591cf8408ac62a5e84d31ce20b3e669614ff80e9f18de652ef40aeb2262b3d4a191232f82f863a116a205c7fa0039221fcab18b211"}, @uac_iso={0x7, 0x25, 0x1, 0x3, 0x3, 0xff}]}}, {{0x9, 0x5, 0x80, 0x0, 0x20, 0x7, 0x7, 0x7}}, {{0x9, 0x5, 0x2, 0x10, 0x10, 0x59, 0x93, 0xa9}}]}}, {{0x9, 0x4, 0x36, 0x7, 0x9, 0xa2, 0x22, 0xcd, 0x7, [@generic={0x1f, 0xe, "b9e65944d76ad02042c965388bf723f08544483525d53dda4da92558a5"}], [{{0x9, 0x5, 0x7, 0x10, 0x8, 0x9, 0x6, 0x8, [@generic={0xb4, 0x30, "6a9e4446e0144dee9b46185186eae87ca17f8fe111347aedb5739394de91c4810e20bbaa1ab23c5ab064554db954fbec1f3582c0e151b8d9e75696a76a80aa9f449bf5eebae3e35eb019a0c80e7a092e8c879ceb7b4e36e09ff6accc1efa8f40f122d630935f55b701bba2229ab320de04cae2c273a7acce8e325b56b1d6263dfb4044b9f3c692c8a555e2ba1e683ad4b1347242dc86ced95122a813b1bebc8495d06b9fd7ded9a668acc7cde08f5b0ed594"}]}}, {{0x9, 0x5, 0xa, 0xd, 0x40, 0x2, 0x1, 0xfd, [@generic={0x2b, 0x23, "330df3114c51bc94ce77bd3a17a37c18fe0901d54d0955d72ca5651d3b6b427d38c1fc590bc1a7bb85"}]}}, {{0x9, 0x5, 0x8, 0x0, 0x10, 0x2, 0x5, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x83, 0x3, 0x6}]}}, {{0x9, 0x5, 0x8, 0x3, 0x40, 0x7, 0x4, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x3, 0xfe8f}, @generic={0x5d, 0x31, "281ddc14bba22ee7e0f953b7d652d9b95ff7ec5c6b048d0c70a842f4e90d76e4db6f4e327c873a047bf2eb1ac39bd65b53f8f7bdbc91a5e30096c1f1df46083b365cc97267b791863cdd5c9a4a6d3d725d960249abd836bbb0b1f8"}]}}, {{0x9, 0x5, 0x4, 0x3, 0x20, 0x1, 0x1, 0xcf, [@generic={0xa6, 0x4, "f975b81e747c1e797fa0b30acd7ff23913c86fe5f70df8c6c495c0732e3edd0f920ae7eebbc66b8289a0077d4b8be406f0e724034e5423fcc7293778fdabad09d2931d0767b0f889c69e64126a4c18230515692cdc4264ef50fa30e56ec3332ecba3b243517ea6a6669cff6d82034d093007c7b5c9a5f3cad4d2b8a85a72ab481693af3b0955df9da0603eb5a5d0adfe93abdebd66747c163d77a1be3780f11e5454e6a7"}]}}, {{0x9, 0x5, 0x4, 0x0, 0x28, 0x7f, 0x8, 0xf, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x0, 0x1}, @generic={0x94, 0xd, "0e7070aa38b3a14ff50f3ea0dc11926c17df6f35449fbfc7de4ef829691a21e211c2f6011f15708f0e0a1afdcd9cb3df7ba47b5c547fd96187008d67c9804c1a28cae02a63506efec81a3c767920a938f6ba272c39b7df73e8a12e099b54bdadfb8f97dca09abf5ee13e66f8a014c633384d4bb402e1fe398325a31b3b07ff60616b750dbfde8a9d63a29756eef0524ef40a"}]}}, {{0x9, 0x5, 0x80, 0x3, 0x400, 0x45, 0x19}}, {{0x9, 0x5, 0x80, 0x3, 0x8, 0x7, 0x7f, 0x9}}, {{0x9, 0x5, 0x1, 0x0, 0x3ff, 0x1, 0xd1, 0x7f}}]}}, {{0x9, 0x4, 0x4, 0x9b, 0x3, 0x1d, 0xd0, 0x10, 0xdb, [@cdc_ecm={{0x9, 0x24, 0x6, 0x0, 0x0, "2a0930a0"}, {0x5, 0x24, 0x0, 0x8}, {0xd, 0x24, 0xf, 0x1, 0xb, 0x10, 0x1, 0x7}}], [{{0x9, 0x5, 0x7, 0x20, 0x20, 0x8, 0x5, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0x11, 0x3}, @generic={0xdd, 0xd, "38a255e5b2afdb5386cc36ad789a1dae00431c9adbba092de15daf20884e6f94719b5d1a83b0c67d33e7a79003253e481ed78c2bae2a6a0f24b04a9be62c626596ae180eee934b03fb6476085ada7996fcb3d1350c67222341f65552bcee4d3b7babd8baad033aa4d2752879f33cfae39505f1d582ea792a8f70e0d4bab0c3d72cc360ea78b56d4be0df955e477dda8a96efa8edb3d64f985ecb82f1f8089f924f5b5f37ddbbca878c52697f5e16483f0a5eda7022f6a4f5486059be890eb773f7cc62f7cc1a104ff78961cf7f3f974b5ce9579ca01cb94abfe7b9"}]}}, {{0x9, 0x5, 0x8, 0x1, 0x40, 0x3, 0xfd, 0x7, [@generic={0xd4, 0x1, "f696622341a34cc584dd7938f1511fdff5ba366ff298912a80cee321b586d9211d3c670c9de7f6e2d40d0bc1ff8e861689d1e7147ec4bca781a45f215e6f770ddf762873e0e85b25f9a70051e45a450ea1cb8f4e2cd422cc994eaf665807935e9e3918eed8346cc98d994eb633dd5952f0d2d199c90dfcf8443ccf6f66c8819467ed381314c24684456e3a6fe832d2f24ef47388bdbd7d0524b817a752cf75ca95d2055dabfd6bcb2ecaab7207125741e67cb90d328c12c90c823aa2f336f02da78a7944c67dca82c6ccec1442cd97958709"}, @uac_iso={0x7, 0x25, 0x1, 0x3, 0x6}]}}, {{0x9, 0x5, 0x3, 0x10, 0x8, 0x3, 0x67, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x5, 0x3}, @generic={0xe8, 0x3, "dac90d4097e529fecf36d9df18171446999daadd95a9439d1284e1e1b545e44643217400dcb0755366845ddef224415fe155b3ca923e99aaeb486e3e814ceec38b2fec1c7ad3792b2ce35f738c07c9b33e7a64c23e2c56a8f6b8d65615953889fd0c827751098100882e1f012d480bc648a33b69131f8f0c251ffd2ef55f93bc915574ba36c7b79b82abb3962f31d4c3ad7c4fc7b0f6f51236adc0cff3906fc14b69f7eb1429086824339d84ad498a1896fe96efc6862c09a2500e2eeb3e6bfbbf0f0e0788a414739e0b7fa988ef680ea13ea374a7013535b6afef2655d89dc0cae18ad29a58"}]}}]}}, {{0x9, 0x4, 0x84, 0x9, 0x4, 0xd8, 0x2a, 0xe7, 0x1, [], [{{0x9, 0x5, 0x0, 0x1, 0x10, 0xe, 0x6, 0x9, [@generic={0xc, 0x4, "068a61681264af0eaaa8"}, @generic={0x30, 0xe, "4b753200953b9e7db3130c9106314336873ae3b814427ec6eef29bc07413a7b6ac47fdc598d6bfaaa0adb0d92154"}]}}, {{0x9, 0x5, 0xf, 0x3, 0x8, 0xf7, 0xff, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x102, 0x8f, 0x2}, @generic={0x100, 0x10, "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"}]}}, {{0x9, 0x5, 0xe, 0x0, 0x200, 0x3, 0x5, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x9, 0xfffa}, @generic={0x42, 0x6, "3e2700595dbeb3e99edb16b3434d7f18e9b63c29877861d1ee344361d72ee86e7a446fd7aeb518343cfeafe199e64d2dabab10c5285570988ac2ffc5bd5db6d9"}]}}, {{0x9, 0x5, 0x7, 0x0, 0x10, 0x3, 0x5, 0x3, [@generic={0x35, 0x24, "264efc61dbee776fc781d67f5c04c9ca50342a087d327ddfaa85776dd2f0c74609cdfcbaefd79955ec1a2fd2914ca40d6f076d"}, @generic={0xe0, 0xe, "0d7b09aa85bc77930af5a9873cbcd4b94b24821984f8bd2ae7b21ee72d3999dd1d3952a68f8ef0858e8e55b2b78d2ec282c1163d45b8c7e06dfe35b57c422b21bbaa4de4871a994e386a21548997ada0346563877ab85497cfbede8828aa0ee49660bacac476c6623f9c491e5e7bc9339b6012f9b76a8dcb95cf7e77e25bac3ea66ec5592556ddeff28030760500e9bcea549889a445d43bcc2d90e07f377a9170be590a8e8532b7d5953647c7ca9bee45c78b5a99fe5abce2434cfe723bfc6f0b4f7f9590d46644ce95419f65b510fe89f83f1c9ddde30ce6c182bcb4b0"}]}}]}}]}}]}}, &(0x7f0000000100)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x310, 0x0, 0x2, 0x4, 0x20, 0xb}, 0x5, &(0x7f0000000040)={0x5, 0xf, 0x5}}) 1.487086676s ago: executing program 4 (id=4012): r0 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) shutdown(r0, 0x1) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r1, 0x11, 0x67, &(0x7f0000000040)=0x91, 0x4) prctl$PR_SET_TIMERSLACK(0x1d, 0xffffffffffffff63) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000200)='sched_switch\x00', r2}, 0x18) syz_emit_ethernet(0x72, &(0x7f00000004c0)=ANY=[@ANYBLOB="5b1a033f2511a8aaaaaaaabb88a80c0081003c0008004508005c0000000000119078e040000100000000000000000048907803000000030000001453c8380bea51a47b99ede0430f8e2b2a505e0149587721ecf4aba3f602a914d700cfb0e17e1af2787697780b34cee92233b7b7cdf5e01c0f2598e36c6786b51275d1a05ca13e341f3a3d4e1132713bbbb7b978072a9713fa59c2ecb466ed021934142fe3add36563f8804f3e6cf0f78c4b6e12aac1d0c8a7e6b0fd432b4cb03566232cae007e5e35357ad6994797d3d40d5c1b3935ea77a411d2d6dc866bbfa934fa4d242df8fcd76f0efb19a5bf1c8884bf480116dfde"], 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x2000000}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) syz_open_dev$sndmidi(&(0x7f0000000280), 0x5, 0x1c800) r6 = syz_open_dev$ndb(&(0x7f0000000300), 0x0, 0xe80c0) ioctl$BLKZEROOUT(r6, 0x127f, &(0x7f0000000340)={0x4000000000000000, 0x6}) r7 = socket$inet_sctp(0x2, 0x5, 0x84) bind$inet(r7, &(0x7f0000000080)={0x2, 0x4e22, @local}, 0x10) sendmmsg$inet_sctp(r7, &(0x7f0000004900)=[{&(0x7f00000000c0)=@in={0x2, 0x4e22, @local}, 0x10, &(0x7f0000000440)=[{&(0x7f0000000100)="f4", 0x34000}, {0x0}], 0x2, &(0x7f00000001c0)=[@dstaddrv4={0x18, 0x84, 0x7, @remote}, @dstaddrv4={0x18, 0x84, 0x7, @initdev={0xac, 0x1e, 0x1, 0x0}}, @dstaddrv4={0x18, 0x84, 0x7, @dev}], 0x48}], 0x1, 0x0) setsockopt$sock_linger(r1, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8) 1.139968065s ago: executing program 2 (id=4013): openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)=@getchain={0x24, 0x66, 0x0, 0x70bd24, 0x2000}, 0x24}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000300)={'ip6tnl0\x00', &(0x7f0000000240)={'syztnl2\x00', 0x0, 0x29, 0x7f, 0x28, 0x5, 0x4c, @private2={0xfc, 0x2, '\x00', 0x1}, @private2, 0x700, 0x8, 0x101, 0x7}}) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000900)=0x14) sendmsg$nl_route(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000080)=@newlink={0x40, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, r3, 0x54583}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @bond_slave={{0xf}, {0xc, 0x5, 0x0, 0x1, @IFLA_BOND_SLAVE_QUEUE_ID={0x6, 0x5, 0xfb}}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x8041}, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r8 = syz_open_dev$sndpcmc(&(0x7f0000000080), 0x0, 0x200) ioctl$SNDRV_PCM_IOCTL_CHANNEL_INFO(r8, 0xc0844123, &(0x7f0000002fc0)) sendmmsg$inet(r1, &(0x7f00000017c0)=[{{&(0x7f0000000040)={0x2, 0x4e21, @loopback}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r3, @empty}}}], 0x20}}], 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x3, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x200, 0x0) ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) ioctl$KVM_SET_TSC_KHZ(0xffffffffffffffff, 0xaea2, 0x2) 1.138588686s ago: executing program 3 (id=4014): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x80, 0x9, 0x6, 0x305, 0x0, 0x0, {0x0, 0x0, 0xa}, [@IPSET_ATTR_DATA={0x60, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP2_TO={0xc, 0x16, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}, @IPSET_ATTR_SKBPRIO={0x8, 0x1c, 0x1, 0x0, 0x54}, @IPSET_ATTR_MARKMASK={0x8, 0xb, 0x1, 0x0, 0x3}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e20}, @IPSET_ATTR_MARKMASK={0x8}, @IPSET_ATTR_SKBPRIO={0x8, 0x1c, 0x1, 0x0, 0x2}, @IPSET_ATTR_IFACE={0x14, 0x17, 'veth0_to_bond\x00'}, @IPSET_ATTR_CIDR={0x5, 0x3, 0xf9}, @IPSET_ATTR_SKBMARK={0xc, 0x1b, 0x1, 0x0, 0x5}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x80}, 0x1, 0x0, 0x0, 0x48040}, 0x880) (async) sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x80, 0x9, 0x6, 0x305, 0x0, 0x0, {0x0, 0x0, 0xa}, [@IPSET_ATTR_DATA={0x60, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP2_TO={0xc, 0x16, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}, @IPSET_ATTR_SKBPRIO={0x8, 0x1c, 0x1, 0x0, 0x54}, @IPSET_ATTR_MARKMASK={0x8, 0xb, 0x1, 0x0, 0x3}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e20}, @IPSET_ATTR_MARKMASK={0x8}, @IPSET_ATTR_SKBPRIO={0x8, 0x1c, 0x1, 0x0, 0x2}, @IPSET_ATTR_IFACE={0x14, 0x17, 'veth0_to_bond\x00'}, @IPSET_ATTR_CIDR={0x5, 0x3, 0xf9}, @IPSET_ATTR_SKBMARK={0xc, 0x1b, 0x1, 0x0, 0x5}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x80}, 0x1, 0x0, 0x0, 0x48040}, 0x880) write$dsp(0xffffffffffffffff, &(0x7f0000000140)="73b3ff16715f2b4b1b1be0a25a2cf7d265e79618a7d81a", 0x17) pipe2$9p(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}, 0x8c0) r3 = getegid() getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000240), &(0x7f0000000280)=0xc) (async) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0xc) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x10002, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@nodevmap}, {@noxattr}, {@cache_mmap}, {@dfltgid={'dfltgid', 0x3d, r3}}, {@cache_readahead}, {@posixacl}, {@ignoreqv}, {@aname={'aname', 0x3d, 'veth0_to_bond\x00'}}, {@ignoreqv}, {@noextend}], [{@uid_lt={'uid<', r4}}, {@pcr={'pcr', 0x3d, 0xa}}, {@dont_appraise}, {@dont_measure}]}}) socket$nl_generic(0x10, 0x3, 0x10) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000440)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r5, &(0x7f0000000700)={&(0x7f0000000400), 0xc, &(0x7f00000006c0)={&(0x7f0000000480)={0x22c, 0x0, 0x711, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8, 0x3, r6}, @void}}, [@acl_policy=[@NL80211_ATTR_ACL_POLICY={0x8}, @NL80211_ATTR_ACL_POLICY={0x8}, @NL80211_ATTR_MAC_ADDRS={0x7c, 0xa6, 0x0, 0x1, [{0xa}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @device_b}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @device_b}, {0xa}, {0xa}, {0xa, 0x6, @broadcast}]}, @NL80211_ATTR_ACL_POLICY={0x8}, @NL80211_ATTR_ACL_POLICY={0x8, 0xa5, 0x1}, @NL80211_ATTR_ACL_POLICY={0x8, 0xa5, 0x1}, @NL80211_ATTR_MAC_ADDRS={0x28, 0xa6, 0x0, 0x1, [{0xa, 0x6, @broadcast}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @device_b}]}, @NL80211_ATTR_ACL_POLICY={0x8}], @crypto_settings=[@NL80211_ATTR_CONTROL_PORT={0x4}, @NL80211_ATTR_SAE_PASSWORD={0x14, 0x115, "c2c58d8f9782f135580937917b601e91"}], @beacon=[@NL80211_ATTR_IE={0x9c, 0x2a, [@gcr_ga={0xbd, 0x6}, @random_vendor={0xdd, 0x2a, "f2d98c21c6f36d19516b17742a09fa8ac93c50df2a506e95f9aed6ef372410d848bb852bada085257f2e"}, @ssid={0x0, 0x6, @default_ibss_ssid}, @fast_bss_trans={0x37, 0x57, {0x9, 0x1, "6b7647740b404b6bea9a0923b734fe7c", "01034e7271002a513215aaf3b9494e7c7905c70b02a3ae753e77dab9a192c57d", "a2f9a80ebf2633847bee585cce23d1a6ebcfa9a49166b2a206701e98cdec9c4b", [{0x3, 0x3, "f027dd"}]}}, @sec_chan_ofs={0x3e, 0x1, 0x3}]}], @chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x6}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x1f}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x325}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CHANNEL_WIDTH={0x8}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x208}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x2e}], @crypto_settings=[@NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}, @NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_CIPHER_SUITES_PAIRWISE={0x8, 0x49, [0xfac00]}, @NL80211_ATTR_WPA_VERSIONS={0x8, 0x4b, 0x4}, @NL80211_ATTR_AKM_SUITES={0xc, 0x4c, [0xfac08, 0xfac0a]}], @NL80211_ATTR_HE_OBSS_PD={0x1c, 0x117, 0x0, 0x1, [@NL80211_HE_OBSS_PD_ATTR_PARTIAL_BSSID_BITMAP={0xc, 0x5, "fb971d7b0d7c0e7c"}, @NL80211_HE_OBSS_PD_ATTR_BSS_COLOR_BITMAP={0xc, 0x4, "a54b6f6bb67876eb"}]}, @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x4}, @acl_policy, @NL80211_ATTR_PBSS={0x4}]}, 0x22c}, 0x1, 0x0, 0x0, 0x4008040}, 0x20000010) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f0000000740)={0x0}) ioctl$DRM_IOCTL_RM_CTX(0xffffffffffffffff, 0xc0086421, &(0x7f0000000780)={r7, 0x2}) (async) ioctl$DRM_IOCTL_RM_CTX(0xffffffffffffffff, 0xc0086421, &(0x7f0000000780)={r7, 0x2}) r8 = openat$mice(0xffffffffffffff9c, &(0x7f00000007c0), 0x20000) r9 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000800), 0x400001, 0x0) sendmsg$NFNL_MSG_CTHELPER_DEL(r9, &(0x7f0000000900)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x8900000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x34, 0x2, 0x9, 0x801, 0x0, 0x0, {0x3, 0x0, 0xa}, [@NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0xc}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x8}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0xf68}]}, 0x34}}, 0x4000000) (async) sendmsg$NFNL_MSG_CTHELPER_DEL(r9, &(0x7f0000000900)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x8900000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x34, 0x2, 0x9, 0x801, 0x0, 0x0, {0x3, 0x0, 0xa}, [@NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0xc}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x8}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0xf68}]}, 0x34}}, 0x4000000) syz_kvm_setup_cpu$x86(r8, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000980)=[@text32={0x20, &(0x7f0000000940)="670fc75e009a0900000003010f07650fc75900c4c3b95e740000780fc7bf1053000066baa000ed66b8c1008ec86536660fdc23660f38803e", 0x38}], 0x1, 0x20, &(0x7f00000009c0)=[@cr4={0x1, 0x240}], 0x1) (async) syz_kvm_setup_cpu$x86(r8, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000980)=[@text32={0x20, &(0x7f0000000940)="670fc75e009a0900000003010f07650fc75900c4c3b95e740000780fc7bf1053000066baa000ed66b8c1008ec86536660fdc23660f38803e", 0x38}], 0x1, 0x20, &(0x7f00000009c0)=[@cr4={0x1, 0x240}], 0x1) ioctl$FS_IOC_SETVERSION(r9, 0x40087602, &(0x7f0000000a00)=0x7) (async) ioctl$FS_IOC_SETVERSION(r9, 0x40087602, &(0x7f0000000a00)=0x7) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000a40)={[0x1, 0x4e1e7b4, 0x5, 0x200, 0xc2a, 0x3, 0x46, 0x200, 0x5c, 0x3, 0x8001, 0x4, 0x86, 0x0, 0x1], 0x0, 0x20000}) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000b00), 0x10000, 0x0) recvmmsg(r8, &(0x7f00000026c0)=[{{&(0x7f0000000b40)=@llc, 0x80, &(0x7f0000000e40)=[{&(0x7f0000000bc0)=""/53, 0x35}, {&(0x7f0000000c00)=""/23, 0x17}, {&(0x7f0000000c40)}, {&(0x7f0000000c80)=""/221, 0xdd}, {&(0x7f0000000d80)=""/151, 0x97}], 0x5, &(0x7f0000000ec0)=""/213, 0xd5}, 0x4}, {{&(0x7f0000000fc0)=@nl=@unspec, 0x80, &(0x7f00000023c0)=[{&(0x7f0000001040)=""/4096, 0x1000}, {&(0x7f0000002040)=""/168, 0xa8}, {&(0x7f0000002100)=""/204, 0xcc}, {&(0x7f0000002200)=""/179, 0xb3}, {&(0x7f00000022c0)=""/109, 0x6d}, {&(0x7f0000002340)=""/117, 0x75}], 0x6, &(0x7f0000002440)=""/102, 0x66}, 0x1}, {{&(0x7f00000024c0)=@alg, 0x80, &(0x7f0000002580)=[{&(0x7f0000002540)=""/61, 0x3d}], 0x1, &(0x7f00000025c0)=""/228, 0xe4}, 0x1}], 0x3, 0x2, &(0x7f0000002780)={0x77359400}) ioctl$DRM_IOCTL_SET_UNIQUE(r9, 0x40106410, &(0x7f0000002840)={0x4c, &(0x7f00000027c0)="0553950df317c8c3562b81cf60f852012a0fd4fcdfd026907b83f17bf121fd9896deab3da531bd5d761670287b742bd6376e0a7347829ffb717a55b880c5faaa39163f078d89cdc38c5580a1"}) (async) ioctl$DRM_IOCTL_SET_UNIQUE(r9, 0x40106410, &(0x7f0000002840)={0x4c, &(0x7f00000027c0)="0553950df317c8c3562b81cf60f852012a0fd4fcdfd026907b83f17bf121fd9896deab3da531bd5d761670287b742bd6376e0a7347829ffb717a55b880c5faaa39163f078d89cdc38c5580a1"}) ioctl$DRM_IOCTL_DMA(r8, 0xc0406429, &(0x7f0000002980)={r7, 0x8, &(0x7f0000002880)=[0xd, 0x2, 0x6, 0xdd, 0xfffffffc, 0x8001, 0xbba7, 0x2], &(0x7f00000028c0)=[0x4, 0x3, 0xff, 0x1ff, 0x0, 0x2], 0x45, 0x1, 0xfffffff7, &(0x7f0000002900)=[0x4], &(0x7f0000002940)=[0x5, 0x2]}) syz_genetlink_get_family_id$mptcp(&(0x7f0000002a00), r9) (async) r10 = syz_genetlink_get_family_id$mptcp(&(0x7f0000002a00), r9) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r9, 0x89f2, &(0x7f0000002ac0)={'ip6tnl0\x00', &(0x7f0000002a40)={'ip6_vti0\x00', 0x0, 0x4, 0x9, 0x5, 0xf4c, 0x0, @private0, @loopback, 0x7820, 0x1, 0x401, 0x7f}}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r9, 0x89f8, &(0x7f0000002b80)={'tunl0\x00', &(0x7f0000002b00)={'syztnl2\x00', 0x0, 0x0, 0x7, 0x2, 0x1, {{0xf, 0x4, 0x0, 0x3, 0x3c, 0x68, 0x0, 0x5f, 0x29, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @private=0xa010100, {[@noop, @cipso={0x86, 0x25, 0x1, [{0x6, 0x9, "f19254beea67a1"}, {0x2, 0x5, "a62659"}, {0x2, 0x11, "936df0e81de450938db6a92d9c5ce0"}]}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r8, 0x89f3, &(0x7f0000002c80)={'gre0\x00', &(0x7f0000002bc0)={'syztnl2\x00', 0x0, 0x80, 0x7, 0x3ff, 0xfffff001, {{0x1b, 0x4, 0x0, 0x1, 0x6c, 0x64, 0x0, 0x14, 0x4, 0x0, @multicast1, @loopback, {[@lsrr={0x83, 0x13, 0x5f, [@empty, @local, @empty, @rand_addr=0x64010100]}, @generic={0x86, 0x7, "6aa55edfb9"}, @ssrr={0x89, 0x17, 0x61, [@private=0xa010102, @initdev={0xac, 0x1e, 0x1, 0x0}, @empty, @remote, @empty]}, @timestamp={0x44, 0x20, 0xaf, 0x0, 0x3, [0x80000001, 0x5, 0xffffffb7, 0x2, 0x0, 0x32f43553, 0x7fffffff]}, @ra={0x94, 0x4, 0x1}]}}}}}) (async) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r8, 0x89f3, &(0x7f0000002c80)={'gre0\x00', &(0x7f0000002bc0)={'syztnl2\x00', 0x0, 0x80, 0x7, 0x3ff, 0xfffff001, {{0x1b, 0x4, 0x0, 0x1, 0x6c, 0x64, 0x0, 0x14, 0x4, 0x0, @multicast1, @loopback, {[@lsrr={0x83, 0x13, 0x5f, [@empty, @local, @empty, @rand_addr=0x64010100]}, @generic={0x86, 0x7, "6aa55edfb9"}, @ssrr={0x89, 0x17, 0x61, [@private=0xa010102, @initdev={0xac, 0x1e, 0x1, 0x0}, @empty, @remote, @empty]}, @timestamp={0x44, 0x20, 0xaf, 0x0, 0x3, [0x80000001, 0x5, 0xffffffb7, 0x2, 0x0, 0x32f43553, 0x7fffffff]}, @ra={0x94, 0x4, 0x1}]}}}}}) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r5, &(0x7f0000002e00)={&(0x7f00000029c0), 0xc, &(0x7f0000002dc0)={&(0x7f0000002cc0)={0xe0, r10, 0x10, 0x70bd28, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_ADDR_REMOTE={0x24, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x15}}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @private=0xa010102}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x4}]}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x38, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @mcast2}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x8}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}, @MPTCP_PM_ATTR_ADDR={0x3c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x2}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r11}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r12}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x8}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x4}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}, @MPTCP_PM_ATTR_ADDR={0x34, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x10}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0xff}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @initdev={0xac, 0x1e, 0x1, 0x0}}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r13}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}]}]}, 0xe0}, 0x1, 0x0, 0x0, 0x22010101}, 0x4) shmget$private(0x0, 0x3000, 0x2, &(0x7f0000fe6000/0x3000)=nil) fremovexattr(r2, &(0x7f0000002e40)=@random={'trusted.', '!\x00'}) sendmsg$nl_route_sched(r9, &(0x7f0000002f40)={&(0x7f0000002e80)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000002f00)={&(0x7f0000002ec0)=@gettclass={0x24, 0x2a, 0x2, 0x70bd27, 0x25dfdbfe, {0x0, 0x0, 0x0, r13, {0x0, 0xfff1}, {0xa, 0xe}, {0xfff3, 0xfff2}}, ["", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x8800}, 0x800) 1.07396509s ago: executing program 0 (id=4015): mremap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) r0 = socket$netlink(0x10, 0x3, 0x4) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f00000004c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x7, [@struct={0x5, 0x1, 0x0, 0xf, 0x0, 0x5, [{0x10, 0x4, 0x5}]}]}, {0x0, [0x5f, 0x0, 0x0, 0x5f, 0x61]}}, 0x0, 0x37, 0x0, 0x9}, 0x28) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_io_uring_setup(0x497, &(0x7f0000000240)={0x0, 0x707b, 0x10, 0x0, 0x8}, &(0x7f0000000340)=0x0, &(0x7f0000000480)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd, 0x0, 0x0, 0x85}) io_uring_enter(r2, 0x3516, 0x0, 0x4, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000280)={'ipvlan1\x00', @multicast}) r5 = socket$inet_udp(0x2, 0x2, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_proto_private(r6, 0x8922, &(0x7f00000000c0)="8b64968dff5e38389c553a") bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x12, &(0x7f0000000080)=ANY=[@ANYBLOB="180200000000000000000000000031d0851000000600000018040000", @ANYRES32, @ANYBLOB="0000000000000000660000000000000018000000005000000000000000000000950004e00000000018010000202070250000000000202020db1af8ff01000000bfa100000000000007010000f8ffffffb702000008000000b502000000000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x6c}, 0x90) ioctl$sock_inet_SIOCSIFDSTADDR(r5, 0x8918, &(0x7f0000000640)={'ipvlan1\x00', {0x2, 0x4e24, @private=0xa010102}}) syz_usb_connect(0x0, 0x24, &(0x7f0000000740)=ANY=[@ANYBLOB="120100005ab05740450c088085e10000000109021200b8dc0000000904"], 0x0) write(r0, &(0x7f0000000040)="2700000014000707030e0000120f0a0011000100f5fe009d2fb112ff000000008a151f75080039", 0x27) setsockopt$MRT6_INIT(0xffffffffffffffff, 0x29, 0xc8, &(0x7f00000001c0), 0x4) sendmsg$IPSET_CMD_FLUSH(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x30, 0x4, 0x6, 0x301, 0x0, 0x0, {0x1, 0x0, 0x3}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x30}, 0x1, 0x0, 0x0, 0x8000}, 0x20004080) 959.532325ms ago: executing program 3 (id=4016): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffff8}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000000)='siox_get_data\x00', r0, 0x0, 0x1}, 0x18) socketpair$unix(0x1, 0x2, 0x0, 0x0) dup(0xffffffffffffffff) write$binfmt_aout(0xffffffffffffffff, 0x0, 0xfffffeb7) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x0, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff000000000200000009000100"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000500)=ANY=[], 0xc8}}, 0x4000010) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) futex(0x0, 0xc, 0x1, 0x0, 0x0, 0x0) ioctl$VIDIOC_TRY_FMT(0xffffffffffffffff, 0xc0d05640, &(0x7f0000000040)={0xb, @raw_data="481d3b51c67334b128b203220b775067876d23a8383a6117d3ad3f32a16e2ccb6e9a44b3a6f51ab3b3f0a556c003bfa9a6417f70e47eef871b8374e980f81c4b5dcf68af5ca87ddcad084f2747c06d7fd1d38e425e710f97dcf4f52b3f17b75dd1525c56e109d5856cf83ea265214721779e0bce5a159e3bf34e541411b464a64931ad0ede39c68a233f23ca9c64bd991b4654260d37c5aefa43928819572ac9d2f9df9ac9b326a83d5e111d17804fd5e06f4e3e60ea9907e15d4dd3f65357348c2156770b8580f6"}) r5 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$netrom_NETROM_IDLE(0xffffffffffffffff, 0x103, 0x7, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r5, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x4) r6 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000001200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="38000000031401002dbd7000000000000900020073797a3000b79e301700410073697700140033006c6f00"/56], 0x38}, 0x1, 0x0, 0x0, 0x854}, 0x0) syz_usb_connect(0x0, 0x50, 0x0, 0x0) shmctl$IPC_INFO(0x0, 0x3, &(0x7f0000000300)=""/251) 843.922354ms ago: executing program 1 (id=4017): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210008000122010009058103"], 0x0) r1 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000000000407d1e9c3100220000000109022400020000000009040000010300008a377d0240e70b2d5b12e200092100000001220700090581030000000000"], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io(r1, &(0x7f0000000400)={0x2c, &(0x7f0000000700)=ANY=[@ANYBLOB="00001700000007005a7da3"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000240)={0xfffffffffffffff2, &(0x7f0000000000)=ANY=[@ANYRESHEX=r1, @ANYRESHEX=r1, @ANYBLOB="ffbd5822c03135f001e3dc6d31fc6110bffd33252737b76115c98229211e16b910d48a558b0ca2915b0a3314f4abfa89d6a06167f19e0debeeec", @ANYRESHEX=r1], 0x0, 0x0, 0x0}, 0x0) r2 = syz_open_dev$evdev(&(0x7f0000000600), 0x7fff, 0x0) r3 = socket(0x2, 0x80805, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r4 = socket$kcm(0x29, 0x0, 0x0) ioctl$sock_SIOCSIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r4, 0x8983, &(0x7f0000000680)={0x3, 'pim6reg1\x00', {}, 0x8}) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) setitimer(0x2, 0x0, &(0x7f0000000440)) sendmmsg$inet_sctp(r3, &(0x7f00000032c0)=[{&(0x7f0000000440)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000100)="03", 0xfffffffffffffea5}], 0x1}], 0x1, 0x0) sendmmsg$inet_sctp(r3, &(0x7f00000032c0)=[{&(0x7f00000000c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000240)=[{0x0, 0x300}, {&(0x7f0000000300)="359cb6", 0x3}], 0x2, &(0x7f0000000000)=ANY=[@ANYBLOB="30000000000000008400000001000000000000000c000400"/44, @ANYRES32=0x0], 0x30}], 0x1, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffefffff6, 0x20031, 0xffffffffffffffff, 0x0) r6 = userfaultfd(0x80001) ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f0000000000)) ioctl$UFFDIO_REGISTER(r6, 0xc020aa00, &(0x7f0000000140)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x4}) ioctl$UFFDIO_COPY(r6, 0xc028aa03, &(0x7f0000000080)={&(0x7f00006c6000/0x400000)=nil, &(0x7f000018b000/0x3000)=nil, 0x400000, 0x0, 0x18100}) mremap(&(0x7f0000638000/0x1000)=nil, 0x6aa000, 0x2000, 0x3, &(0x7f00005c0000/0x2000)=nil) mount$overlay(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x10080, 0x0) ioctl$EVIOCRMFF(r2, 0x40044581, &(0x7f0000000640)=0x401) syz_usb_control_io(r0, 0x0, 0x0) syz_open_procfs$pagemap(0xffffffffffffffff, &(0x7f00000005c0)) syz_usb_control_io$hid(r1, &(0x7f0000000280)={0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="20110700000107210000000000"], &(0x7f0000000180)={0x0, 0x3, 0xd, @string={0xd, 0x3, "f593e39e4cf9c6f94f29c6"}}, &(0x7f00000001c0)=ANY=[@ANYBLOB="00220d000000b1829b82252b6858a35e66b394"], &(0x7f0000000200)={0x0, 0x21, 0x9, {0x9, 0x21, 0x0, 0x2, 0x1, {0x22, 0x21a}}}}, &(0x7f0000000580)={0x2c, &(0x7f0000000840)=ANY=[], &(0x7f0000000440)={0x0, 0xa, 0x1, 0xf}, &(0x7f0000000480)={0x0, 0x8, 0x1, 0x4}, &(0x7f0000000740)=ANY=[@ANYBLOB="20010b0000007d52d4cc497248156c14d9b48d660516ac96be85a3f093c7127692f69880e75adaa8c9f3a045988a03689b3f6dc90688671c0d4f5d9911b15c723b93d521aac652a5c86a1d92fb08680765590affee820702544a16bea75c6f8a4da8fc8a0d77e28f03553dea5336a2b2cbf4c207c40f20626b5de1f4cff13e7f54eedfdbaef4e4a9e1f997ee0e78237cfe4c8727a44dea3e566c0947408713ad6149ace35f3faccd1655ecf2420376ef7081397e150348e151d9e5479078c412ad97b0166162b2698b6e62c0fa9ff34011fa00000000000000"], &(0x7f0000000540)={0x20, 0x3, 0x1, 0x9}}) 405.742223ms ago: executing program 4 (id=4018): socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000440)={0x6, 0x8c}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x20, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019380)=""/102400, 0x19000) syz_open_dev$sndctrl(0x0, 0x0, 0x883) pipe2(&(0x7f0000000080)={0x0, 0x0}, 0x0) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) tee(r2, r1, 0xff, 0x0) vmsplice(r3, &(0x7f0000001700)=[{&(0x7f0000000a40)="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", 0xff}], 0x1, 0x0) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) sendfile(r4, r5, 0x0, 0x201f00) 237.475743ms ago: executing program 4 (id=4019): clock_adjtime(0x0, &(0x7f0000000100)={0x19b1, 0x7a6, 0xfffffffffffffff9, 0x0, 0x0, 0x5, 0x101, 0x2, 0x0, 0xa00, 0x40, 0x0, 0x8, 0x0, 0x0, 0x0, 0xc0f, 0x0, 0x0, 0x3fd, 0x2, 0x4000ea, 0xfffffffffffffffd, 0x0, 0x80000000}) (async) clock_adjtime(0x0, &(0x7f0000000100)={0x19b1, 0x7a6, 0xfffffffffffffff9, 0x0, 0x0, 0x5, 0x101, 0x2, 0x0, 0xa00, 0x40, 0x0, 0x8, 0x0, 0x0, 0x0, 0xc0f, 0x0, 0x0, 0x3fd, 0x2, 0x4000ea, 0xfffffffffffffffd, 0x0, 0x80000000}) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000b80)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000600)='kfree\x00', r0}, 0x18) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000600)='kfree\x00', r0}, 0x18) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = syz_open_dev$vim2m(&(0x7f0000000080), 0x1000, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f0000000040)={0x8, 0x1, 0x1}) ioctl$vim2m_VIDIOC_STREAMOFF(r1, 0x40045612, &(0x7f0000000100)=0x1) 0s ago: executing program 2 (id=4020): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$IOCTL_VMCI_INIT_CONTEXT(0xffffffffffffffff, 0x7a0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x74, 0x0, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r1, 0x0, 0x0) sendmsg$can_bcm(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000300)={0x5, 0x8, 0xf1, {0x77359400}, {0x77359400}, {0x3}, 0x1, @can={{0x4, 0x1, 0x1, 0x1}, 0x5, 0x0, 0x0, 0x0, "1b34ba6b471f0adc"}}, 0x48}, 0x1, 0x0, 0x0, 0x2000c014}, 0x800) sendmsg$can_bcm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)={0x5, 0x0, 0x0, {}, {}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "f8ca44dfaa00"}}, 0x48}, 0x1, 0x0, 0x0, 0x48850}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) socket$inet_icmp(0x2, 0x2, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0xa, 0xd, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000000000000000000000000000851000000100000095000000000000001800000020646c2500000000002020207b1af8ff00000000bd21ffff0000000007010000f8ffffffb502020008040000b70300000000000085000000a400000095"], &(0x7f0000000080)='syzkaller\x00', 0x2, 0x0, 0x0, 0x41000}, 0x94) ioctl$FS_IOC_GETFSLABEL(0xffffffffffffffff, 0x400452c8, &(0x7f0000000100)) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000000000000000000000000000a4269f755b56479987a6ed0bf815b1056775ea8e6ee3e06faba074251ff4044f81b697b437313278f48d195dbce667a1086396182b058b187f9aa78f03a4e0dc1b576e0c530017ca34d44f9bd1c7d66df9e7e9322cf4b0443fa960cb5626fae546e5dadafd7c7194e5d7305610ec4608c7ac690b07c36be45c47961fffbbdeb377e8df0a96"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xf, 0x10, &(0x7f0000000040)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [@func={0x85, 0x0, 0x1, 0x0, 0xfffffff5}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000140)='syzkaller\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_device, 0x0, 0x8300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@ipv6_newnexthop={0x3c, 0x68, 0x1, 0xfcfd, 0x0, {0x2, 0x0, 0x0, 0x0, 0x4}, [@NHA_ENCAP_TYPE={0x6, 0x7, 0x4}, @NHA_ENCAP={0xc, 0x8, 0x0, 0x1, @LWTUNNEL_IP6_TC={0x5}}, @NHA_ID={0x8, 0x6, 0xa00}, @NHA_OIF={0x8}]}, 0x3c}}, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) shmat(0x0, &(0x7f0000ff9000/0x1000)=nil, 0x5000) mremap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f00007b1000/0x1000)=nil) kernel console output (not intermixed with test programs): ] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3018'. [ 805.965369][T15823] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 805.981931][T16029] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 805.986875][T15823] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 806.035430][T15823] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 806.070042][T15823] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 807.340062][T15823] 8021q: adding VLAN 0 to HW filter on device bond0 [ 807.794238][T15823] 8021q: adding VLAN 0 to HW filter on device team0 [ 807.814555][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 807.821710][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 807.950079][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 807.957303][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 808.154920][T16067] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3027'. [ 808.369373][T15823] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 808.379818][T15823] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 808.509198][T16078] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 808.558381][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 808.564984][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 809.018538][T15823] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 809.153596][T15823] veth0_vlan: entered promiscuous mode [ 809.211779][T15823] veth1_vlan: entered promiscuous mode [ 809.462542][T15823] veth0_macvtap: entered promiscuous mode [ 810.430000][T13950] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 810.439365][T13950] Bluetooth: hci2: Injecting HCI hardware error event [ 810.448097][ T5832] Bluetooth: hci2: hardware error 0x00 [ 810.663576][T15823] veth1_macvtap: entered promiscuous mode [ 810.799888][T15823] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 810.853485][T15823] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 810.866379][T15823] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 810.875659][T15823] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 810.884802][T15823] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 810.893884][T15823] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 811.072058][T16123] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3041'. [ 811.240425][ T6011] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 811.283821][ T6011] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 811.662400][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 811.691228][T16139] overlayfs: failed to clone upperpath [ 812.043307][T16144] netlink: 308 bytes leftover after parsing attributes in process `syz.2.3047'. [ 812.495781][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 812.873067][ T5832] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 815.729791][T16186] netlink: 308 bytes leftover after parsing attributes in process `syz.2.3058'. [ 815.743681][ T1330] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 816.261042][T16193] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3059'. [ 816.376205][ T1330] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 816.604715][ T1330] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 816.641196][T13950] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 816.794612][T13950] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 816.803213][T13950] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 816.811361][T13950] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 816.819890][T13950] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 817.645332][ T1330] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 818.481876][T16232] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3070'. [ 819.255990][T13950] Bluetooth: hci2: command tx timeout [ 819.402390][T16235] netlink: 308 bytes leftover after parsing attributes in process `syz.2.3072'. [ 819.909212][ T1330] bridge_slave_1: left allmulticast mode [ 819.960569][ T1330] bridge_slave_1: left promiscuous mode [ 820.004142][ T1330] bridge0: port 2(bridge_slave_1) entered disabled state [ 820.158933][ T1330] bridge_slave_0: left allmulticast mode [ 820.174230][ T1330] bridge_slave_0: left promiscuous mode [ 820.773493][ T1330] bridge0: port 1(bridge_slave_0) entered disabled state [ 821.293154][T13950] Bluetooth: hci2: command tx timeout [ 822.174181][ T1330] bond1 (unregistering): (slave ip6gretap1): Removing an active aggregator [ 822.190090][ T1330] bond1 (unregistering): (slave ip6gretap1): Releasing backup interface [ 822.198673][ T1330] bond1 (unregistering): (slave ip6gretap1): the permanent HWaddr of slave - 46:4c:74:40:75:38 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 822.798717][ T1330] bridge0 (unregistering): left allmulticast mode [ 823.353192][T13950] Bluetooth: hci2: command tx timeout [ 823.482873][ T1330] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 823.500786][ T1330] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 823.542685][ T1330] bond0 (unregistering): Released all slaves [ 823.819544][ T1330] bond1 (unregistering): (slave veth3): Releasing backup interface [ 823.845757][ T1330] bond1 (unregistering): Released all slaves [ 824.958095][T16301] netlink: 308 bytes leftover after parsing attributes in process `syz.3.3082'. [ 825.367274][T16202] chnl_net:caif_netlink_parms(): no params data found [ 825.552704][T16302] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3083'. [ 825.570616][T13950] Bluetooth: hci2: command tx timeout [ 826.734136][T16312] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3085'. [ 827.843815][T16202] bridge0: port 1(bridge_slave_0) entered blocking state [ 827.863956][T16202] bridge0: port 1(bridge_slave_0) entered disabled state [ 828.143531][T16202] bridge_slave_0: entered allmulticast mode [ 828.173515][T16202] bridge_slave_0: entered promiscuous mode [ 828.228780][T16202] bridge0: port 2(bridge_slave_1) entered blocking state [ 828.271889][T16202] bridge0: port 2(bridge_slave_1) entered disabled state [ 828.323334][T16202] bridge_slave_1: entered allmulticast mode [ 828.331188][T16202] bridge_slave_1: entered promiscuous mode [ 828.597314][T16202] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 828.745066][T16202] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 829.132575][T16353] netlink: 308 bytes leftover after parsing attributes in process `syz.1.3094'. [ 829.727836][T16202] team0: Port device team_slave_0 added [ 830.183729][T16360] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3095'. [ 831.685498][T16202] team0: Port device team_slave_1 added [ 831.953216][T16372] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3100'. [ 832.106633][T16202] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 832.132632][T16202] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 832.212255][T16202] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 832.835502][ T1330] hsr_slave_0: left promiscuous mode [ 832.841496][ T1330] hsr_slave_1: left promiscuous mode [ 832.856165][ T1330] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 832.877766][ T1330] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 832.898374][ T1330] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 832.912985][ T1330] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 832.966595][ T1330] veth1_macvtap: left promiscuous mode [ 832.972165][ T1330] veth0_macvtap: left promiscuous mode [ 832.978273][ T1330] veth1_vlan: left promiscuous mode [ 832.989928][ T1330] veth0_vlan: left promiscuous mode [ 833.509660][T16394] netlink: 44 bytes leftover after parsing attributes in process `syz.1.3104'. [ 833.879707][ T1330] team0 (unregistering): Port device team_slave_1 removed [ 833.919300][ T1330] team0 (unregistering): Port device team_slave_0 removed [ 834.262006][T16202] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 834.280446][T16202] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 834.317536][T16202] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 835.667136][T16414] netlink: 308 bytes leftover after parsing attributes in process `syz.0.3105'. [ 835.748273][T16202] hsr_slave_0: entered promiscuous mode [ 835.759972][T16202] hsr_slave_1: entered promiscuous mode [ 835.770531][T16202] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 835.781556][T16202] Cannot create hsr debugfs directory [ 838.030169][T16412] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 838.109020][T16424] netlink: 'syz.2.3107': attribute type 10 has an invalid length. [ 838.186222][T16424] batman_adv: batadv0: Adding interface: wlan0 [ 838.192470][T16424] batman_adv: batadv0: The MTU of interface wlan0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 838.281128][T16424] batman_adv: batadv0: Interface activated: wlan0 [ 838.596154][T16428] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3108'. [ 839.496078][T16439] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3111'. [ 839.979712][ T5891] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 840.238391][ T1330] IPVS: stop unused estimator thread 0... [ 840.371865][ T5891] usb 2-1: device descriptor read/all, error -71 [ 840.958333][T16465] netlink: 44 bytes leftover after parsing attributes in process `syz.1.3117'. [ 844.262833][T16202] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 845.806573][T16202] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 845.881709][T16202] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 845.910200][T16202] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 846.759845][T16202] 8021q: adding VLAN 0 to HW filter on device bond0 [ 846.779519][T16202] 8021q: adding VLAN 0 to HW filter on device team0 [ 846.896726][ T7765] bridge0: port 1(bridge_slave_0) entered blocking state [ 846.903896][ T7765] bridge0: port 1(bridge_slave_0) entered forwarding state [ 846.924624][ T7765] bridge0: port 2(bridge_slave_1) entered blocking state [ 846.931768][ T7765] bridge0: port 2(bridge_slave_1) entered forwarding state [ 847.787307][T16202] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 848.169802][T16518] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3126'. [ 848.493276][ T5906] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 849.276102][ T5906] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 849.290481][T16202] veth0_vlan: entered promiscuous mode [ 849.307044][ T5906] usb 3-1: New USB device found, idVendor=04dd, idProduct=9032, bcdDevice=fd.0b [ 849.321968][T16548] netlink: 44 bytes leftover after parsing attributes in process `syz.1.3129'. [ 849.337405][T16202] veth1_vlan: entered promiscuous mode [ 849.343097][ T5906] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 849.385146][ T5906] usb 3-1: config 0 descriptor?? [ 849.426600][ T5906] usb 3-1: unsupported MDLM descriptors [ 849.450637][T16202] veth0_macvtap: entered promiscuous mode [ 849.478213][T16202] veth1_macvtap: entered promiscuous mode [ 849.539516][T16202] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 849.567020][T16202] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 849.595626][T16202] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 849.612562][T16202] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 849.630085][T16202] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 849.647440][T16202] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 850.569079][T16572] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3134'. [ 850.599056][T13120] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 850.823344][T13120] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 850.974770][ T5935] usb 3-1: USB disconnect, device number 15 [ 851.449970][T13120] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 851.573382][T13120] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 852.762548][T16599] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3139'. [ 852.786192][T16599] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3139'. [ 853.706099][ T5935] usb 3-1: new low-speed USB device number 16 using dummy_hcd [ 854.232606][T16611] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3143'. [ 854.242119][T16611] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3143'. [ 854.300070][T16611] bridge0: entered promiscuous mode [ 854.305904][T16611] macsec1: entered allmulticast mode [ 854.311341][T16611] bridge0: entered allmulticast mode [ 854.738869][ T5935] usb 3-1: device descriptor read/64, error -71 [ 855.593724][T16617] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3145'. [ 855.637948][ T7066] usb 2-1: new low-speed USB device number 12 using dummy_hcd [ 855.793005][ T7066] usb 2-1: device descriptor read/64, error -71 [ 855.923012][ T5826] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 856.073137][ T7066] usb 2-1: new low-speed USB device number 13 using dummy_hcd [ 856.085597][ T5826] usb 5-1: Using ep0 maxpacket: 16 [ 856.112173][ T5826] usb 5-1: config 1 has an invalid descriptor of length 66, skipping remainder of the config [ 856.131387][ T5826] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 856.166300][ T5826] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 1.40 [ 856.199453][ T5826] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 856.231790][ T5826] usb 5-1: Product: syz [ 856.249733][ T5826] usb 5-1: Manufacturer: syz [ 856.269425][ T5826] usb 5-1: SerialNumber: syz [ 856.333244][ T7066] usb 2-1: device descriptor read/64, error -71 [ 856.670485][ T5832] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 856.696604][ T7066] usb usb2-port1: attempt power cycle [ 856.728203][ T5832] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 856.740081][ T5832] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 856.759011][ T5832] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 856.771234][ T5832] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 857.211983][T16623] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3147'. [ 857.343242][ T5826] usb 5-1: 0:2 : does not exist [ 857.362345][ T5826] usb 5-1: 5:0: failed to get current value for ch 0 (-22) [ 857.421671][ T5826] usb 5-1: 5:0: cannot get min/max values for control 3 (id 5) [ 857.481751][ T5826] usb 5-1: 5:0: cannot get min/max values for control 4 (id 5) [ 857.526929][ T5826] usb 5-1: 5:0: cannot get min/max values for control 5 (id 5) [ 857.577517][T15875] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 857.599439][ T5826] usb 5-1: 5:0: failed to get current value for ch 1 (-22) [ 857.631656][ T5826] usb 5-1: 5:0: failed to get current value for ch 0 (-22) [ 857.749897][ T5826] usb 5-1: 5:0: cannot get min/max values for control 3 (id 5) [ 857.786823][ T5826] usb 5-1: 5:0: cannot get min/max values for control 5 (id 5) [ 857.818567][ T5826] usb 5-1: USB disconnect, device number 9 [ 857.915906][T16662] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3149'. [ 858.263559][ T7066] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 858.635518][ T7066] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 858.656781][ T7066] usb 2-1: New USB device found, idVendor=04dd, idProduct=9032, bcdDevice=fd.0b [ 858.897700][T15729] udevd[15729]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 858.982641][ T7066] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 859.023583][ T5832] Bluetooth: hci6: command tx timeout [ 859.286778][T15875] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 859.297808][ T7066] usb 2-1: config 0 descriptor?? [ 859.310896][ T7066] usb 2-1: unsupported MDLM descriptors [ 860.366245][ T30] kauditd_printk_skb: 73 callbacks suppressed [ 860.366263][ T30] audit: type=1326 audit(1751115402.810:844): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16684 comm="syz.3.3159" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fc881b8e929 code=0x0 [ 860.438249][T15875] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 860.587935][T16636] chnl_net:caif_netlink_parms(): no params data found [ 860.693310][T16694] netlink: 44 bytes leftover after parsing attributes in process `syz.4.3160'. [ 860.731666][T15875] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 860.773991][ T7066] usb 2-1: USB disconnect, device number 15 [ 861.036029][ T5832] Bluetooth: hci6: command tx timeout [ 861.496059][T16714] netlink: 'syz.2.3162': attribute type 3 has an invalid length. [ 861.505348][T16714] netlink: 'syz.2.3162': attribute type 1 has an invalid length. [ 861.526132][T16714] netlink: 191152 bytes leftover after parsing attributes in process `syz.2.3162'. [ 861.639901][T16636] bridge0: port 1(bridge_slave_0) entered blocking state [ 861.660019][T16636] bridge0: port 1(bridge_slave_0) entered disabled state [ 861.681772][T16636] bridge_slave_0: entered allmulticast mode [ 861.706462][T16636] bridge_slave_0: entered promiscuous mode [ 861.727159][T16718] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 861.781130][T16636] bridge0: port 2(bridge_slave_1) entered blocking state [ 861.809544][T16636] bridge0: port 2(bridge_slave_1) entered disabled state [ 861.846763][T16636] bridge_slave_1: entered allmulticast mode [ 861.882646][T16636] bridge_slave_1: entered promiscuous mode [ 861.958644][T15875] bridge_slave_1: left allmulticast mode [ 861.973533][T15875] bridge_slave_1: left promiscuous mode [ 861.990627][T15875] bridge0: port 2(bridge_slave_1) entered disabled state [ 863.276060][ T5832] Bluetooth: hci6: command tx timeout [ 863.362163][T16744] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3169'. [ 863.632431][T16749] netlink: 'syz.4.3169': attribute type 10 has an invalid length. [ 864.956981][T16762] netlink: 44 bytes leftover after parsing attributes in process `syz.3.3172'. [ 865.301565][T15875] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 865.318719][T15875] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 865.335675][T15875] bond0 (unregistering): Released all slaves [ 865.353881][ T5832] Bluetooth: hci6: command tx timeout [ 865.386121][T16749] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 865.395036][T16749] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 865.612543][T16778] netlink: 'syz.4.3174': attribute type 3 has an invalid length. [ 865.620536][T16778] netlink: 'syz.4.3174': attribute type 1 has an invalid length. [ 865.650918][T16778] netlink: 191152 bytes leftover after parsing attributes in process `syz.4.3174'. [ 865.868578][T16636] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 866.100799][T16781] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 866.447896][T16636] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 866.654863][T16791] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3177'. [ 866.664149][T16791] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3177'. [ 868.851925][T16803] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 869.228766][T16636] team0: Port device team_slave_0 added [ 869.451035][T16636] team0: Port device team_slave_1 added [ 870.000333][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 870.007108][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 870.601352][T15875] hsr_slave_0: left promiscuous mode [ 870.610401][T16822] netlink: 'syz.4.3185': attribute type 3 has an invalid length. [ 870.634536][T16827] netlink: 44 bytes leftover after parsing attributes in process `syz.3.3186'. [ 870.654880][T16822] netlink: 'syz.4.3185': attribute type 1 has an invalid length. [ 870.683390][T15875] hsr_slave_1: left promiscuous mode [ 870.697966][T16822] netlink: 191152 bytes leftover after parsing attributes in process `syz.4.3185'. [ 871.304102][T15875] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 871.403793][T15875] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 871.459436][T15875] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 871.472096][T15875] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 871.921269][T15875] veth1_macvtap: left promiscuous mode [ 871.930569][T15875] veth0_macvtap: left allmulticast mode [ 871.941559][T15875] veth0_macvtap: left promiscuous mode [ 871.949165][T15875] veth1_vlan: left promiscuous mode [ 872.693292][T15875] veth0_vlan: left promiscuous mode [ 873.404200][T15875] team0 (unregistering): Port device team_slave_0 removed [ 874.044284][T15875] team0 (unregistering): Port device bridge_slave_0 removed [ 874.262202][T16636] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 874.269260][T16636] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 874.299286][T16636] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 874.372244][T16636] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 874.379292][T16636] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 874.406992][T16636] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 874.749621][T16871] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 875.295001][T16636] hsr_slave_0: entered promiscuous mode [ 875.313090][T16636] hsr_slave_1: entered promiscuous mode [ 875.343397][T16636] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 875.350975][T16636] Cannot create hsr debugfs directory [ 876.787247][T16893] netlink: 44 bytes leftover after parsing attributes in process `syz.4.3197'. [ 877.377591][T16905] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3198'. [ 877.386594][T16905] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3198'. [ 877.763476][ T5935] usb 2-1: new low-speed USB device number 16 using dummy_hcd [ 878.022334][T15875] IPVS: stop unused estimator thread 0... [ 878.134611][ T5935] usb 2-1: device descriptor read/64, error -71 [ 878.271275][T16910] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3199'. [ 878.280236][T16910] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3199'. [ 878.435058][ T5935] usb 2-1: new low-speed USB device number 17 using dummy_hcd [ 878.883575][ T5935] usb 2-1: device descriptor read/64, error -71 [ 879.024821][ T5935] usb usb2-port1: attempt power cycle [ 879.394469][ T5935] usb 2-1: new low-speed USB device number 18 using dummy_hcd [ 879.618725][ T5935] usb 2-1: device descriptor read/8, error -71 [ 879.632645][T16636] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 879.888288][ T5935] usb 2-1: new low-speed USB device number 19 using dummy_hcd [ 879.996280][ T5935] usb 2-1: device descriptor read/8, error -71 [ 880.337331][T16636] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 880.459107][ T5935] usb usb2-port1: unable to enumerate USB device [ 880.508512][T16636] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 880.600407][T16636] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 881.924059][T16962] netlink: 44 bytes leftover after parsing attributes in process `syz.1.3208'. [ 882.020510][T16966] lo speed is unknown, defaulting to 1000 [ 882.026960][T16966] lo speed is unknown, defaulting to 1000 [ 882.041410][T16966] lo speed is unknown, defaulting to 1000 [ 882.086546][T16966] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 882.216688][T16966] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 882.404027][T16966] lo speed is unknown, defaulting to 1000 [ 882.428256][T16966] lo speed is unknown, defaulting to 1000 [ 882.436383][T16966] lo speed is unknown, defaulting to 1000 [ 882.444188][T16966] lo speed is unknown, defaulting to 1000 [ 882.452415][T16966] lo speed is unknown, defaulting to 1000 [ 882.588964][T16636] 8021q: adding VLAN 0 to HW filter on device bond0 [ 882.722588][T16636] 8021q: adding VLAN 0 to HW filter on device team0 [ 882.785176][ T6011] bridge0: port 1(bridge_slave_0) entered blocking state [ 882.792343][ T6011] bridge0: port 1(bridge_slave_0) entered forwarding state [ 882.916827][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 882.924005][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 883.274882][T16636] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 884.467303][T17005] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3214'. [ 884.765825][T16636] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 884.906802][T16636] veth0_vlan: entered promiscuous mode [ 884.986927][T16636] veth1_vlan: entered promiscuous mode [ 885.156562][T16636] veth0_macvtap: entered promiscuous mode [ 885.177801][T16636] veth1_macvtap: entered promiscuous mode [ 885.252278][T16636] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 885.320981][T16636] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 885.354222][T17024] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3223'. [ 885.367801][T16636] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 885.378636][T16636] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 885.393673][T16636] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 885.402413][T16636] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 885.620256][ T1338] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 885.652368][ T1338] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 885.765655][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 885.859858][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 886.434156][T17048] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 887.455193][T17051] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 888.633869][ T7066] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 888.943279][ T7066] usb 3-1: Using ep0 maxpacket: 16 [ 888.973705][ T7066] usb 3-1: config 1 has an invalid descriptor of length 66, skipping remainder of the config [ 889.007191][ T7066] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 889.073024][ T7066] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 1.40 [ 889.091225][ T7066] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 889.120670][ T7066] usb 3-1: Product: syz [ 889.138035][ T7066] usb 3-1: Manufacturer: syz [ 889.151933][ T7066] usb 3-1: SerialNumber: syz [ 889.169303][T17078] netlink: 76 bytes leftover after parsing attributes in process `syz.4.3234'. [ 889.382826][T17074] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3233'. [ 889.429465][ T7066] usb 3-1: 0:2 : does not exist [ 889.471154][T17080] netlink: 44 bytes leftover after parsing attributes in process `syz.4.3235'. [ 889.491764][ T7066] usb 3-1: 5:0: failed to get current value for ch 0 (-22) [ 889.531457][ T7066] usb 3-1: 5:0: cannot get min/max values for control 3 (id 5) [ 889.551522][ T7066] usb 3-1: 5:0: cannot get min/max values for control 4 (id 5) [ 889.579988][ T7066] usb 3-1: 5:0: cannot get min/max values for control 5 (id 5) [ 889.613032][T13950] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 889.626606][ T7066] usb 3-1: 5:0: failed to get current value for ch 1 (-22) [ 889.634306][T13950] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 889.641966][T13950] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 889.655627][T13950] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 889.665659][T13950] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 889.688485][ T7066] usb 3-1: 5:0: failed to get current value for ch 0 (-22) [ 889.817379][ T7066] usb 3-1: 5:0: cannot get min/max values for control 3 (id 5) [ 889.841606][T17082] lo speed is unknown, defaulting to 1000 [ 889.890402][ T7066] usb 3-1: 5:0: cannot get min/max values for control 5 (id 5) [ 890.032680][ T7066] usb 3-1: USB disconnect, device number 18 [ 890.099839][T15729] udevd[15729]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 891.721559][T17082] chnl_net:caif_netlink_parms(): no params data found [ 891.753137][ T5832] Bluetooth: hci0: command tx timeout [ 893.026384][T17082] bridge0: port 1(bridge_slave_0) entered blocking state [ 893.080589][T17082] bridge0: port 1(bridge_slave_0) entered disabled state [ 893.210017][T17082] bridge_slave_0: entered allmulticast mode [ 893.219113][T17082] bridge_slave_0: entered promiscuous mode [ 893.416914][T17082] bridge0: port 2(bridge_slave_1) entered blocking state [ 893.427830][T17082] bridge0: port 2(bridge_slave_1) entered disabled state [ 893.437437][T17082] bridge_slave_1: entered allmulticast mode [ 893.448276][T17082] bridge_slave_1: entered promiscuous mode [ 893.522315][T17118] delete_channel: no stack [ 893.876946][T17125] 9pnet_fd: Insufficient options for proto=fd [ 893.951354][ T5832] Bluetooth: hci0: command tx timeout [ 894.064778][T17082] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 894.108229][T17129] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3245'. [ 894.168777][T17082] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 894.231031][T17132] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3246'. [ 894.409534][T17082] team0: Port device team_slave_0 added [ 894.431548][T17082] team0: Port device team_slave_1 added [ 894.578110][T17082] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 894.599027][T17082] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 894.667700][T17082] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 894.961168][T17082] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 895.002943][T17082] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 895.979743][T17082] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 895.993241][ T5832] Bluetooth: hci0: command tx timeout [ 897.324751][T17082] hsr_slave_0: entered promiscuous mode [ 897.331447][T17082] hsr_slave_1: entered promiscuous mode [ 897.355912][T17082] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 897.364733][T17082] Cannot create hsr debugfs directory [ 898.073168][ T5832] Bluetooth: hci0: command tx timeout [ 898.144484][T17082] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 898.377827][T17082] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 898.715803][T17082] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 899.293011][ T5891] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 899.483058][ T5891] usb 1-1: Using ep0 maxpacket: 16 [ 899.542422][ T5891] usb 1-1: config 1 has an invalid descriptor of length 66, skipping remainder of the config [ 899.587166][ T5891] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 899.620337][ T5891] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 1.40 [ 899.649477][ T5891] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 899.728554][ T5891] usb 1-1: Product: syz [ 899.732753][ T5891] usb 1-1: Manufacturer: syz [ 900.844196][ T5891] usb 1-1: SerialNumber: syz [ 901.131900][T17082] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 901.190758][T17184] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3260'. [ 901.257917][T17082] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 901.324128][ T5891] usb 1-1: 0:2 : does not exist [ 901.346789][T17082] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 901.386529][ T5891] usb 1-1: 5:0: failed to get current value for ch 0 (-22) [ 901.398390][T17082] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 901.473417][ T5891] usb 1-1: 5:0: cannot get min/max values for control 3 (id 5) [ 901.493069][ T5906] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 901.522570][ T5891] usb 1-1: 5:0: cannot get min/max values for control 4 (id 5) [ 901.550506][ T5891] usb 1-1: 5:0: cannot get min/max values for control 5 (id 5) [ 901.585942][ T5891] usb 1-1: 5:0: failed to get current value for ch 1 (-22) [ 901.620040][ T5891] usb 1-1: 5:0: failed to get current value for ch 0 (-22) [ 901.693062][ T5906] usb 2-1: Using ep0 maxpacket: 32 [ 901.699716][ T5891] usb 1-1: 5:0: cannot get min/max values for control 3 (id 5) [ 901.715255][ T5906] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 901.748081][ T5891] usb 1-1: 5:0: cannot get min/max values for control 5 (id 5) [ 901.783780][ T5906] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 901.793251][ T5891] usb 1-1: USB disconnect, device number 9 [ 901.806296][T17082] 8021q: adding VLAN 0 to HW filter on device bond0 [ 901.830391][ T5906] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 901.904302][ T5906] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 901.930487][T17232] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3265'. [ 901.932469][T17082] 8021q: adding VLAN 0 to HW filter on device team0 [ 901.950586][ T5906] usb 2-1: config 0 descriptor?? [ 901.975561][ T5906] hub 2-1:0.0: USB hub found [ 902.014422][T17210] bridge0: port 1(bridge_slave_0) entered blocking state [ 902.021576][T17210] bridge0: port 1(bridge_slave_0) entered forwarding state [ 902.062129][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 902.069280][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 902.191471][T17220] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 902.246714][T17220] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 903.881992][T17082] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 904.119401][T17082] veth0_vlan: entered promiscuous mode [ 904.193754][T17082] veth1_vlan: entered promiscuous mode [ 904.307258][T17082] veth0_macvtap: entered promiscuous mode [ 904.362070][T17082] veth1_macvtap: entered promiscuous mode [ 904.378942][ T5906] hub 2-1:0.0: config failed, can't read hub descriptor (err -22) [ 904.445436][ T5906] usbhid 2-1:0.0: can't add hid device: -71 [ 904.451471][ T5906] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 904.456427][T17082] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 904.553921][ T5906] usb 2-1: USB disconnect, device number 20 [ 904.566258][T17082] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 904.646373][T17082] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 904.890439][T17082] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 904.902940][T17082] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 904.911663][T17082] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 905.837575][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 905.883926][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 905.942173][T17212] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 906.062287][T17212] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 906.474005][ C0] Dead loop on virtual device ipvlan1, fix it urgently! [ 907.204218][T17318] FAULT_INJECTION: forcing a failure. [ 907.204218][T17318] name failslab, interval 1, probability 0, space 0, times 0 [ 907.219205][T17316] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3280'. [ 907.227534][T17318] CPU: 1 UID: 0 PID: 17318 Comm: syz.3.3282 Not tainted 6.16.0-rc3-syzkaller-00233-g35e261cd95dd #0 PREEMPT(full) [ 907.227558][T17318] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 907.227569][T17318] Call Trace: [ 907.227577][T17318] [ 907.227586][T17318] dump_stack_lvl+0x189/0x250 [ 907.227614][T17318] ? __pfx____ratelimit+0x10/0x10 [ 907.227637][T17318] ? __pfx_dump_stack_lvl+0x10/0x10 [ 907.227659][T17318] ? __pfx__printk+0x10/0x10 [ 907.227682][T17318] ? __pfx___might_resched+0x10/0x10 [ 907.227707][T17318] should_fail_ex+0x414/0x560 [ 907.227732][T17318] should_failslab+0xa8/0x100 [ 907.227755][T17318] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 907.227776][T17318] ? __alloc_skb+0x112/0x2d0 [ 907.227797][T17318] __alloc_skb+0x112/0x2d0 [ 907.227818][T17318] netlink_sendmsg+0x5c6/0xb30 [ 907.227845][T17318] ? __pfx_netlink_sendmsg+0x10/0x10 [ 907.227870][T17318] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 907.227889][T17318] ? __pfx_netlink_sendmsg+0x10/0x10 [ 907.227907][T17318] __sock_sendmsg+0x21c/0x270 [ 907.227932][T17318] ____sys_sendmsg+0x505/0x830 [ 907.227956][T17318] ? __pfx_____sys_sendmsg+0x10/0x10 [ 907.227984][T17318] ? import_iovec+0x74/0xa0 [ 907.228009][T17318] ___sys_sendmsg+0x21f/0x2a0 [ 907.228030][T17318] ? __pfx____sys_sendmsg+0x10/0x10 [ 907.228080][T17318] ? __fget_files+0x2a/0x420 [ 907.228100][T17318] ? __fget_files+0x3a0/0x420 [ 907.228130][T17318] __x64_sys_sendmsg+0x19b/0x260 [ 907.228151][T17318] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 907.228178][T17318] ? __pfx_ksys_write+0x10/0x10 [ 907.228201][T17318] ? rcu_is_watching+0x15/0xb0 [ 907.228226][T17318] ? do_syscall_64+0xbe/0x3b0 [ 907.228251][T17318] do_syscall_64+0xfa/0x3b0 [ 907.228272][T17318] ? lockdep_hardirqs_on+0x9c/0x150 [ 907.228292][T17318] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 907.228308][T17318] ? clear_bhb_loop+0x60/0xb0 [ 907.228328][T17318] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 907.228344][T17318] RIP: 0033:0x7fb3d838e929 [ 907.228360][T17318] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 907.228374][T17318] RSP: 002b:00007fb3d9200038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 907.228392][T17318] RAX: ffffffffffffffda RBX: 00007fb3d85b5fa0 RCX: 00007fb3d838e929 [ 907.228405][T17318] RDX: 0000000020000000 RSI: 0000200000000140 RDI: 0000000000000005 [ 907.228416][T17318] RBP: 00007fb3d9200090 R08: 0000000000000000 R09: 0000000000000000 [ 907.228426][T17318] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 907.228437][T17318] R13: 0000000000000000 R14: 00007fb3d85b5fa0 R15: 00007ffcf6d42a78 [ 907.228463][T17318] [ 907.272302][T17319] overlayfs: option "workdir=./file0" is useless in a non-upper mount, ignore [ 907.517484][T17319] overlayfs: missing 'lowerdir' [ 907.628569][ T5906] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 907.846681][ T5906] usb 2-1: New USB device found, idVendor=0b95, idProduct=772b, bcdDevice=a2.4c [ 908.073931][ T5906] usb 2-1: New USB device strings: Mfr=24, Product=2, SerialNumber=3 [ 908.227039][ T5906] usb 2-1: Product: syz [ 908.231254][ T5906] usb 2-1: Manufacturer: syz [ 908.263026][ T5906] usb 2-1: SerialNumber: syz [ 908.969764][ T5906] usb 2-1: config 0 descriptor?? [ 909.383610][ T5906] usb 2-1: can't set config #0, error -71 [ 909.414484][ T5906] usb 2-1: USB disconnect, device number 21 [ 909.462186][T17349] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 909.773950][T17359] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3291'. [ 911.051276][T17375] netlink: 96 bytes leftover after parsing attributes in process `syz.0.3295'. [ 911.825152][T17378] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3297'. [ 912.256830][T17396] Bluetooth: MGMT ver 1.23 [ 912.555163][ T5891] usb 2-1: new low-speed USB device number 22 using dummy_hcd [ 912.843855][T17402] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3307'. [ 912.883180][ T5891] usb 2-1: device descriptor read/64, error -71 [ 913.184012][T17416] 9pnet_fd: Insufficient options for proto=fd [ 913.287931][T17417] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3312'. [ 913.300534][ T5891] usb 2-1: new low-speed USB device number 23 using dummy_hcd [ 913.465132][ T5891] usb 2-1: device descriptor read/64, error -71 [ 913.648598][ T5891] usb usb2-port1: attempt power cycle [ 914.114219][ T5891] usb 2-1: new low-speed USB device number 24 using dummy_hcd [ 914.138912][T17432] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 914.151954][ T5891] usb 2-1: device descriptor read/8, error -71 [ 914.423281][ T5891] usb 2-1: new low-speed USB device number 25 using dummy_hcd [ 914.443697][ T5891] usb 2-1: device descriptor read/8, error -71 [ 914.553459][ T5891] usb usb2-port1: unable to enumerate USB device [ 915.329261][T17456] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 915.513834][T17460] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 915.708374][T17464] batman_adv: batadv0: Adding interface: dummy0 [ 915.714819][T17464] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 915.760481][T17465] overlayfs: option "workdir=./file0" is useless in a non-upper mount, ignore [ 915.769835][T17465] overlayfs: missing 'lowerdir' [ 915.774988][T17464] batman_adv: batadv0: Interface activated: dummy0 [ 915.825796][T17464] batadv0: mtu less than device minimum [ 915.833160][T17464] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 915.845201][T17464] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 915.857081][T17464] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 915.868960][T17464] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 915.880823][T17464] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 915.892700][T17464] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 915.904563][T17464] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 916.043368][ T5891] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 916.129662][T17464] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 916.199186][T17470] netlink: 'syz.4.3334': attribute type 3 has an invalid length. [ 916.235778][T17470] netlink: 'syz.4.3334': attribute type 1 has an invalid length. [ 916.257787][ T5891] usb 2-1: New USB device found, idVendor=0b95, idProduct=772b, bcdDevice=a2.4c [ 916.273642][T17470] netlink: 191152 bytes leftover after parsing attributes in process `syz.4.3334'. [ 916.289306][ T5891] usb 2-1: New USB device strings: Mfr=24, Product=2, SerialNumber=3 [ 916.343959][ T5891] usb 2-1: Product: syz [ 916.358346][ T5891] usb 2-1: Manufacturer: syz [ 916.386427][ T5891] usb 2-1: SerialNumber: syz [ 916.409651][ T5891] usb 2-1: config 0 descriptor?? [ 918.137719][T17489] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3341'. [ 918.328562][ T5832] Bluetooth: hci3: command 0x0406 tx timeout [ 918.751624][T17500] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3346'. [ 918.976642][ T5891] asix 2-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 919.018489][ T5891] asix 2-1:0.0: probe with driver asix failed with error -71 [ 919.048896][ T5891] usb 2-1: USB disconnect, device number 26 [ 919.051192][T17504] netlink: 'syz.0.3348': attribute type 3 has an invalid length. [ 919.104507][T17504] netlink: 'syz.0.3348': attribute type 1 has an invalid length. [ 919.121904][T17504] netlink: 191152 bytes leftover after parsing attributes in process `syz.0.3348'. [ 919.275635][T17507] netlink: 44 bytes leftover after parsing attributes in process `syz.1.3349'. [ 919.648082][T17516] fuse: Bad value for 'fd' [ 919.764499][T17516] overlayfs: failed to resolve './file1': -2 [ 919.778556][T17521] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3354'. [ 920.248407][T17538] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 920.452775][T17542] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3359'. [ 920.462044][T17542] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3359'. [ 921.298834][T17557] tipc: Started in network mode [ 921.308164][T17557] tipc: Node identity 4, cluster identity 4711 [ 921.314881][T17557] tipc: Node number set to 4 [ 921.441061][T17557] bpf: Bad value for 'gid' [ 924.152178][T17568] syz.3.3367 invoked oom-killer: gfp_mask=0x442dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO|__GFP_NOWARN|__GFP_COMP), order=3, oom_score_adj=1000 [ 924.166202][T17568] CPU: 0 UID: 0 PID: 17568 Comm: syz.3.3367 Not tainted 6.16.0-rc3-syzkaller-00233-g35e261cd95dd #0 PREEMPT(full) [ 924.166217][T17568] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 924.166223][T17568] Call Trace: [ 924.166228][T17568] [ 924.166233][T17568] dump_stack_lvl+0x189/0x250 [ 924.166254][T17568] ? __pfx_dump_stack_lvl+0x10/0x10 [ 924.166268][T17568] ? __pfx__printk+0x10/0x10 [ 924.166287][T17568] dump_header+0xd3/0x480 [ 924.166300][T17568] oom_kill_process+0x3b6/0x950 [ 924.166314][T17568] out_of_memory+0xf09/0x12a0 [ 924.166332][T17568] ? __pfx_out_of_memory+0x10/0x10 [ 924.166348][T17568] mem_cgroup_out_of_memory+0x145/0x240 [ 924.166363][T17568] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 924.166383][T17568] ? _raw_spin_unlock+0x28/0x50 [ 924.166395][T17568] ? memcg1_oom_prepare+0x37f/0x450 [ 924.166408][T17568] try_charge_memcg+0xdff/0x1290 [ 924.166429][T17568] ? __pfx_try_charge_memcg+0x10/0x10 [ 924.166444][T17568] ? get_mem_cgroup_from_objcg+0x1a/0x1d0 [ 924.166458][T17568] ? get_mem_cgroup_from_objcg+0x1b0/0x1d0 [ 924.166468][T17568] ? get_mem_cgroup_from_objcg+0x1a/0x1d0 [ 924.166480][T17568] __memcg_kmem_charge_page+0xe1/0x240 [ 924.166493][T17568] __alloc_frozen_pages_noprof+0x1b5/0x370 [ 924.166510][T17568] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 924.166529][T17568] ? policy_nodemask+0x27c/0x720 [ 924.166544][T17568] alloc_pages_mpol+0x232/0x4a0 [ 924.166560][T17568] alloc_pages_noprof+0xa9/0x190 [ 924.166573][T17568] io_region_allocate_pages+0xe3/0x4b0 [ 924.166592][T17568] io_create_region+0x374/0x480 [ 924.166611][T17568] io_allocate_scq_urings+0x4e9/0x7f0 [ 924.166627][T17568] ? __pfx_io_allocate_scq_urings+0x10/0x10 [ 924.166635][T17568] ? cap_capable+0x11f/0x460 [ 924.166650][T17568] ? bpf_lsm_capable+0x9/0x20 [ 924.166664][T17568] ? security_capable+0x7e/0x2e0 [ 924.166681][T17568] io_uring_create+0x52b/0xb60 [ 924.166695][T17568] __se_sys_io_uring_setup+0x264/0x270 [ 924.166707][T17568] ? __pfx___se_sys_io_uring_setup+0x10/0x10 [ 924.166724][T17568] ? __task_pid_nr_ns+0x28/0x470 [ 924.166738][T17568] ? do_syscall_64+0xbe/0x3b0 [ 924.166754][T17568] do_syscall_64+0xfa/0x3b0 [ 924.166769][T17568] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 924.166778][T17568] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 924.166788][T17568] ? clear_bhb_loop+0x60/0xb0 [ 924.166800][T17568] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 924.166810][T17568] RIP: 0033:0x7fb3d838e929 [ 924.166827][T17568] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 924.166836][T17568] RSP: 002b:00007fb3d919cfc8 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 924.166847][T17568] RAX: ffffffffffffffda RBX: 00007fb3d85b6240 RCX: 00007fb3d838e929 [ 924.166855][T17568] RDX: 0000000000000000 RSI: 0000200000000340 RDI: 0000000000000111 [ 924.166861][T17568] RBP: 0000200000000340 R08: 0000000000000000 R09: 0000000000000000 [ 924.166868][T17568] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000 [ 924.166874][T17568] R13: 0000000000000000 R14: 0000000000000111 R15: 0000000000000000 [ 924.166889][T17568] [ 924.166894][T17568] memory: usage 307196kB, limit 307200kB, failcnt 2201 [ 924.483912][T17568] memory+swap: usage 311532kB, limit 9007199254740988kB, failcnt 0 [ 924.491791][T17568] kmem: usage 307104kB, limit 9007199254740988kB, failcnt 0 [ 924.499076][T17568] Memory cgroup stats for /syz3: [ 924.499189][T17568] cache 94208 [ 924.508346][T17568] rss 0 [ 924.511102][T17568] rss_huge 0 [ 924.514321][T17568] shmem 0 [ 924.517236][T17568] mapped_file 0 [ 924.520668][T17568] dirty 0 [ 924.523608][T17568] writeback 0 [ 924.526869][T17568] workingset_refault_anon 84 [ 924.531429][T17568] workingset_refault_file 4 [ 924.535921][T17568] swap 4440064 [ 924.539266][T17568] swapcached 0 [ 924.542611][T17568] pgpgin 732145 [ 924.546081][T17568] pgpgout 732633 [ 924.549603][T17568] pgfault 773001 [ 924.553162][T17568] pgmajfault 42 [ 924.556605][T17568] inactive_anon 0 [ 924.560210][T17568] active_anon 0 [ 924.563662][T17568] inactive_file 86016 [ 924.567617][T17568] active_file 8192 [ 924.571308][T17568] unevictable 0 [ 924.574782][T17568] hierarchical_memory_limit 314572800 [ 924.580128][T17568] hierarchical_memsw_limit 9223372036854771712 [ 924.586366][T17568] total_cache 94208 [ 924.590154][T17568] total_rss 0 [ 924.593436][T17568] total_rss_huge 0 [ 924.597150][T17568] total_shmem 0 [ 924.600589][T17568] total_mapped_file 0 [ 924.604591][T17568] total_dirty 0 [ 924.608029][T17568] total_writeback 0 [ 924.612384][T17568] total_workingset_refault_anon 84 [ 924.617518][T17568] total_workingset_refault_file 4 [ 924.622526][T17568] total_swap 4440064 [ 924.626420][T17568] total_swapcached 0 [ 924.630293][T17568] total_pgpgin 732145 [ 924.634283][T17568] total_pgpgout 732633 [ 924.638324][T17568] total_pgfault 773001 [ 924.642366][T17568] total_pgmajfault 42 [ 924.646373][T17568] total_inactive_anon 0 [ 924.650508][T17568] total_active_anon 0 [ 924.654501][T17568] total_inactive_file 86016 [ 924.658978][T17568] total_active_file 8192 [ 924.663224][T17568] total_unevictable 0 [ 924.667182][T17568] anon_cost 48 [ 924.670528][T17568] file_cost 0 [ 924.673805][T17568] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz.3.3367,pid=17562,uid=0 [ 924.690028][T17568] Memory cgroup out of memory: Killed process 17562 (syz.3.3367) total-vm:112600kB, anon-rss:944kB, file-rss:31320kB, shmem-rss:0kB, UID:0 pgtables:172kB oom_score_adj:1000 [ 925.703050][T17574] delete_channel: no stack [ 926.158264][T17595] syz_tun: entered allmulticast mode [ 926.242917][T17597] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3371'. [ 926.463865][T17595] syz_tun: left allmulticast mode [ 927.050045][T17607] fuse: Bad value for 'fd' [ 927.871119][T17614] net_ratelimit: 33 callbacks suppressed [ 927.871134][T17614] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 928.950402][ T30] audit: type=1326 audit(1751115471.380:845): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17625 comm="syz.2.3380" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc03d78e929 code=0x7ffc0000 [ 929.069122][ T30] audit: type=1326 audit(1751115471.380:846): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17625 comm="syz.2.3380" exe="/root/syz-executor" sig=0 arch=c000003e syscall=151 compat=0 ip=0x7fc03d78e929 code=0x7ffc0000 [ 929.121078][ T30] audit: type=1326 audit(1751115471.380:847): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17625 comm="syz.2.3380" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc03d78e929 code=0x7ffc0000 [ 929.152998][ T30] audit: type=1326 audit(1751115471.380:848): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17625 comm="syz.2.3380" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fc03d78e929 code=0x7ffc0000 [ 929.215824][ T30] audit: type=1326 audit(1751115471.380:849): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17625 comm="syz.2.3380" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc03d78e929 code=0x7ffc0000 [ 929.261014][ T30] audit: type=1326 audit(1751115471.380:850): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17625 comm="syz.2.3380" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fc03d78e929 code=0x7ffc0000 [ 929.334822][ T30] audit: type=1326 audit(1751115471.380:851): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17625 comm="syz.2.3380" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc03d78e929 code=0x7ffc0000 [ 929.394130][ T30] audit: type=1326 audit(1751115471.380:852): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17625 comm="syz.2.3380" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fc03d78e929 code=0x7ffc0000 [ 929.497465][ T30] audit: type=1326 audit(1751115471.380:853): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17625 comm="syz.2.3380" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc03d78e929 code=0x7ffc0000 [ 929.550823][ T30] audit: type=1326 audit(1751115471.380:854): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17625 comm="syz.2.3380" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fc03d78e929 code=0x7ffc0000 [ 930.054839][T17651] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3387'. [ 930.762157][T17635] delete_channel: no stack [ 930.890091][T17658] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 931.474054][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 931.480734][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 931.597343][T17672] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3394'. [ 932.340288][T17685] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 932.352158][T17685] xt_SECMARK: unable to map security context 'system_u:object_r:dbusd_etc_t:s0' [ 933.373128][T17698] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3400'. [ 933.385076][ T5906] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 933.604627][ T5906] usb 2-1: unable to get BOS descriptor or descriptor too short [ 933.931673][ T5906] usb 2-1: config 6 has an invalid interface number: 200 but max is 0 [ 933.942752][ T5906] usb 2-1: config 6 has no interface number 0 [ 933.950386][ T5906] usb 2-1: config 6 interface 200 has no altsetting 0 [ 934.074829][ T5906] usb 2-1: New USB device found, idVendor=05d8, idProduct=810c, bcdDevice=18.5f [ 934.084953][ T5906] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 934.095780][ T5906] usb 2-1: Product: syz [ 934.100154][ T5906] usb 2-1: Manufacturer: syz [ 934.108974][ T5906] usb 2-1: SerialNumber: syz [ 934.167242][T17705] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 935.051001][ T5906] dvb-usb: found a 'Artec T14 - USB2.0 DVB-T' in warm state. [ 935.068373][ T5906] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 935.078722][ T5906] dvbdev: DVB: registering new adapter (Artec T14 - USB2.0 DVB-T) [ 935.086815][ T5906] usb 2-1: media controller created [ 935.138490][T17711] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3406'. [ 935.179624][ T5906] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 935.327991][ T5906] dvb-usb: bulk message failed: -71 (6/0) [ 935.358685][ T5906] dvb-usb: bulk message failed: -71 (6/0) [ 935.387310][ T5906] dvb-usb: no frontend was attached by 'Artec T14 - USB2.0 DVB-T' [ 935.438761][ T5906] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input12 [ 935.506956][ T5906] dvb-usb: schedule remote query interval to 150 msecs. [ 935.533141][ T5906] dvb-usb: Artec T14 - USB2.0 DVB-T successfully initialized and connected. [ 936.099477][ T5826] dvb-usb: bulk message failed: -71 (1/0) [ 936.137526][ T5906] usb 2-1: USB disconnect, device number 27 [ 936.155838][ T5826] dvb-usb: error while querying for an remote control event. [ 936.335904][T17738] hugetlbfs: Bad value '%' for mount option 'size' [ 936.335904][T17738] [ 936.454194][ T5906] dvb-usb: Artec T14 - USB2.0 DVB-T successfully deinitialized and disconnected. [ 936.583587][T17741] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3415'. [ 937.347592][T17744] netlink: 'syz.3.3416': attribute type 29 has an invalid length. [ 941.179849][ T5935] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 941.215896][T17773] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3423'. [ 941.266885][T17776] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3424'. [ 941.419818][ T5935] usb 4-1: device descriptor read/64, error -71 [ 941.662936][ T5935] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 941.862441][T17791] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3429'. [ 942.360328][ T5935] usb 4-1: device descriptor read/64, error -71 [ 942.551109][ T5935] usb usb4-port1: attempt power cycle [ 942.652799][ T5832] Bluetooth: hci2: unexpected cc 0x203e length: 2 > 1 [ 942.659865][ T5832] Bluetooth: hci2: unexpected event for opcode 0x203e [ 942.923641][ T5935] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 942.974056][ T5935] usb 4-1: device descriptor read/8, error -71 [ 943.188993][T17803] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 943.263965][T17804] netlink: 228 bytes leftover after parsing attributes in process `syz.0.3432'. [ 944.220091][ T5935] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 944.433439][ T5935] usb 4-1: device not accepting address 11, error -71 [ 944.882343][T17814] netlink: 56 bytes leftover after parsing attributes in process `syz.3.3435'. [ 944.886952][ T5935] usb usb4-port1: unable to enumerate USB device [ 945.082386][T17814] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3435'. [ 946.097364][T17837] bridge1: entered allmulticast mode [ 946.106283][T17837] bridge1: left allmulticast mode [ 946.953057][ T9] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 947.193543][ T9] usb 4-1: Using ep0 maxpacket: 8 [ 947.596570][ T9] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 947.642972][ T9] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 947.663971][ T9] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 947.691378][ T9] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 947.701835][ T9] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 947.722509][ T9] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 947.732223][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 947.842994][ T5826] usb 2-1: new low-speed USB device number 28 using dummy_hcd [ 947.977905][T17849] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 948.002363][T17849] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 948.065755][ T9] usb 4-1: usb_control_msg returned -32 [ 948.071965][ T9] usbtmc 4-1:16.0: can't read capabilities [ 948.091794][T17871] Cannot find add_set index 0 as target [ 948.158769][ T5826] usb 2-1: Invalid ep0 maxpacket: 32 [ 948.225979][ T30] kauditd_printk_skb: 35 callbacks suppressed [ 948.225995][ T30] audit: type=1326 audit(1751115490.670:890): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17873 comm="syz.4.3456" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8933d8e929 code=0x7ffc0000 [ 948.261792][ T30] audit: type=1326 audit(1751115490.670:891): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17873 comm="syz.4.3456" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f8933d2ab19 code=0x7ffc0000 [ 948.292159][ T30] audit: type=1326 audit(1751115490.670:892): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17873 comm="syz.4.3456" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8933d8e929 code=0x7ffc0000 [ 948.293152][ T5826] usb 2-1: new low-speed USB device number 29 using dummy_hcd [ 948.315172][ T30] audit: type=1326 audit(1751115490.670:893): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17873 comm="syz.4.3456" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f8933d2ab19 code=0x7ffc0000 [ 948.351526][ T30] audit: type=1326 audit(1751115490.670:894): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17873 comm="syz.4.3456" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8933d8e929 code=0x7ffc0000 [ 948.382738][ T30] audit: type=1326 audit(1751115490.670:895): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17873 comm="syz.4.3456" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8933d8e929 code=0x7ffc0000 [ 948.427121][T17875] usbtmc 4-1:16.0: INITIATE_CLEAR returned 0 [ 948.434889][ T30] audit: type=1326 audit(1751115490.670:896): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17873 comm="syz.4.3456" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f8933d2ab19 code=0x7ffc0000 [ 948.457429][ T30] audit: type=1326 audit(1751115490.670:897): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17873 comm="syz.4.3456" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f8933d2ab19 code=0x7ffc0000 [ 948.484838][ T30] audit: type=1326 audit(1751115490.670:898): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17873 comm="syz.4.3456" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f8933d2ab19 code=0x7ffc0000 [ 948.507002][ T30] audit: type=1326 audit(1751115490.670:899): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17873 comm="syz.4.3456" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f8933d2ab19 code=0x7ffc0000 [ 948.531386][ T5826] usb 2-1: Invalid ep0 maxpacket: 32 [ 948.547889][ T5826] usb usb2-port1: attempt power cycle [ 948.629250][ T5891] usb 4-1: USB disconnect, device number 12 [ 948.893963][ T5826] usb 2-1: new low-speed USB device number 30 using dummy_hcd [ 949.029274][ T5826] usb 2-1: Invalid ep0 maxpacket: 32 [ 949.163204][ T5826] usb 2-1: new low-speed USB device number 31 using dummy_hcd [ 949.206297][ T5826] usb 2-1: Invalid ep0 maxpacket: 32 [ 949.218421][ T5826] usb usb2-port1: unable to enumerate USB device [ 950.673942][T17902] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3465'. [ 951.273533][T17912] trusted_key: encrypted_key: insufficient parameters specified [ 951.300710][ T5891] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 951.566407][ T5891] usb 4-1: Using ep0 maxpacket: 32 [ 951.906045][ T5891] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 951.919247][ T5891] usb 4-1: config 0 has no interface number 0 [ 951.947380][ T5891] usb 4-1: New USB device found, idVendor=19d2, idProduct=1131, bcdDevice=ab.19 [ 951.968047][ T5891] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 951.993409][ T5891] usb 4-1: Product: syz [ 951.997594][ T5891] usb 4-1: Manufacturer: syz [ 952.002193][ T5891] usb 4-1: SerialNumber: syz [ 952.036655][ T5891] usb 4-1: config 0 descriptor?? [ 952.143237][T13950] Bluetooth: hci3: unexpected Set CIG Parameters response data [ 952.152067][T13950] Bluetooth: hci3: unexpected event for opcode 0x2062 [ 952.245649][ T5891] option 4-1:0.1: GSM modem (1-port) converter detected [ 954.233489][ T5891] usb 4-1: USB disconnect, device number 13 [ 954.241869][ T5891] option 4-1:0.1: device disconnected [ 956.217487][T13950] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 956.227532][T13950] Bluetooth: hci3: Injecting HCI hardware error event [ 956.237754][ T5832] Bluetooth: hci3: hardware error 0x00 [ 956.783537][T17967] netlink: 'syz.1.3485': attribute type 3 has an invalid length. [ 956.806374][T17967] netlink: 'syz.1.3485': attribute type 1 has an invalid length. [ 956.857282][T17967] netlink: 191152 bytes leftover after parsing attributes in process `syz.1.3485'. [ 956.953315][ T9] usb 4-1: new low-speed USB device number 14 using dummy_hcd [ 957.103081][ T9] usb 4-1: Invalid ep0 maxpacket: 32 [ 957.140633][ T30] kauditd_printk_skb: 319 callbacks suppressed [ 957.140649][ T30] audit: type=1326 audit(1751115499.570:1219): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17971 comm="syz.1.3487" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f5652d2ab19 code=0x7ffc0000 [ 957.223261][ T30] audit: type=1326 audit(1751115499.570:1220): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17971 comm="syz.1.3487" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5652d8e929 code=0x7ffc0000 [ 957.254566][ T9] usb 4-1: new low-speed USB device number 15 using dummy_hcd [ 957.293002][ T30] audit: type=1326 audit(1751115499.580:1221): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17971 comm="syz.1.3487" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5652d8e929 code=0x7ffc0000 [ 957.387088][ T30] audit: type=1326 audit(1751115499.610:1222): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17971 comm="syz.1.3487" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f5652d2ab19 code=0x7ffc0000 [ 957.444202][ T9] usb 4-1: Invalid ep0 maxpacket: 32 [ 957.453304][ T30] audit: type=1326 audit(1751115499.610:1223): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17971 comm="syz.1.3487" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f5652d2ab19 code=0x7ffc0000 [ 957.483235][ T30] audit: type=1326 audit(1751115499.610:1224): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17971 comm="syz.1.3487" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f5652d2ab19 code=0x7ffc0000 [ 957.492161][ T9] usb usb4-port1: attempt power cycle [ 957.776328][ T30] audit: type=1326 audit(1751115499.610:1225): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17971 comm="syz.1.3487" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f5652d2ab19 code=0x7ffc0000 [ 958.031309][ T30] audit: type=1326 audit(1751115499.610:1226): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17971 comm="syz.1.3487" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f5652d2ab19 code=0x7ffc0000 [ 958.053029][ T30] audit: type=1326 audit(1751115499.610:1227): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17971 comm="syz.1.3487" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f5652d2ab19 code=0x7ffc0000 [ 958.074769][ T30] audit: type=1326 audit(1751115499.610:1228): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17971 comm="syz.1.3487" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f5652d2ab19 code=0x7ffc0000 [ 958.372970][ T9] usb 4-1: new low-speed USB device number 16 using dummy_hcd [ 958.403632][ T9] usb 4-1: Invalid ep0 maxpacket: 32 [ 958.553293][ T5832] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 958.716616][ T9] usb 4-1: new low-speed USB device number 17 using dummy_hcd [ 958.903172][ T7066] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 958.916189][ T9] usb 4-1: Invalid ep0 maxpacket: 32 [ 958.966524][ T9] usb usb4-port1: unable to enumerate USB device [ 959.440153][ T7066] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 959.451274][ T7066] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 959.462599][ T7066] usb 2-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00 [ 959.472329][ T7066] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 959.491625][ T7066] usb 2-1: config 0 descriptor?? [ 960.401062][T18009] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3499'. [ 960.432509][T18010] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3499'. [ 960.606957][ T5891] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 960.685011][ T7066] hid-led 0003:27B8:01ED.0004: probe with driver hid-led failed with error -71 [ 960.717202][T18022] netlink: 136 bytes leftover after parsing attributes in process `syz.4.3502'. [ 960.732369][ T7066] usb 2-1: USB disconnect, device number 32 [ 960.739195][T18022] A link change request failed with some changes committed already. Interface ip6tnl0 may have been left with an inconsistent configuration, please check. [ 960.805213][ T5891] usb 4-1: Using ep0 maxpacket: 16 [ 960.815062][ T5891] usb 4-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 960.837174][ T5891] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 960.857380][ T5891] usb 4-1: Product: syz [ 960.872906][ T5891] usb 4-1: Manufacturer: syz [ 960.884838][ T5891] usb 4-1: SerialNumber: syz [ 960.913866][ T5891] r8152-cfgselector 4-1: Unknown version 0x0000 [ 960.930308][ T5891] r8152-cfgselector 4-1: config 0 descriptor?? [ 961.407823][T18029] delete_channel: no stack [ 961.466491][T18031] kvm: requested 3352 ns i8254 timer period limited to 200000 ns [ 962.692944][ T30] kauditd_printk_skb: 1114 callbacks suppressed [ 962.692962][ T30] audit: type=1326 audit(1751115505.120:2343): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18020 comm="syz.2.3503" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fc03d72ab19 code=0x7ffc0000 [ 962.718654][T18043] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3508'. [ 962.803167][ T30] audit: type=1326 audit(1751115505.120:2344): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18020 comm="syz.2.3503" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fc03d72ab19 code=0x7ffc0000 [ 962.835652][ T30] audit: type=1326 audit(1751115505.120:2345): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18020 comm="syz.2.3503" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fc03d72ab19 code=0x7ffc0000 [ 962.863089][ T5906] usb 2-1: new low-speed USB device number 33 using dummy_hcd [ 963.017975][ T30] audit: type=1326 audit(1751115505.130:2346): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18020 comm="syz.2.3503" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fc03d72ab19 code=0x7ffc0000 [ 963.355967][ T30] audit: type=1326 audit(1751115505.130:2347): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18020 comm="syz.2.3503" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fc03d72ab19 code=0x7ffc0000 [ 963.406755][ T9] r8152-cfgselector 4-1: USB disconnect, device number 18 [ 963.422966][ T5906] usb 2-1: Invalid ep0 maxpacket: 32 [ 963.430186][ T30] audit: type=1326 audit(1751115505.130:2348): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18020 comm="syz.2.3503" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fc03d72ab19 code=0x7ffc0000 [ 963.649136][ T30] audit: type=1326 audit(1751115505.130:2349): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18020 comm="syz.2.3503" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fc03d72ab19 code=0x7ffc0000 [ 963.671170][ T30] audit: type=1326 audit(1751115505.130:2350): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18020 comm="syz.2.3503" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fc03d72ab19 code=0x7ffc0000 [ 963.693507][ T30] audit: type=1326 audit(1751115505.130:2351): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18020 comm="syz.2.3503" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fc03d72ab19 code=0x7ffc0000 [ 963.715440][ T5906] usb 2-1: new low-speed USB device number 34 using dummy_hcd [ 963.723806][ T30] audit: type=1326 audit(1751115505.130:2352): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18020 comm="syz.2.3503" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fc03d72ab19 code=0x7ffc0000 [ 963.773842][T18052] syz.3.3513: attempt to access beyond end of device [ 963.773842][T18052] nbd3: rw=4096, sector=2, nr_sectors = 2 limit=0 [ 963.791122][T18052] EXT4-fs (nbd3): unable to read superblock [ 963.840817][T18052] binder: BINDER_SET_CONTEXT_MGR already set [ 963.850689][T18055] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3514'. [ 963.876736][T18052] binder: 18051:18052 ioctl 4018620d 200000000040 returned -16 [ 963.892685][T18052] binder: 18051:18052 ioctl c018620c 200000000100 returned -1 [ 963.903488][ T5906] usb 2-1: Invalid ep0 maxpacket: 32 [ 963.915317][ T5906] usb usb2-port1: attempt power cycle [ 964.031538][T18062] netlink: 'syz.3.3516': attribute type 3 has an invalid length. [ 964.314060][ T5906] usb 2-1: new low-speed USB device number 35 using dummy_hcd [ 964.792465][ T5906] usb 2-1: device descriptor read/8, error -71 [ 966.421157][T18088] loop8: detected capacity change from 0 to 8 [ 966.431132][T17807] Dev loop8: unable to read RDB block 8 [ 966.438975][T17807] loop8: unable to read partition table [ 966.447901][T17807] loop8: partition table beyond EOD, truncated [ 966.533149][T18088] Dev loop8: unable to read RDB block 8 [ 966.538764][T18088] loop8: unable to read partition table [ 966.626705][T18088] loop8: partition table beyond EOD, truncated [ 966.637302][T18088] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 967.275805][ C0] Dead loop on virtual device ipvlan1, fix it urgently! [ 970.147284][T18125] netlink: 'syz.0.3534': attribute type 3 has an invalid length. [ 970.155160][T18125] netlink: 'syz.0.3534': attribute type 1 has an invalid length. [ 970.164245][T18125] netlink: 191152 bytes leftover after parsing attributes in process `syz.0.3534'. [ 970.943213][ T9] usb 2-1: new low-speed USB device number 37 using dummy_hcd [ 972.001440][ T5826] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 972.078639][ T9] usb 2-1: Invalid ep0 maxpacket: 32 [ 972.974263][ T9] usb 2-1: new low-speed USB device number 38 using dummy_hcd [ 972.993167][ T5826] usb 4-1: Using ep0 maxpacket: 16 [ 973.008303][ T5826] usb 4-1: New USB device found, idVendor=0403, idProduct=fa78, bcdDevice= 0.03 [ 973.214167][ T5826] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 973.222789][ T5826] usb 4-1: SerialNumber: syz [ 973.292820][ T5826] usb 4-1: config 0 descriptor?? [ 973.311913][ T5826] usb 4-1: can't set config #0, error -71 [ 973.715158][ T5826] usb 4-1: USB disconnect, device number 19 [ 974.239544][T18149] overlayfs: failed to clone upperpath [ 974.737147][T18166] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 975.572618][T18170] netlink: 504 bytes leftover after parsing attributes in process `syz.0.3545'. [ 975.602478][T18170] openvswitch: netlink: Flow key attr not present in new flow. [ 976.980176][ C0] vcan0: j1939_tp_rxtimer: 0xffff888058c9e000: rx timeout, send abort [ 976.990919][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88805892a800: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 977.018995][T18187] FAULT_INJECTION: forcing a failure. [ 977.018995][T18187] name failslab, interval 1, probability 0, space 0, times 0 [ 977.037624][T18187] CPU: 1 UID: 0 PID: 18187 Comm: syz.3.3550 Not tainted 6.16.0-rc3-syzkaller-00233-g35e261cd95dd #0 PREEMPT(full) [ 977.037647][T18187] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 977.037657][T18187] Call Trace: [ 977.037664][T18187] [ 977.037672][T18187] dump_stack_lvl+0x189/0x250 [ 977.037701][T18187] ? __pfx____ratelimit+0x10/0x10 [ 977.037723][T18187] ? __pfx_dump_stack_lvl+0x10/0x10 [ 977.037745][T18187] ? __pfx__printk+0x10/0x10 [ 977.037767][T18187] ? __pfx___might_resched+0x10/0x10 [ 977.037788][T18187] ? fs_reclaim_acquire+0x7d/0x100 [ 977.037815][T18187] should_fail_ex+0x414/0x560 [ 977.037840][T18187] should_failslab+0xa8/0x100 [ 977.037862][T18187] __kmalloc_noprof+0xcb/0x4f0 [ 977.037881][T18187] ? kfree+0x4d/0x440 [ 977.037899][T18187] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 977.037926][T18187] tomoyo_realpath_from_path+0xe3/0x5d0 [ 977.037951][T18187] ? tomoyo_domain+0xda/0x130 [ 977.037979][T18187] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 977.037999][T18187] tomoyo_path_number_perm+0x1e8/0x5a0 [ 977.038021][T18187] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 977.038059][T18187] ? __lock_acquire+0xab9/0xd20 [ 977.038101][T18187] ? __fget_files+0x2a/0x420 [ 977.038125][T18187] ? __fget_files+0x2a/0x420 [ 977.038144][T18187] ? __fget_files+0x3a0/0x420 [ 977.038164][T18187] ? __fget_files+0x2a/0x420 [ 977.038189][T18187] security_file_ioctl+0xcb/0x2d0 [ 977.038212][T18187] __se_sys_ioctl+0x47/0x170 [ 977.038233][T18187] do_syscall_64+0xfa/0x3b0 [ 977.038255][T18187] ? lockdep_hardirqs_on+0x9c/0x150 [ 977.038277][T18187] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 977.038294][T18187] ? clear_bhb_loop+0x60/0xb0 [ 977.038315][T18187] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 977.038331][T18187] RIP: 0033:0x7fb3d838e929 [ 977.038347][T18187] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 977.038361][T18187] RSP: 002b:00007fb3d9200038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 977.038380][T18187] RAX: ffffffffffffffda RBX: 00007fb3d85b5fa0 RCX: 00007fb3d838e929 [ 977.038399][T18187] RDX: 0000200000001f00 RSI: 0000000000008915 RDI: 0000000000000003 [ 977.038410][T18187] RBP: 00007fb3d9200090 R08: 0000000000000000 R09: 0000000000000000 [ 977.038420][T18187] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 977.038430][T18187] R13: 0000000000000000 R14: 00007fb3d85b5fa0 R15: 00007ffcf6d42a78 [ 977.038459][T18187] [ 977.040641][T18187] ERROR: Out of memory at tomoyo_realpath_from_path. [ 977.489800][ C0] vcan0: j1939_tp_rxtimer: 0xffff888058c9e000: abort rx timeout. Force session deactivation [ 978.337681][T18201] netlink: 56 bytes leftover after parsing attributes in process `syz.3.3554'. [ 978.357227][T18201] netlink: 576 bytes leftover after parsing attributes in process `syz.3.3554'. [ 978.552615][T18191] delete_channel: no stack [ 979.496564][T18220] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3557'. [ 979.719183][T18221] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3555'. [ 979.728143][T18221] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3555'. [ 979.750771][T13950] Bluetooth: hci6: command 0x0406 tx timeout [ 980.153189][ T7066] usb 2-1: new low-speed USB device number 39 using dummy_hcd [ 980.483233][ T7066] usb 2-1: device descriptor read/64, error -71 [ 981.598608][ T7066] usb 2-1: new low-speed USB device number 40 using dummy_hcd [ 983.081706][T18250] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3566'. [ 983.092175][ T30] kauditd_printk_skb: 58 callbacks suppressed [ 983.092191][ T30] audit: type=1326 audit(1751115525.530:2411): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18246 comm="syz.2.3563" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc03d78e929 code=0x7ffc0000 [ 983.337495][ T30] audit: type=1326 audit(1751115525.780:2412): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18246 comm="syz.2.3563" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fc03d72ab19 code=0x7ffc0000 [ 983.527269][ T30] audit: type=1326 audit(1751115525.840:2413): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18246 comm="syz.2.3563" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fc03d72ab19 code=0x7ffc0000 [ 983.549663][ T30] audit: type=1326 audit(1751115525.840:2414): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18246 comm="syz.2.3563" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fc03d72ab19 code=0x7ffc0000 [ 983.571664][ T30] audit: type=1326 audit(1751115525.840:2415): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18246 comm="syz.2.3563" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fc03d72ab19 code=0x7ffc0000 [ 983.643235][ T30] audit: type=1326 audit(1751115525.840:2416): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18246 comm="syz.2.3563" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fc03d72ab19 code=0x7ffc0000 [ 983.693124][ T30] audit: type=1326 audit(1751115525.840:2417): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18246 comm="syz.2.3563" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fc03d72ab19 code=0x7ffc0000 [ 983.720550][ T30] audit: type=1326 audit(1751115525.840:2418): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18246 comm="syz.2.3563" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fc03d72ab19 code=0x7ffc0000 [ 983.742536][ T30] audit: type=1326 audit(1751115525.840:2419): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18246 comm="syz.2.3563" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fc03d72ab19 code=0x7ffc0000 [ 983.817323][ T30] audit: type=1326 audit(1751115525.840:2420): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18246 comm="syz.2.3563" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fc03d72ab19 code=0x7ffc0000 [ 984.071621][T18266] Invalid ELF header magic: != ELF [ 985.112990][ T9] usb 2-1: new high-speed USB device number 41 using dummy_hcd [ 985.259672][T18285] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3574'. [ 985.269013][T18285] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3574'. [ 985.646275][ T9] usb 2-1: Using ep0 maxpacket: 8 [ 985.676272][ T9] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 985.696831][ T9] usb 2-1: New USB device found, idVendor=1345, idProduct=3008, bcdDevice= 0.00 [ 985.716703][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 985.830761][T18292] netlink: 52 bytes leftover after parsing attributes in process `syz.0.3576'. [ 985.894556][ T9] usb 2-1: config 0 descriptor?? [ 986.509134][T18277] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 990.813012][ T30] kauditd_printk_skb: 90 callbacks suppressed [ 990.813030][ T30] audit: type=1326 audit(1751115529.220:2511): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18299 comm="syz.0.3579" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f44f132ab19 code=0x7ffc0000 [ 991.007189][ T30] audit: type=1326 audit(1751115531.130:2512): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18299 comm="syz.0.3579" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f44f132ab19 code=0x7ffc0000 [ 991.053977][ T9] usbhid 2-1:0.0: can't add hid device: -71 [ 991.109471][ T30] audit: type=1326 audit(1751115531.130:2513): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18299 comm="syz.0.3579" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f44f132ab19 code=0x7ffc0000 [ 991.136789][ T30] audit: type=1326 audit(1751115531.140:2514): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18299 comm="syz.0.3579" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f44f132ab19 code=0x7ffc0000 [ 991.148991][ T9] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 991.159027][ T30] audit: type=1326 audit(1751115531.140:2515): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18299 comm="syz.0.3579" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f44f132ab19 code=0x7ffc0000 [ 991.717738][ T30] audit: type=1326 audit(1751115531.140:2516): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18299 comm="syz.0.3579" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f44f132ab19 code=0x7ffc0000 [ 991.788405][ T30] audit: type=1326 audit(1751115531.140:2517): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18299 comm="syz.0.3579" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f44f132ab19 code=0x7ffc0000 [ 991.901360][ T9] usb 2-1: USB disconnect, device number 41 [ 991.902795][ T30] audit: type=1326 audit(1751115531.150:2518): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18299 comm="syz.0.3579" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f44f132ab19 code=0x7ffc0000 [ 991.929635][ T30] audit: type=1326 audit(1751115531.150:2519): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18299 comm="syz.0.3579" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f44f132ab19 code=0x7ffc0000 [ 991.999793][ T30] audit: type=1326 audit(1751115531.150:2520): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18299 comm="syz.0.3579" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f44f132ab19 code=0x7ffc0000 [ 992.098872][T18317] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3584'. [ 992.106754][T18316] loop2: detected capacity change from 0 to 7 [ 992.133058][T18317] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3584'. [ 992.145155][T18316] Dev loop2: unable to read RDB block 7 [ 992.150755][T18316] loop2: unable to read partition table [ 992.217539][T18316] loop2: partition table beyond EOD, truncated [ 992.238391][T18316] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 992.291022][T18312] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 992.623871][ T9] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 992.875569][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 992.882161][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 993.293493][ T9] usb 4-1: Using ep0 maxpacket: 32 [ 993.317780][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 993.390698][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 993.427175][ T9] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 993.449231][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 993.464789][ T9] usb 4-1: config 0 descriptor?? [ 993.473869][ T9] hub 4-1:0.0: USB hub found [ 993.654421][T18351] netlink: 'syz.0.3593': attribute type 3 has an invalid length. [ 993.677386][T18336] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 993.686714][T18351] netlink: 'syz.0.3593': attribute type 1 has an invalid length. [ 993.704050][T18336] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 993.714982][T18351] netlink: 191152 bytes leftover after parsing attributes in process `syz.0.3593'. [ 993.920433][T18354] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3591'. [ 993.929425][T18354] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3591'. [ 993.971700][T18354] bridge0: entered promiscuous mode [ 993.977326][T18354] macsec1: entered allmulticast mode [ 993.982690][T18354] bridge0: entered allmulticast mode [ 995.205693][T18362] bridge0: port 1(bridge_slave_0) entered disabled state [ 995.238690][T18362] bridge0: port 1(bridge_slave_0) entered blocking state [ 995.245915][T18362] bridge0: port 1(bridge_slave_0) entered forwarding state [ 995.598332][T18374] netlink: 'syz.0.3599': attribute type 10 has an invalid length. [ 995.707389][T18374] team0: Port device syz_tun added [ 995.812660][T18379] syz_tun: entered promiscuous mode [ 995.818895][T18379] vlan2: entered promiscuous mode [ 995.985730][ T976] usb 2-1: new high-speed USB device number 42 using dummy_hcd [ 996.143164][ T976] usb 2-1: device descriptor read/64, error -71 [ 996.393240][ T976] usb 2-1: new high-speed USB device number 43 using dummy_hcd [ 996.434352][ T9] hub 4-1:0.0: config failed, can't read hub descriptor (err -22) [ 996.466022][ T9] usbhid 4-1:0.0: can't add hid device: -71 [ 996.472211][ T9] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 996.512157][T18396] sctp: [Deprecated]: syz.2.3608 (pid 18396) Use of struct sctp_assoc_value in delayed_ack socket option. [ 996.512157][T18396] Use struct sctp_sack_info instead [ 996.545258][ T976] usb 2-1: device descriptor read/64, error -71 [ 996.557023][ T9] usb 4-1: USB disconnect, device number 20 [ 996.669877][T18405] netlink: 65055 bytes leftover after parsing attributes in process `syz.3.3611'. [ 996.680762][ T976] usb usb2-port1: attempt power cycle [ 996.818040][T18411] netlink: 71 bytes leftover after parsing attributes in process `syz.2.3614'. [ 996.844765][T18413] netlink: 44 bytes leftover after parsing attributes in process `syz.3.3615'. [ 997.134544][T18423] team0: Device gtp0 is of different type [ 997.712360][ T976] usb 2-1: new high-speed USB device number 44 using dummy_hcd [ 997.743927][ T976] usb 2-1: device descriptor read/8, error -71 [ 998.726578][ T976] usb 2-1: new high-speed USB device number 45 using dummy_hcd [ 999.455577][ T976] usb 2-1: device descriptor read/8, error -71 [ 999.581146][ T976] usb usb2-port1: unable to enumerate USB device [ 999.861194][T18451] bridge0: port 1(bridge_slave_0) entered disabled state [ 999.862012][T18455] netlink: 212408 bytes leftover after parsing attributes in process `syz.1.3626'. [ 999.869542][T18451] bridge0: port 1(bridge_slave_0) entered blocking state [ 999.885121][T18451] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1000.661027][T18459] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3628'. [ 1000.675788][T18460] delete_channel: no stack [ 1000.850192][T18463] lo speed is unknown, defaulting to 1000 [ 1005.135518][T18493] netlink: 232 bytes leftover after parsing attributes in process `syz.4.3642'. [ 1006.131445][T18493] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3642'. [ 1006.361137][T18502] netlink: 44 bytes leftover after parsing attributes in process `syz.3.3645'. [ 1006.393546][T18507] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3647'. [ 1007.948931][T18531] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3652'. [ 1008.664750][T18535] overlayfs: failed to clone lowerpath [ 1008.700737][ T30] kauditd_printk_skb: 56 callbacks suppressed [ 1008.709656][ T30] audit: type=1326 audit(1751115551.140:2577): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18523 comm="syz.0.3653" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f44f138e929 code=0x7ffc0000 [ 1010.335815][T18529] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3654'. [ 1010.451348][ T30] audit: type=1326 audit(1751115551.140:2578): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18523 comm="syz.0.3653" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f44f138e929 code=0x7ffc0000 [ 1010.473617][ T30] audit: type=1326 audit(1751115551.150:2579): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18523 comm="syz.0.3653" exe="/root/syz-executor" sig=0 arch=c000003e syscall=447 compat=0 ip=0x7f44f138e929 code=0x7ffc0000 [ 1010.497818][ T30] audit: type=1326 audit(1751115551.150:2580): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18523 comm="syz.0.3653" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f44f138e929 code=0x7ffc0000 [ 1010.715311][ T30] audit: type=1326 audit(1751115551.150:2581): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18523 comm="syz.0.3653" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f44f138e929 code=0x7ffc0000 [ 1011.412989][ T30] audit: type=1326 audit(1751115551.150:2582): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18523 comm="syz.0.3653" exe="/root/syz-executor" sig=0 arch=c000003e syscall=91 compat=0 ip=0x7f44f138e929 code=0x7ffc0000 [ 1011.762971][ T30] audit: type=1326 audit(1751115551.160:2583): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18523 comm="syz.0.3653" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f44f138e929 code=0x7ffc0000 [ 1011.808374][ T30] audit: type=1326 audit(1751115551.160:2584): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18523 comm="syz.0.3653" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f44f138e929 code=0x7ffc0000 [ 1011.857007][T18559] netlink: 332 bytes leftover after parsing attributes in process `syz.1.3663'. [ 1011.871771][ T30] audit: type=1326 audit(1751115551.160:2585): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18523 comm="syz.0.3653" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f44f138e929 code=0x7ffc0000 [ 1011.901010][T18559] netlink: 'syz.1.3663': attribute type 2 has an invalid length. [ 1011.911697][T18559] netlink: 'syz.1.3663': attribute type 5 has an invalid length. [ 1011.939627][ T30] audit: type=1326 audit(1751115551.160:2586): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18523 comm="syz.0.3653" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f44f138e929 code=0x7ffc0000 [ 1013.211090][T18578] netlink: 212376 bytes leftover after parsing attributes in process `syz.3.3669'. [ 1013.374943][T18560] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3661'. [ 1013.472439][T18587] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3667'. [ 1015.286176][T18604] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3676'. [ 1015.433014][T13950] Bluetooth: hci0: command 0x0406 tx timeout [ 1015.693000][T18605] lo speed is unknown, defaulting to 1000 [ 1016.117483][T18612] 9pnet_fd: Insufficient options for proto=fd [ 1018.465389][T18640] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3683'. [ 1018.481346][T18645] netlink: 68 bytes leftover after parsing attributes in process `syz.0.3684'. [ 1019.109348][T18652] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 1019.191395][T18654] netlink: 'syz.1.3689': attribute type 10 has an invalid length. [ 1019.920608][T18660] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3687'. [ 1020.213089][T18663] netlink: 188 bytes leftover after parsing attributes in process `syz.0.3691'. [ 1020.237271][T18663] netlink: 188 bytes leftover after parsing attributes in process `syz.0.3691'. [ 1020.248928][T18663] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3691'. [ 1020.376223][T18666] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1020.520057][T18670] unsupported nla_type 52263 [ 1021.049521][T18682] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3699'. [ 1022.138855][T18685] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3697'. [ 1022.148056][T18685] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3697'. [ 1023.121617][T18699] netlink: 'syz.0.3705': attribute type 33 has an invalid length. [ 1023.147202][T18699] netlink: 152 bytes leftover after parsing attributes in process `syz.0.3705'. [ 1023.363990][ T5891] usb 2-1: new low-speed USB device number 46 using dummy_hcd [ 1024.462928][ T5891] usb 2-1: device descriptor read/64, error -71 [ 1024.519277][T18716] kvm: vcpu 1: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (128 ns). Using initial count to start timer. [ 1024.537508][T18716] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3703'. [ 1025.559554][T18715] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1026.387934][T18732] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1026.437395][T18732] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 1026.514114][T18732] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 1026.533557][T18732] Bluetooth: hci6: Opcode 0x0406 failed: -4 [ 1026.625130][T18732] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1026.686610][T18732] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 1028.393361][ T5832] Bluetooth: hci2: command 0x0406 tx timeout [ 1028.412997][T18127] usb 4-1: new full-speed USB device number 21 using dummy_hcd [ 1028.506034][T18759] (unnamed net_device) (uninitialized): peer notification delay (3) is not a multiple of miimon (9), value rounded to 0 ms [ 1028.553037][ T5832] Bluetooth: hci6: command 0x0406 tx timeout [ 1028.587229][T18127] usb 4-1: config 1 interface 0 has no altsetting 0 [ 1028.607606][T18127] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 1028.620520][T18127] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1028.633173][ T5832] Bluetooth: hci0: command 0x0406 tx timeout [ 1028.646492][T18127] usb 4-1: Product: syz [ 1028.651196][T18127] usb 4-1: Manufacturer: syz [ 1028.656060][T18127] usb 4-1: SerialNumber: syz [ 1028.862172][ T30] kauditd_printk_skb: 16 callbacks suppressed [ 1028.862190][ T30] audit: type=1326 audit(1751115571.300:2603): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18751 comm="syz.2.3719" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc03d78e929 code=0x7ffc0000 [ 1028.913051][ T30] audit: type=1326 audit(1751115571.300:2604): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18751 comm="syz.2.3719" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc03d78e929 code=0x7ffc0000 [ 1028.955332][ T30] audit: type=1326 audit(1751115571.300:2605): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18751 comm="syz.2.3719" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fc03d72ab19 code=0x7ffc0000 [ 1029.007800][ T30] audit: type=1326 audit(1751115571.300:2606): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18751 comm="syz.2.3719" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc03d78e929 code=0x7ffc0000 [ 1029.062003][ T30] audit: type=1326 audit(1751115571.300:2607): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18751 comm="syz.2.3719" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc03d78e929 code=0x7ffc0000 [ 1029.113416][ T30] audit: type=1326 audit(1751115571.300:2608): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18751 comm="syz.2.3719" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc03d78e929 code=0x7ffc0000 [ 1029.137893][ T30] audit: type=1326 audit(1751115571.300:2609): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18751 comm="syz.2.3719" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc03d78e929 code=0x7ffc0000 [ 1029.161136][ T30] audit: type=1326 audit(1751115571.300:2610): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18751 comm="syz.2.3719" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fc03d72ab19 code=0x7ffc0000 [ 1029.247234][T18776] RDS: rds_bind could not find a transport for fe80::bb, load rds_tcp or rds_rdma? [ 1029.276255][ T30] audit: type=1326 audit(1751115571.300:2611): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18751 comm="syz.2.3719" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fc03d72ab19 code=0x7ffc0000 [ 1029.308506][T18127] usblp 4-1:1.0: usblp0: USB Unidirectional printer dev 21 if 0 alt 253 proto 1 vid 0x0525 pid 0xA4A8 [ 1029.358334][ T30] audit: type=1326 audit(1751115571.300:2612): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18751 comm="syz.2.3719" exe="/root/syz-executor" sig=0 arch=c000003e syscall=144 compat=0 ip=0x7fc03d78e929 code=0x7ffc0000 [ 1030.316785][T18127] usb 4-1: USB disconnect, device number 21 [ 1030.328715][T18127] usblp0: removed [ 1030.359526][T18786] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3732'. [ 1030.513323][ T5832] Bluetooth: hci2: command 0x0406 tx timeout [ 1030.636811][ T5832] Bluetooth: hci6: command 0x0406 tx timeout [ 1030.713005][ T5832] Bluetooth: hci0: command 0x0406 tx timeout [ 1033.950270][T18822] tipc: Started in network mode [ 1033.965309][T18822] tipc: Node identity 736e7320286c696d, cluster identity 4711 [ 1033.973454][T18822] tipc: Enabling of bearer rejected, failed to enable media [ 1037.482946][ T30] kauditd_printk_skb: 348 callbacks suppressed [ 1037.482964][ T30] audit: type=1326 audit(1751115579.910:2961): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18844 comm="syz.4.3753" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f8933d2ab19 code=0x7ffc0000 [ 1037.526069][T18869] fuse: Bad value for 'group_id' [ 1037.531043][T18869] fuse: Bad value for 'group_id' [ 1037.566824][ T30] audit: type=1326 audit(1751115579.910:2962): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18844 comm="syz.4.3753" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f8933d2ab19 code=0x7ffc0000 [ 1037.567777][T18869] overlayfs: failed to clone upperpath [ 1037.614200][ T30] audit: type=1326 audit(1751115579.910:2963): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18844 comm="syz.4.3753" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f8933d2ab19 code=0x7ffc0000 [ 1037.640817][ T30] audit: type=1326 audit(1751115579.910:2964): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18844 comm="syz.4.3753" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f8933d2ab19 code=0x7ffc0000 [ 1037.673722][ T30] audit: type=1326 audit(1751115579.910:2965): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18844 comm="syz.4.3753" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f8933d2ab19 code=0x7ffc0000 [ 1037.979342][ T30] audit: type=1326 audit(1751115579.910:2966): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18844 comm="syz.4.3753" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f8933d2ab19 code=0x7ffc0000 [ 1038.046318][ T30] audit: type=1326 audit(1751115579.910:2967): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18844 comm="syz.4.3753" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f8933d2ab19 code=0x7ffc0000 [ 1038.222933][T18127] usb 2-1: new high-speed USB device number 48 using dummy_hcd [ 1038.403082][T18127] usb 2-1: Using ep0 maxpacket: 16 [ 1038.413101][ T30] audit: type=1326 audit(1751115579.910:2968): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18844 comm="syz.4.3753" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f8933d2ab19 code=0x7ffc0000 [ 1038.424500][T18127] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 1038.453267][ T30] audit: type=1326 audit(1751115579.910:2969): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18844 comm="syz.4.3753" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f8933d2ab19 code=0x7ffc0000 [ 1038.456210][T18127] usb 2-1: config 0 has no interface number 0 [ 1038.533440][T18127] usb 2-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 1038.534640][ T30] audit: type=1326 audit(1751115579.910:2970): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18844 comm="syz.4.3753" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f8933d2ab19 code=0x7ffc0000 [ 1038.575810][T18127] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1038.616700][T18127] usb 2-1: Product: syz [ 1038.626297][T18127] usb 2-1: Manufacturer: syz [ 1038.647586][T18127] usb 2-1: SerialNumber: syz [ 1038.682063][T18127] usb 2-1: config 0 descriptor?? [ 1038.740355][T18127] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 1038.747812][T18881] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3764'. [ 1038.777855][T18881] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3764'. [ 1039.163007][ T5826] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 1039.282000][T18871] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1039.307342][T18871] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1039.321265][T18890] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3767'. [ 1039.334000][ T5826] usb 4-1: device descriptor read/64, error -71 [ 1039.337307][T18871] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1039.369729][T18871] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1039.433827][T18894] netlink: 1624 bytes leftover after parsing attributes in process `syz.0.3769'. [ 1039.484301][T18127] gspca_spca1528: reg_w err -71 [ 1039.502995][T18127] spca1528 2-1:0.1: probe with driver spca1528 failed with error -71 [ 1039.528015][T18127] usb 2-1: USB disconnect, device number 48 [ 1039.572952][ T5826] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 1039.702974][ T5826] usb 4-1: device descriptor read/64, error -71 [ 1039.813938][ T5826] usb usb4-port1: attempt power cycle [ 1040.173127][ T5826] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 1040.245842][ T5826] usb 4-1: device descriptor read/8, error -71 [ 1040.594645][ T5826] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 1040.976606][ T5826] usb 4-1: device descriptor read/8, error -71 [ 1041.088838][ T5826] usb usb4-port1: unable to enumerate USB device [ 1042.953377][T18933] netlink: 1624 bytes leftover after parsing attributes in process `syz.1.3781'. [ 1043.324434][ T5891] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 1043.955703][ T7066] usb 2-1: new high-speed USB device number 49 using dummy_hcd [ 1044.053667][ T5891] usb 4-1: Using ep0 maxpacket: 16 [ 1044.083547][ T5891] usb 4-1: config 1 has an invalid descriptor of length 66, skipping remainder of the config [ 1044.100295][ T5891] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1044.135734][ T7066] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1044.148135][ T5891] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 1.40 [ 1044.163681][ T7066] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1044.177964][ T5891] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1044.187238][ T7066] usb 2-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00 [ 1044.197216][ T5891] usb 4-1: Product: syz [ 1044.199984][T18962] netlink: 136 bytes leftover after parsing attributes in process `syz.0.3792'. [ 1044.201376][ T5891] usb 4-1: Manufacturer: syz [ 1044.221168][ T7066] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1044.229720][T18962] A link change request failed with some changes committed already. Interface gre0 may have been left with an inconsistent configuration, please check. [ 1044.237284][ T5891] usb 4-1: SerialNumber: syz [ 1044.253931][ T7066] usb 2-1: config 0 descriptor?? [ 1044.381421][T18967] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3793'. [ 1044.508970][T18938] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3783'. [ 1044.535745][T18972] Device name cannot be null; rc = [-22] [ 1044.554874][ T5891] usb 4-1: 0:2 : does not exist [ 1044.576107][ T5891] usb 4-1: 5:0: failed to get current value for ch 0 (-22) [ 1044.597740][ T5891] usb 4-1: 5:0: cannot get min/max values for control 3 (id 5) [ 1044.614345][ T5891] usb 4-1: 5:0: cannot get min/max values for control 4 (id 5) [ 1044.635039][ T5891] usb 4-1: 5:0: cannot get min/max values for control 5 (id 5) [ 1044.649394][ T5891] usb 4-1: 5:0: failed to get current value for ch 1 (-22) [ 1044.667707][ T5891] usb 4-1: 5:0: failed to get current value for ch 0 (-22) [ 1044.697066][ T5891] usb 4-1: 5:0: cannot get min/max values for control 3 (id 5) [ 1044.712218][T18977] netlink: 1624 bytes leftover after parsing attributes in process `syz.4.3796'. [ 1044.719760][ T5891] usb 4-1: 5:0: cannot get min/max values for control 5 (id 5) [ 1044.756110][ T5891] usb 4-1: USB disconnect, device number 26 [ 1044.792469][T18940] udevd[18940]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1045.100930][T18984] netlink: 'syz.4.3797': attribute type 21 has an invalid length. [ 1045.109100][T18984] netlink: 128 bytes leftover after parsing attributes in process `syz.4.3797'. [ 1045.118737][T18984] netlink: 'syz.4.3797': attribute type 5 has an invalid length. [ 1045.126560][T18984] netlink: 'syz.4.3797': attribute type 6 has an invalid length. [ 1045.134705][T18984] netlink: 3 bytes leftover after parsing attributes in process `syz.4.3797'. [ 1045.740521][T18944] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1045.751227][T18944] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1045.767317][ T7066] hid-led 0003:27B8:01ED.0005: probe with driver hid-led failed with error -71 [ 1045.873637][ T7066] usb 2-1: USB disconnect, device number 49 [ 1047.895656][T19019] netlink: 44 bytes leftover after parsing attributes in process `syz.1.3806'. [ 1047.904630][T19020] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3808'. [ 1047.904794][T19020] 8021q: VLANs not supported on caif0 [ 1048.218610][T19032] 9pnet_fd: Insufficient options for proto=fd [ 1048.231238][T19027] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3809'. [ 1048.248489][T19027] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3809'. [ 1048.336530][T19040] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 1048.376493][T19042] netlink: 'syz.2.3814': attribute type 1 has an invalid length. [ 1048.440900][T19032] siw: device registration error -23 [ 1050.400219][T19068] __nla_validate_parse: 1 callbacks suppressed [ 1050.400237][T19068] netlink: 4768 bytes leftover after parsing attributes in process `syz.3.3819'. [ 1050.496109][T19070] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3823'. [ 1050.692642][T19076] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3825'. [ 1052.004298][T19095] ptrace attach of "./syz-executor exec"[17082] was attempted by ""[19095] [ 1053.417100][T19119] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3836'. [ 1053.447956][T19119] IPVS: Error joining to the multicast group [ 1053.536627][T19123] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3839'. [ 1053.599084][T19127] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3841'. [ 1053.763511][ T5891] usb 2-1: new high-speed USB device number 50 using dummy_hcd [ 1054.315919][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 1054.322262][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 1054.353503][ T5891] usb 2-1: Using ep0 maxpacket: 8 [ 1054.370706][ T5891] usb 2-1: config 0 has an invalid interface number: 187 but max is 0 [ 1054.394262][ T5891] usb 2-1: config 0 has no interface number 0 [ 1054.400402][ T5891] usb 2-1: config 0 interface 187 altsetting 0 endpoint 0x9 has invalid maxpacket 512, setting to 64 [ 1054.448426][ T5891] usb 2-1: New USB device found, idVendor=061c, idProduct=c084, bcdDevice=b0.a1 [ 1054.481124][ T5891] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1054.507108][ T5891] usb 2-1: Product: syz [ 1054.511357][ T5891] usb 2-1: Manufacturer: syz [ 1054.521488][ T5891] usb 2-1: SerialNumber: syz [ 1054.990938][ T5891] usb 2-1: config 0 descriptor?? [ 1055.360917][T19142] Process accounting resumed [ 1055.396420][ T7066] usb 2-1: USB disconnect, device number 50 [ 1055.474790][ T30] kauditd_printk_skb: 62 callbacks suppressed [ 1055.474806][ T30] audit: type=1326 audit(1751115597.920:3033): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19149 comm="syz.2.3847" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc03d78e929 code=0x7ffc0000 [ 1055.504428][T19157] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3849'. [ 1055.539632][ T30] audit: type=1326 audit(1751115597.960:3034): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19149 comm="syz.2.3847" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fc03d72ab19 code=0x7ffc0000 [ 1055.686472][ T30] audit: type=1326 audit(1751115597.960:3035): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19149 comm="syz.2.3847" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fc03d72ab19 code=0x7ffc0000 [ 1055.747552][ T30] audit: type=1326 audit(1751115597.960:3036): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19149 comm="syz.2.3847" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fc03d72ab19 code=0x7ffc0000 [ 1055.786395][ T30] audit: type=1326 audit(1751115597.960:3037): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19149 comm="syz.2.3847" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fc03d72ab19 code=0x7ffc0000 [ 1055.809024][ T30] audit: type=1326 audit(1751115597.960:3038): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19149 comm="syz.2.3847" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fc03d72ab19 code=0x7ffc0000 [ 1055.831359][ T30] audit: type=1326 audit(1751115597.960:3039): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19149 comm="syz.2.3847" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fc03d72ab19 code=0x7ffc0000 [ 1055.854116][ T30] audit: type=1326 audit(1751115597.970:3040): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19149 comm="syz.2.3847" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fc03d72ab19 code=0x7ffc0000 [ 1055.958330][ T30] audit: type=1326 audit(1751115597.970:3041): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19149 comm="syz.2.3847" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fc03d72ab19 code=0x7ffc0000 [ 1056.255801][ T30] audit: type=1326 audit(1751115597.970:3042): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19149 comm="syz.2.3847" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fc03d72ab19 code=0x7ffc0000 [ 1056.481553][T19168] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3854'. [ 1056.514325][T19168] IPVS: Error joining to the multicast group [ 1057.369589][T19176] 9pnet: Could not find request transport: fdKØ!<\F [ 1057.851696][T19196] Dead loop on virtual device ipvlan1, fix it urgently! [ 1057.885467][T19196] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3857'. [ 1058.318388][T19196] syz.4.3857 (19196) used greatest stack depth: 10696 bytes left [ 1062.274620][T19249] netlink: 'syz.2.3875': attribute type 10 has an invalid length. [ 1062.282547][T19249] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1062.294284][T19249] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1062.317445][T19249] bond0: (slave batadv_slave_0): Enslaving as an active interface with an up link [ 1065.760011][T19273] 8021q: VLANs not supported on ip6gre0 [ 1065.877098][T19277] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3883'. [ 1067.570891][T19292] netlink: 'syz.4.3887': attribute type 2 has an invalid length. [ 1067.620024][T19292] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3887'. [ 1067.711502][ T30] kauditd_printk_skb: 58 callbacks suppressed [ 1067.711518][ T30] audit: type=1326 audit(1751115610.150:3101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19299 comm="syz.2.3889" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc03d78e929 code=0x0 [ 1068.004719][T19312] overlayfs: failed to resolve './file2': -2 [ 1068.815139][T19316] netlink: 'syz.2.3889': attribute type 31 has an invalid length. [ 1070.768904][T19330] tipc: Started in network mode [ 1070.796098][T19330] tipc: Node identity 736e7320286c696d, cluster identity 4711 [ 1070.843533][T19330] tipc: Enabling of bearer rejected, failed to enable media [ 1071.165704][T19339] 8021q: VLANs not supported on ip6gre0 [ 1071.453168][T18127] usb 2-1: new high-speed USB device number 51 using dummy_hcd [ 1072.083939][T18127] usb 2-1: Using ep0 maxpacket: 16 [ 1072.182986][T18127] usb 2-1: config 1 has an invalid descriptor of length 66, skipping remainder of the config [ 1072.228481][T18127] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1072.267092][T18127] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 1.40 [ 1072.305665][T18127] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1072.333060][T18127] usb 2-1: Product: syz [ 1072.343166][T18127] usb 2-1: Manufacturer: syz [ 1072.348732][T18127] usb 2-1: SerialNumber: syz [ 1072.611051][T19332] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3899'. [ 1072.649097][T18127] usb 2-1: 0:2 : does not exist [ 1072.668048][T18127] usb 2-1: 5:0: failed to get current value for ch 0 (-22) [ 1072.689236][T18127] usb 2-1: 5:0: cannot get min/max values for control 3 (id 5) [ 1072.738347][T18127] usb 2-1: 5:0: cannot get min/max values for control 4 (id 5) [ 1072.761402][T18127] usb 2-1: 5:0: cannot get min/max values for control 5 (id 5) [ 1072.791830][T18127] usb 2-1: 5:0: failed to get current value for ch 1 (-22) [ 1072.819452][T18127] usb 2-1: 5:0: failed to get current value for ch 0 (-22) [ 1072.865074][T18127] usb 2-1: 5:0: cannot get min/max values for control 3 (id 5) [ 1072.889330][T18127] usb 2-1: 5:0: cannot get min/max values for control 5 (id 5) [ 1072.917278][T18127] usb 2-1: USB disconnect, device number 51 [ 1072.967221][T19334] udevd[19334]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1073.522343][T19372] 8021q: VLANs not supported on ip6gre0 [ 1073.547927][T19373] netdevsim netdevsim1: loading /lib/firmware/. failed with error -22 [ 1073.613085][T19373] netdevsim netdevsim1: Direct firmware load for . failed with error -22 [ 1073.622162][T19373] netdevsim netdevsim1: Falling back to sysfs fallback for: . [ 1073.855095][T19379] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3910'. [ 1076.231399][T19393] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3916'. [ 1076.758148][T19403] team0: Port device syz_tun removed [ 1076.781281][T19403] batman_adv: batadv0: Interface deactivated: dummy0 [ 1076.796646][T19403] batman_adv: batadv0: Removing interface: dummy0 [ 1076.815833][T19403] bridge_slave_0: left allmulticast mode [ 1076.821723][T19403] bridge_slave_0: left promiscuous mode [ 1076.851468][T19403] bridge0: port 1(bridge_slave_0) entered disabled state [ 1076.910665][T19403] bridge_slave_1: left allmulticast mode [ 1076.921963][T19403] bridge_slave_1: left promiscuous mode [ 1076.938910][T19403] bridge0: port 2(bridge_slave_1) entered disabled state [ 1077.390762][T19403] bond0: (slave bond_slave_0): Releasing backup interface [ 1077.702741][T19403] bond0: (slave bond_slave_1): Releasing backup interface [ 1077.752683][T19403] team0: Port device team_slave_0 removed [ 1077.778619][T19403] team0: Port device team_slave_1 removed [ 1077.791947][T19414] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3922'. [ 1077.819703][T19403] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1077.936598][T19403] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1077.947189][T19403] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1078.843594][T19420] 8021q: VLANs not supported on ip6gre0 [ 1078.901804][T19424] netlink: 1 bytes leftover after parsing attributes in process `syz.1.3925'. [ 1078.915185][T19423] netlink: 1688 bytes leftover after parsing attributes in process `syz.2.3926'. [ 1079.038811][T19427] mac80211_hwsim hwsim18 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1081.608342][T19459] netlink: 'syz.3.3937': attribute type 72 has an invalid length. [ 1081.759430][T18208] wlan1: Trigger new scan to find an IBSS to join [ 1081.774133][T19458] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3935'. [ 1082.590103][T19475] 8021q: VLANs not supported on ip6gre0 [ 1085.033597][ C0] Dead loop on virtual device ipvlan1, fix it urgently! [ 1087.818998][T17210] wlan1: Trigger new scan to find an IBSS to join [ 1087.855135][T19531] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3957'. [ 1087.985000][T19538] 8021q: VLANs not supported on ip6tnl0 [ 1088.130575][T19545] geneve2: entered allmulticast mode [ 1088.508812][ T5832] Bluetooth: hci2: ACL packet for unknown connection handle 0 [ 1088.587250][T19553] openvswitch: netlink: Flow actions attr not present in new flow. [ 1089.745667][T17587] wlan1: Creating new IBSS network, BSSID 96:1a:ba:9d:6e:5d [ 1090.218422][T19575] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3970'. [ 1090.978971][T19586] overlayfs: failed to clone lowerpath [ 1091.007402][T19589] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3974'. [ 1091.130489][T19591] vlan2: entered promiscuous mode [ 1091.147274][T19591] syz_tun: entered promiscuous mode [ 1093.681355][T19616] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3983'. [ 1093.690720][T19616] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3983'. [ 1093.738033][T19617] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 1094.331241][T19634] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3991'. [ 1094.985436][ T30] audit: type=1326 audit(1751115636.430:3102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19643 comm="syz.0.3994" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f44f138e929 code=0x7ffc0000 [ 1094.988370][T19644] bpf: Bad value for 'gid' [ 1095.029536][T19646] overlayfs: conflicting options: nfs_export=on,index=off [ 1095.037542][ T30] audit: type=1326 audit(1751115636.430:3103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19643 comm="syz.0.3994" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f44f138e929 code=0x7ffc0000 [ 1095.064875][ T30] audit: type=1326 audit(1751115636.430:3104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19643 comm="syz.0.3994" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f44f138e929 code=0x7ffc0000 [ 1095.098439][ T30] audit: type=1326 audit(1751115636.430:3105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19643 comm="syz.0.3994" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f44f138e929 code=0x7ffc0000 [ 1095.181942][ T30] audit: type=1326 audit(1751115636.430:3106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19643 comm="syz.0.3994" exe="/root/syz-executor" sig=0 arch=c000003e syscall=440 compat=0 ip=0x7f44f138e929 code=0x7ffc0000 [ 1095.244369][ T30] audit: type=1326 audit(1751115636.430:3107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19643 comm="syz.0.3994" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f44f138e929 code=0x7ffc0000 [ 1095.271143][ T30] audit: type=1326 audit(1751115636.430:3108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19643 comm="syz.0.3994" exe="/root/syz-executor" sig=0 arch=c000003e syscall=300 compat=0 ip=0x7f44f138e929 code=0x7ffc0000 [ 1095.300237][ T30] audit: type=1326 audit(1751115636.430:3109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19643 comm="syz.0.3994" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f44f138e929 code=0x7ffc0000 [ 1095.339419][ T30] audit: type=1326 audit(1751115636.430:3110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19643 comm="syz.0.3994" exe="/root/syz-executor" sig=0 arch=c000003e syscall=32 compat=0 ip=0x7f44f138e929 code=0x7ffc0000 [ 1095.427677][ T30] audit: type=1326 audit(1751115636.430:3111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19643 comm="syz.0.3994" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f44f138e929 code=0x7ffc0000 [ 1096.030936][T19659] batadv0: entered promiscuous mode [ 1096.036842][T19659] vlan3: entered promiscuous mode [ 1096.499535][T19673] vlan3: entered allmulticast mode [ 1096.537961][T19673] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1097.081427][T19682] openvswitch: netlink: IP tunnel attribute has 16 unknown bytes. [ 1097.302229][T19684] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4008'. [ 1098.492534][T19706] ipvlan1: entered promiscuous mode [ 1098.498859][T19706] ipvlan1: entered allmulticast mode [ 1098.506071][T19706] veth0_vlan: entered allmulticast mode [ 1204.542722][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 1204.549713][ C1] rcu: 0-...!: (1 ticks this GP) idle=13ac/1/0x4000000000000000 softirq=90853/90853 fqs=0 [ 1204.560759][ C1] rcu: (detected by 1, t=10502 jiffies, g=78381, q=123 ncpus=2) [ 1204.568504][ C1] Sending NMI from CPU 1 to CPUs 0: [ 1204.568535][ C0] NMI backtrace for cpu 0 [ 1204.568550][ C0] CPU: 0 UID: 0 PID: 17587 Comm: kworker/u8:26 Not tainted 6.16.0-rc3-syzkaller-00233-g35e261cd95dd #0 PREEMPT(full) [ 1204.568569][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1204.568580][ C0] Workqueue: events_unbound bpf_map_free_deferred [ 1204.568604][ C0] RIP: 0010:__lock_acquire+0x121/0xd20 [ 1204.568623][ C0] Code: f5 28 5c 8f 48 0f af f0 45 85 f6 0f 85 4a 01 00 00 45 85 ed 0f 84 41 01 00 00 41 83 fd 31 0f 83 12 01 00 00 48 83 7c 24 68 00 <0f> 84 2b 01 00 00 48 8d 87 f0 0a 00 00 4a 8d 0c ad 00 00 00 00 4c [ 1204.568636][ C0] RSP: 0018:ffffc90000007ab0 EFLAGS: 00000046 [ 1204.568648][ C0] RAX: 0000000000000000 RBX: ffffffff99ca4088 RCX: ffffffff93427330 [ 1204.568660][ C0] RDX: 0000000000000004 RSI: 0000000000000000 RDI: ffff88802cd31e00 [ 1204.568669][ C0] RBP: 0000000000000000 R08: 0000000000000001 R09: 0000000000000001 [ 1204.568678][ C0] R10: ffffc90000007ca0 R11: fffff52000000f96 R12: 0000000000000000 [ 1204.568688][ C0] R13: 0000000000000004 R14: 0000000000000000 R15: 0000000000000000 [ 1204.568697][ C0] FS: 0000000000000000(0000) GS:ffff888125c84000(0000) knlGS:0000000000000000 [ 1204.568709][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1204.568719][ C0] CR2: 0000001b2dd5ffff CR3: 00000000583d0000 CR4: 00000000003526f0 [ 1204.568732][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1204.568741][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1204.568750][ C0] Call Trace: [ 1204.568756][ C0] [ 1204.568767][ C0] ? debug_object_activate+0xbb/0x420 [ 1204.568782][ C0] lock_acquire+0x120/0x360 [ 1204.568798][ C0] ? debug_object_activate+0xbb/0x420 [ 1204.568813][ C0] ? __lock_acquire+0xab9/0xd20 [ 1204.568832][ C0] _raw_spin_lock_irqsave+0xa7/0xf0 [ 1204.568849][ C0] ? debug_object_activate+0xbb/0x420 [ 1204.568863][ C0] ? __pfx__raw_spin_lock_irqsave+0x10/0x10 [ 1204.568879][ C0] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1204.568897][ C0] debug_object_activate+0xbb/0x420 [ 1204.568914][ C0] enqueue_hrtimer+0x30/0x3a0 [ 1204.568935][ C0] __hrtimer_run_queues+0x656/0xc60 [ 1204.568960][ C0] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 1204.568977][ C0] ? read_tsc+0x9/0x20 [ 1204.568996][ C0] hrtimer_interrupt+0x45b/0xaa0 [ 1204.569023][ C0] __sysvec_apic_timer_interrupt+0x10b/0x410 [ 1204.569044][ C0] sysvec_apic_timer_interrupt+0xa1/0xc0 [ 1204.569062][ C0] [ 1204.569067][ C0] [ 1204.569072][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1204.569087][ C0] RIP: 0010:__sanitizer_cov_trace_pc+0x0/0x70 [ 1204.569103][ C0] Code: 89 fb e8 23 00 00 00 48 8b 3d c4 e6 f8 0b 48 89 de 5b e9 b3 91 56 00 cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1e fa 48 8b 04 24 65 48 8b 0c 25 08 c0 99 92 65 8b 15 a8 72 [ 1204.569115][ C0] RSP: 0018:ffffc90005707938 EFLAGS: 00000246 [ 1204.569127][ C0] RAX: 1ffffffff1b71487 RBX: ffffffff822cb112 RCX: ffff88802cd31e00 [ 1204.569138][ C0] RDX: 0000000000000000 RSI: ffffffff8be1bb60 RDI: ffffffff8be1bb20 [ 1204.569147][ C0] RBP: 0000000000000001 R08: 0000000000000000 R09: ffffffff822cb112 [ 1204.569157][ C0] R10: dffffc0000000000 R11: fffff940001adb4f R12: ffffea0000d6da40 [ 1204.569168][ C0] R13: dffffc0000000000 R14: 0000000000035b69 R15: 0000000000000000 [ 1204.569179][ C0] ? page_ext_get+0x22/0x2f0 [ 1204.569195][ C0] ? page_ext_get+0x22/0x2f0 [ 1204.569213][ C0] page_ext_get+0x2ce/0x2f0 [ 1204.569230][ C0] __reset_page_owner+0x28/0x1f0 [ 1204.569247][ C0] __free_frozen_pages+0xc65/0xe60 [ 1204.569268][ C0] ringbuf_map_free+0xc0/0x110 [ 1204.569293][ C0] bpf_map_free_deferred+0xed/0x110 [ 1204.569309][ C0] ? process_scheduled_works+0x9ef/0x17b0 [ 1204.569327][ C0] process_scheduled_works+0xade/0x17b0 [ 1204.569356][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 1204.569380][ C0] worker_thread+0x8a0/0xda0 [ 1204.569407][ C0] kthread+0x70e/0x8a0 [ 1204.569423][ C0] ? __pfx_worker_thread+0x10/0x10 [ 1204.569441][ C0] ? __pfx_kthread+0x10/0x10 [ 1204.569455][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 1204.569471][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 1204.569488][ C0] ? __pfx_kthread+0x10/0x10 [ 1204.569502][ C0] ret_from_fork+0x3fc/0x770 [ 1204.569520][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 1204.569539][ C0] ? __switch_to_asm+0x39/0x70 [ 1204.569552][ C0] ? __switch_to_asm+0x33/0x70 [ 1204.569564][ C0] ? __pfx_kthread+0x10/0x10 [ 1204.569579][ C0] ret_from_fork_asm+0x1a/0x30 [ 1204.569598][ C0] [ 1204.570531][ C1] rcu: rcu_preempt kthread timer wakeup didn't happen for 10501 jiffies! g78381 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x402 [ 1205.018919][ C1] rcu: Possible timer handling issue on cpu=0 timer-softirq=93038 [ 1205.026805][ C1] rcu: rcu_preempt kthread starved for 10502 jiffies! g78381 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x402 ->cpu=0 [ 1205.038167][ C1] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 1205.048131][ C1] rcu: RCU grace-period kthread stack dump: [ 1205.054010][ C1] task:rcu_preempt state:I stack:27320 pid:16 tgid:16 ppid:2 task_flags:0x208040 flags:0x00004000 [ 1205.065932][ C1] Call Trace: [ 1205.069208][ C1] [ 1205.072144][ C1] __schedule+0x16a2/0x4cb0 [ 1205.076674][ C1] ? schedule+0x165/0x360 [ 1205.081012][ C1] ? __pfx___schedule+0x10/0x10 [ 1205.085883][ C1] ? schedule+0x91/0x360 [ 1205.090128][ C1] schedule+0x165/0x360 [ 1205.094297][ C1] schedule_timeout+0x12b/0x270 [ 1205.099147][ C1] ? __pfx_schedule_timeout+0x10/0x10 [ 1205.104522][ C1] ? __pfx_process_timeout+0x10/0x10 [ 1205.109817][ C1] ? prepare_to_swait_event+0x341/0x380 [ 1205.115366][ C1] rcu_gp_fqs_loop+0x301/0x1540 [ 1205.120228][ C1] ? __pfx_rcu_gp_init+0x10/0x10 [ 1205.125169][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 1205.130373][ C1] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 1205.135655][ C1] ? _raw_spin_unlock_irq+0x2e/0x50 [ 1205.140862][ C1] ? finish_swait+0xcd/0x1f0 [ 1205.145455][ C1] rcu_gp_kthread+0x99/0x390 [ 1205.150052][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 1205.155254][ C1] ? __kthread_parkme+0x7b/0x200 [ 1205.160204][ C1] ? __kthread_parkme+0x1a1/0x200 [ 1205.165238][ C1] kthread+0x70e/0x8a0 [ 1205.169312][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 1205.174512][ C1] ? __pfx_kthread+0x10/0x10 [ 1205.179102][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 1205.184309][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 1205.189507][ C1] ? __pfx_kthread+0x10/0x10 [ 1205.194096][ C1] ret_from_fork+0x3fc/0x770 [ 1205.198689][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 1205.203806][ C1] ? __switch_to_asm+0x39/0x70 [ 1205.208570][ C1] ? __switch_to_asm+0x33/0x70 [ 1205.213331][ C1] ? __pfx_kthread+0x10/0x10 [ 1205.217922][ C1] ret_from_fork_asm+0x1a/0x30 [ 1205.222701][ C1]