last executing test programs: 8m27.03259018s ago: executing program 1 (id=7): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = gettid() r2 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) read$ptp(r2, 0x0, 0x0) timer_create(0x0, &(0x7f00000002c0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)=0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) timer_settime(r3, 0x1, &(0x7f0000000340)={{0x0, 0x3938700}, {r4, r5+60000000}}, 0x0) 8m26.091041s ago: executing program 1 (id=10): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c000006000000000000f183850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000100)={0x80000000, 0x0, 0xfffffffc}, 0x10) write(r2, &(0x7f0000000000)="240000001a005f0214f9f407000904000a000000fe0000000000000008000f00fd000000", 0x24) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) r3 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x1d, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7b0e}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='block_plug\x00', r4}, 0x10) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) ioctl$BLKTRACESETUP(r3, 0xc0481273, &(0x7f0000000280)={'\x00', 0x7e, 0x1000, 0x5c8, 0x80000003, 0x6}) 8m25.72237774s ago: executing program 1 (id=11): r0 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r4, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2c}}, 0x10) connect$inet(r4, &(0x7f0000000280)={0x2, 0x4, @multicast1}, 0x10) sendmmsg$inet(r4, &(0x7f0000004540)=[{{&(0x7f0000000040)={0x2, 0x4e22, @multicast1}, 0x10, 0x0}, 0xee0000b0}, {{0x0, 0x0, &(0x7f00000012c0)=[{&(0x7f0000001100)="15b26f226e2966667482d50903b0a8d92ccd9e69d5cc4cb3d467a670b237a9225fb56c0f7ea725dee27c4bb43bb50c6748c83b71d59f0537405dfab648c096607340fac939a2efd31cbe2f8ca29c409e87ea0974b7bceff9afef5d07d691575f5115f2f961ad488e3386036913e98181a6034febaab853a3e928b9035b0e3a8e1cb393c70f6d0448970e0af2476f8b923ee09c19deca55d58f70e8eeff55dda6381cb96afe97196c0af0a8fd450a1447a1a521e2c211fb84cbcf4aebd31298972ec6bea1764fbde5500fa30c5f2459cff4d7f123ab94cfd5762d586ec7a28abc2f8c9e608f8f964b96ecb0883d60d444f317834a3d734cb304051a60d1a084a84da8f9a23a1b9d4951c0a81985c63ae193f40e9deb358b2f08553324fd6086be9e70e5061568abefebcda50e70f4dab2e4dc0cf6d85aced044d7005326922886194895267165f7f592036ebe11dcf1cad98f5cda766eaea90fb4cb5e793525126c7594f8599055192d63a81d3cd26aadd50983f1c3f1d4655c1b5f59e80f733e3abc4792b760729fd26298ef15141cf76cc4", 0x192}, {0x0}, {&(0x7f0000000380)="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", 0x9fd}], 0x3}}, {{0x0, 0x0, &(0x7f00000017c0)=[{&(0x7f0000001700)="a6", 0x1}], 0x1}}], 0x3, 0x0) ioctl$TCSETAW(r0, 0x5407, &(0x7f0000000040)={0x6, 0x23, 0x9, 0xdedb, 0x5, "00000000c89cefe0"}) 8m24.640367438s ago: executing program 1 (id=14): socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_open_dev$usbfs(&(0x7f0000000240), 0xe58c, 0x1052c1) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x800}, 0x40000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) syz_emit_ethernet(0x32, &(0x7f0000000300)={@broadcast, @random="6487a2bed3d6", @val={@val={0x88a8, 0x4, 0x0, 0xffe}, {0x8100, 0x0, 0x0, 0x3}}, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x40}, @loopback, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @dev={0xac, 0x14, 0x14, 0x3e}}}}}, 0x0) r1 = getpid() sched_setaffinity(0x0, 0xfffffffffffffe13, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000003c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x40000000000002) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r4, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, r5, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_HWPT_ALLOC$NONE(r4, 0x3b89, &(0x7f0000000180)={0x28, 0x2, r6, r5, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r4, 0x3b85, &(0x7f0000000000)={0x28, 0x4, r5, 0x0, &(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x8}) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d667363616368652c76657273696f6e"]) setsockopt$SO_BINDTODEVICE_wg(r3, 0x1, 0x19, &(0x7f0000000280)='wg1\x00', 0x4) socket$inet_tcp(0x2, 0x1, 0x0) keyctl$setperm(0x5, 0x0, 0x30010001) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000000900010073797a30000000002c000000030a01020000000000000000010000000900010073797a30000000000900030073797a310000000038000000030a01040000000000000000010000010900030073797a32000000000c00024000000000000000010900010073797a3000"], 0xac}, 0x1, 0x0, 0x0, 0x8040}, 0x0) 8m23.474950214s ago: executing program 1 (id=15): syz_genetlink_get_family_id$tipc(&(0x7f0000000080), 0xffffffffffffffff) r0 = socket(0x1e, 0x1, 0x0) syz_io_uring_setup(0x1108, &(0x7f0000000300)={0x0, 0x0, 0x80, 0x1, 0x21e}, 0x0, &(0x7f0000000040)) io_uring_setup(0x648, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) socket$inet(0x2, 0x4000000000000001, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0xffffffffffffff1a, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = syz_io_uring_setup(0x126b, &(0x7f00000006c0)={0x0, 0x0, 0x80}, &(0x7f0000000140), &(0x7f0000000780)) io_uring_register$IORING_REGISTER_FILES_UPDATE2(r2, 0x2, &(0x7f0000002d40)={0x0, 0x0, 0x0, 0x0}, 0x20) io_uring_register$IORING_REGISTER_FILES_UPDATE2(r2, 0xe, &(0x7f0000000340)={0x9, 0x0, &(0x7f0000000100)=[{0x0}], &(0x7f0000000300)=[0xfffffffff6eef50c], 0x1}, 0x20) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=@newtaction={0x64, 0x30, 0x9, 0x0, 0x0, {}, [{0x50, 0x1, [@m_mpls={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{}, 0x1}}]}, {0x4, 0x4}, {0xc}, {0xc}}}]}]}, 0x64}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001700)=ANY=[@ANYBLOB="180000002400010300000000000000000100"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) r4 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r4, &(0x7f0000000500)={0xa, 0x5e20, 0xffffffff, @empty, 0x4}, 0x1c) r5 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r5, &(0x7f0000000040)={0x2, 0x4e20, @multicast1}, 0x10) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000580)='bond0\x00', 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000080)=ANY=[@ANYBLOB="bbbbbbbbbbbb00000000000008004500005c000000000011907800000000e000000100004e2000089078"], 0x0) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r5, &(0x7f00000004c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000480)={&(0x7f0000000380)=ANY=[@ANYBLOB="c400e49e", @ANYRES16, @ANYBLOB="000228bd7000fcdbdf253700000008000300", @ANYRES32=0x0, @ANYBLOB="08005700020000000500180129000000050018010d0000000800220124010000080026006c0900000800a1000400000008002600e41600000800a1000010000008002700010000000800a0008cb700000800270002000000080026006c090000050018013c0000000800570005000000080022014d0100000500190106000000050019010a00000005001801180000000800a0000800000008002201820200000500190104000000"], 0xc4}, 0x1, 0x0, 0x0, 0x4010}, 0x24008811) connect$tipc(r0, 0x0, 0x0) 8m23.114792232s ago: executing program 1 (id=16): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, 0xffffffffffffffff) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000100)={0x0, 0x3, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="5c0000000206030000000000000000000000000005000100070000000900020073797a31000000001400078005001500070000000800124000000000050005000200000005000400000000000d000300686173683a6e6574"], 0x5c}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)={0x44, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @loopback}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x10040047}, 0x240008c4) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x1, 0x4) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000180)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7fe, 0x2, 0x401}, 0x1c) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x63, 0x11, 0xc}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x5}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x6}, 0x70) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) bind$packet(0xffffffffffffffff, &(0x7f00000001c0)={0x11, 0x1a, 0x0, 0x1, 0xb, 0x6, @local}, 0xffffffffffffffae) 8m18.25437676s ago: executing program 4 (id=31): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) select(0x40, &(0x7f0000000040)={0x6, 0x1, 0x7, 0x6, 0x401, 0x8, 0x4}, &(0x7f0000000240)={0x9, 0xd4c, 0x400, 0xd74, 0x9, 0x6, 0x6, 0x6bf}, &(0x7f0000000280)={0xa, 0x3ff, 0x4, 0xffffffff, 0x6, 0x453, 0x2c2, 0x38000000000000}, &(0x7f00000002c0)={0x77359400}) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x23, &(0x7f0000000100)=0x7, 0x4) write$cgroup_devices(r1, &(0x7f0000000200)=ANY=[], 0x9) recvmsg$unix(r0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x2) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) bind$inet(0xffffffffffffffff, 0x0, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000500)='/proc/consoles\x00', 0x0, 0x0) r4 = syz_io_uring_setup(0x49d, &(0x7f00000003c0)={0x0, 0x79ac, 0x400, 0x7ffd, 0x32c, 0x0, r3}, &(0x7f00000001c0)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f0000000080)=@IORING_OP_READ=@pass_buffer={0x16, 0x40, 0x4007, @fd=r3, 0x7, &(0x7f00000000c0)=""/207, 0xcf, 0x10, 0x1}) syz_open_dev$vcsn(&(0x7f00000005c0), 0xd, 0x101200) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00'}, 0x18) syz_io_uring_setup(0x5c2, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x8003}, &(0x7f0000000240)=0x0, &(0x7f0000000200)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000080)=0xfffffff8, 0x0, 0x4) io_uring_enter(r4, 0xfd0, 0x4c1, 0x43, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000300)='mm_page_alloc\x00'}, 0x10) 8m17.949381442s ago: executing program 4 (id=32): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], 0x0}, 0x94) r1 = socket$inet6(0x10, 0x3, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000380)='neigh_update\x00', r2}, 0x10) sendto$inet6(r1, &(0x7f00000000c0)="900000001c001f4d154a817393278bff0a80a578020000000104740014000100ac1414bb0542d6401051a2d708f37ac8da1a297e0099c5ac0000c5b068d0bf46d323456536016466fcb78dcaaf6c3efed495a46215be0000760700c0c80cefd28581d158ba86c9d2896c6d3bca2d0000000b0015009e49a6560641263da4de1df32c1739d7fbee9aa241731ae9e0b390", 0x90, 0x0, 0x0, 0x0) 8m17.646605373s ago: executing program 4 (id=33): r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0x40) setsockopt$inet_mreqsrc(r0, 0x0, 0x25, &(0x7f0000000100)={@multicast2, @loopback, @empty}, 0xc) socket$kcm(0x21, 0x2, 0xa) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_NEWLINK(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={0x38, 0x1403, 0x1, 0x70bd29, 0x25dfdbff, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'veth0_to_bridge\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8081}, 0x20000010) accept4$inet6(0xffffffffffffffff, 0x0, &(0x7f0000000040), 0x80800) r1 = socket(0x10, 0x3, 0x9) r2 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x7a, 0x0, 0x0, 0x41000, 0x44, '\x00', 0x0, @cgroup_sysctl=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2e, 0x0, 0x0, 0x0}, 0x94) sendmsg$NFT_BATCH(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000013c0)={{0x14, 0x3f9, 0x1, 0x0, 0x0, {0x5}}, [], {0x14}}, 0x28}, 0x1, 0x0, 0x0, 0x64841}, 0x40000) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_ro(r3, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) preadv(r4, &(0x7f0000000140)=[{&(0x7f00000000c0)=""/56, 0x38}], 0x1, 0x8, 0x0) syz_clone3(&(0x7f0000000480)={0x22044000, &(0x7f0000000400), &(0x7f0000000180), &(0x7f0000000300), {0x2e}, &(0x7f0000000540)=""/169, 0xa9, &(0x7f0000000400), &(0x7f0000000440)=[0xffffffffffffffff, 0x0], 0x2, {r4}}, 0x58) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)) r5 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IP_VS_SO_SET_EDITDEST(r5, 0x0, 0x489, &(0x7f0000000600)={{0x62, @empty, 0x4e20, 0x2, 'rr\x00', 0x17, 0x10000, 0x52}, {@empty, 0x4e24, 0x0, 0xe, 0x6, 0xffffffff}}, 0x44) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='kmem_cache_free\x00'}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) syz_genetlink_get_family_id$nbd(&(0x7f0000000380), 0xffffffffffffffff) get_mempolicy(0x0, 0x0, 0x400, &(0x7f00000ce000/0x1000)=nil, 0x3) 8m17.379593902s ago: executing program 4 (id=34): r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$smackfs_change_rule(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) write$binfmt_script(r2, &(0x7f0000000000)={'#! ', './file0', [{0x20, 'axA\x9b^\xfb^$\r\'uij\r\xd9\xef\xd2Et^Q\v\x9fOFL\x95`Z\xae\xc3a\xfe%\x94\x1a\xebt\xc6\x06\x8fD,\xf7\xae#\x80\x80\xdf\xa3\xcaO\xc6\x8a\x91\x90\xadR\aW\xe1\xf3n\xca\xa3\x8f\xd6F\x03\x0e\x9b\xe5yb\xfc\xa19wUs\x83\xf1{&\n\x1d\x8e\x82y\x1a.B\x0e\xea\x17\xc7\xe7H\xa9\xd4\x8e\xe7 gD\x89*\xb5c\xc5\x8a\xe6R\xe5YGq\xf5\xb6\x95\xbc\x112\x9bno\xc8\x06\xb6\b\xcc\x03{Sn\x94G\x01\xb4\xffJQ8t\x99vY\xaaf\xc7,\x9f\xbb\x15G\x1cr\x19\xef\xab\n\xa8\xbc\xbd\xa2E\x16\x1cm\xbd=\x98\x7fU\xcbg\x15%\x95\xb11\x017\x83*\x14\xcbt\xc2\xcb\x04\x1e~?\xb9j\x18\x96\x84EA\xeaB\a\x83\xba\xdco<\x00'/256}]}, 0x10c) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d) ioctl$sock_netdev_private(r3, 0x8914, &(0x7f0000000000)) r4 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_rose_SIOCADDRT(r4, 0x890b, &(0x7f0000000380)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, 0x6, @null, @bpq0, 0x0, [@bcast, @bcast, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}) socket(0x2b, 0xa, 0x0) r5 = syz_init_net_socket$rose(0xb, 0x5, 0x0) connect$rose(r5, &(0x7f0000000040)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x1, @default}, 0x1c) connect$rose(r5, &(0x7f0000000100)=@full={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x0, [@null, @null, @null, @default, @bcast, @default]}, 0x40) socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x13, &(0x7f0000000040)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207baaf8ff00000000bda106000000000047010000f8ffffffb602000008000000b70300000000000085000000050000001801000020696c250000000000202020d31af8ff51000000bda102000000000007010000f8ffffffb702000008000000b703000000000000850000007b00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="4800000010003b1500000000ffdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="000000000150010020001280080001006774700014000280050005000000000008000300", @ANYRES32], 0x48}}, 0x2400c080) r6 = dup(0xffffffffffffffff) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r6, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @empty, 0x3}], 0x1c) 8m16.467619808s ago: executing program 4 (id=36): syz_genetlink_get_family_id$ipvs(&(0x7f00000003c0), 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mincore(&(0x7f0000184000/0x2000)=nil, 0x2000, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(twofish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be5216", 0xb}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d", 0x2a}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085", 0xcb}], 0x3}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) 8m15.344569855s ago: executing program 2 (id=41): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000280)={{0x12, 0x1, 0x141, 0xf2, 0xc5, 0x96, 0x20, 0x16d0, 0x10b8, 0xde8e, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x0, 0x2, 0x2, 0x0, 0x83, 0xec, 0x0, [], [{{0x9, 0x5, 0x6, 0x2, 0x200, 0x2, 0x0, 0xa}}, {{0x9, 0x5, 0x82, 0x2, 0x200, 0x0, 0x1, 0x10}}]}}]}}]}}, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) r1 = socket(0xa, 0x3, 0x3a) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x5, &(0x7f0000000100)=ANY=[@ANYRESDEC], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r6}, 0x10) socket$inet6(0xa, 0x80002, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_NEW(r7, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000280)={0x20, 0x0, 0x9, 0x201, 0x0, 0x0, {0x7, 0x0, 0x9}, [@NFCTH_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x20}}, 0x0) socket$kcm(0x29, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x20000811) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000940)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELCHAIN={0x30, 0x5, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x2000}, [@NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x4}]}], {0x14}}, 0xa4}}, 0x200000d4) r8 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000009e602206d0114c300000000000109022400"], 0x0) syz_usb_control_io$hid(r8, &(0x7f00000001c0)={0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="00020c0000000c0002", @ANYRESDEC], 0x0, 0x0, 0x0}, 0x0) setsockopt$MRT6_TABLE(r1, 0x29, 0xd1, &(0x7f0000000040)=0xfe, 0x4) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000040)) 8m14.899397549s ago: executing program 4 (id=42): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, 0xffffffffffffffff) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000100)={0x0, 0x3, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="5c0000000206030000000000000000000000000005000100070000000900020073797a31000000001400078005001500070000000800124000000000050005000200000005000400000000000d000300686173683a6e6574"], 0x5c}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)={0x44, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @loopback}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x10040047}, 0x240008c4) setsockopt$packet_int(r0, 0x107, 0xa, 0x0, 0x0) setsockopt$packet_rx_ring(r0, 0x107, 0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r3, 0x107, 0xf, 0x0, 0x0) bind$packet(0xffffffffffffffff, &(0x7f00000001c0)={0x11, 0x1a, 0x0, 0x1, 0xb, 0x6, @local}, 0xffffffffffffffae) 8m12.176447624s ago: executing program 2 (id=43): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], 0x0}, 0x94) r1 = socket$inet6(0x10, 0x3, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000380)='neigh_update\x00', r2}, 0x10) sendto$inet6(r1, &(0x7f00000000c0)="900000001c001f4d154a817393278bff0a80a578020000000104740014000100ac1414bb0542d6401051a2d708f37ac8da1a297e0099c5ac0000c5b068d0bf46d323456536016466fcb78dcaaf6c3efed495a46215be0000760700c0c80cefd28581d158ba86c9d2896c6d3bca2d0000000b0015009e49a6560641263da4de1df32c1739d7fbee9aa241731ae9e0b390", 0x90, 0x0, 0x0, 0x0) 8m12.033763824s ago: executing program 2 (id=44): r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0x40) setsockopt$inet_mreqsrc(r0, 0x0, 0x25, &(0x7f0000000100)={@multicast2, @loopback, @empty}, 0xc) socket$kcm(0x21, 0x2, 0xa) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_NEWLINK(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={0x38, 0x1403, 0x1, 0x70bd29, 0x25dfdbff, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'veth0_to_bridge\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8081}, 0x20000010) accept4$inet6(0xffffffffffffffff, 0x0, &(0x7f0000000040), 0x80800) r1 = socket(0x10, 0x3, 0x9) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2e, 0x0, 0x0, 0x0}, 0x94) sendmsg$NFT_BATCH(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000013c0)={{0x14, 0x3f9, 0x1, 0x0, 0x0, {0x5}}, [], {0x14}}, 0x28}, 0x1, 0x0, 0x0, 0x64841}, 0x40000) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_ro(r2, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) preadv(r3, &(0x7f0000000140)=[{&(0x7f00000000c0)=""/56, 0x38}], 0x1, 0x8, 0x0) syz_clone3(&(0x7f0000000480)={0x22044000, &(0x7f0000000400), &(0x7f0000000180), &(0x7f0000000300), {0x2e}, &(0x7f0000000540)=""/169, 0xa9, &(0x7f0000000400), &(0x7f0000000440)=[0xffffffffffffffff, 0x0], 0x2, {r3}}, 0x58) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)) r4 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IP_VS_SO_SET_EDITDEST(r4, 0x0, 0x489, &(0x7f0000000600)={{0x62, @empty, 0x4e20, 0x2, 'rr\x00', 0x17, 0x10000, 0x52}, {@empty, 0x4e24, 0x0, 0xe, 0x6, 0xffffffff}}, 0x44) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='kmem_cache_free\x00'}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) syz_genetlink_get_family_id$nbd(&(0x7f0000000380), 0xffffffffffffffff) get_mempolicy(0x0, 0x0, 0x400, &(0x7f00000ce000/0x1000)=nil, 0x3) 8m11.852192164s ago: executing program 2 (id=45): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000180)={0x7, 0x8, 0xfa00, {r1, 0x9}}, 0x10) close(r0) 8m11.653644332s ago: executing program 2 (id=46): r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$smackfs_change_rule(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) write$binfmt_script(r2, &(0x7f0000000000)={'#! ', './file0', [{0x20, 'axA\x9b^\xfb^$\r\'uij\r\xd9\xef\xd2Et^Q\v\x9fOFL\x95`Z\xae\xc3a\xfe%\x94\x1a\xebt\xc6\x06\x8fD,\xf7\xae#\x80\x80\xdf\xa3\xcaO\xc6\x8a\x91\x90\xadR\aW\xe1\xf3n\xca\xa3\x8f\xd6F\x03\x0e\x9b\xe5yb\xfc\xa19wUs\x83\xf1{&\n\x1d\x8e\x82y\x1a.B\x0e\xea\x17\xc7\xe7H\xa9\xd4\x8e\xe7 gD\x89*\xb5c\xc5\x8a\xe6R\xe5YGq\xf5\xb6\x95\xbc\x112\x9bno\xc8\x06\xb6\b\xcc\x03{Sn\x94G\x01\xb4\xffJQ8t\x99vY\xaaf\xc7,\x9f\xbb\x15G\x1cr\x19\xef\xab\n\xa8\xbc\xbd\xa2E\x16\x1cm\xbd=\x98\x7fU\xcbg\x15%\x95\xb11\x017\x83*\x14\xcbt\xc2\xcb\x04\x1e~?\xb9j\x18\x96\x84EA\xeaB\a\x83\xba\xdco<\x00'/256}]}, 0x10c) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d) ioctl$sock_netdev_private(r3, 0x8914, &(0x7f0000000000)) r4 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_rose_SIOCADDRT(r4, 0x890b, &(0x7f0000000380)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, 0x6, @null, @bpq0, 0x0, [@bcast, @bcast, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}) socket(0x2b, 0xa, 0x0) r5 = syz_init_net_socket$rose(0xb, 0x5, 0x0) connect$rose(r5, &(0x7f0000000040)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x1, @default}, 0x1c) connect$rose(r5, &(0x7f0000000100)=@full={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x0, [@null, @null, @null, @default, @bcast, @default]}, 0x40) socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x13, &(0x7f0000000040)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207baaf8ff00000000bda106000000000047010000f8ffffffb602000008000000b70300000000000085000000050000001801000020696c250000000000202020d31af8ff51000000bda102000000000007010000f8ffffffb702000008000000b703000000000000850000007b00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="4800000010003b1500000000ffdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="000000000150010020001280080001006774700014000280050005000000000008000300", @ANYRES32], 0x48}}, 0x2400c080) r6 = dup(0xffffffffffffffff) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r6, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @empty, 0x3}], 0x1c) 8m10.647211779s ago: executing program 2 (id=48): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, 0xffffffffffffffff) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000100)={0x0, 0x3, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="5c0000000206030000000000000000000000000005000100070000000900020073797a31000000001400078005001500070000000800124000000000050005000200000005000400000000000d000300686173683a6e6574"], 0x5c}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)={0x44, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @loopback}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x10040047}, 0x240008c4) setsockopt$packet_int(r0, 0x107, 0xa, 0x0, 0x0) setsockopt$packet_rx_ring(r0, 0x107, 0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r3, 0x107, 0xf, 0x0, 0x0) bind$packet(0xffffffffffffffff, &(0x7f00000001c0)={0x11, 0x1a, 0x0, 0x1, 0xb, 0x6, @local}, 0xffffffffffffffae) 8m7.495898221s ago: executing program 32 (id=16): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, 0xffffffffffffffff) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000100)={0x0, 0x3, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="5c0000000206030000000000000000000000000005000100070000000900020073797a31000000001400078005001500070000000800124000000000050005000200000005000400000000000d000300686173683a6e6574"], 0x5c}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)={0x44, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @loopback}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x10040047}, 0x240008c4) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x1, 0x4) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000180)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7fe, 0x2, 0x401}, 0x1c) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x63, 0x11, 0xc}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x5}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x6}, 0x70) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) bind$packet(0xffffffffffffffff, &(0x7f00000001c0)={0x11, 0x1a, 0x0, 0x1, 0xb, 0x6, @local}, 0xffffffffffffffae) 7m59.73735774s ago: executing program 33 (id=42): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, 0xffffffffffffffff) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000100)={0x0, 0x3, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="5c0000000206030000000000000000000000000005000100070000000900020073797a31000000001400078005001500070000000800124000000000050005000200000005000400000000000d000300686173683a6e6574"], 0x5c}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)={0x44, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @loopback}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x10040047}, 0x240008c4) setsockopt$packet_int(r0, 0x107, 0xa, 0x0, 0x0) setsockopt$packet_rx_ring(r0, 0x107, 0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r3, 0x107, 0xf, 0x0, 0x0) bind$packet(0xffffffffffffffff, &(0x7f00000001c0)={0x11, 0x1a, 0x0, 0x1, 0xb, 0x6, @local}, 0xffffffffffffffae) 7m55.125912373s ago: executing program 34 (id=48): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, 0xffffffffffffffff) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000100)={0x0, 0x3, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="5c0000000206030000000000000000000000000005000100070000000900020073797a31000000001400078005001500070000000800124000000000050005000200000005000400000000000d000300686173683a6e6574"], 0x5c}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)={0x44, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @loopback}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x10040047}, 0x240008c4) setsockopt$packet_int(r0, 0x107, 0xa, 0x0, 0x0) setsockopt$packet_rx_ring(r0, 0x107, 0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r3, 0x107, 0xf, 0x0, 0x0) bind$packet(0xffffffffffffffff, &(0x7f00000001c0)={0x11, 0x1a, 0x0, 0x1, 0xb, 0x6, @local}, 0xffffffffffffffae) 4m46.949350625s ago: executing program 6 (id=568): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080", @ANYBLOB], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00'}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) shmat(0x0, &(0x7f0000b16000/0x4000)=nil, 0x3000) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) sendmmsg(r0, &(0x7f0000004700)=[{{&(0x7f0000000300)=@x25={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x0}}, 0x80, &(0x7f0000000bc0)=[{&(0x7f0000000380)="0f6e7ba71771b369e9ddf8faa4d0eaf0c2fcf9796ba5a4a6a8a0a7534cf797eba833fc05d81c6ecebe7855cc84ddb15b791b60bd4e8c68ac16217dd9afcc3fa05139851b9abcbd9e3b7b021239f69f4d69c521a779b91adbf9eb5c2ed1aa737df6c5cb3ba8def2b46d4230bfc2c4e58ead6860dcd4e23a6201d02b3099ee4cc64a8b039e8cd9f541c0bac81c744e6d25a98fbfb245b11f2e57d90795841b2b80e46a1fd821fa346cfdec12026912e1b0af04a866", 0xb4}, {&(0x7f0000000440)="a816fb64ff119937173b8e0c586b042a146259f3bc3b0aa144be1075fbf9bb3902c477d2344cedb7c71d0c60733f796301773f2ceed99c8f4fd7fd6ce43b944965d8f09839e7ce37ffa30017e6bb6e2e27ce72ca0de92d20a113f28661167c4344cd19042b073b6b3548aa1e207ef7d5231af1dc9cebff15c263697f1974f004ff9453560d6d0e420c2c9defefa6884523f2ff4b0da6af31510c46656f4aba0a713e143e03105cd4e212294d68b0e7", 0xaf}, {&(0x7f0000000500)="c315a3834509db568526cf8a2b6504334efd44635eb2ab1b4a1bdfcf5dff01b5033aecfed5ef603a55eae6f82e8005f7d6c749a81f3451c5d8e854ee2489b6056d0d163488382c5b22ff76a0a1f62783b0c2230cbbae07749071e6d4032e24ac2dfa91fa1b196ffa36c7286d6be161b02f63585577f187b9b1265efa2bbbea53f58fe1cbc7bad4df43451250f0e877985dd68d3cfb3669b8f5da00f8b539b81317577a59ec3063e1f9c9b961b8a35335b7271fa3565600b52b4b31c9a5866d384c0550df4c573e0f2249e5e56aa5ae6a728ea333e34f52d81b90934d283a8d5fbad464bf56e6488b15883e092a", 0xed}], 0x3, &(0x7f0000000c00)=[{0xe8, 0x298, 0x0, "9517619a1a31b10e538bffebf9f9247c881b822114ba2cc67b076a6c370a162232dce9b93e754199bf7184a2b6ccbb81fae8013f476d9d17e680620e08ff82a1629cdfc0a7062ff2275ea7559255636ab46f85e8f14a5c6fd56c46c80e6630f5d85e948047e263fbfdd5530162aca11b784bd7a7c39d9a1779646b10195a12c35b8b14fcf6479e3eff1b670d855de563ab5f3fa01dace66e615cfa30a75d50b47816681390046bf1ed5134bd8bcd05ad29746229459a14102a2644ec02a74ae50b81523d9613754b6f95885f486b1cee97606740"}, {0x108, 0x111, 0xde79, "568a49a3fc43ad37511a499e5c1dc5f7c8773347e903f92443f10d5362161f40319541fe2b21afe278a88bb1320261b0dc951b8e6cffeff0f88d77d39689916421e6c9b66baef3b15afc156d408399eb908287ff2fbc3ead270bd0c0fdf95e142a7fc7644e3049ff3cec46b7061f25c9825db418f6e9d2ba9788b268f9d3e49b9d65a68bb53ba3c80f1b332fc55c6970a71cb9e5e3cd818168a478e3c1f3f7db14627200ce529099cf5f80d171bf9d3523a3c13d76bb0803ace09626ce6cfa4f252076df4730fd5fcc0a7eae0a11832cffffa1b815be9f9fed7d351081cada1acd54c53788206fa8edfb4075ec4d19f86af3b891"}, {0x10, 0x11}], 0x200}}, {{&(0x7f0000001f00)=@isdn={0x22, 0x40, 0x30, 0x7d, 0x2}, 0x80, &(0x7f0000002300)=[{&(0x7f0000001f80)="14cc73e3ec9f177d2422891926c7024dd49623ef2f3e0f3d1ded599123a96fde1f3be7c85b5567ab5bc46734660ca7ee8f9fe22157335ea085b72eb0cc294ce1c8abd3591977af94ca47807a5fd7e898a83737bdceed5e4bc05d7312cab8a48e36daf3f8634bfdfdd796249fd2e48f06d83b76377998ad", 0x77}, {&(0x7f0000002000)="62bba9f5a53864919db13fb552ba1dfe2f037ff034e29da422d4ceabdef519477f34d3fc29ac676e49d9431e008c0791cc303230ce7877b3fb39c486b692e2551ec9e726c6c615f9636b2dde10eb0af519eddc8e5a78d9f1d3d44fe73746c83bb769831c742d0133d2b01a5bbdf9748272365920019c7a54dd36547e7c19df8c2fae669039", 0x85}, {&(0x7f00000020c0)="cfa001629d4ebc1b3c70da5946c3ee185592f401a39dc042f543d249f2aa32dbb431816a4f4a299c771d2797d413c1ade2543e53fd10f6f9047cc92bcddd8c2954d8abc63ea0df4e706dd826ec13f42035aca6b5b95f69a2", 0x58}, {&(0x7f0000002140)="22c112903b31493138383bb8a5ed75e3ef183c05ddc02eed6e871196fa84d01a9acf82742b09b49d4971b5ee07f2ef4b018642d5b2180e02d3ff5b345aca713baffcb0c634b9ab04ea762e549025423eed171dac8255036e3a79dc200de49b394c86e8b028f0381d47bc9d4c49df2d2d2cb0dceb6c48ba993146c1453eb8f87677f3a0688f8336b36f661a3e959984a716f2a7560b9b7605f291666e74", 0x9d}, {&(0x7f0000002200)="081f1a733248218656135c6ad4e4e38d15e0e0fcd5466802bd8b8a40cc576e0f659df6e2b19f10567f6f8407c31064b79cf24220610944beaf4bc9c60030147fc3f9a2b8098c9a735303074a34f8b9c486a7ff93b9b58f50cacf6760611cf797503bb887d70dd4c423dadce983c98e45ebf657357f6b70596e55259449c996e4c20e5423cd38169699c94b78cb619077082a6e6595833c123ece29e39ed31b3b2dc931162fcb90be979e46dbafbaa25ad45734e78302a70950aad4a2665bdee7cc23f211a5e6a0016b121000bfdfc92a3f24c15ee7a288e5e64f9623af048823d264156e881d876fecec63bf744138e9aa", 0xf1}], 0x5, &(0x7f0000002380)=[{0x1010, 0x84, 0x1, "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"}], 0x1010}}, {{&(0x7f00000033c0)=@alg={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_hmac_sha512\x00'}, 0x80, &(0x7f0000004680)=[{0x0}, {&(0x7f0000004480)}, {&(0x7f00000044c0)="b185e9d781faa407fa5f698643ca36946a0077abd88802c67291f9e5942883abc3e39d2b", 0x24}, {&(0x7f0000004500)="a83512", 0x3}, {&(0x7f0000004540)="a6ad88c86d2b675f53201f554115ac96942f95a32d5c7ca7523318d2a30e3b4e53fe6a15d53cae4aebf47d4831ecd6ba8c5311206467b88436af645f8fb5e9eb01b357a2d3ca47468879337e569057ee582f1ba9b10f4791b7ec96ef56aef16ad89fd8c8b7c4a46692f69cbf99473738fc940c6162c76387a3b4c92962063cfb3e516448daa30240ce755f2b56f705dd782d9fee8cb2a1448da88e7083824a02f90d97", 0xa3}, {&(0x7f0000004600)="9c2734dedbba6e084827a88e349ba2010c30a0b746c3cfad28f986c64cfd1a8e722e1c1b4cd2e127f8b8918060bb4b50", 0x30}, {&(0x7f0000004640)="aaf88247f0f70cca9901572a", 0xc}], 0x7}}], 0x3, 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000000)=@newtaction={0x68, 0x30, 0xb, 0x0, 0x0, {}, [{0x54, 0x1, [@m_skbedit={0x50, 0x1, 0x0, 0x0, {{0xc}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_MARK={0x8, 0x3}, @TCA_SKBEDIT_PARMS={0x18}]}, {0x4}, {0xc, 0xa}, {0xc, 0x9, {0xf5}}}}]}]}, 0x68}}, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f00000007c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x378, 0x1d8, 0x12, 0x60d, 0x1d8, 0x202, 0x2a8, 0x2e8, 0x2e8, 0x2a8, 0x2c0, 0x4, 0x0, {[{{@ipv6={@local, @mcast1, [], [], 'veth0_to_team\x00', 'macsec0\x00'}, 0x0, 0x190, 0x1d8, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'kmp\x00', "000000165a8c2e0617ae5119b5135c2aee68d23a465cd431e1ecef50c3234e082555f672225d6147864fa03182f5cf11d8c348cbd06dc8de1dcbde7d4e252c3394fed47bf78c70f607b0178fa5ea335019ac05a602061c96baebc989f1f34a214e6726401fe4b124e0f7323a587d2a1fcf07000000eca0a7b66c60c527bac2b5", 0x2, 0x2}}, @inet=@rpfilter={{0x28}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@inet=@SET1={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3d8) 4m45.508667861s ago: executing program 6 (id=571): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000004000000080000000d"], 0x48) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0500000004000000990000000b"], 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000500)={{r0}, &(0x7f00000003c0), &(0x7f0000000400)='%pS \x00'}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000000700000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r1}, 0x10) 4m44.720694578s ago: executing program 6 (id=572): socket$key(0xf, 0x3, 0x2) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x1, 0xc, 0x9}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00'}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x48000) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x1) r2 = dup(r1) ioctl$TIOCL_SETSEL(r2, 0x541c, &(0x7f00000007c0)={0x2, {0x2, 0x101, 0x0, 0x101}}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) request_key(&(0x7f0000000540)='user\x00', &(0x7f0000000580)={'syz', 0x2}, &(0x7f00000005c0)='\x00', 0xffffffffffffffff) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00'}, 0x18) r3 = open(&(0x7f00000000c0)='.\x00', 0x800, 0x50) r4 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x42, 0x0) pwrite64(r4, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) write(r3, &(0x7f0000000800)="c8fcc13ff597da4342e5e66d9556a83522fee52a3de2ad3e9c6b7c95826bc8a77122ba4c61a039529e438d2f3fb2487f54afbe91b2350f4573fddfd9363a13c666e7b779c75900763f6cc974b567dab306791592bfadd7a4617a8b02353c88419d64c924d83729384594e8026d52261a2a56c81c48cefc4adfc14912c4ece54ed4462381e6070bca5d201d238ab10d464817cd8454c23d9aae4deb823c672605ed2c70955ba3f0122eeadc847e664f5fe53df5ccc8cfd54a53cc0a9fea4c7e619cf3a6437ebe6cbd0bbbdc61d52ef4050de363c9d6446705a6da", 0xda) rename(&(0x7f0000000000)='./file1\x00', &(0x7f0000000080)='./file2\x00') getdents(r3, &(0x7f0000001fc0)=""/184, 0xb8) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000540)=ANY=[], 0x50) 4m43.355701677s ago: executing program 6 (id=575): memfd_create(0x0, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000007dc0), 0x0, 0x8000) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$inet6(0x10, 0x3, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000380)='neigh_update\x00', r2}, 0x10) sendto$inet6(r1, &(0x7f00000000c0)="900000001c001f4d154a817393278bff0a80a578020000000104740014000100ac1414bb0542d6401051a2d708f37ac8da1a297e0099c5ac0000c5b068d0bf46d323456536016466fcb78dcaaf6c3efed495a46215be0000760700c0c80cefd28581d158ba86c9d2896c6d3bca2d0000000b0015009e49a6560641263da4de1df32c1739d7fbee9aa241731ae9e0b390", 0x90, 0x0, 0x0, 0x0) 4m42.934646183s ago: executing program 6 (id=577): socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$usbfs(&(0x7f0000000240), 0xe58c, 0x1052c1) socketpair$unix(0x1, 0x5, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x800}, 0x40000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) syz_emit_ethernet(0x32, &(0x7f0000000300)={@broadcast, @random="6487a2bed3d6", @val={@val={0x88a8, 0x4, 0x0, 0xffe}, {0x8100, 0x0, 0x0, 0x3}}, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x40}, @loopback, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @dev={0xac, 0x14, 0x14, 0x3e}}}}}, 0x0) r0 = getpid() sched_setaffinity(0x0, 0xfffffffffffffe13, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000003c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r3, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, r4, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_HWPT_ALLOC$NONE(r3, 0x3b89, &(0x7f0000000180)={0x28, 0x2, r6, r4, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r3, 0x3b85, &(0x7f0000000000)={0x28, 0x4, r4, 0x0, &(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x8}) ioctl$IOMMU_DESTROY$hwpt(r3, 0x3b80, &(0x7f0000000340)={0x8, r7}) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d667363616368652c76657273696f6e"]) setsockopt$SO_BINDTODEVICE_wg(r2, 0x1, 0x19, &(0x7f0000000280)='wg1\x00', 0x4) r8 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_msfilter(r8, 0x0, 0x29, &(0x7f0000000500)=ANY=[@ANYRESOCT=r0, @ANYRESDEC=r5, @ANYRES16, @ANYRESOCT=r3], 0x18) keyctl$setperm(0x5, 0x0, 0x30010001) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000000900010073797a30000000002c000000030a01020000000000000000010000000900010073797a30000000000900030073797a310000000038000000030a01040000000000000000010000010900030073797a32000000000c00024000000000000000010900010073797a3000"], 0xac}, 0x1, 0x0, 0x0, 0x8040}, 0x0) 4m41.220146895s ago: executing program 6 (id=581): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$inet_udp(0x2, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='task_newtask\x00'}, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)={0x4c, 0x2, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0x40}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}]}, 0x4c}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x48, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2, 0x0, 0xffff}, [@IPSET_ATTR_DATA={0x20, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x2}, @IPSET_ATTR_CIDR={0x5, 0x3, 0x2}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x40c0080) 4m25.724081574s ago: executing program 35 (id=581): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$inet_udp(0x2, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='task_newtask\x00'}, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)={0x4c, 0x2, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0x40}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}]}, 0x4c}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x48, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2, 0x0, 0xffff}, [@IPSET_ATTR_DATA={0x20, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x2}, @IPSET_ATTR_CIDR={0x5, 0x3, 0x2}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x40c0080) 49.666919167s ago: executing program 7 (id=1118): bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="19000000"], 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000380)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff0d}, 0x94) r0 = socket$rxrpc(0x21, 0x2, 0xa) connect$rxrpc(r0, &(0x7f0000000000)=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x4e20, 0x200, @dev={0xfe, 0x80, '\x00', 0x26}, 0x1}}, 0x24) sendmsg$inet(r0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_emit_ethernet(0x72, &(0x7f0000000440)=ANY=[@ANYBLOB="0180c2000000aaaaaaaaaabb86dd60004000003c3c01207fdd25ef0000000000000040000000ff0200000000000000000000000000010004000000000000c910"], 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) recvfrom$rxrpc(r0, 0x0, 0x0, 0xe8ce25b3ffff0000, 0x0, 0x0) 43.965185315s ago: executing program 7 (id=1130): socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) openat$smackfs_change_rule(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d) ioctl$sock_netdev_private(r1, 0x8914, &(0x7f0000000000)) r2 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_rose_SIOCADDRT(r2, 0x890b, &(0x7f0000000380)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, 0x6, @null, @bpq0, 0x0, [@bcast, @bcast, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}) socket(0x2b, 0xa, 0x0) connect$rose(0xffffffffffffffff, &(0x7f0000000100)=@full={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x0, [@null, @null, @null, @default, @bcast, @default]}, 0x40) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @empty, 0x3}], 0x1c) 42.39692916s ago: executing program 7 (id=1133): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x10000008, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) getgroups(0x0, 0x0) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$rxrpc(0x21, 0x2, 0xa) bind$rxrpc(r3, &(0x7f0000000180)=@in6={0x21, 0x0, 0x2, 0x1c, {0x2d, 0x0, 0x0, @local}}, 0x42) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r4 = openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r6 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_S_INPUT(r6, 0xc0045627, &(0x7f0000000100)=0x3) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r4, 0xc0845657, &(0x7f0000000040)={0x0, @bt={0x8, 0x4c5, 0x0, 0x2, 0x4, 0x80000001, 0xf, 0x0, 0xbe, 0xe39, 0x0, 0x532, 0x3, 0xb, 0xa, 0x26, {0x2001, 0x3}, 0x0, 0x2}}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r5}, 0x10) r7 = mq_open(0x0, 0x80, 0x96, &(0x7f0000000440)={0x7, 0x76c, 0x54, 0x3}) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001e40)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a50000000060a09040000000000000000020000000900020073797a32000000000900010073797a30000000002400048020000180080001006c6f6700140002800800064000008801080005400000000814000000110001"], 0x78}}, 0x0) mq_timedsend(r7, 0x0, 0x0, 0x0, 0x0) mq_timedreceive(r4, 0x0, 0x0, 0xffff, 0x0) r9 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x34843) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r9, 0xc04064a0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000300)=[0x0, 0x0, 0x0], 0x0, 0x0, 0x0, 0x3}) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000340), r10) sendmsg$ETHTOOL_MSG_COALESCE_SET(r10, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)={0x54, r11, 0x1, 0x70bd2e, 0x0, {}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}, @ETHTOOL_A_COALESCE_USE_CQE_MODE_TX={0x5, 0x18, 0x1}, @ETHTOOL_A_COALESCE_RX_MAX_FRAMES={0x8, 0x3, 0xffd}, @ETHTOOL_A_COALESCE_RX_USECS_IRQ={0x8, 0x4, 0x4}, @ETHTOOL_A_COALESCE_PKT_RATE_LOW={0x8, 0xd, 0x6}, @ETHTOOL_A_COALESCE_RX_USECS_LOW={0x8}]}, 0x54}, 0x1, 0x0, 0x0, 0x104}, 0x20000000) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) 40.753491652s ago: executing program 7 (id=1138): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$kcm(0x10, 0x2, 0x4) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r3}, 0x10) r4 = socket$igmp(0x2, 0x3, 0x2) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f00000000c0)={'batadv_slave_1\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8936, &(0x7f0000000000)={@dev={0xfe, 0x80, '\x00', 0x2c}, 0x78, r5}) r6 = socket(0xa, 0x1, 0x0) r7 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r7, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r7, 0x3ba0, &(0x7f0000000980)={0x48, 0x5, r8, 0x0, 0x0}) ioctl(r6, 0x8916, &(0x7f0000000000)) ioctl(r6, 0x8936, &(0x7f0000000000)) r9 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000000000105804380100000000000109022400010000000009040002010300000009210000000122f80409058103"], 0x0) syz_usb_control_io(r9, 0x0, 0x0) syz_usb_control_io$hid(r9, &(0x7f0000000340)={0x24, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="00220508", @ANYRES16=0x0, @ANYBLOB="1b7dd1ce99475246afab416df1"], 0x0}, 0x0) 35.724307569s ago: executing program 7 (id=1152): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="01000000"], 0x50) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={0x0, r0}, 0x18) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) sendmmsg$inet(r1, &(0x7f0000000a40)=[{{0x0, 0x0, &(0x7f0000000900)=[{&(0x7f00000005c0)="33ca667d", 0x4}, {&(0x7f0000001a80)="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", 0x364}], 0x2}}], 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r1, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) 35.453636619s ago: executing program 7 (id=1155): openat$vim2m(0xffffffffffffff9c, 0x0, 0x2, 0x0) openat$fb0(0xffffffffffffff9c, 0x0, 0x180300, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f000001b700)=""/102392, 0x18ff8) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000700)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a05000000000000000000070000000900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021940000000c0a01030000000000000000070000000900020073797a31000000000900010073797a3000000000680003806400dec6080003400000000258000b80200001800a00010071756f7461000000100002800c0001400000000000000000340001800a00"], 0x118}}, 0x0) 20.160933417s ago: executing program 36 (id=1155): openat$vim2m(0xffffffffffffff9c, 0x0, 0x2, 0x0) openat$fb0(0xffffffffffffff9c, 0x0, 0x180300, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f000001b700)=""/102392, 0x18ff8) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000700)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a05000000000000000000070000000900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021940000000c0a01030000000000000000070000000900020073797a31000000000900010073797a3000000000680003806400dec6080003400000000258000b80200001800a00010071756f7461000000100002800c0001400000000000000000340001800a00"], 0x118}}, 0x0) 14.030611227s ago: executing program 8 (id=1190): openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, 0x0) read$msr(r0, &(0x7f0000000300)=""/102392, 0x18ff8) semop(0x0, 0x0, 0x0) futex(&(0x7f000000cffc)=0x1, 0x800000000006, 0x0, 0x0, 0x0, 0x0) r1 = fspick(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0) r2 = socket(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000000240)=0xe9, 0x4) sendmsg$netlink(r2, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000002180)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="564ede69714dfde509c98767ea35b8b8ae409b90e408b9e21c09207fd75f392e812db35271c221c2cacf6433fc4cad23133e2de128c14019173c06923ba6377b38e06a5570dde3ea32bd0336eaac436706091336708caad255d16d5b847290ae6700c48511ebeb2a28ffeebca71c9d5c23e062a3a725fc2a4868857512933fb9b328c53501415db2de00"], 0x500}], 0x1, 0x0, 0x0, 0x44800}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x33, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYRESHEX], 0x1c}, 0x1, 0x0, 0x0, 0x9c}, 0x4000080) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="190000000400000004000000ff"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000004340)={0x6, 0xc, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000540)={r4, 0x8, 0x25, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff27, 0x0, 0x0}, 0x19) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x8, 0x0, 0x0, 0x0) fcntl$notify(0xffffffffffffffff, 0x402, 0xc) r5 = syz_clone(0x11180b00, &(0x7f00000000c0), 0x0, &(0x7f0000000200), &(0x7f0000000280), &(0x7f0000019300)="558266934b200c326d84ff4eeb10936c439c8d6b2cb43f88ab56cd6b8009c02944785913573b01cb1314a39c0b64bfd64a4ae0a1a1696b2343558fc91a494077260695062ea2dcb083a497dd5a24a2b5d330eeeba79a776d9c3261addc") sched_setaffinity(r5, 0x8, &(0x7f0000019380)=0x8ce3) semop(0x0, 0x0, 0x0) r6 = socket$kcm(0x2d, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r6, 0x89e2, &(0x7f0000000380)) 10.352803713s ago: executing program 0 (id=1196): pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(r1) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="4400000010000100"/20, @ANYRES32, @ANYBLOB="000024000000000024001200140001006272696467655f736c617665800000000c0005"], 0x3}, 0x1, 0x0, 0x0, 0x40900}, 0x0) splice(r0, 0x0, r2, 0x0, 0x10d00, 0xf) 10.138303784s ago: executing program 8 (id=1198): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$kcm(0x10, 0x2, 0x4) close(r3) socket$kcm(0x10, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r4}, 0x10) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) r5 = socket$igmp(0x2, 0x3, 0x2) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f00000000c0)={'batadv_slave_1\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8936, &(0x7f0000000000)={@dev={0xfe, 0x80, '\x00', 0x2c}, 0x78, r6}) r7 = socket(0xa, 0x1, 0x0) r8 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r8, 0x3ba0, &(0x7f0000000980)={0x48, 0x5, 0x0, 0x0, 0x0}) ioctl(r7, 0x8916, &(0x7f0000000000)) r9 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000000000105804380100000000000109022400010000000009040002010300000009210000000122f80409058103"], 0x0) syz_usb_control_io(r9, 0x0, 0x0) syz_usb_control_io$hid(r9, &(0x7f0000000340)={0x24, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="00220508", @ANYRES16=0x0, @ANYBLOB="1b7dd1ce99475246afab416df1"], 0x0}, 0x0) 8.460794232s ago: executing program 0 (id=1201): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000700)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a05000000000000000000070000000900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021940000000c0a01030000000000000000070000000900020073797a31000000000900010073797a3000000000680003806400dec6080003400000000258000b80200001800a00010071756f74"], 0x118}}, 0x0) 8.14548152s ago: executing program 5 (id=1202): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000000000000004b64ffed850000006d000000a5"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000080)='kfree\x00', r0}, 0x18) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000640), 0x2082, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r2 = socket(0x10, 0x803, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x4, 0xc00}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000006c0)=@newtfilter={0x68, 0x2c, 0xd27, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, r4, {0xfff2, 0x4}, {}, {0x5, 0x10}}, [@filter_kind_options=@f_flow={{0x9}, {0x38, 0x2, [@TCA_FLOW_EMATCHES={0x34, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x30, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x14, 0x1, 0x0, 0x0, {{0x6, 0x7, 0x1}, {{0x0, 0x1, 0x0, 0x1}, {0x0, 0x1, 0x1, 0x1}}}}, @TCF_EM_META={0x18, 0x2, 0x0, 0x0, {{0xfffb, 0x4, 0x2}, [@TCA_EM_META_HDR={0xc, 0x1, {{}, {0x5, 0x8}}}]}}]}]}]}}]}, 0x68}, 0x1, 0x0, 0x0, 0x400c021}, 0x20040054) 7.614331963s ago: executing program 3 (id=1203): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080", @ANYBLOB], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r1}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) shmat(0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000) shmat(0x0, &(0x7f0000b16000/0x4000)=nil, 0x3000) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) sendmmsg(0xffffffffffffffff, &(0x7f0000004700)=[{{&(0x7f0000000300)=@x25={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x0}}, 0x80, &(0x7f0000000bc0)=[{&(0x7f0000000380)="0f6e7ba71771b369e9ddf8faa4d0eaf0c2fcf9796ba5a4a6a8a0a7534cf797eba833fc05d81c6ecebe7855cc84ddb15b791b60bd4e8c68ac16217dd9afcc3fa05139851b9abcbd9e3b7b021239f69f4d69c521a779b91adbf9eb5c2ed1aa737df6c5cb3ba8def2b46d4230bfc2c4e58ead6860dcd4e23a6201d02b3099ee4cc64a8b039e8cd9f541c0bac81c744e6d25a98fbfb245b11f2e57d90795841b2b80e46a1fd821fa346cfdec12026912e1b0af04a866", 0xb4}, {&(0x7f0000000440)="a816fb64ff119937173b8e0c586b042a146259f3bc3b0aa144be1075fbf9bb3902c477d2344cedb7c71d0c60733f796301773f2ceed99c8f4fd7fd6ce43b944965d8f09839e7ce37ffa30017e6bb6e2e27ce72ca0de92d20a113f28661167c4344cd19042b073b6b3548aa1e207ef7d5231af1dc9cebff15c263697f1974f004ff9453560d6d0e420c2c9defefa6884523f2ff4b0da6af31510c46656f4aba0a713e143e03105cd4e212294d68b0e7", 0xaf}, {&(0x7f0000000500)="c315a3834509db568526cf8a2b6504334efd44635eb2ab1b4a1bdfcf5dff01b5033aecfed5ef603a55eae6f82e8005f7d6c749a81f3451c5d8e854ee2489b6056d0d163488382c5b22ff76a0a1f62783b0c2230cbbae07749071e6d4032e24ac2dfa91fa1b196ffa36c7286d6be161b02f63585577f187b9b1265efa2bbbea53f58fe1cbc7bad4df43451250f0e877985dd68d3cfb3669b8f5da00f8b539b81317577a59ec3063e1f9c9b961b8a35335b7271fa3565600b52b4b31c9a5866d384c0550df4c573e0f2249e5e56aa5ae6a728ea333e34f52d81b90934d283a8d5fbad464bf56e6488b15883e092a", 0xed}], 0x3, &(0x7f0000000c00)=[{0xe8, 0x298, 0x0, "9517619a1a31b10e538bffebf9f9247c881b822114ba2cc67b076a6c370a162232dce9b93e754199bf7184a2b6ccbb81fae8013f476d9d17e680620e08ff82a1629cdfc0a7062ff2275ea7559255636ab46f85e8f14a5c6fd56c46c80e6630f5d85e948047e263fbfdd5530162aca11b784bd7a7c39d9a1779646b10195a12c35b8b14fcf6479e3eff1b670d855de563ab5f3fa01dace66e615cfa30a75d50b47816681390046bf1ed5134bd8bcd05ad29746229459a14102a2644ec02a74ae50b81523d9613754b6f95885f486b1cee97606740"}, {0x108, 0x111, 0xde79, "568a49a3fc43ad37511a499e5c1dc5f7c8773347e903f92443f10d5362161f40319541fe2b21afe278a88bb1320261b0dc951b8e6cffeff0f88d77d39689916421e6c9b66baef3b15afc156d408399eb908287ff2fbc3ead270bd0c0fdf95e142a7fc7644e3049ff3cec46b7061f25c9825db418f6e9d2ba9788b268f9d3e49b9d65a68bb53ba3c80f1b332fc55c6970a71cb9e5e3cd818168a478e3c1f3f7db14627200ce529099cf5f80d171bf9d3523a3c13d76bb0803ace09626ce6cfa4f252076df4730fd5fcc0a7eae0a11832cffffa1b815be9f9fed7d351081cada1acd54c53788206fa8edfb4075ec4d19f86af3b891"}, {0x10, 0x11}], 0x200}}, {{&(0x7f0000001f00)=@isdn={0x22, 0x40, 0x30, 0x7d, 0x2}, 0x80, &(0x7f0000002300)=[{&(0x7f0000001f80)="14cc73e3ec9f177d2422891926c7024dd49623ef2f3e0f3d1ded599123a96fde1f3be7c85b5567ab5bc46734660ca7ee8f9fe22157335ea085b72eb0cc294ce1c8abd3591977af94ca47807a5fd7e898a83737bdceed5e4bc05d7312cab8a48e36daf3f8634bfdfdd796249fd2e48f06d83b76377998ad", 0x77}, {&(0x7f0000002000)="62bba9f5a53864919db13fb552ba1dfe2f037ff034e29da422d4ceabdef519477f34d3fc29ac676e49d9431e008c0791cc303230ce7877b3fb39c486b692e2551ec9e726c6c615f9636b2dde10eb0af519eddc8e5a78d9f1d3d44fe73746c83bb769831c742d0133d2b01a5bbdf9748272365920019c7a54dd36547e7c19df8c2fae669039", 0x85}, {&(0x7f00000020c0)="cfa001629d4ebc1b3c70da5946c3ee185592f401a39dc042f543d249f2aa32dbb431816a4f4a299c771d2797d413c1ade2543e53fd10f6f9047cc92bcddd8c2954d8abc63ea0df4e706dd826ec13f42035aca6b5b95f69a2", 0x58}, {&(0x7f0000002140)="22c112903b31493138383bb8a5ed75e3ef183c05ddc02eed6e871196fa84d01a9acf82742b09b49d4971b5ee07f2ef4b018642d5b2180e02d3ff5b345aca713baffcb0c634b9ab04ea762e549025423eed171dac8255036e3a79dc200de49b394c86e8b028f0381d47bc9d4c49df2d2d2cb0dceb6c48ba993146c1453eb8f87677f3a0688f8336b36f661a3e959984a716f2a7560b9b7605f291666e74", 0x9d}, {&(0x7f0000002200)="081f1a733248218656135c6ad4e4e38d15e0e0fcd5466802bd8b8a40cc576e0f659df6e2b19f10567f6f8407c31064b79cf24220610944beaf4bc9c60030147fc3f9a2b8098c9a735303074a34f8b9c486a7ff93b9b58f50cacf6760611cf797503bb887d70dd4c423dadce983c98e45ebf657357f6b70596e55259449c996e4c20e5423cd38169699c94b78cb619077082a6e6595833c123ece29e39ed31b3b2dc931162fcb90be979e46dbafbaa25ad45734e78302a70950aad4a2665bdee7cc23f211a5e6a0016b121000bfdfc92a3f24c15ee7a288e5e64f9623af048823d264156e881d876fecec63bf744138e9aa", 0xf1}], 0x5, &(0x7f0000002380)=[{0x1010, 0x84, 0x1, "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"}], 0x1010}}, {{0x0, 0x0, &(0x7f0000004680)=[{0x0}, {&(0x7f0000004480)}, {&(0x7f00000044c0)="b185e9d781faa407fa5f698643ca36946a0077abd88802c67291f9e5942883abc3e39d2b", 0x24}, {&(0x7f0000004500)="a83512", 0x3}, {&(0x7f0000004540)="a6ad88c86d2b675f53201f554115ac96942f95a32d5c7ca7523318d2a30e3b4e53fe6a15d53cae4aebf47d4831ecd6ba8c5311206467b88436af645f8fb5e9eb01b357a2d3ca47468879337e569057ee582f1ba9b10f4791b7ec96ef56aef16ad89fd8c8b7c4a46692f69cbf99473738fc940c6162c76387a3b4c92962063cfb3e516448daa30240ce755f2b56f705dd782d9fee8cb2a1448da88e7083824a02f90d97", 0xa3}, {&(0x7f0000004600)="9c2734dedbba6e084827a88e349ba2010c30a0b746c3cfad28f986c64cfd1a8e722e1c1b4cd2e127f8b8918060bb4b50", 0x30}, {&(0x7f0000004640)="aaf88247f0f70cca9901572a", 0xc}], 0x7}}], 0x3, 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000000)=@newtaction={0x68, 0x30, 0xb, 0x0, 0x0, {}, [{0x54, 0x1, [@m_skbedit={0x50, 0x1, 0x0, 0x0, {{0xc}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_MARK={0x8, 0x3}, @TCA_SKBEDIT_PARMS={0x18}]}, {0x4}, {0xc, 0xa}, {0xc, 0x9, {0xf5}}}}]}]}, 0x68}}, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f00000007c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x378, 0x1d8, 0x12, 0x60d, 0x1d8, 0x202, 0x2a8, 0x2e8, 0x2e8, 0x2a8, 0x2c0, 0x4, 0x0, {[{{@ipv6={@local, @mcast1, [], [], 'veth0_to_team\x00', 'macsec0\x00'}, 0x0, 0x190, 0x1d8, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'kmp\x00', "000000165a8c2e0617ae5119b5135c2aee68d23a465cd431e1ecef50c3234e082555f672225d6147864fa03182f5cf11d8c348cbd06dc8de1dcbde7d4e252c3394fed47bf78c70f607b0178fa5ea335019ac05a602061c96baebc989f1f34a214e6726401fe4b124e0f7323a587d2a1fcf07000000eca0a7b66c60c527bac2b5", 0x2, 0x2}}, @inet=@rpfilter={{0x28}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@inet=@SET1={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3d8) socket$nl_netfilter(0x10, 0x3, 0xc) syz_emit_ethernet(0x19a, &(0x7f0000000680)={@multicast, @empty, @void, {@ipv6={0x86dd, @udp={0x8, 0x6, "4bbf2f", 0x164, 0x11, 0x1, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @dev={0xfe, 0x80, '\x00', 0x3a}, {[@srh={0x2f, 0x4, 0x4, 0x2, 0xba, 0x7b81c9aa4e832279, 0x4d19, [@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private2={0xfc, 0x2, '\x00', 0x1}]}, @hopopts={0x1d, 0xb, '\x00', [@hao={0xc9, 0x10, @ipv4={'\x00', '\xff\xff', @multicast1}}, @ra={0x5, 0x2, 0x6}, @generic={0x0, 0x3d, "d6f75687bf552c148015b28e67381266c18517cbfa98fdcf1f14a30be01ab0b4e0561f5ee318e66f65d191633026330d969b4a57e82226048b307e7348"}, @jumbo={0xc2, 0x4, 0xc}]}, @routing={0x62, 0x2, 0x2, 0x4, 0x0, [@private1]}, @dstopts={0x84, 0xa, '\x00', [@calipso={0x7, 0x20, {0x3, 0x6, 0x1, 0xff, [0xffffffffffffff81, 0x3, 0x4]}}, @jumbo={0xc2, 0x4, 0x370}, @jumbo, @jumbo, @pad1, @calipso={0x7, 0x10, {0x3, 0x2, 0xff, 0x40, [0x0]}}, @enc_lim={0x4, 0x1, 0x2}, @padn={0x1, 0x2, [0x0, 0x0]}]}], {0x4e22, 0x4e21, 0x64, 0x0, @wg=@response={0x2, 0x4, 0x3, "993ce6e674f315e9fe3200b05031180e967bcd1c172538b2ddb16e1496e69660", "da691edc931379a56fae3f66e11f0561", {"c8a17afd35250ee9b454966d28e01317", "8e0a2af37feb4cb3441cd2d9da9ec7c5"}}}}}}}}, 0x0) r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f00000002c0)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r7, 0x5, 0x50, 0x0, &(0x7f0000000000)="ff", 0x0, 0x36, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x50) 7.231375729s ago: executing program 0 (id=1204): syz_genetlink_get_family_id$tipc(&(0x7f0000000080), 0xffffffffffffffff) r0 = socket(0x1e, 0x1, 0x0) syz_io_uring_setup(0x1108, &(0x7f0000000300)={0x0, 0x0, 0x80, 0x1, 0x21e}, 0x0, 0x0) io_uring_setup(0x648, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) socket$inet(0x2, 0x4000000000000001, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0xffffffffffffff1a, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = syz_io_uring_setup(0x126b, &(0x7f00000006c0)={0x0, 0x0, 0x80}, &(0x7f0000000140), &(0x7f0000000780)) io_uring_register$IORING_REGISTER_FILES_UPDATE2(r3, 0x2, &(0x7f0000002d40)={0x0, 0x0, 0x0, 0x0}, 0x20) io_uring_register$IORING_REGISTER_FILES_UPDATE2(r3, 0xe, &(0x7f0000000340)={0x9, 0x0, &(0x7f0000000100)=[{0x0}], &(0x7f0000000300)=[0xfffffffff6eef50c], 0x1}, 0x20) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=@newtaction={0x64, 0x30, 0x9, 0x0, 0x0, {}, [{0x50, 0x1, [@m_mpls={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{}, 0x1}}]}, {0x4, 0x4}, {0xc}, {0xc}}}]}]}, 0x64}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001700)=ANY=[@ANYBLOB="180000002400010300000000000000000100"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) socket$inet6_udp(0xa, 0x2, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r5, &(0x7f0000000040)={0x2, 0x4e20, @multicast1}, 0x10) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000580)='bond0\x00', 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000080)=ANY=[@ANYBLOB="bbbbbbbbbbbb00000000000008004500005c000000000011907800000000e000000100004e2000089078"], 0x0) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r5, &(0x7f00000004c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000480)={&(0x7f0000000380)=ANY=[@ANYBLOB="c400e49e", @ANYRES16, @ANYBLOB="000228bd7000fcdbdf253700000008000300", @ANYRES32=0x0, @ANYBLOB="08005700020000000500180129000000050018010d0000000800220124010000080026006c0900000800a1000400000008002600e41600000800a1000010000008002700010000000800a0008cb700000800270002000000080026006c090000050018013c0000000800570005000000080022014d0100000500190106000000050019010a00000005001801180000000800a0000800000008002201820200000500190104000000"], 0xc4}, 0x1, 0x0, 0x0, 0x4010}, 0x24008811) syz_usb_connect$uac1(0x2, 0xa6, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000106b1d01010000000003010902940003010040000904000000010100000a2401000000020102132406000006000000281ab0ab2c90619b3400000000000000000000092403000000000000092405009917211cfd0924030500000004000724050401"], 0x0) recvmmsg(r4, &(0x7f0000000e40)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000240)=""/89, 0xa8}, {&(0x7f0000003780)=""/4097, 0x1001}, {&(0x7f00000002c0)=""/167, 0xe0}], 0x3}, 0x4}], 0x4000000000000a0, 0x40010000, 0x0) connect$tipc(r0, 0x0, 0x0) 6.754421058s ago: executing program 8 (id=1205): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000004c0)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000082"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) creat(&(0x7f00000000c0)='./file0\x00', 0x48) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018004000800395032303030"], 0x15) r2 = dup(r1) write$P9_RLERRORu(r2, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000800)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb71c000000000000b70400000000000085"], 0x0, 0x101, 0x0, 0x0, 0x41100, 0x59}, 0x94) write$binfmt_elf64(r2, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe93501"], 0x7c8) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) creat(0x0, 0x36) 6.744864209s ago: executing program 5 (id=1206): ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000103000/0x2000)=nil, 0x2000}, 0x2}) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000140)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000007c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) setsockopt$inet6_IPV6_RTHDR(r0, 0x29, 0x39, &(0x7f0000000080)=ANY=[@ANYBLOB="00020201"], 0x18) sendmmsg$inet6(r0, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000240)="fc", 0x1}], 0x1}}], 0x1, 0x4c040) 6.507176917s ago: executing program 3 (id=1207): pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) r1 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="934300004300338b4ab5020000", @ANYRES32, @ANYRES8=r1], 0xfe33) pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f0000000000)="fc0000001d000724ab09254ec100070007ab08001b000000f0ffff002100057e0000000000000e000039000000039815fad151ba0101099cecb94b46fe0000000a00020025", 0xffffff0c) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/crypto\x00', 0x0, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r4, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x14}}, 0x10) connect$inet(r4, &(0x7f0000000480)={0x2, 0x4e23, @multicast2}, 0x10) sendfile(r4, r3, 0x0, 0x20000023893) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000010000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000400000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) dup2(r6, r6) pipe(&(0x7f0000000500)={0xffffffffffffffff}) splice(r7, 0x0, r2, 0x0, 0xffffffffffff8000, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) r8 = socket$nl_rdma(0x10, 0x3, 0x14) r9 = socket$packet(0x11, 0x3, 0x300) r10 = socket$inet6_sctp(0xa, 0x1, 0x84) recvfrom$inet6(r10, &(0x7f0000000280)=""/44, 0x2c, 0x4ebf69d9d480e852, &(0x7f0000000380)={0xa, 0x4e22, 0x1, @mcast1, 0x40}, 0x1c) setsockopt$packet_fanout(r9, 0x107, 0x12, &(0x7f0000000240)={0x2, 0x2000}, 0x4) socket$inet_udp(0x2, 0x2, 0x0) prctl$PR_SET_NAME(0xf, &(0x7f0000000340)='siw\x00') sendmsg$RDMA_NLDEV_CMD_NEWLINK(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)={0x38, 0x1403, 0x1, 0x70bd2c, 0x25dfdbfc, "", [{{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'lo\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x44}, 0x810) 6.272851569s ago: executing program 8 (id=1208): openat$vim2m(0xffffffffffffff9c, 0x0, 0x2, 0x0) openat$fb0(0xffffffffffffff9c, 0x0, 0x180300, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f000001b700)=""/102392, 0x18ff8) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000700)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a05000000000000000000070000000900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021940000000c0a01030000000000000000070000000900020073797a31000000000900010073797a3000000000680003806400dec6080003400000000258000b80200001800a00010071756f7461000000100002800c0001400000000000000000340001800a00"], 0x118}}, 0x0) 5.448384606s ago: executing program 8 (id=1209): openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, 0x0) read$msr(r0, &(0x7f0000000300)=""/102392, 0x18ff8) semop(0x0, 0x0, 0x0) futex(&(0x7f000000cffc)=0x1, 0x800000000006, 0x0, 0x0, 0x0, 0x0) r1 = fspick(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0) r2 = socket(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000000240)=0xe9, 0x4) sendmsg$netlink(r2, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000002180)=ANY=[@ANYBLOB="00050000100002002dbd7000fddbdf258d03da80bad60f19b73c7cd28e0ed84b6f73dc25d08ddf6e47158a2044d1a90b4c78fba00e171bcce73ff1d0b107001ba222d536616d767f0061278c0c9311d77b7734bbc258678a5f6da7a8e7510dcf93bb343356bec81fa38ae07d688a24a340619d63c86d2b3772d443d4cbb22c53dc07cd0d5fac7b1dd6bb8ce46e428d13ac055845387c616ca2c282f00fbbc2e7ba7808f8f96023fd5474e655565394997f0f45712ee07296a4c50363e923285066edf9ff4bfac10df8dfaab53a4ccdad9ec37b9f7c1d211138b3696cdf87a5716bf7578e64a346febbfc66661510610847ea3cdf45632bf531c08cb7f2683120df74544cf1be77cd7d89952d17ea1c9695cfcd76674386bfc31a5f4749a1ff6738c5a00a3652c2b4dafd36827eb3da0f57c282e780d02543e132beedaf5ff354b1742415f4f09b00367ddd1861232f987dfe8bbc9cbdbe67b80c002b000600000000000000ee65163a499b4c71f1a2b19690685a4e12fccfa0eb33e9ce455c482c8ba0956f65ca7b54e53c3e5441be2f6b61b1382bebc4b96797e14fad46c034e520d78b5b5d5e9390b20b1e9a55639702df4beb685d7b8457a5e6fdb6389e5c5cee0173d840728deb1f97c030d07040c3a591163ca48554b3302561b9b830e19a087aafe1e11760f4da9189c471fcfb2a74851f1c99b0c742b3f5347d1a57ee57c4862720bc899d0c132458a8eaaa1c1a9353d3d58c5b6a408d07ef5036df54fae78035f04a2800688bc35ed2f1f8e9bd3d4ec78d1d38ff69a17251332f453b5fcdf75a016fc374aaffcb2970fd5518dd210a29d046188204001b801e827faa04712ba634d9ae8cafd7536161423b0ad67abab9072cd2db6212659a8af770ae024eb6b5854e18dd93a0b112889fb2b553b2be55a2e5bb78f4c30fa663f87429f048da09b468ddcc71e55aee1893c7e671d33e3ee044156b696f8fa8bf18e720131134280ce13028a12dc6b5473f9a4bcc12dd078cfc2431e81e2ae9aade9f87f66a9a361a9c835c8a6bbf9da4ff1b539981bed120f87ee86c7573ed4560c2c23ba6abfac984fb898a8b09dfb1ed73011e58f4e46b2a880038807400b5806d00e00021d1de33ba27bf618f6edcecabcd261d62b65d5df884db1084f5a9e3816219e2eec70147023bbd9e0f28979df7aff6ec02e81b604c5570ac2a05d0b8030c284be9471891270829dfb8e79067b3b8d09852bebd63b3f2658725bd774ecccccc67f78cd1591becfd2b4800000008006900ac141433080026800400ce800000005d01c2800700e9002e7b000004", @ANYRES32=0x0, @ANYBLOB="564ede69714dfde509c98767ea35b8b8ae409b90e408b9e21c09207fd75f392e812db35271c221c2cacf6433fc4cad23133e2de128c14019173c06923ba6377b38e06a5570dde3ea32bd0336eaac436706091336708caad255d16d5b847290ae6700c48511ebeb2a28ffeebca71c9d5c23e062a3a725fc2a4868857512933fb9b328c53501415db2de00"], 0x500}], 0x1, 0x0, 0x0, 0x44800}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x33, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYRESHEX], 0x1c}, 0x1, 0x0, 0x0, 0x9c}, 0x4000080) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="190000000400000004000000ff"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000004340)={0x6, 0xc, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000540)={r4, 0x8, 0x25, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff27, 0x0, 0x0}, 0x19) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x8, 0x0, 0x0, 0x0) fcntl$notify(0xffffffffffffffff, 0x402, 0xc) r5 = syz_clone(0x11180b00, &(0x7f00000000c0), 0x0, &(0x7f0000000200), &(0x7f0000000280), &(0x7f0000019300)="558266934b200c326d84ff4eeb10936c439c8d6b2cb43f88ab56cd6b8009c02944785913573b01cb1314a39c0b64bfd64a4ae0a1a1696b2343558fc91a494077260695062ea2dcb083a497dd5a24a2b5d330eeeba79a776d9c3261addc") sched_setaffinity(r5, 0x8, &(0x7f0000019380)=0x8ce3) semop(0x0, 0x0, 0x0) r6 = socket$kcm(0x2d, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r6, 0x89e2, &(0x7f0000000380)) 4.873238354s ago: executing program 5 (id=1210): bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="19000000"], 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000380)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff0d}, 0x94) r0 = socket$rxrpc(0x21, 0x2, 0xa) connect$rxrpc(r0, &(0x7f0000000000)=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x4e20, 0x200, @dev={0xfe, 0x80, '\x00', 0x26}, 0x1}}, 0x24) sendmsg$inet(r0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_emit_ethernet(0x72, &(0x7f0000000440)=ANY=[@ANYBLOB="0180c2000000aaaaaaaaaabb86dd60004000003c3c01207fdd25ef0000000000000040000000ff0200000000000000000000000000010004000000000000c910"], 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, 0x0, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) recvfrom$rxrpc(r0, 0x0, 0x0, 0xe8ce25b3ffff0000, 0x0, 0x0) 3.528639933s ago: executing program 5 (id=1211): r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$smackfs_change_rule(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) write$binfmt_script(r2, &(0x7f0000000000)={'#! ', './file0', [{0x20, 'axA\x9b^\xfb^$\r\'uij\r\xd9\xef\xd2Et^Q\v\x9fOFL\x95`Z\xae\xc3a\xfe%\x94\x1a\xebt\xc6\x06\x8fD,\xf7\xae#\x80\x80\xdf\xa3\xcaO\xc6\x8a\x91\x90\xadR\aW\xe1\xf3n\xca\xa3\x8f\xd6F\x03\x0e\x9b\xe5yb\xfc\xa19wUs\x83\xf1{&\n\x1d\x8e\x82y\x1a.B\x0e\xea\x17\xc7\xe7H\xa9\xd4\x8e\xe7 gD\x89*\xb5c\xc5\x8a\xe6R\xe5YGq\xf5\xb6\x95\xbc\x112\x9bno\xc8\x06\xb6\b\xcc\x03{Sn\x94G\x01\xb4\xffJQ8t\x99vY\xaaf\xc7,\x9f\xbb\x15G\x1cr\x19\xef\xab\n\xa8\xbc\xbd\xa2E\x16\x1cm\xbd=\x98\x7fU\xcbg\x15%\x95\xb11\x017\x83*\x14\xcbt\xc2\xcb\x04\x1e~?\xb9j\x18\x96\x84EA\xeaB\a\x83\xba\xdco<\x00'/256}]}, 0x10c) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d) ioctl$sock_netdev_private(r3, 0x8914, &(0x7f0000000000)) r4 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_rose_SIOCADDRT(r4, 0x890b, &(0x7f0000000380)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, 0x6, @null, @bpq0, 0x0, [@bcast, @bcast, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}) socket(0x2b, 0xa, 0x0) r5 = syz_init_net_socket$rose(0xb, 0x5, 0x0) connect$rose(r5, &(0x7f0000000040)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x1, @default}, 0x1c) connect$rose(r5, &(0x7f0000000100)=@full={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x0, [@null, @null, @null, @default, @bcast, @default]}, 0x40) socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x13, &(0x7f0000000040)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207baaf8ff00000000bda106000000000047010000f8ffffffb602000008000000b70300000000000085000000050000001801000020696c250000000000202020d31af8ff51000000bda102000000000007010000f8ffffffb702000008000000b703000000000000850000007b00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_route(r0, 0x0, 0x2400c080) r6 = dup(0xffffffffffffffff) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r6, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @empty, 0x3}], 0x1c) 2.531317522s ago: executing program 0 (id=1212): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000700)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a05000000000000000000070000000900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021940000000c0a01030000000000000000070000000900020073797a31000000000900010073797a3000000000680003806400dec6080003400000000258000b80200001800a00010071756f7461000000100002800c0001400000000000000000"], 0x118}}, 0x0) 2.503530114s ago: executing program 3 (id=1213): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000001fc0)=@newtaction={0x354, 0x30, 0x100, 0x71bd23, 0x25dfdbff, {}, [{0x340, 0x1, [@m_csum={0xbc, 0x14, 0x0, 0x0, {{0x9}, {0x90, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x7fff, 0x2, 0x2, 0x1000, 0x8}, 0x52}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x2, 0x3, 0x8, 0x1, 0xa}, 0x33}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x0, 0x80, 0xffffffffffffffff, 0x48fe, 0x2}, 0x11}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x4, 0xfffffffa, 0xffffffffffffffff, 0xd49, 0x100}, 0x78}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x4, 0x3e5, 0x4, 0x3, 0x1}, 0x21}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x3, 0x3}}}}, @m_csum={0x100, 0x1a, 0x0, 0x0, {{0x9}, {0x4}, {0xd1, 0x6, "f0b8bf92cf8611111a0ff27fcc8825ca405600cfd0f6876d2892df6b5723118bb7d9d86de0a2706031cc8c62f7d1baf9b04f3a9ed11665c75023f87c16ce970413ede5e5f6782d0d17be877ac54c09075ed841c7daeddf3395a210eab4335ed3bcb36fe1598dc94259da01363ad59d8dc384cb8fe469869c99849bd0d19e999b2e8f62d563a2dcea91347cdc754302a566d6d8b7de1368972acbf9cfbdc3db5b71ceed91d4e9613e9cbf5e1ca71f3bf3b25cdf1ce11e5843ff89da11b01cf0b27474847e4fd8e648244e0dc6b3"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}, @m_nat={0x180, 0x12, 0x0, 0x0, {{0x8}, {0x144, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x1, 0x40, 0x20000000, 0x6, 0x5}, @broadcast, @multicast1, 0xffffff}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x4, 0x5, 0x8, 0xf, 0x1}, @local, @remote, 0xffffffff, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x0, 0x8, 0xffffffffffffffff, 0x1, 0x1}, @rand_addr=0x64010100, @remote, 0xffffff00, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x3, 0x8, 0x7, 0x8, 0x10}, @private=0xa010100, @rand_addr=0x64010101, 0xffffffff}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x8, 0x9, 0x0, 0x7, 0xffff8942}, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, 0xffffffff, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x9, 0xbe, 0x1, 0x4}, @dev={0xac, 0x14, 0x14, 0x3f}, @private=0xa010100, 0xff}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x8, 0x99, 0x2, 0xc1, 0x3}, @local, @rand_addr=0x64010100, 0xffffffff, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x8, 0x4, 0x1, 0xa25, 0x8}, @dev={0xac, 0x14, 0x14, 0x42}, @empty, 0x0, 0x1}}]}, {0x18, 0x6, "913e81ca3edcb2850253f42b0b789fad1e549457"}, {0xc}, {0xc, 0x8, {0x2, 0x1}}}}]}]}, 0x354}, 0x1, 0x0, 0x0, 0x4004000}, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x64}, {&(0x7f0000000fc0)=""/4096, 0x1000}, {&(0x7f0000000400)=""/106, 0x6a}, {&(0x7f0000000980)=""/73, 0x49}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f00000007c0)=""/154, 0x9a}, {&(0x7f00000001c0)=""/17, 0x11}], 0x7, &(0x7f0000000600)=""/191, 0xbf}}], 0x1, 0x0, &(0x7f0000003700)={0x77359400}) 2.354248008s ago: executing program 5 (id=1214): socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) openat$smackfs_change_rule(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d) ioctl$sock_netdev_private(r1, 0x8914, &(0x7f0000000000)) syz_init_net_socket$rose(0xb, 0x5, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @empty, 0x3}], 0x1c) 2.326023984s ago: executing program 8 (id=1215): openat$vim2m(0xffffffffffffff9c, 0x0, 0x2, 0x0) openat$fb0(0xffffffffffffff9c, 0x0, 0x180300, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f000001b700)=""/102392, 0x18ff8) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000700)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a05000000000000000000070000000900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021940000000c0a01030000000000000000070000000900020073797a31000000000900010073797a3000000000680003806400dec6080003400000000258000b80200001800a00010071756f7461000000100002800c0001400000000000000000340001800a00"], 0x118}}, 0x0) 2.249281884s ago: executing program 0 (id=1216): syz_usb_connect$uac1(0x4, 0x98, &(0x7f0000000200)=ANY=[@ANYBLOB="12011003000000106b1d01014000010203010902860003010140750904000000010100000a24010600080201020904010000010200000904010101010200000b2402010c038f076d15630a24020198010f07347c09240202080001800209240201090108095909050109400206100507250100010700090402000001020000090402010101"], 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x60a80, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x3) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000000180)=""/246) writev(r1, &(0x7f0000000440)=[{&(0x7f0000000280)="c021", 0x1700}], 0x1) 1.354105481s ago: executing program 3 (id=1217): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x10000008, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) getgroups(0x0, 0x0) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$rxrpc(0x21, 0x2, 0xa) bind$rxrpc(r3, &(0x7f0000000180)=@in6={0x21, 0x0, 0x2, 0x1c, {0x2d, 0x0, 0x0, @local}}, 0x42) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r4 = openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r6 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_S_INPUT(r6, 0xc0045627, &(0x7f0000000100)=0x3) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r4, 0xc0845657, &(0x7f0000000040)={0x0, @bt={0x8, 0x4c5, 0x0, 0x2, 0x4, 0x80000001, 0xf, 0x0, 0xbe, 0xe39, 0x0, 0x532, 0x3, 0xb, 0xa, 0x26, {0x2001, 0x3}, 0x0, 0x2}}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r5}, 0x10) r7 = mq_open(0x0, 0x80, 0x96, &(0x7f0000000440)={0x7, 0x76c, 0x54, 0x3}) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001e40)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a50000000060a09040000000000000000020000000900020073797a32000000000900010073797a30000000002400048020000180080001006c6f6700140002800800064000008801080005400000000814000000110001"], 0x78}}, 0x0) mq_timedsend(r7, 0x0, 0x0, 0x0, 0x0) mq_timedreceive(r4, 0x0, 0x0, 0xffff, 0x0) r9 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x34843) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r9, 0xc04064a0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000300)=[0x0, 0x0, 0x0], 0x0, 0x0, 0x0, 0x3}) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000340), r10) sendmsg$ETHTOOL_MSG_COALESCE_SET(r10, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)={0x54, r11, 0x1, 0x70bd2e, 0x0, {}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}, @ETHTOOL_A_COALESCE_USE_CQE_MODE_TX={0x5, 0x18, 0x1}, @ETHTOOL_A_COALESCE_RX_MAX_FRAMES={0x8, 0x3, 0xffd}, @ETHTOOL_A_COALESCE_RX_USECS_IRQ={0x8, 0x4, 0x4}, @ETHTOOL_A_COALESCE_PKT_RATE_LOW={0x8, 0xd, 0x6}, @ETHTOOL_A_COALESCE_RX_USECS_LOW={0x8}]}, 0x54}, 0x1, 0x0, 0x0, 0x104}, 0x20000000) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) 1.226007002s ago: executing program 5 (id=1218): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$kcm(0x10, 0x2, 0x4) close(r3) socket$kcm(0x10, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r4}, 0x10) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) r5 = socket$igmp(0x2, 0x3, 0x2) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f00000000c0)={'batadv_slave_1\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8936, &(0x7f0000000000)={@dev={0xfe, 0x80, '\x00', 0x2c}, 0x78, r6}) r7 = socket(0xa, 0x1, 0x0) r8 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r8, 0x3ba0, &(0x7f0000000980)={0x48, 0x5, 0x0, 0x0, 0x0}) ioctl(r7, 0x8916, &(0x7f0000000000)) ioctl(r7, 0x8936, &(0x7f0000000000)) r9 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000000000105804380100000000000109022400010000000009040002010300000009210000000122f80409058103"], 0x0) syz_usb_control_io$hid(r9, &(0x7f0000000340)={0x24, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="00220508", @ANYRES16=0x0, @ANYBLOB="1b7dd1ce99475246afab416df1"], 0x0}, 0x0) 281.207894ms ago: executing program 3 (id=1219): ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000103000/0x2000)=nil, 0x2000}, 0x2}) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000140)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000007c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) setsockopt$inet6_IPV6_RTHDR(r0, 0x29, 0x39, &(0x7f0000000080)=ANY=[@ANYBLOB="00020201"], 0x18) sendmmsg$inet6(r0, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000240)="fc", 0x1}], 0x1}}], 0x1, 0x4c040) 698.832µs ago: executing program 0 (id=1220): bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="19000000"], 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000380)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff0d}, 0x94) r0 = socket$rxrpc(0x21, 0x2, 0xa) connect$rxrpc(r0, &(0x7f0000000000)=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x4e20, 0x200, @dev={0xfe, 0x80, '\x00', 0x26}, 0x1}}, 0x24) sendmsg$inet(r0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_emit_ethernet(0x72, &(0x7f0000000440)=ANY=[@ANYBLOB="0180c2000000aaaaaaaaaabb86dd60004000003c3c01207fdd25ef0000000000000040000000ff0200000000000000000000000000010004000000000000c910"], 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, 0x0, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) recvfrom$rxrpc(r0, 0x0, 0x0, 0xe8ce25b3ffff0000, 0x0, 0x0) 0s ago: executing program 3 (id=1221): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff}) sendmsg$unix(r0, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="14000000000000000100000001"], 0x18, 0x4000010}, 0x4000010) r1 = syz_open_dev$mouse(&(0x7f0000000180), 0x0, 0x2) io_setup(0x8, &(0x7f0000004200)=0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') io_submit(r2, 0x0, &(0x7f0000004540)) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x7, 0x4, 0x6, 0xfffa}, 0x3d, [0x6, 0xc95a, 0xfffffff3, 0x8, 0x80, 0x2, 0x1, 0x7f, 0x6, 0x4d, 0xfffffff2, 0x5f, 0x0, 0x0, 0xffff2d37, 0x1dd2, 0x6, 0x7, 0x0, 0x80000001, 0x7, 0x7, 0x3, 0x3c5b, 0x1, 0x24, 0xffffffff, 0xfffffffe, 0x1f461e2c, 0x3, 0xe661, 0x4, 0x1000007, 0x3, 0x8001, 0x4c74, 0x8f00, 0x642, 0x3, 0xa, 0x0, 0x71, 0x7, 0x7, 0x103, 0x0, 0x5, 0x3d, 0x8f, 0x6, 0x1, 0x4, 0x5, 0x4, 0x5, 0x0, 0x80, 0x0, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0x10002, 0x12b, 0x8000, 0x10, 0xfffffff3, 0x129432e6, 0x3, 0xf9, 0x6, 0x2bf, 0x3, 0x1ff, 0xfffffffe, 0x3, 0x0, 0x7, 0x10000005, 0x2f, 0xe, 0x313, 0x78, 0xea4, 0xa, 0x4, 0x4, 0x80, 0x5, 0x400, 0x1, 0x7, 0x400000, 0xff, 0x1005, 0x7ff, 0x5f31, 0x4, 0x9, 0x6, 0x1000004, 0x9, 0x4, 0x9, 0x8, 0x9, 0x7, 0x5, 0x0, 0x3, 0x8000, 0xffff, 0x2, 0x7f, 0x9, 0x8, 0x3, 0x4, 0x1, 0x7, 0x6, 0x9, 0x48c93690, 0xfffffffe, 0xff], [0x10000007, 0x1, 0x0, 0x64e, 0xfffffdfe, 0x7fffffff, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x86, 0x3, 0x10000009, 0x3e7, 0xb, 0x5, 0x2, 0x40002, 0xf, 0x8, 0x84, 0x6d01, 0x5, 0x3b, 0x3, 0x200, 0x80, 0x3, 0x4, 0x2, 0x0, 0xa2, 0x6, 0x53cf697b, 0x5, 0x4, 0x54fe12da, 0xbf, 0x5, 0x3, 0x400000, 0xfffffff9, 0x0, 0x1, 0x5, 0x0, 0x6, 0xfffffffb, 0x120000, 0x3, 0x101, 0x9, 0x4, 0x3], [0x9, 0xbb31, 0x3, 0xfffffffc, 0x5, 0x938, 0x6, 0xd36b, 0x51bf, 0x5, 0xce7, 0x1ff, 0x6, 0x7, 0x5, 0x3, 0x104, 0x80000000, 0x6, 0x7fff, 0x8ffff, 0xa620, 0x2, 0x1, 0x1, 0xfffff801, 0x8000014c, 0x60a7, 0x6, 0x2, 0xffffffff, 0x80000003, 0x5, 0x8, 0xff, 0x3, 0x3, 0xffff, 0x3, 0x8, 0x100, 0x9602, 0xa, 0x2, 0x4, 0x6, 0x1, 0x10000, 0x5, 0x8, 0x2b91, 0xa1f, 0x8, 0x9, 0x1, 0x6c0b, 0x0, 0x2, 0x1005, 0xb1c, 0x1, 0x1ff, 0xfff, 0xfff]}, 0x45c) syz_open_dev$evdev(&(0x7f0000000000), 0x3, 0x822b01) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r3, 0xc01064b5, &(0x7f0000000100)={&(0x7f0000000080)}) ioctl$DRM_IOCTL_MODE_GETPLANE(r3, 0xc02064b6, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x9, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x15, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="bdaa000000000000711010000000000095"], &(0x7f0000000480)='syzkaller\x00'}, 0x94) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000300)={&(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000280)=[0x0], &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x4, 0x5, 0x1, 0x6}) ioctl$DRM_IOCTL_MODE_GETPLANE(r1, 0xc02064b6, &(0x7f0000000380)={0x0, r4, r5, 0x0, 0x0, 0x7, &(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581", @ANYBLOB="f7", @ANYRESDEC], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) kernel console output (not intermixed with test programs): ce 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 297.152422][ T5895] usb 8-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 297.162192][ T5895] usb 8-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 297.192685][ T5895] usb 8-1: Product: syz [ 297.207268][ T5895] usb 8-1: Manufacturer: syz [ 297.258119][ T5895] cdc_wdm 8-1:1.0: skipping garbage [ 297.285219][ T5895] cdc_wdm 8-1:1.0: skipping garbage [ 297.311526][ T5895] cdc_wdm 8-1:1.0: cdc-wdm0: USB WDM device [ 297.338200][ T5895] cdc_wdm 8-1:1.0: Unknown control protocol [ 297.553733][ T8195] netlink: 4 bytes leftover after parsing attributes in process `syz.6.524'. [ 297.910497][ T5978] usb 8-1: USB disconnect, device number 5 [ 298.301417][ T5978] usb 1-1: USB disconnect, device number 8 [ 298.322314][ T8200] netlink: 96 bytes leftover after parsing attributes in process `syz.6.525'. [ 298.434822][ T8203] hub 6-0:1.0: USB hub found [ 298.465516][ T8203] hub 6-0:1.0: 1 port detected [ 299.032009][ T30] kauditd_printk_skb: 2 callbacks suppressed [ 299.032029][ T30] audit: type=1326 audit(1753460708.875:246): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8215 comm="syz.7.528" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc00e98e9a9 code=0x7ffc0000 [ 299.141013][ T30] audit: type=1326 audit(1753460708.875:247): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8215 comm="syz.7.528" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc00e98e9a9 code=0x7ffc0000 [ 299.213321][ T30] audit: type=1326 audit(1753460708.915:248): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8215 comm="syz.7.528" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc00e98e9a9 code=0x7ffc0000 [ 299.527490][ T30] audit: type=1326 audit(1753460708.915:249): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8215 comm="syz.7.528" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc00e98e9a9 code=0x7ffc0000 [ 299.765815][ T30] audit: type=1326 audit(1753460708.915:250): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8215 comm="syz.7.528" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc00e98e9a9 code=0x7ffc0000 [ 299.839322][ T30] audit: type=1326 audit(1753460708.925:251): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8215 comm="syz.7.528" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc00e98e9a9 code=0x7ffc0000 [ 300.015692][ T30] audit: type=1326 audit(1753460708.925:252): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8215 comm="syz.7.528" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc00e98e9a9 code=0x7ffc0000 [ 300.055554][ T30] audit: type=1326 audit(1753460708.925:253): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8215 comm="syz.7.528" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc00e98e9a9 code=0x7ffc0000 [ 300.775507][ T30] audit: type=1326 audit(1753460708.925:254): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8215 comm="syz.7.528" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc00e98e9a9 code=0x7ffc0000 [ 300.802759][ T30] audit: type=1326 audit(1753460708.925:255): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8215 comm="syz.7.528" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc00e98e9a9 code=0x7ffc0000 [ 300.984298][ T8234] netlink: 8 bytes leftover after parsing attributes in process `syz.7.533'. [ 302.973314][ T5895] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 303.202256][ T8252] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 303.795195][ T5895] usb 8-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 303.861430][ T5895] usb 8-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 303.910818][ T5895] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 303.955333][ T5895] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 304.038360][ T5895] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 304.102416][ T5895] usb 8-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 304.139069][ T5895] usb 8-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 304.188272][ T5895] usb 8-1: Product: syz [ 304.192663][ T5895] usb 8-1: Manufacturer: syz [ 304.271585][ T5895] cdc_wdm 8-1:1.0: skipping garbage [ 304.291876][ T5895] cdc_wdm 8-1:1.0: skipping garbage [ 304.320343][ T5895] cdc_wdm 8-1:1.0: cdc-wdm0: USB WDM device [ 304.355906][ T5895] cdc_wdm 8-1:1.0: Unknown control protocol [ 305.247536][ T5895] usb 8-1: USB disconnect, device number 6 [ 306.389659][ T5910] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 306.821971][ T5910] usb 7-1: Using ep0 maxpacket: 16 [ 306.861157][ T5910] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 307.012568][ T5910] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 307.182815][ T5910] usb 7-1: config 0 interface 0 has no altsetting 0 [ 307.490400][ T5910] usb 7-1: New USB device found, idVendor=0458, idProduct=0138, bcdDevice= 0.00 [ 307.522918][ T5910] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 307.605003][ T5910] usb 7-1: config 0 descriptor?? [ 307.981094][ T8294] netlink: 8 bytes leftover after parsing attributes in process `syz.0.548'. [ 308.748166][ T5910] kye 0003:0458:0138.0007: unknown main item tag 0x4 [ 308.758479][ T5910] kye 0003:0458:0138.0007: unexpected long global item [ 308.766957][ T5910] kye 0003:0458:0138.0007: parse failed [ 308.772832][ T5910] kye 0003:0458:0138.0007: probe with driver kye failed with error -22 [ 309.925181][ T5910] usb 7-1: USB disconnect, device number 8 [ 310.201912][ T5883] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 310.412720][ T8310] netlink: 4 bytes leftover after parsing attributes in process `syz.6.552'. [ 310.809450][ T8313] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 311.904525][ T8312] netlink: 8 bytes leftover after parsing attributes in process `syz.0.553'. [ 312.049090][ T5895] usb 7-1: new full-speed USB device number 9 using dummy_hcd [ 312.159300][ T5883] usb 8-1: device not accepting address 7, error -71 [ 312.417910][ T5895] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 313.206392][ T5895] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 313.514739][ T5895] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.00 [ 313.569178][ T5895] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 313.668816][ T5895] usb 7-1: can't set config #1, error -71 [ 313.701178][ T5895] usb 7-1: USB disconnect, device number 9 [ 313.874252][ T8341] siw: device registration error -23 [ 313.994987][ T8349] IPVS: set_ctl: invalid protocol: 98 0.0.0.0:20000 [ 314.023732][ T30] kauditd_printk_skb: 35 callbacks suppressed [ 314.023750][ T30] audit: type=1326 audit(1753460723.865:291): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8338 comm="syz.7.558" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc00e98e9a9 code=0x7ffc0000 [ 314.139109][ T30] audit: type=1326 audit(1753460723.895:292): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8338 comm="syz.7.558" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fc00e9908c7 code=0x7ffc0000 [ 314.194641][ T30] audit: type=1326 audit(1753460723.895:293): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8338 comm="syz.7.558" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7fc00e99083c code=0x7ffc0000 [ 314.239192][ T5895] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 314.307749][ T30] audit: type=1326 audit(1753460723.905:294): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8338 comm="syz.7.558" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7fc00e990774 code=0x7ffc0000 [ 314.351152][ T8355] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 314.423808][ T5895] usb 7-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 314.455465][ T30] audit: type=1326 audit(1753460723.905:295): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8338 comm="syz.7.558" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7fc00e990774 code=0x7ffc0000 [ 314.480027][ T5895] usb 7-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 314.509759][ T5895] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 314.525549][ T30] audit: type=1326 audit(1753460723.905:296): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8338 comm="syz.7.558" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7fc00e98d60a code=0x7ffc0000 [ 314.548875][ T5895] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 314.598792][ T5895] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 314.616747][ T8359] netlink: 8 bytes leftover after parsing attributes in process `syz.7.563'. [ 314.756653][ T30] audit: type=1326 audit(1753460723.905:297): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8338 comm="syz.7.558" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc00e98e9a9 code=0x7ffc0000 [ 314.807972][ T5895] usb 7-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 314.910647][ T5895] usb 7-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 315.016900][ T5895] usb 7-1: Product: syz [ 315.048895][ T30] audit: type=1326 audit(1753460723.905:298): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8338 comm="syz.7.558" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc00e98e9a9 code=0x7ffc0000 [ 315.081892][ T5895] usb 7-1: Manufacturer: syz [ 315.374409][ T5895] cdc_wdm 7-1:1.0: skipping garbage [ 315.397697][ T30] audit: type=1326 audit(1753460723.925:299): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8338 comm="syz.7.558" exe="/root/syz-executor" sig=0 arch=c000003e syscall=239 compat=0 ip=0x7fc00e98e9a9 code=0x7ffc0000 [ 315.436339][ T5895] cdc_wdm 7-1:1.0: skipping garbage [ 315.491713][ T5895] cdc_wdm 7-1:1.0: cdc-wdm0: USB WDM device [ 315.511156][ T5895] cdc_wdm 7-1:1.0: Unknown control protocol [ 315.545297][ T30] audit: type=1326 audit(1753460723.925:300): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8338 comm="syz.7.558" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc00e98e9a9 code=0x7ffc0000 [ 315.593168][ T5895] usb 7-1: USB disconnect, device number 10 [ 316.040222][ T8369] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 317.639159][ T5910] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 317.829738][ T5910] usb 6-1: Using ep0 maxpacket: 16 [ 317.883190][ T5910] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 318.448287][ T8393] netlink: 4 bytes leftover after parsing attributes in process `syz.3.569'. [ 318.969789][ T5910] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 319.369956][ T5910] usb 6-1: config 0 interface 0 has no altsetting 0 [ 319.376914][ T5910] usb 6-1: New USB device found, idVendor=0458, idProduct=0138, bcdDevice= 0.00 [ 319.386437][ T5910] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 319.486517][ T5910] usb 6-1: config 0 descriptor?? [ 319.709832][ T5895] usb 4-1: new full-speed USB device number 11 using dummy_hcd [ 319.731323][ T8401] IPVS: set_ctl: invalid protocol: 98 0.0.0.0:20000 [ 319.781100][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 319.781120][ T30] audit: type=1326 audit(1753460729.625:302): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8395 comm="syz.0.570" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc6da58e9a9 code=0x7ffc0000 [ 319.849721][ T30] audit: type=1326 audit(1753460729.625:303): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8395 comm="syz.0.570" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc6da58e9a9 code=0x7ffc0000 [ 319.911796][ T5895] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 319.925626][ T5895] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 319.936776][ T30] audit: type=1326 audit(1753460729.625:304): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8395 comm="syz.0.570" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fc6da5908c7 code=0x7ffc0000 [ 319.960678][ T30] audit: type=1326 audit(1753460729.625:305): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8395 comm="syz.0.570" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7fc6da59083c code=0x7ffc0000 [ 319.961385][ T5895] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.00 [ 319.961416][ T5895] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 319.961440][ T5895] usb 4-1: SerialNumber: syz [ 319.972380][ T5895] usb 4-1: 0:2 : does not exist [ 320.024868][ T30] audit: type=1326 audit(1753460729.625:306): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8395 comm="syz.0.570" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7fc6da590774 code=0x7ffc0000 [ 320.047747][ T30] audit: type=1326 audit(1753460729.625:307): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8395 comm="syz.0.570" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7fc6da590774 code=0x7ffc0000 [ 320.121298][ T30] audit: type=1326 audit(1753460729.625:308): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8395 comm="syz.0.570" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7fc6da58d60a code=0x7ffc0000 [ 320.211489][ T30] audit: type=1326 audit(1753460729.625:309): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8395 comm="syz.0.570" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc6da58e9a9 code=0x7ffc0000 [ 320.270138][ T5895] usb 4-1: USB disconnect, device number 11 [ 320.317802][ T30] audit: type=1326 audit(1753460729.625:310): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8395 comm="syz.0.570" exe="/root/syz-executor" sig=0 arch=c000003e syscall=239 compat=0 ip=0x7fc6da58e9a9 code=0x7ffc0000 [ 320.407134][ T30] audit: type=1326 audit(1753460729.625:311): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8395 comm="syz.0.570" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc6da58e9a9 code=0x7ffc0000 [ 321.073061][ T5910] usbhid 6-1:0.0: can't add hid device: -71 [ 321.089285][ T5910] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 321.117943][ T5910] usb 6-1: USB disconnect, device number 11 [ 321.450534][ T8426] netlink: 96 bytes leftover after parsing attributes in process `syz.6.575'. [ 322.509105][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 322.515853][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 322.674016][ T8437] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 323.489533][ T8448] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 323.861444][ T8460] bpq0: entered allmulticast mode [ 323.916935][ T8460] netlink: 8 bytes leftover after parsing attributes in process `syz.5.584'. [ 325.374337][ T8470] netlink: 4 bytes leftover after parsing attributes in process `syz.7.586'. [ 325.697995][ T5978] usb 8-1: new full-speed USB device number 9 using dummy_hcd [ 326.098731][ T5978] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 326.130139][ T5978] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 326.902908][ T5978] usb 8-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.00 [ 326.919188][ T5978] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 326.927264][ T5978] usb 8-1: SerialNumber: syz [ 326.994630][ T5978] usb 8-1: 0:2 : does not exist [ 327.210067][ T3089] usb 8-1: USB disconnect, device number 9 [ 327.595215][ T8499] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 328.484639][ T8510] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 329.409659][ T8520] netlink: 8 bytes leftover after parsing attributes in process `syz.7.595'. [ 329.992262][ T8523] IPVS: set_ctl: invalid protocol: 98 0.0.0.0:20000 [ 330.299013][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 330.299035][ T30] audit: type=1326 audit(1753460740.125:313): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8519 comm="syz.3.596" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f471c98e9a9 code=0x7ffc0000 [ 330.639712][ T30] audit: type=1326 audit(1753460740.215:314): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8519 comm="syz.3.596" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f471c9908c7 code=0x7ffc0000 [ 330.663454][ T30] audit: type=1326 audit(1753460740.215:315): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8519 comm="syz.3.596" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7f471c99083c code=0x7ffc0000 [ 330.685295][ T30] audit: type=1326 audit(1753460740.215:316): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8519 comm="syz.3.596" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7f471c990774 code=0x7ffc0000 [ 330.801446][ T30] audit: type=1326 audit(1753460740.215:317): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8519 comm="syz.3.596" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7f471c990774 code=0x7ffc0000 [ 331.407717][ T30] audit: type=1326 audit(1753460740.215:318): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8519 comm="syz.3.596" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f471c98d60a code=0x7ffc0000 [ 331.458401][ T30] audit: type=1326 audit(1753460740.215:319): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8519 comm="syz.3.596" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f471c98e9a9 code=0x7ffc0000 [ 331.481505][ T30] audit: type=1326 audit(1753460740.215:320): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8519 comm="syz.3.596" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f471c98e9a9 code=0x7ffc0000 [ 331.547673][ T30] audit: type=1326 audit(1753460740.225:321): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8519 comm="syz.3.596" exe="/root/syz-executor" sig=0 arch=c000003e syscall=239 compat=0 ip=0x7f471c98e9a9 code=0x7ffc0000 [ 331.639050][ T30] audit: type=1326 audit(1753460740.225:322): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8519 comm="syz.3.596" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f471c98e9a9 code=0x7ffc0000 [ 332.180487][ T8553] netlink: 4 bytes leftover after parsing attributes in process `syz.7.602'. [ 332.798478][ T5946] usb 8-1: new full-speed USB device number 10 using dummy_hcd [ 333.225787][ T5946] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 333.315928][ T8561] hub 6-0:1.0: USB hub found [ 333.322941][ T8561] hub 6-0:1.0: 1 port detected [ 334.019033][ T5946] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 334.048791][ T5946] usb 8-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.00 [ 334.058205][ T5946] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 334.096449][ T5946] usb 8-1: SerialNumber: syz [ 334.117383][ T5946] usb 8-1: 0:2 : does not exist [ 334.289587][ T8571] IPVS: set_ctl: invalid protocol: 98 0.0.0.0:20000 [ 334.353167][ T3089] usb 8-1: USB disconnect, device number 10 [ 334.564504][ T8577] netlink: 44 bytes leftover after parsing attributes in process `syz.3.607'. [ 334.579290][ T8577] netlink: 8 bytes leftover after parsing attributes in process `syz.3.607'. [ 335.156536][ T8590] netlink: 96 bytes leftover after parsing attributes in process `syz.7.611'. [ 337.983865][ T8627] hub 6-0:1.0: USB hub found [ 337.991885][ T8627] hub 6-0:1.0: 1 port detected [ 338.755118][ T8633] futex_wake_op: syz.5.620 tries to shift op by -1; fix this program [ 338.976673][ T8639] netlink: 8 bytes leftover after parsing attributes in process `syz.7.622'. [ 340.053916][ T8641] netlink: 8 bytes leftover after parsing attributes in process `syz.0.623'. [ 340.212847][ T8653] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 340.271235][ T8653] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 340.530491][ T8653] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 340.538003][ T8653] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 341.554878][ T8445] Set syz1 is full, maxelem 65536 reached [ 341.811939][ T5851] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 341.824861][ T5851] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 341.909467][ T8678] hub 6-0:1.0: USB hub found [ 341.917080][ T8678] hub 6-0:1.0: 1 port detected [ 341.993079][ T5851] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 342.007005][ T5851] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 342.061404][ T5851] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 342.541121][ T8676] lo speed is unknown, defaulting to 1000 [ 344.231779][ T8694] netlink: 96 bytes leftover after parsing attributes in process `syz.7.637'. [ 344.240497][ T5851] Bluetooth: hci1: command tx timeout [ 344.565587][ T8676] chnl_net:caif_netlink_parms(): no params data found [ 344.973905][ T8713] process 'syz.0.638' launched '/dev/fd/6' with NULL argv: empty string added [ 346.388741][ T5851] Bluetooth: hci1: command tx timeout [ 347.470542][ T8732] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 348.524677][ T5851] Bluetooth: hci1: command tx timeout [ 349.020406][ T8755] netlink: 96 bytes leftover after parsing attributes in process `syz.5.650'. [ 349.351717][ T8676] bridge0: port 1(bridge_slave_0) entered blocking state [ 349.394634][ T8676] bridge0: port 1(bridge_slave_0) entered disabled state [ 349.424403][ T8676] bridge_slave_0: entered allmulticast mode [ 349.452941][ T8676] bridge_slave_0: entered promiscuous mode [ 349.568888][ T8759] netlink: 8 bytes leftover after parsing attributes in process `syz.7.651'. [ 349.594500][ T8676] bridge0: port 2(bridge_slave_1) entered blocking state [ 349.618252][ T8676] bridge0: port 2(bridge_slave_1) entered disabled state [ 349.635764][ T8676] bridge_slave_1: entered allmulticast mode [ 349.654497][ T8676] bridge_slave_1: entered promiscuous mode [ 350.214567][ T36] netdevsim netdevsim6 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 350.559950][ T5851] Bluetooth: hci1: command tx timeout [ 350.855019][ T8781] netlink: 15743 bytes leftover after parsing attributes in process `syz.7.655'. [ 351.390238][ T8801] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 352.032479][ T36] netdevsim netdevsim6 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 352.058793][ T8791] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 352.234324][ T8676] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 352.289256][ T8676] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 352.731572][ T8791] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 353.342366][ T36] netdevsim netdevsim6 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 353.910695][ T8676] team0: Port device team_slave_0 added [ 353.986934][ T8676] team0: Port device team_slave_1 added [ 354.106659][ T8791] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 354.352119][ T36] netdevsim netdevsim6 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 355.334151][ T8791] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 355.436273][ T8676] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 355.460936][ T8676] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 355.517219][ T8676] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 355.612178][ T8676] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 355.628998][ T8676] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 355.674675][ T8676] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 356.093998][ T8855] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 356.683208][ T8833] netlink: 'syz.5.668': attribute type 2 has an invalid length. [ 356.701332][ T8833] netlink: 'syz.5.668': attribute type 1 has an invalid length. [ 356.710304][ T8841] lo speed is unknown, defaulting to 1000 [ 356.754808][ T8791] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 356.803069][ T8791] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 356.944255][ T8791] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 356.997606][ T36] bridge_slave_1: left allmulticast mode [ 357.012000][ T36] bridge_slave_1: left promiscuous mode [ 357.027314][ T36] bridge0: port 2(bridge_slave_1) entered disabled state [ 357.046593][ T36] bridge_slave_0: left allmulticast mode [ 357.053703][ T36] bridge_slave_0: left promiscuous mode [ 357.060078][ T36] bridge0: port 1(bridge_slave_0) entered disabled state [ 357.700479][ T36] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 357.713391][ T36] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 357.726384][ T36] bond0 (unregistering): Released all slaves [ 357.804739][ T8862] netdevsim netdevsim7 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 357.838561][ T8791] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 358.900974][ T8862] netdevsim netdevsim7 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 359.027861][ T8676] hsr_slave_0: entered promiscuous mode [ 359.047165][ T8676] hsr_slave_1: entered promiscuous mode [ 359.067113][ T8676] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 359.083507][ T8676] Cannot create hsr debugfs directory [ 359.597311][ T8862] netdevsim netdevsim7 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 359.803267][ T8862] netdevsim netdevsim7 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 360.115293][ T36] hsr_slave_0: left promiscuous mode [ 360.155551][ T36] hsr_slave_1: left promiscuous mode [ 360.429676][ T36] veth1_macvtap: left promiscuous mode [ 360.435311][ T36] veth0_macvtap: left promiscuous mode [ 360.548283][ T36] veth1_vlan: left promiscuous mode [ 360.563453][ T36] veth0_vlan: left promiscuous mode [ 361.381571][ T5928] usb 6-1: new full-speed USB device number 12 using dummy_hcd [ 361.405038][ T5931] usb 1-1: new full-speed USB device number 9 using dummy_hcd [ 361.545187][ T5928] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 361.556747][ T5928] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 361.561452][ T5931] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 361.576570][ T5931] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 361.591033][ T5931] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.00 [ 361.596130][ T5928] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.00 [ 361.603594][ T5931] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 361.618759][ T5928] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 361.620410][ T5931] usb 1-1: SerialNumber: syz [ 361.634617][ T5928] usb 6-1: SerialNumber: syz [ 361.653474][ T5931] usb 1-1: 0:2 : does not exist [ 361.689601][ T5928] usb 6-1: 0:2 : does not exist [ 361.751812][ T36] team0 (unregistering): Port device team_slave_1 removed [ 361.811979][ T36] team0 (unregistering): Port device team_slave_0 removed [ 362.243120][ T8920] netlink: 4 bytes leftover after parsing attributes in process `syz.0.681'. [ 362.253985][ T8922] netlink: 4 bytes leftover after parsing attributes in process `syz.5.682'. [ 362.282741][ T5928] usb 1-1: USB disconnect, device number 9 [ 362.346945][ T8862] netdevsim netdevsim7 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 362.366861][ T5931] usb 6-1: USB disconnect, device number 12 [ 362.518108][ T8862] netdevsim netdevsim7 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 362.594027][ T8862] netdevsim netdevsim7 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 362.648635][ T8862] netdevsim netdevsim7 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 363.073522][ T8940] netlink: 36 bytes leftover after parsing attributes in process `syz.7.684'. [ 363.086251][ T8940] netlink: 36 bytes leftover after parsing attributes in process `syz.7.684'. [ 363.102380][ T8940] netlink: 36 bytes leftover after parsing attributes in process `syz.7.684'. [ 363.611905][ T8946] netlink: 15743 bytes leftover after parsing attributes in process `syz.5.686'. [ 364.179339][ T8949] bpq0: left allmulticast mode [ 365.477375][ T8676] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 365.505131][ T8945] netlink: 8 bytes leftover after parsing attributes in process `syz.3.685'. [ 365.546991][ T8676] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 365.613018][ T8676] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 365.769088][ T8676] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 366.609132][ T10] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 366.636575][ T5931] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 366.831535][ T5931] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 366.908439][ T5931] usb 6-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 366.915235][ T10] usb 4-1: Using ep0 maxpacket: 16 [ 366.940110][ T10] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 366.959045][ T10] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 366.979810][ T10] usb 4-1: config 0 interface 0 has no altsetting 0 [ 366.986526][ T10] usb 4-1: New USB device found, idVendor=0458, idProduct=0138, bcdDevice= 0.00 [ 367.040517][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 367.259444][ T10] usb 4-1: config 0 descriptor?? [ 367.326140][ T8994] netlink: 8 bytes leftover after parsing attributes in process `syz.0.693'. [ 367.734573][ T5931] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 367.973050][ T10] kye 0003:0458:0138.0008: unknown main item tag 0x4 [ 367.984929][ T5931] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 367.989155][ T10] kye 0003:0458:0138.0008: unexpected long global item [ 368.021336][ T10] kye 0003:0458:0138.0008: parse failed [ 368.025324][ T8676] 8021q: adding VLAN 0 to HW filter on device bond0 [ 368.036840][ T5931] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 368.046466][ T10] kye 0003:0458:0138.0008: probe with driver kye failed with error -22 [ 368.089118][ T10] usb 4-1: USB disconnect, device number 12 [ 368.116901][ T8992] bpq0: entered allmulticast mode [ 368.134174][ T5931] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 368.186921][ T5931] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 368.203872][ T5931] usb 6-1: Product: syz [ 368.220215][ T5931] usb 6-1: Manufacturer: syz [ 368.243808][ T8676] 8021q: adding VLAN 0 to HW filter on device team0 [ 368.277780][ T5931] cdc_wdm 6-1:1.0: skipping garbage [ 368.295690][ T5931] cdc_wdm 6-1:1.0: skipping garbage [ 368.306987][ T61] bridge0: port 1(bridge_slave_0) entered blocking state [ 368.314239][ T61] bridge0: port 1(bridge_slave_0) entered forwarding state [ 368.339915][ T5931] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device [ 368.345915][ T5931] cdc_wdm 6-1:1.0: Unknown control protocol [ 368.360845][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 368.368148][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 368.631206][ T10] usb 6-1: USB disconnect, device number 13 [ 369.115310][ T9007] netlink: 4 bytes leftover after parsing attributes in process `syz.7.696'. [ 369.330874][ T5928] usb 8-1: new full-speed USB device number 11 using dummy_hcd [ 369.521505][ T5928] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 369.559537][ T5928] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 369.592513][ T5928] usb 8-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.00 [ 369.611322][ T5928] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 369.645166][ T5928] usb 8-1: SerialNumber: syz [ 369.701120][ T5928] usb 8-1: 0:2 : does not exist [ 369.717561][ T8676] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 369.882020][ T5946] usb 8-1: USB disconnect, device number 11 [ 369.944204][ T6202] udevd[6202]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 370.330974][ T9012] netlink: 'syz.3.697': attribute type 2 has an invalid length. [ 370.339256][ T9012] netlink: 'syz.3.697': attribute type 1 has an invalid length. [ 371.522589][ T9055] netlink: 4 bytes leftover after parsing attributes in process `syz.5.701'. [ 371.848631][ T9061] netlink: 36 bytes leftover after parsing attributes in process `syz.0.703'. [ 371.859141][ T9061] netlink: 36 bytes leftover after parsing attributes in process `syz.0.703'. [ 371.871586][ T9061] netlink: 36 bytes leftover after parsing attributes in process `syz.0.703'. [ 372.291863][ T8676] veth0_vlan: entered promiscuous mode [ 372.381778][ T8676] veth1_vlan: entered promiscuous mode [ 372.730092][ T8676] veth0_macvtap: entered promiscuous mode [ 373.059584][ T8676] veth1_macvtap: entered promiscuous mode [ 373.341196][ T9071] syz.3.706: attempt to access beyond end of device [ 373.341196][ T9071] nbd3: rw=0, sector=0, nr_sectors = 1 limit=0 [ 373.359287][ T9071] (syz.3.706,9071,0):ocfs2_get_sector:1714 ERROR: status = -5 [ 373.367262][ T9071] (syz.3.706,9071,0):ocfs2_sb_probe:753 ERROR: status = -5 [ 373.374996][ T9071] (syz.3.706,9071,0):ocfs2_fill_super:989 ERROR: superblock probe failed! [ 373.384111][ T9071] (syz.3.706,9071,0):ocfs2_fill_super:1177 ERROR: status = -5 [ 373.907368][ T8676] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 373.930232][ T8676] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 373.941858][ T8676] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 373.965776][ T8676] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 373.995634][ T8676] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 374.047962][ T8676] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 374.476145][ T9090] hub 6-0:1.0: USB hub found [ 374.483793][ T9090] hub 6-0:1.0: 1 port detected [ 375.322902][ T9079] lo speed is unknown, defaulting to 1000 [ 376.193366][ T5978] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 376.423593][ T5978] usb 6-1: Using ep0 maxpacket: 16 [ 376.567933][ T5978] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 376.579220][ T5978] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 376.590521][ T5978] usb 6-1: config 0 interface 0 has no altsetting 0 [ 376.687625][ T5978] usb 6-1: New USB device found, idVendor=0458, idProduct=0138, bcdDevice= 0.00 [ 376.697908][ T5978] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 376.749997][ T5883] usb 8-1: new full-speed USB device number 12 using dummy_hcd [ 377.021507][ T5978] usb 6-1: config 0 descriptor?? [ 377.095031][ T9105] netlink: 4 bytes leftover after parsing attributes in process `syz.7.711'. [ 377.396196][ T5883] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 377.420059][ T5883] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 377.953423][ T5883] usb 8-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.00 [ 377.985030][ T5883] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 378.001036][ T5883] usb 8-1: SerialNumber: syz [ 378.021954][ T5883] usb 8-1: 0:2 : does not exist [ 378.205246][ T61] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 378.245070][ T61] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 378.328526][ T5931] usb 8-1: USB disconnect, device number 12 [ 378.466893][ T5978] usbhid 6-1:0.0: can't add hid device: -71 [ 378.506079][ T5978] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 378.560399][ T5978] usb 6-1: USB disconnect, device number 14 [ 378.610578][ T9122] IPVS: set_ctl: invalid protocol: 98 0.0.0.0:20000 [ 378.716905][ T30] kauditd_printk_skb: 12 callbacks suppressed [ 378.716924][ T30] audit: type=1326 audit(1753460788.555:335): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9117 comm="syz.3.713" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f471c98e9a9 code=0x7ffc0000 [ 378.773311][ T30] audit: type=1326 audit(1753460788.605:336): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9117 comm="syz.3.713" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f471c98e9a9 code=0x7ffc0000 [ 378.796796][ T37] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 378.813177][ T37] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 378.869410][ T30] audit: type=1326 audit(1753460788.605:337): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9117 comm="syz.3.713" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f471c9908c7 code=0x7ffc0000 [ 378.967137][ T30] audit: type=1326 audit(1753460788.605:338): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9117 comm="syz.3.713" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7f471c99083c code=0x7ffc0000 [ 379.098884][ T30] audit: type=1326 audit(1753460788.605:339): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9117 comm="syz.3.713" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7f471c990774 code=0x7ffc0000 [ 379.165961][ T30] audit: type=1326 audit(1753460788.605:340): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9117 comm="syz.3.713" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7f471c990774 code=0x7ffc0000 [ 379.431928][ T30] audit: type=1326 audit(1753460788.605:341): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9117 comm="syz.3.713" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f471c98d60a code=0x7ffc0000 [ 379.817366][ T30] audit: type=1326 audit(1753460788.605:342): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9117 comm="syz.3.713" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f471c98e9a9 code=0x7ffc0000 [ 379.839347][ T30] audit: type=1326 audit(1753460788.605:343): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9117 comm="syz.3.713" exe="/root/syz-executor" sig=0 arch=c000003e syscall=239 compat=0 ip=0x7f471c98e9a9 code=0x7ffc0000 [ 379.866910][ T30] audit: type=1326 audit(1753460788.605:344): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9117 comm="syz.3.713" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f471c98e9a9 code=0x7ffc0000 [ 380.230913][ T9149] hub 6-0:1.0: USB hub found [ 380.236998][ T9149] hub 6-0:1.0: 1 port detected [ 381.064031][ T9158] siw: device registration error -23 [ 382.080986][ T9178] IPVS: set_ctl: invalid protocol: 98 0.0.0.0:20000 [ 382.128090][ T9181] netlink: 15743 bytes leftover after parsing attributes in process `syz.5.727'. [ 382.875595][ T9201] Cannot find add_set index 0 as target [ 383.671252][ T9196] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 383.922019][ T9208] netlink: 8 bytes leftover after parsing attributes in process `syz.3.733'. [ 383.927587][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 384.194235][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 384.594054][ T9209] siw: device registration error -23 [ 384.813387][ T9182] netlink: 'syz.0.728': attribute type 2 has an invalid length. [ 384.821448][ T9182] netlink: 'syz.0.728': attribute type 1 has an invalid length. [ 386.275051][ T9245] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 386.408766][ T9247] IPVS: set_ctl: invalid protocol: 98 0.0.0.0:20000 [ 386.416632][ T30] kauditd_printk_skb: 12 callbacks suppressed [ 386.416648][ T30] audit: type=1326 audit(1753460796.255:357): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9242 comm="syz.7.740" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc00e98e9a9 code=0x7ffc0000 [ 386.463574][ T30] audit: type=1326 audit(1753460796.285:358): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9242 comm="syz.7.740" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fc00e9908c7 code=0x7ffc0000 [ 386.486935][ T30] audit: type=1326 audit(1753460796.285:359): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9242 comm="syz.7.740" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7fc00e99083c code=0x7ffc0000 [ 387.544281][ T9223] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 387.721055][ T9223] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 387.898766][ T9223] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 388.073324][ T9223] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 388.261530][ T9267] netlink: 36 bytes leftover after parsing attributes in process `syz.5.744'. [ 388.271687][ T9267] netlink: 36 bytes leftover after parsing attributes in process `syz.5.744'. [ 388.285045][ T9267] netlink: 36 bytes leftover after parsing attributes in process `syz.5.744'. [ 388.866342][ T9223] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 389.444473][ T9223] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 389.593906][ T9223] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 389.682012][ T9223] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 390.663354][ T3089] usb 8-1: new high-speed USB device number 13 using dummy_hcd [ 391.197012][ T3089] usb 8-1: Using ep0 maxpacket: 16 [ 391.303310][ T3089] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 391.330327][ T3089] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 391.341435][ T3089] usb 8-1: config 0 interface 0 has no altsetting 0 [ 391.671671][ T3089] usb 8-1: New USB device found, idVendor=0458, idProduct=0138, bcdDevice= 0.00 [ 391.681287][ T3089] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 391.704586][ T3089] usb 8-1: config 0 descriptor?? [ 391.965808][ T9304] IPVS: set_ctl: invalid protocol: 98 0.0.0.0:20000 [ 392.050972][ T30] audit: type=1326 audit(1753460801.895:360): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9300 comm="syz.0.754" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc6da58e9a9 code=0x7ffc0000 [ 392.268677][ T30] audit: type=1326 audit(1753460801.925:361): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9300 comm="syz.0.754" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fc6da5908c7 code=0x7ffc0000 [ 393.519232][ T3089] usbhid 8-1:0.0: can't add hid device: -71 [ 393.525329][ T3089] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 393.545813][ T30] audit: type=1326 audit(1753460801.925:362): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9300 comm="syz.0.754" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7fc6da59083c code=0x7ffc0000 [ 393.573252][ T3089] usb 8-1: USB disconnect, device number 13 [ 393.617580][ T30] audit: type=1326 audit(1753460801.925:363): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9300 comm="syz.0.754" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7fc6da590774 code=0x7ffc0000 [ 393.703243][ T30] audit: type=1326 audit(1753460801.925:364): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9300 comm="syz.0.754" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7fc6da590774 code=0x7ffc0000 [ 394.503626][ T30] audit: type=1326 audit(1753460801.925:365): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9300 comm="syz.0.754" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7fc6da58d60a code=0x7ffc0000 [ 394.587633][ T30] audit: type=1326 audit(1753460801.925:366): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9300 comm="syz.0.754" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc6da58e9a9 code=0x7ffc0000 [ 394.619287][ T9296] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 394.648338][ T30] audit: type=1326 audit(1753460801.925:367): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9300 comm="syz.0.754" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc6da58e9a9 code=0x7ffc0000 [ 394.681511][ T9326] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 394.883652][ T30] audit: type=1326 audit(1753460801.955:368): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9300 comm="syz.0.754" exe="/root/syz-executor" sig=0 arch=c000003e syscall=239 compat=0 ip=0x7fc6da58e9a9 code=0x7ffc0000 [ 394.905944][ T30] audit: type=1326 audit(1753460802.175:369): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9300 comm="syz.0.754" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc6da58e9a9 code=0x7ffc0000 [ 394.943616][ T9296] usb 6-1: Using ep0 maxpacket: 16 [ 394.967214][ T9296] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 395.683893][ T9296] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 395.709015][ T9296] usb 6-1: config 0 interface 0 has no altsetting 0 [ 395.715782][ T9296] usb 6-1: New USB device found, idVendor=0458, idProduct=0138, bcdDevice= 0.00 [ 395.730977][ T9296] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 395.892552][ T9296] usb 6-1: config 0 descriptor?? [ 397.488875][ T9296] usbhid 6-1:0.0: can't add hid device: -71 [ 397.495666][ T9296] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 397.609335][ T9296] usb 6-1: USB disconnect, device number 15 [ 398.392756][ T9359] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 398.456822][ T9361] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 398.573731][ T9361] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 398.691097][ T9361] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 398.698604][ T9361] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 399.458971][ T9368] IPVS: set_ctl: invalid protocol: 98 0.0.0.0:20000 [ 399.520745][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 399.520764][ T30] audit: type=1326 audit(1753460809.355:371): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9367 comm="syz.0.769" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc6da58e9a9 code=0x7ffc0000 [ 399.615632][ T30] audit: type=1326 audit(1753460809.355:372): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9367 comm="syz.0.769" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fc6da5908c7 code=0x7ffc0000 [ 399.637539][ T5928] usb 8-1: new high-speed USB device number 14 using dummy_hcd [ 399.737445][ T30] audit: type=1326 audit(1753460809.365:373): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9367 comm="syz.0.769" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7fc6da59083c code=0x7ffc0000 [ 399.789255][ T5928] usb 8-1: Using ep0 maxpacket: 16 [ 399.792431][ T5928] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 399.792470][ T5928] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 399.792498][ T5928] usb 8-1: config 0 interface 0 has no altsetting 0 [ 399.792537][ T5928] usb 8-1: New USB device found, idVendor=0458, idProduct=0138, bcdDevice= 0.00 [ 399.792563][ T5928] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 399.795836][ T5928] usb 8-1: config 0 descriptor?? [ 399.869992][ T9389] netlink: 4 bytes leftover after parsing attributes in process `syz.3.771'. [ 400.813611][ T30] audit: type=1326 audit(1753460809.365:374): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9367 comm="syz.0.769" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7fc6da590774 code=0x7ffc0000 [ 400.813666][ T30] audit: type=1326 audit(1753460809.365:375): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9367 comm="syz.0.769" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7fc6da590774 code=0x7ffc0000 [ 400.813707][ T30] audit: type=1326 audit(1753460809.365:376): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9367 comm="syz.0.769" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7fc6da58d60a code=0x7ffc0000 [ 400.813747][ T30] audit: type=1326 audit(1753460809.365:377): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9367 comm="syz.0.769" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc6da58e9a9 code=0x7ffc0000 [ 400.813786][ T30] audit: type=1326 audit(1753460809.405:378): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9367 comm="syz.0.769" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc6da58e9a9 code=0x7ffc0000 [ 400.920273][ T5928] kye 0003:0458:0138.0009: unknown main item tag 0x4 [ 400.920318][ T5928] kye 0003:0458:0138.0009: unexpected long global item [ 400.921203][ T5928] kye 0003:0458:0138.0009: parse failed [ 400.921283][ T5928] kye 0003:0458:0138.0009: probe with driver kye failed with error -22 [ 401.079299][ T10] usb 4-1: new full-speed USB device number 13 using dummy_hcd [ 401.276324][ T10] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 401.276355][ T10] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 401.284819][ T10] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.00 [ 401.284855][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 401.284878][ T10] usb 4-1: SerialNumber: syz [ 401.320159][ T10] usb 4-1: 0:2 : does not exist [ 401.885297][ T10] usb 4-1: USB disconnect, device number 13 [ 402.594550][ T5946] usb 8-1: USB disconnect, device number 14 [ 402.779200][ T9296] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 403.015447][ T9413] syz.8.773: attempt to access beyond end of device [ 403.015447][ T9413] nbd8: rw=0, sector=0, nr_sectors = 1 limit=0 [ 403.028569][ T9413] (syz.8.773,9413,0):ocfs2_get_sector:1714 ERROR: status = -5 [ 403.036512][ T9413] (syz.8.773,9413,0):ocfs2_sb_probe:753 ERROR: status = -5 [ 403.044205][ T9413] (syz.8.773,9413,0):ocfs2_fill_super:989 ERROR: superblock probe failed! [ 403.055416][ T9413] (syz.8.773,9413,0):ocfs2_fill_super:1177 ERROR: status = -5 [ 403.234369][ T9296] usb 1-1: Using ep0 maxpacket: 16 [ 403.885956][ T9296] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 403.932013][ T6202] udevd[6202]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 403.959808][ T9296] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 404.020219][ T9296] usb 1-1: config 0 interface 0 has no altsetting 0 [ 404.036908][ T9296] usb 1-1: New USB device found, idVendor=0458, idProduct=0138, bcdDevice= 0.00 [ 404.535187][ T9296] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 404.554581][ T9296] usb 1-1: config 0 descriptor?? [ 404.769898][ T5924] usb 8-1: new high-speed USB device number 15 using dummy_hcd [ 405.024678][ T9430] netlink: 36 bytes leftover after parsing attributes in process `syz.5.779'. [ 405.034139][ T9430] netlink: 36 bytes leftover after parsing attributes in process `syz.5.779'. [ 405.043664][ T9430] netlink: 36 bytes leftover after parsing attributes in process `syz.5.779'. [ 405.050637][ T5924] usb 8-1: Using ep0 maxpacket: 16 [ 406.561562][ T9296] usbhid 1-1:0.0: can't add hid device: -71 [ 406.742786][ T9296] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 406.751214][ T5924] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 406.774349][ T9296] usb 1-1: USB disconnect, device number 10 [ 406.783458][ T5924] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 406.820277][ T5924] usb 8-1: config 0 interface 0 has no altsetting 0 [ 406.826995][ T5924] usb 8-1: New USB device found, idVendor=0458, idProduct=0138, bcdDevice= 0.00 [ 406.895623][ T5924] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 407.030305][ T5924] usb 8-1: config 0 descriptor?? [ 407.057304][ T5924] usb 8-1: can't set config #0, error -71 [ 407.128385][ T5924] usb 8-1: USB disconnect, device number 15 [ 407.935940][ T9449] netlink: 15743 bytes leftover after parsing attributes in process `syz.8.784'. [ 408.014991][ T9445] netdevsim netdevsim7 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 408.176251][ T9449] siw: device registration error -23 [ 408.198392][ T9445] netdevsim netdevsim7 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 408.333590][ T9445] netdevsim netdevsim7 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 408.430522][ T9445] netdevsim netdevsim7 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 408.857317][ T9469] syz.5.788: attempt to access beyond end of device [ 408.857317][ T9469] nbd5: rw=0, sector=0, nr_sectors = 1 limit=0 [ 408.870212][ T9469] (syz.5.788,9469,0):ocfs2_get_sector:1714 ERROR: status = -5 [ 408.877782][ T9469] (syz.5.788,9469,0):ocfs2_sb_probe:753 ERROR: status = -5 [ 408.885206][ T9469] (syz.5.788,9469,0):ocfs2_fill_super:989 ERROR: superblock probe failed! [ 408.894866][ T9469] (syz.5.788,9469,0):ocfs2_fill_super:1177 ERROR: status = -5 [ 409.284004][ T9445] netdevsim netdevsim7 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 409.414188][ T9445] netdevsim netdevsim7 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 409.485754][ T9445] netdevsim netdevsim7 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 409.640519][ T9445] netdevsim netdevsim7 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 409.898964][ T9484] netlink: 8 bytes leftover after parsing attributes in process `syz.5.791'. [ 409.910925][ T9484] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 411.693818][ T9495] netlink: 36 bytes leftover after parsing attributes in process `syz.5.794'. [ 411.704048][ T9495] netlink: 36 bytes leftover after parsing attributes in process `syz.5.794'. [ 411.707130][ T9495] netlink: 36 bytes leftover after parsing attributes in process `syz.5.794'. [ 412.069389][ T9495] netlink: 36 bytes leftover after parsing attributes in process `syz.5.794'. [ 412.100283][ T9495] netlink: 36 bytes leftover after parsing attributes in process `syz.5.794'. [ 412.184701][ T9506] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 412.924914][ T9495] netlink: 36 bytes leftover after parsing attributes in process `syz.5.794'. [ 414.858965][ T9530] netlink: 4 bytes leftover after parsing attributes in process `syz.0.799'. [ 416.117448][ T9543] netlink: 36 bytes leftover after parsing attributes in process `syz.7.803'. [ 416.205640][ T9544] syz.5.802: attempt to access beyond end of device [ 416.205640][ T9544] nbd5: rw=0, sector=0, nr_sectors = 1 limit=0 [ 416.218810][ T9544] (syz.5.802,9544,0):ocfs2_get_sector:1714 ERROR: status = -5 [ 416.226738][ T9544] (syz.5.802,9544,0):ocfs2_sb_probe:753 ERROR: status = -5 [ 416.234303][ T9544] (syz.5.802,9544,0):ocfs2_fill_super:989 ERROR: superblock probe failed! [ 416.243019][ T9544] (syz.5.802,9544,0):ocfs2_fill_super:1177 ERROR: status = -5 [ 416.264573][ T9543] netlink: 36 bytes leftover after parsing attributes in process `syz.7.803'. [ 416.279196][ T9543] netlink: 36 bytes leftover after parsing attributes in process `syz.7.803'. [ 416.618550][ T9550] netlink: 'syz.0.804': attribute type 2 has an invalid length. [ 416.653099][ T9550] netlink: 'syz.0.804': attribute type 1 has an invalid length. [ 417.711103][ T9567] netlink: 8 bytes leftover after parsing attributes in process `syz.8.807'. [ 424.327687][ T9604] syz.0.814: attempt to access beyond end of device [ 424.327687][ T9604] nbd0: rw=0, sector=0, nr_sectors = 1 limit=0 [ 424.340603][ T9604] (syz.0.814,9604,0):ocfs2_get_sector:1714 ERROR: status = -5 [ 424.349255][ T9604] (syz.0.814,9604,0):ocfs2_sb_probe:753 ERROR: status = -5 [ 424.357302][ T9604] (syz.0.814,9604,0):ocfs2_fill_super:989 ERROR: superblock probe failed! [ 424.365933][ T9604] (syz.0.814,9604,0):ocfs2_fill_super:1177 ERROR: status = -5 [ 425.764850][ T9627] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 427.680533][ T9636] netlink: 8 bytes leftover after parsing attributes in process `syz.3.823'. [ 429.990768][ T9655] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 430.358024][ T9655] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 430.533373][ T9655] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 430.856287][ T9296] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 431.336504][ T9655] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 431.429380][ T9296] usb 4-1: Using ep0 maxpacket: 16 [ 431.456325][ T9296] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 431.505375][ T9296] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 431.673135][ T9655] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 431.680259][ T9296] usb 4-1: config 0 interface 0 has no altsetting 0 [ 431.688074][ T9296] usb 4-1: New USB device found, idVendor=0458, idProduct=0138, bcdDevice= 0.00 [ 431.702868][ T9296] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 431.717140][ T9296] usb 4-1: config 0 descriptor?? [ 431.820871][ T9655] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 432.037690][ T9678] syz.8.831: attempt to access beyond end of device [ 432.037690][ T9678] nbd8: rw=0, sector=0, nr_sectors = 1 limit=0 [ 432.048111][ T9655] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 432.059039][ T9678] (syz.8.831,9678,0):ocfs2_get_sector:1714 ERROR: status = -5 [ 432.066756][ T9678] (syz.8.831,9678,0):ocfs2_sb_probe:753 ERROR: status = -5 [ 432.074440][ T9678] (syz.8.831,9678,0):ocfs2_fill_super:989 ERROR: superblock probe failed! [ 432.083333][ T9678] (syz.8.831,9678,0):ocfs2_fill_super:1177 ERROR: status = -5 [ 432.726540][ T9655] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 433.484845][ T9703] syz.5.834: attempt to access beyond end of device [ 433.484845][ T9703] nbd5: rw=0, sector=0, nr_sectors = 1 limit=0 [ 433.498405][ T9703] (syz.5.834,9703,0):ocfs2_get_sector:1714 ERROR: status = -5 [ 433.506214][ T9703] (syz.5.834,9703,0):ocfs2_sb_probe:753 ERROR: status = -5 [ 433.513916][ T9703] (syz.5.834,9703,0):ocfs2_fill_super:989 ERROR: superblock probe failed! [ 433.523228][ T9703] (syz.5.834,9703,0):ocfs2_fill_super:1177 ERROR: status = -5 [ 434.952384][ T9708] netlink: 8 bytes leftover after parsing attributes in process `syz.0.836'. [ 434.961813][ T9708] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 437.202850][ T9296] usbhid 4-1:0.0: can't add hid device: -32 [ 437.222310][ T9296] usbhid 4-1:0.0: probe with driver usbhid failed with error -32 [ 437.534831][ T9721] syz.5.839: attempt to access beyond end of device [ 437.534831][ T9721] nbd5: rw=0, sector=0, nr_sectors = 1 limit=0 [ 437.547899][ T9721] (syz.5.839,9721,0):ocfs2_get_sector:1714 ERROR: status = -5 [ 437.555863][ T9721] (syz.5.839,9721,0):ocfs2_sb_probe:753 ERROR: status = -5 [ 437.564268][ T9721] (syz.5.839,9721,0):ocfs2_fill_super:989 ERROR: superblock probe failed! [ 437.573930][ T9721] (syz.5.839,9721,0):ocfs2_fill_super:1177 ERROR: status = -5 [ 439.604083][ T9737] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 441.196046][ T9753] hub 6-0:1.0: USB hub found [ 441.202454][ T9753] hub 6-0:1.0: 1 port detected [ 441.665833][ T5978] usb 4-1: USB disconnect, device number 14 [ 442.080359][ T9773] bpq0: left allmulticast mode [ 442.136615][ T9773] netlink: 8 bytes leftover after parsing attributes in process `syz.0.851'. [ 443.220708][ T9777] syz.3.850: attempt to access beyond end of device [ 443.220708][ T9777] nbd3: rw=0, sector=0, nr_sectors = 1 limit=0 [ 443.234185][ T9777] (syz.3.850,9777,0):ocfs2_get_sector:1714 ERROR: status = -5 [ 443.242010][ T9777] (syz.3.850,9777,0):ocfs2_sb_probe:753 ERROR: status = -5 [ 443.249479][ T9777] (syz.3.850,9777,0):ocfs2_fill_super:989 ERROR: superblock probe failed! [ 443.258154][ T9777] (syz.3.850,9777,0):ocfs2_fill_super:1177 ERROR: status = -5 [ 444.439413][ T5928] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 444.788126][ T9794] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 445.139036][ T5928] usb 9-1: Using ep0 maxpacket: 16 [ 445.151785][ T5928] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 445.208698][ T5928] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 445.369058][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 445.375526][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 445.452240][ T5928] usb 9-1: config 0 interface 0 has no altsetting 0 [ 445.461547][ T5928] usb 9-1: New USB device found, idVendor=0458, idProduct=0138, bcdDevice= 0.00 [ 445.470754][ T5928] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 445.479165][ T9796] bpq0: entered allmulticast mode [ 445.500638][ T5928] usb 9-1: config 0 descriptor?? [ 445.618575][ T9802] netlink: 8 bytes leftover after parsing attributes in process `syz.0.855'. [ 445.655909][ T9803] netlink: 96 bytes leftover after parsing attributes in process `syz.5.857'. [ 446.346025][ T9814] bpq0: left allmulticast mode [ 446.448242][ T9814] netlink: 8 bytes leftover after parsing attributes in process `syz.0.860'. [ 447.460327][ T9810] syz.5.859: attempt to access beyond end of device [ 447.460327][ T9810] nbd5: rw=0, sector=0, nr_sectors = 1 limit=0 [ 447.473512][ T9810] (syz.5.859,9810,1):ocfs2_get_sector:1714 ERROR: status = -5 [ 447.481441][ T9810] (syz.5.859,9810,1):ocfs2_sb_probe:753 ERROR: status = -5 [ 447.488773][ T9810] (syz.5.859,9810,1):ocfs2_fill_super:989 ERROR: superblock probe failed! [ 447.503911][ T9810] (syz.5.859,9810,1):ocfs2_fill_super:1177 ERROR: status = -5 [ 447.614111][ T5928] usbhid 9-1:0.0: can't add hid device: -71 [ 447.670846][ T5928] usbhid 9-1:0.0: probe with driver usbhid failed with error -71 [ 447.710089][ T5928] usb 9-1: USB disconnect, device number 2 [ 448.049165][ T5924] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 448.236267][ T5924] usb 1-1: Using ep0 maxpacket: 16 [ 448.268191][ T5924] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 448.338312][ T5924] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 448.371252][ T9834] netlink: 96 bytes leftover after parsing attributes in process `syz.7.863'. [ 448.381183][ T5924] usb 1-1: config 0 interface 0 has no altsetting 0 [ 448.387864][ T5924] usb 1-1: New USB device found, idVendor=0458, idProduct=0138, bcdDevice= 0.00 [ 448.437661][ T9838] 9pnet_fd: Insufficient options for proto=fd [ 448.439435][ T5924] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 448.520305][ T5924] usb 1-1: config 0 descriptor?? [ 448.874559][ T9847] syz.8.867: attempt to access beyond end of device [ 448.874559][ T9847] nbd8: rw=0, sector=0, nr_sectors = 1 limit=0 [ 448.874684][ T9847] (syz.8.867,9847,0):ocfs2_get_sector:1714 ERROR: status = -5 [ 448.874716][ T9847] (syz.8.867,9847,0):ocfs2_sb_probe:753 ERROR: status = -5 [ 448.874754][ T9847] (syz.8.867,9847,0):ocfs2_fill_super:989 ERROR: superblock probe failed! [ 448.874782][ T9847] (syz.8.867,9847,0):ocfs2_fill_super:1177 ERROR: status = -5 [ 451.100849][ T5910] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 451.526863][ T5910] usb 9-1: Using ep0 maxpacket: 8 [ 452.020212][ T5910] usb 9-1: config index 0 descriptor too short (expected 28277, got 36) [ 452.029129][ T5910] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 452.178762][ T5910] usb 9-1: config 0 has no interfaces? [ 452.185268][ T5910] usb 9-1: New USB device found, idVendor=046d, idProduct=c20e, bcdDevice= 0.00 [ 452.211715][ T5910] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 452.341033][ T5910] usb 9-1: config 0 descriptor?? [ 452.925182][ T5946] usb 8-1: new high-speed USB device number 16 using dummy_hcd [ 453.069965][ T9876] syz.5.873: attempt to access beyond end of device [ 453.069965][ T9876] nbd5: rw=0, sector=0, nr_sectors = 1 limit=0 [ 453.082791][ T9876] (syz.5.873,9876,1):ocfs2_get_sector:1714 ERROR: status = -5 [ 453.090453][ T9876] (syz.5.873,9876,1):ocfs2_sb_probe:753 ERROR: status = -5 [ 453.097693][ T9876] (syz.5.873,9876,1):ocfs2_fill_super:989 ERROR: superblock probe failed! [ 453.106387][ T9876] (syz.5.873,9876,1):ocfs2_fill_super:1177 ERROR: status = -5 [ 453.230649][ T5946] usb 8-1: Using ep0 maxpacket: 16 [ 453.264810][ T5946] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 453.306133][ T5946] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 453.343213][ T5946] usb 8-1: config 0 interface 0 has no altsetting 0 [ 453.372506][ T5946] usb 8-1: New USB device found, idVendor=0458, idProduct=0138, bcdDevice= 0.00 [ 453.423602][ T5946] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 453.471058][ T5946] usb 8-1: config 0 descriptor?? [ 453.656252][ T9886] syz.3.874: attempt to access beyond end of device [ 453.656252][ T9886] nbd3: rw=0, sector=0, nr_sectors = 1 limit=0 [ 453.669394][ T9886] (syz.3.874,9886,1):ocfs2_get_sector:1714 ERROR: status = -5 [ 453.677351][ T9886] (syz.3.874,9886,1):ocfs2_sb_probe:753 ERROR: status = -5 [ 453.688185][ T9886] (syz.3.874,9886,1):ocfs2_fill_super:989 ERROR: superblock probe failed! [ 453.724015][ T5924] usbhid 1-1:0.0: can't add hid device: -71 [ 453.750153][ T9886] (syz.3.874,9886,1):ocfs2_fill_super:1177 ERROR: status = -5 [ 453.782587][ T5924] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 453.827528][ T5924] usb 1-1: USB disconnect, device number 11 [ 453.859744][ T5910] usb 9-1: USB disconnect, device number 3 [ 454.317231][ T9898] 9pnet_fd: Insufficient options for proto=fd [ 455.821203][ T9911] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 456.002405][ T5946] usbhid 8-1:0.0: can't add hid device: -71 [ 456.059262][ T5946] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 456.099203][ T5946] usb 8-1: USB disconnect, device number 16 [ 456.399116][ T9925] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 457.687460][ T9902] netlink: 'syz.5.879': attribute type 2 has an invalid length. [ 457.700627][ T9902] netlink: 'syz.5.879': attribute type 1 has an invalid length. [ 457.822146][ T5924] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 458.051424][ T5924] usb 9-1: Using ep0 maxpacket: 16 [ 458.071655][ T5924] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 458.814621][ T5924] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 458.838620][ T5924] usb 9-1: config 0 interface 0 has no altsetting 0 [ 458.847156][ T5924] usb 9-1: New USB device found, idVendor=0458, idProduct=0138, bcdDevice= 0.00 [ 458.863636][ T5924] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 458.917807][ T5924] usb 9-1: config 0 descriptor?? [ 461.429735][ T5910] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 461.557729][ T5924] usbhid 9-1:0.0: can't add hid device: -71 [ 461.570989][ T5924] usbhid 9-1:0.0: probe with driver usbhid failed with error -71 [ 461.609376][ T5910] usb 6-1: Using ep0 maxpacket: 16 [ 461.630199][ T5924] usb 9-1: USB disconnect, device number 4 [ 461.642979][ T5910] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 461.669029][ T5910] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 461.701550][ T5910] usb 6-1: config 0 interface 0 has no altsetting 0 [ 461.708565][ T5910] usb 6-1: New USB device found, idVendor=0458, idProduct=0138, bcdDevice= 0.00 [ 461.740281][ T5910] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 461.764352][ T5910] usb 6-1: config 0 descriptor?? [ 462.230001][ T5910] kye 0003:0458:0138.000A: unknown main item tag 0x4 [ 462.249379][ T5910] kye 0003:0458:0138.000A: unexpected long global item [ 462.256915][ T5910] kye 0003:0458:0138.000A: parse failed [ 462.277697][ T5910] kye 0003:0458:0138.000A: probe with driver kye failed with error -22 [ 464.552878][ T5910] usb 6-1: USB disconnect, device number 16 [ 464.600729][ T9962] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 465.132076][ T9978] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 465.481261][ T9962] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 465.919530][ T9962] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 466.522661][ T9962] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 466.618811][T10001] netlink: 8 bytes leftover after parsing attributes in process `syz.5.899'. [ 467.026396][ T9993] netlink: 4 bytes leftover after parsing attributes in process `syz.3.897'. [ 467.508610][T10007] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 467.974475][ T51] Bluetooth: hci1: command 0x0406 tx timeout [ 468.101694][ T9962] netdevsim netdevsim8 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 468.247057][ T9962] netdevsim netdevsim8 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 468.323374][T10014] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 468.337131][ T9962] netdevsim netdevsim8 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 468.437903][ T9962] netdevsim netdevsim8 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 468.703670][T10024] 9pnet_fd: Insufficient options for proto=fd [ 468.944840][T10028] netlink: 8 bytes leftover after parsing attributes in process `syz.5.905'. [ 470.282744][T10035] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 473.102178][T10061] netlink: 'syz.8.912': attribute type 2 has an invalid length. [ 473.110003][T10061] netlink: 'syz.8.912': attribute type 1 has an invalid length. [ 473.307295][T10079] bpq0: entered allmulticast mode [ 473.424040][T10093] hub 6-0:1.0: USB hub found [ 473.432119][T10093] hub 6-0:1.0: 1 port detected [ 473.490037][T10089] netlink: 'syz.0.918': attribute type 2 has an invalid length. [ 473.498044][T10089] netlink: 'syz.0.918': attribute type 1 has an invalid length. [ 477.315247][T10122] netlink: 4 bytes leftover after parsing attributes in process `syz.3.924'. [ 477.589279][ T3089] usb 4-1: new full-speed USB device number 15 using dummy_hcd [ 477.763639][ T3089] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 477.834810][ T3089] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 477.882366][ T3089] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.00 [ 477.909877][ T3089] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 477.926880][ T3089] usb 4-1: SerialNumber: syz [ 477.978033][ T3089] usb 4-1: 0:2 : does not exist [ 478.213547][ T3089] usb 4-1: USB disconnect, device number 15 [ 478.357445][T10151] netdevsim netdevsim8 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 478.513536][T10151] netdevsim netdevsim8 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 478.610988][T10151] netdevsim netdevsim8 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 478.692317][T10151] netdevsim netdevsim8 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 478.967193][T10151] netdevsim netdevsim8 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 479.018652][T10151] netdevsim netdevsim8 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 479.044931][T10151] netdevsim netdevsim8 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 479.065537][T10151] netdevsim netdevsim8 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 479.166367][T10164] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 479.407964][T10168] syz.3.933: attempt to access beyond end of device [ 479.407964][T10168] nbd3: rw=0, sector=0, nr_sectors = 1 limit=0 [ 479.421499][T10168] (syz.3.933,10168,0):ocfs2_get_sector:1714 ERROR: status = -5 [ 479.429392][T10168] (syz.3.933,10168,0):ocfs2_sb_probe:753 ERROR: status = -5 [ 479.436910][T10168] (syz.3.933,10168,0):ocfs2_fill_super:989 ERROR: superblock probe failed! [ 479.450944][T10168] (syz.3.933,10168,0):ocfs2_fill_super:1177 ERROR: status = -5 [ 480.084118][T10175] bpq0: left allmulticast mode [ 480.134206][T10175] netlink: 8 bytes leftover after parsing attributes in process `syz.3.936'. [ 481.136691][T10179] netlink: 8 bytes leftover after parsing attributes in process `syz.8.937'. [ 482.162082][T10190] netlink: 4 bytes leftover after parsing attributes in process `syz.3.940'. [ 482.739106][T10029] usb 4-1: new full-speed USB device number 16 using dummy_hcd [ 483.681757][T10029] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 483.805165][T10029] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 483.846092][T10029] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.00 [ 483.856687][T10029] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 483.864979][T10029] usb 4-1: SerialNumber: syz [ 483.877189][T10029] usb 4-1: 0:2 : does not exist [ 484.980193][T10029] usb 4-1: USB disconnect, device number 16 [ 485.036877][ T6202] udevd[6202]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 486.058456][T10235] netlink: 8 bytes leftover after parsing attributes in process `syz.5.953'. [ 487.009034][T10233] netlink: 8 bytes leftover after parsing attributes in process `syz.3.951'. [ 487.023837][T10238] netlink: 17279 bytes leftover after parsing attributes in process `syz.5.955'. [ 488.640613][T10254] netlink: 36 bytes leftover after parsing attributes in process `syz.3.958'. [ 488.649694][T10254] netlink: 36 bytes leftover after parsing attributes in process `syz.3.958'. [ 488.660314][T10254] netlink: 36 bytes leftover after parsing attributes in process `syz.3.958'. [ 488.827986][T10262] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 489.156188][T10268] netlink: 4 bytes leftover after parsing attributes in process `syz.3.962'. [ 489.899125][ T5883] usb 4-1: new full-speed USB device number 17 using dummy_hcd [ 490.084217][ T5883] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 490.120317][ T5883] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 490.141933][ T5883] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.00 [ 490.166835][ T5883] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 490.205074][ T5883] usb 4-1: SerialNumber: syz [ 490.220231][ T9296] usb 8-1: new high-speed USB device number 17 using dummy_hcd [ 490.234540][ T5883] usb 4-1: 0:2 : does not exist [ 490.429163][ T9296] usb 8-1: Using ep0 maxpacket: 16 [ 490.450015][ T9296] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 490.517129][ T9296] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 490.546615][ T9296] usb 8-1: config 0 interface 0 has no altsetting 0 [ 490.567786][ T9296] usb 8-1: New USB device found, idVendor=0458, idProduct=0138, bcdDevice= 0.00 [ 490.665070][ T9296] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 490.706853][ T9296] usb 8-1: config 0 descriptor?? [ 490.719315][ T5978] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 490.882244][ T5978] usb 1-1: device descriptor read/64, error -71 [ 491.097887][T10295] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 491.333166][ T5978] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 491.479332][ T5978] usb 1-1: device descriptor read/64, error -71 [ 491.600948][ T5978] usb usb1-port1: attempt power cycle [ 491.969616][ T5978] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 491.990417][ T5978] usb 1-1: device descriptor read/8, error -71 [ 492.246098][ T5978] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 492.280065][ T5978] usb 1-1: device descriptor read/8, error -71 [ 492.391888][ T5978] usb usb1-port1: unable to enumerate USB device [ 492.455789][ T9296] usbhid 8-1:0.0: can't add hid device: -71 [ 492.470409][ T9296] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 492.486299][ T9296] usb 8-1: USB disconnect, device number 17 [ 492.719888][T10305] siw: device registration error -23 [ 493.634449][ T5978] usb 4-1: USB disconnect, device number 17 [ 493.651130][T10304] netlink: 17279 bytes leftover after parsing attributes in process `syz.7.969'. [ 495.735992][T10320] netlink: 36 bytes leftover after parsing attributes in process `syz.5.972'. [ 495.745005][T10320] netlink: 36 bytes leftover after parsing attributes in process `syz.5.972'. [ 495.753990][T10320] netlink: 36 bytes leftover after parsing attributes in process `syz.5.972'. [ 496.146770][T10335] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 497.106918][T10340] netdevsim netdevsim8 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 497.251854][T10340] netdevsim netdevsim8 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 497.362796][T10340] netdevsim netdevsim8 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 497.453863][ T5978] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 497.481368][T10340] netdevsim netdevsim8 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 497.510161][ T10] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 497.559305][ T5883] usb 8-1: new high-speed USB device number 18 using dummy_hcd [ 497.630467][ T5978] usb 4-1: device descriptor read/64, error -71 [ 497.692482][ T10] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 497.722612][ T10] usb 1-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 497.760113][ T5883] usb 8-1: Using ep0 maxpacket: 16 [ 497.763381][T10340] netdevsim netdevsim8 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 497.789305][ T10] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 497.799582][ T5883] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 497.832065][ T10] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 497.845835][T10340] netdevsim netdevsim8 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 497.865654][ T5883] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 497.889139][ T10] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 497.896743][T10361] 9pnet_fd: Insufficient options for proto=fd [ 497.900969][ T5883] usb 8-1: config 0 interface 0 has no altsetting 0 [ 497.919289][ T5978] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 497.925817][ T10] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 497.939048][ T5883] usb 8-1: New USB device found, idVendor=0458, idProduct=0138, bcdDevice= 0.00 [ 497.979709][ T10] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 497.988297][ T5883] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 498.001346][ T10] usb 1-1: Product: syz [ 498.005584][ T10] usb 1-1: Manufacturer: syz [ 498.025419][T10340] netdevsim netdevsim8 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 498.046495][T10340] netdevsim netdevsim8 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 498.171781][ T5883] usb 8-1: config 0 descriptor?? [ 498.229246][ T5978] usb 4-1: device descriptor read/64, error -71 [ 498.233338][ T10] cdc_wdm 1-1:1.0: skipping garbage [ 498.270530][ T10] cdc_wdm 1-1:1.0: skipping garbage [ 498.306492][ T10] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 498.323200][ T10] cdc_wdm 1-1:1.0: Unknown control protocol [ 498.447004][ T10] usb 1-1: USB disconnect, device number 16 [ 498.536554][ T5978] usb usb4-port1: attempt power cycle [ 499.050560][T10368] hub 6-0:1.0: USB hub found [ 499.055627][T10368] hub 6-0:1.0: 1 port detected [ 499.265909][T10377] netlink: 17279 bytes leftover after parsing attributes in process `syz.8.985'. [ 499.329070][ T5978] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 499.372361][ T5978] usb 4-1: device descriptor read/8, error -71 [ 499.484111][T10377] siw: device registration error -23 [ 499.659216][ T5978] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 500.274775][ T5978] usb 4-1: device descriptor read/8, error -71 [ 500.317963][T10389] netlink: 36 bytes leftover after parsing attributes in process `syz.8.988'. [ 500.327095][T10389] netlink: 36 bytes leftover after parsing attributes in process `syz.8.988'. [ 500.337034][T10389] netlink: 36 bytes leftover after parsing attributes in process `syz.8.988'. [ 500.481050][ T5978] usb usb4-port1: unable to enumerate USB device [ 500.506586][ T5883] usbhid 8-1:0.0: can't add hid device: -71 [ 500.529134][ T5883] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 501.369632][ T5883] usb 8-1: USB disconnect, device number 18 [ 503.738237][T10428] netlink: 8 bytes leftover after parsing attributes in process `syz.0.998'. [ 504.999191][ T5910] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 505.029466][T10029] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 505.139405][ T5910] usb 9-1: device descriptor read/64, error -71 [ 505.239215][ T5978] usb 8-1: new high-speed USB device number 19 using dummy_hcd [ 505.389085][T10029] usb 1-1: Using ep0 maxpacket: 32 [ 505.402605][T10029] usb 1-1: config 0 interface 0 has no altsetting 0 [ 505.413010][T10029] usb 1-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 505.425812][ T5910] usb 9-1: new high-speed USB device number 6 using dummy_hcd [ 505.429315][T10029] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 505.459436][ T5978] usb 8-1: Using ep0 maxpacket: 16 [ 505.461166][T10029] usb 1-1: Product: syz [ 505.481253][T10029] usb 1-1: Manufacturer: syz [ 505.497489][T10029] usb 1-1: SerialNumber: syz [ 505.503359][ T5978] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 505.520973][T10029] usb 1-1: config 0 descriptor?? [ 505.532198][ T5978] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 505.563501][ T5978] usb 8-1: config 0 interface 0 has no altsetting 0 [ 505.584033][ T5978] usb 8-1: New USB device found, idVendor=0458, idProduct=0138, bcdDevice= 0.00 [ 505.600148][ T5910] usb 9-1: device descriptor read/64, error -71 [ 505.613056][ T5978] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 505.643088][ T5978] usb 8-1: config 0 descriptor?? [ 505.710685][ T5910] usb usb9-port1: attempt power cycle [ 506.519139][ T5910] usb 9-1: new high-speed USB device number 7 using dummy_hcd [ 506.572979][ T5910] usb 9-1: device descriptor read/8, error -71 [ 506.806696][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 506.813375][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 506.875144][T10029] gs_usb 1-1:0.0: Couldn't get device config: (err=-110) [ 506.912971][T10437] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 506.922001][T10437] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 506.937911][T10029] gs_usb 1-1:0.0: probe with driver gs_usb failed with error -110 [ 507.318078][ T5910] usb 9-1: new high-speed USB device number 8 using dummy_hcd [ 507.724002][T10463] ttyS ttyS3: ldisc open failed (-12), clearing slot 3 [ 508.004159][ T5910] usb 9-1: device descriptor read/8, error -71 [ 508.375495][ T5910] usb usb9-port1: unable to enumerate USB device [ 508.382400][ T5978] usbhid 8-1:0.0: can't add hid device: -71 [ 508.388482][ T5978] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 508.401771][ T5978] usb 8-1: USB disconnect, device number 19 [ 509.467520][T10488] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1009'. [ 509.577875][ T5883] usb 1-1: USB disconnect, device number 17 [ 510.178204][T10493] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1010'. [ 510.667096][T10495] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 511.670510][T10502] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1013'. [ 511.933476][T10505] syz.8.1011: attempt to access beyond end of device [ 511.933476][T10505] nbd8: rw=0, sector=0, nr_sectors = 1 limit=0 [ 511.947220][T10505] (syz.8.1011,10505,0):ocfs2_get_sector:1714 ERROR: status = -5 [ 511.955625][T10505] (syz.8.1011,10505,0):ocfs2_sb_probe:753 ERROR: status = -5 [ 511.963463][T10505] (syz.8.1011,10505,0):ocfs2_fill_super:989 ERROR: superblock probe failed! [ 511.972579][T10505] (syz.8.1011,10505,0):ocfs2_fill_super:1177 ERROR: status = -5 [ 514.283654][T10532] bpq0: entered allmulticast mode [ 514.339159][T10532] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1020'. [ 515.221063][ T5910] usb 8-1: new high-speed USB device number 20 using dummy_hcd [ 515.329172][T10534] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 515.389405][ T5910] usb 8-1: device descriptor read/64, error -71 [ 515.556581][T10539] syz.3.1021: attempt to access beyond end of device [ 515.556581][T10539] nbd3: rw=0, sector=0, nr_sectors = 1 limit=0 [ 515.569854][T10539] (syz.3.1021,10539,1):ocfs2_get_sector:1714 ERROR: status = -5 [ 515.577664][T10539] (syz.3.1021,10539,1):ocfs2_sb_probe:753 ERROR: status = -5 [ 515.585316][T10539] (syz.3.1021,10539,1):ocfs2_fill_super:989 ERROR: superblock probe failed! [ 515.595357][T10539] (syz.3.1021,10539,1):ocfs2_fill_super:1177 ERROR: status = -5 [ 515.678978][ T5910] usb 8-1: new high-speed USB device number 21 using dummy_hcd [ 515.730829][T10512] netlink: 'syz.5.1016': attribute type 2 has an invalid length. [ 515.775440][T10512] netlink: 'syz.5.1016': attribute type 1 has an invalid length. [ 515.831960][ T5910] usb 8-1: device descriptor read/64, error -71 [ 515.949972][ T5910] usb usb8-port1: attempt power cycle [ 516.338976][ T5910] usb 8-1: new high-speed USB device number 22 using dummy_hcd [ 516.374296][ T5910] usb 8-1: device descriptor read/8, error -71 [ 516.452008][T10556] hub 6-0:1.0: USB hub found [ 516.458025][T10556] hub 6-0:1.0: 1 port detected [ 517.162260][T10559] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1025'. [ 518.419942][T10573] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1028'. [ 522.555968][T10606] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1037'. [ 522.679269][ T9296] usb 9-1: new high-speed USB device number 9 using dummy_hcd [ 522.929220][ T9296] usb 9-1: device descriptor read/64, error -71 [ 523.303938][ T9296] usb 9-1: new high-speed USB device number 10 using dummy_hcd [ 523.728491][ T9296] usb 9-1: device descriptor read/64, error -71 [ 523.840125][ T9296] usb usb9-port1: attempt power cycle [ 524.520522][ T9296] usb 9-1: new high-speed USB device number 11 using dummy_hcd [ 524.765334][T10619] syz.0.1039: attempt to access beyond end of device [ 524.765334][T10619] nbd0: rw=0, sector=0, nr_sectors = 1 limit=0 [ 524.826192][ T9296] usb 9-1: device descriptor read/8, error -71 [ 524.835798][T10619] (syz.0.1039,10619,0):ocfs2_get_sector:1714 ERROR: status = -5 [ 525.100075][T10619] (syz.0.1039,10619,0):ocfs2_sb_probe:753 ERROR: status = -5 [ 525.169136][T10619] (syz.0.1039,10619,0):ocfs2_fill_super:989 ERROR: superblock probe failed! [ 525.193740][T10619] (syz.0.1039,10619,0):ocfs2_fill_super:1177 ERROR: status = -5 [ 525.529007][ T5946] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 525.699025][T10638] Cannot find add_set index 0 as target [ 527.445204][ T5946] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 527.464292][ T5946] usb 4-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 527.547526][T10643] syz.7.1044: attempt to access beyond end of device [ 527.547526][T10643] nbd7: rw=0, sector=0, nr_sectors = 1 limit=0 [ 527.560498][T10643] (syz.7.1044,10643,0):ocfs2_get_sector:1714 ERROR: status = -5 [ 527.569245][T10643] (syz.7.1044,10643,0):ocfs2_sb_probe:753 ERROR: status = -5 [ 527.577346][T10643] (syz.7.1044,10643,0):ocfs2_fill_super:989 ERROR: superblock probe failed! [ 527.586184][T10643] (syz.7.1044,10643,0):ocfs2_fill_super:1177 ERROR: status = -5 [ 527.594803][ T5946] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 527.604152][ T5946] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 527.615499][ T5946] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 527.634006][ T5946] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 527.663109][ T5946] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 527.705826][ T5946] usb 4-1: Product: syz [ 527.725794][ T5946] usb 4-1: Manufacturer: syz [ 527.790704][ T5946] cdc_wdm 4-1:1.0: skipping garbage [ 527.817295][ T5946] cdc_wdm 4-1:1.0: skipping garbage [ 527.835185][ T5946] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 527.848281][ T5946] cdc_wdm 4-1:1.0: Unknown control protocol [ 528.142656][ T5946] usb 4-1: USB disconnect, device number 22 [ 528.319050][T10655] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1048'. [ 528.779187][ T5924] usb 8-1: new full-speed USB device number 24 using dummy_hcd [ 528.791384][T10660] syz.5.1049: attempt to access beyond end of device [ 528.791384][T10660] nbd5: rw=0, sector=0, nr_sectors = 1 limit=0 [ 528.811314][T10660] (syz.5.1049,10660,0):ocfs2_get_sector:1714 ERROR: status = -5 [ 528.819524][T10660] (syz.5.1049,10660,0):ocfs2_sb_probe:753 ERROR: status = -5 [ 528.827314][T10660] (syz.5.1049,10660,0):ocfs2_fill_super:989 ERROR: superblock probe failed! [ 528.836611][T10660] (syz.5.1049,10660,0):ocfs2_fill_super:1177 ERROR: status = -5 [ 528.957036][ T5924] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 529.186802][ T5924] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 529.221027][ T5924] usb 8-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.00 [ 529.264291][ T5924] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 529.300621][ T5924] usb 8-1: SerialNumber: syz [ 529.371784][ T5924] usb 8-1: 0:2 : does not exist [ 529.788409][T10674] hub 6-0:1.0: USB hub found [ 529.795335][T10674] hub 6-0:1.0: 1 port detected [ 530.799057][ T9296] usb 8-1: USB disconnect, device number 24 [ 532.110418][T10687] netlink: 96 bytes leftover after parsing attributes in process `syz.5.1055'. [ 532.296987][T10688] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 532.557973][T10695] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1057'. [ 533.733270][T10704] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1058'. [ 534.648656][T10708] IPVS: set_ctl: invalid protocol: 98 0.0.0.0:20000 [ 534.658594][ T30] audit: type=1326 audit(1753460944.505:379): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10707 comm="syz.5.1061" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd99238e9a9 code=0x7ffc0000 [ 534.735259][ T30] audit: type=1326 audit(1753460944.525:380): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10707 comm="syz.5.1061" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fd9923908c7 code=0x7ffc0000 [ 534.839821][ T30] audit: type=1326 audit(1753460944.525:381): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10707 comm="syz.5.1061" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7fd99239083c code=0x7ffc0000 [ 534.923134][ T30] audit: type=1326 audit(1753460944.525:382): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10707 comm="syz.5.1061" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7fd992390774 code=0x7ffc0000 [ 534.969230][ T9296] usb 8-1: new high-speed USB device number 25 using dummy_hcd [ 535.036654][ T30] audit: type=1326 audit(1753460944.525:383): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10707 comm="syz.5.1061" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7fd992390774 code=0x7ffc0000 [ 535.117253][ T30] audit: type=1326 audit(1753460944.525:384): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10707 comm="syz.5.1061" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7fd99238d60a code=0x7ffc0000 [ 535.160285][ T9296] usb 8-1: Using ep0 maxpacket: 16 [ 535.173370][ T9296] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 535.461884][ T9296] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 535.487835][T10721] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1064'. [ 535.601284][ T9296] usb 8-1: config 0 interface 0 has no altsetting 0 [ 535.702235][ T9296] usb 8-1: New USB device found, idVendor=0458, idProduct=0138, bcdDevice= 0.00 [ 536.039807][ T30] audit: type=1326 audit(1753460944.525:385): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10707 comm="syz.5.1061" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd99238e9a9 code=0x7ffc0000 [ 536.061614][ T30] audit: type=1326 audit(1753460944.525:386): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10707 comm="syz.5.1061" exe="/root/syz-executor" sig=0 arch=c000003e syscall=239 compat=0 ip=0x7fd99238e9a9 code=0x7ffc0000 [ 536.085381][ T30] audit: type=1326 audit(1753460944.525:387): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10707 comm="syz.5.1061" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd99238e9a9 code=0x7ffc0000 [ 536.093643][ T9296] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 536.383149][ T9296] usb 8-1: config 0 descriptor?? [ 538.425435][ T9296] usbhid 8-1:0.0: can't add hid device: -71 [ 538.437178][ T9296] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 538.464854][ T9296] usb 8-1: USB disconnect, device number 25 [ 538.496515][T10738] siw: device registration error -23 [ 540.370568][T10734] netlink: 16255 bytes leftover after parsing attributes in process `syz.0.1067'. [ 540.902242][T10763] hub 6-0:1.0: USB hub found [ 540.908565][T10763] hub 6-0:1.0: 1 port detected [ 541.092447][T10765] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 541.869981][T10769] IPVS: set_ctl: invalid protocol: 98 0.0.0.0:20000 [ 541.985420][ T30] audit: type=1326 audit(1753460951.825:388): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10758 comm="syz.8.1074" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fccfbd8e9a9 code=0x7ffc0000 [ 542.031939][ T30] audit: type=1326 audit(1753460951.825:389): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10758 comm="syz.8.1074" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fccfbd8e9a9 code=0x7ffc0000 [ 542.053730][ T30] audit: type=1326 audit(1753460951.845:390): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10758 comm="syz.8.1074" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fccfbd908c7 code=0x7ffc0000 [ 542.099073][ T30] audit: type=1326 audit(1753460951.855:391): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10758 comm="syz.8.1074" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7fccfbd9083c code=0x7ffc0000 [ 542.183214][ T30] audit: type=1326 audit(1753460951.855:392): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10758 comm="syz.8.1074" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7fccfbd90774 code=0x7ffc0000 [ 542.205364][ T30] audit: type=1326 audit(1753460951.855:393): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10758 comm="syz.8.1074" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7fccfbd90774 code=0x7ffc0000 [ 542.230301][ T30] audit: type=1326 audit(1753460951.855:394): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10758 comm="syz.8.1074" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7fccfbd8d60a code=0x7ffc0000 [ 542.251882][ T30] audit: type=1326 audit(1753460951.855:395): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10758 comm="syz.8.1074" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fccfbd8e9a9 code=0x7ffc0000 [ 542.294183][ T30] audit: type=1326 audit(1753460951.855:396): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10758 comm="syz.8.1074" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fccfbd8e9a9 code=0x7ffc0000 [ 543.019590][ T30] audit: type=1326 audit(1753460951.855:397): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10758 comm="syz.8.1074" exe="/root/syz-executor" sig=0 arch=c000003e syscall=239 compat=0 ip=0x7fccfbd8e9a9 code=0x7ffc0000 [ 543.134257][T10785] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 545.127154][T10794] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1082'. [ 545.619602][T10807] hub 6-0:1.0: USB hub found [ 545.625797][T10807] hub 6-0:1.0: 1 port detected [ 546.419781][T10806] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1086'. [ 546.452878][T10801] siw: device registration error -23 [ 546.744880][T10815] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 547.156587][T10821] IPVS: set_ctl: invalid protocol: 98 0.0.0.0:20000 [ 547.185996][ T30] kauditd_printk_skb: 2 callbacks suppressed [ 547.186011][ T30] audit: type=1326 audit(1753460957.025:400): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10818 comm="syz.8.1091" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fccfbd8e9a9 code=0x7ffc0000 [ 547.438314][ T30] audit: type=1326 audit(1753460957.025:401): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10818 comm="syz.8.1091" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fccfbd8e9a9 code=0x7ffc0000 [ 547.569714][ T30] audit: type=1326 audit(1753460957.065:402): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10818 comm="syz.8.1091" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fccfbd908c7 code=0x7ffc0000 [ 547.634707][ T30] audit: type=1326 audit(1753460957.065:403): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10818 comm="syz.8.1091" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7fccfbd9083c code=0x7ffc0000 [ 547.808641][ T30] audit: type=1326 audit(1753460957.065:404): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10818 comm="syz.8.1091" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7fccfbd90774 code=0x7ffc0000 [ 547.845849][T10825] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1093'. [ 547.873819][T10828] bpq0: left allmulticast mode [ 547.882385][ T30] audit: type=1326 audit(1753460957.065:405): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10818 comm="syz.8.1091" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7fccfbd90774 code=0x7ffc0000 [ 547.919150][T10828] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1094'. [ 547.963022][ T30] audit: type=1326 audit(1753460957.065:406): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10818 comm="syz.8.1091" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7fccfbd8d60a code=0x7ffc0000 [ 548.011691][ T30] audit: type=1326 audit(1753460957.065:407): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10818 comm="syz.8.1091" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fccfbd8e9a9 code=0x7ffc0000 [ 548.128224][ T30] audit: type=1326 audit(1753460957.065:408): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10818 comm="syz.8.1091" exe="/root/syz-executor" sig=0 arch=c000003e syscall=239 compat=0 ip=0x7fccfbd8e9a9 code=0x7ffc0000 [ 548.163771][ T30] audit: type=1326 audit(1753460957.065:409): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10818 comm="syz.8.1091" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fccfbd8e9a9 code=0x7ffc0000 [ 548.272021][T10834] netlink: 96 bytes leftover after parsing attributes in process `syz.8.1097'. [ 549.005400][T10842] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 549.356726][T10849] bpq0: entered allmulticast mode [ 549.443993][T10851] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1102'. [ 550.449718][T10857] IPVS: set_ctl: invalid protocol: 98 0.0.0.0:20000 [ 550.851547][T10865] bpq0: left allmulticast mode [ 550.860894][T10865] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1108'. [ 550.960589][T10869] hub 6-0:1.0: USB hub found [ 550.967221][T10869] hub 6-0:1.0: 1 port detected [ 552.276757][T10872] netlink: 96 bytes leftover after parsing attributes in process `syz.0.1110'. [ 553.007185][T10884] Cannot find add_set index 0 as target [ 553.619599][ T10] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 554.109822][ T10] usb 6-1: Using ep0 maxpacket: 16 [ 554.147333][ T10] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 554.207693][ T10] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 554.264541][ T10] usb 6-1: config 0 interface 0 has no altsetting 0 [ 554.323740][ T10] usb 6-1: New USB device found, idVendor=0458, idProduct=0138, bcdDevice= 0.00 [ 554.355596][ T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 554.762723][ T5883] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 554.772981][T10896] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 554.819969][ T10] usb 6-1: config 0 descriptor?? [ 554.979141][ T5883] usb 1-1: Using ep0 maxpacket: 16 [ 555.004464][ T5883] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 555.089504][ T5883] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 555.127194][ T5883] usb 1-1: config 0 interface 0 has no altsetting 0 [ 555.146845][ T5883] usb 1-1: New USB device found, idVendor=0458, idProduct=0138, bcdDevice= 0.00 [ 555.180584][ T5883] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 555.409017][ T5883] usb 1-1: config 0 descriptor?? [ 555.608745][T10898] IPVS: set_ctl: invalid protocol: 98 0.0.0.0:20000 [ 555.671307][ T30] kauditd_printk_skb: 13 callbacks suppressed [ 555.671327][ T30] audit: type=1326 audit(1753460965.515:423): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10897 comm="syz.3.1117" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f471c98e9a9 code=0x7ffc0000 [ 555.791787][ T30] audit: type=1326 audit(1753460965.515:424): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10897 comm="syz.3.1117" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f471c98e9a9 code=0x7ffc0000 [ 555.947984][ T5883] kye 0003:0458:0138.000B: unknown main item tag 0x4 [ 555.990518][ T5883] kye 0003:0458:0138.000B: unexpected long global item [ 556.047622][ T5883] kye 0003:0458:0138.000B: parse failed [ 556.089007][ T5883] kye 0003:0458:0138.000B: probe with driver kye failed with error -22 [ 556.197720][T10910] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1120'. [ 556.207380][T10910] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1120'. [ 556.217152][T10910] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1120'. [ 556.411843][ T10] usbhid 6-1:0.0: can't add hid device: -71 [ 556.773772][ T10] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 557.451595][ T10] usb 6-1: USB disconnect, device number 17 [ 557.545887][T10917] netlink: 36 bytes leftover after parsing attributes in process `syz.8.1121'. [ 557.555382][T10917] netlink: 36 bytes leftover after parsing attributes in process `syz.8.1121'. [ 557.568964][T10917] netlink: 36 bytes leftover after parsing attributes in process `syz.8.1121'. [ 558.866179][T10921] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1123'. [ 559.661756][T10923] netlink: 96 bytes leftover after parsing attributes in process `syz.5.1125'. [ 559.739920][T10029] usb 1-1: USB disconnect, device number 18 [ 561.073704][ T9296] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 562.090018][ T5924] usb 9-1: new high-speed USB device number 13 using dummy_hcd [ 562.119359][ T9296] usb 6-1: Using ep0 maxpacket: 16 [ 562.139398][T10944] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1132'. [ 562.569803][ T9296] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 562.596748][ T9296] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 562.609274][ T9296] usb 6-1: config 0 interface 0 has no altsetting 0 [ 562.619654][ T5924] usb 9-1: Using ep0 maxpacket: 16 [ 562.630903][ T5924] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 562.644961][ T9296] usb 6-1: New USB device found, idVendor=0458, idProduct=0138, bcdDevice= 0.00 [ 562.654424][ T5924] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 562.665772][ T9296] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 562.684620][ T5924] usb 9-1: config 0 interface 0 has no altsetting 0 [ 563.025675][ T5924] usb 9-1: New USB device found, idVendor=0458, idProduct=0138, bcdDevice= 0.00 [ 563.116495][ T5924] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 563.233103][ T9296] usb 6-1: config 0 descriptor?? [ 563.413807][T10959] netlink: 96 bytes leftover after parsing attributes in process `syz.8.1137'. [ 563.488704][ T9296] usb 6-1: can't set config #0, error -71 [ 563.499023][ T9296] usb 6-1: USB disconnect, device number 18 [ 563.520617][ T5924] usb 9-1: config 0 descriptor?? [ 563.539156][ T5924] usb 9-1: can't set config #0, error -71 [ 563.614399][T10962] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 564.242850][ T5924] usb 9-1: USB disconnect, device number 13 [ 565.440374][T10029] usb 8-1: new high-speed USB device number 26 using dummy_hcd [ 565.679457][T10029] usb 8-1: Using ep0 maxpacket: 16 [ 565.688054][T10029] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 565.715392][T10029] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 565.739413][T10029] usb 8-1: config 0 interface 0 has no altsetting 0 [ 565.746898][T10029] usb 8-1: New USB device found, idVendor=0458, idProduct=0138, bcdDevice= 0.00 [ 565.758165][T10029] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 565.767614][T10986] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1144'. [ 565.791710][T10029] usb 8-1: config 0 descriptor?? [ 565.914258][T10990] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1145'. [ 567.055756][T10029] kye 0003:0458:0138.000C: unknown main item tag 0x4 [ 567.073815][T10029] kye 0003:0458:0138.000C: unexpected long global item [ 567.105694][T10029] kye 0003:0458:0138.000C: parse failed [ 567.119997][T10029] kye 0003:0458:0138.000C: probe with driver kye failed with error -22 [ 567.186603][T10995] netlink: 96 bytes leftover after parsing attributes in process `syz.3.1147'. [ 567.343025][T10996] syz.5.1146: attempt to access beyond end of device [ 567.343025][T10996] nbd5: rw=0, sector=0, nr_sectors = 1 limit=0 [ 567.356553][T10996] (syz.5.1146,10996,0):ocfs2_get_sector:1714 ERROR: status = -5 [ 567.364796][T10996] (syz.5.1146,10996,0):ocfs2_sb_probe:753 ERROR: status = -5 [ 567.372689][T10996] (syz.5.1146,10996,0):ocfs2_fill_super:989 ERROR: superblock probe failed! [ 567.381904][T10996] (syz.5.1146,10996,0):ocfs2_fill_super:1177 ERROR: status = -5 [ 568.345372][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 568.450438][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 568.585964][T10998] 9pnet_fd: Insufficient options for proto=fd [ 568.660933][ T9296] usb 8-1: USB disconnect, device number 26 [ 569.104853][T11009] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 569.990418][T11018] netlink: 36 bytes leftover after parsing attributes in process `syz.7.1155'. [ 570.001912][T11018] netlink: 36 bytes leftover after parsing attributes in process `syz.7.1155'. [ 570.015148][T11018] netlink: 36 bytes leftover after parsing attributes in process `syz.7.1155'. [ 570.323343][T11021] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 573.349003][T11026] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1156'. [ 573.675852][T11033] netlink: 96 bytes leftover after parsing attributes in process `syz.3.1158'. [ 574.746511][T11041] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 575.883173][T11043] 9pnet_fd: Insufficient options for proto=fd [ 576.009532][ T5924] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 576.717554][T11054] Cannot find add_set index 0 as target [ 576.766525][ T5924] usb 4-1: Using ep0 maxpacket: 16 [ 576.990694][ T5924] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 577.070247][ T5924] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 577.095422][ T5924] usb 4-1: config 0 interface 0 has no altsetting 0 [ 577.151314][T11049] netlink: 'syz.0.1164': attribute type 2 has an invalid length. [ 577.159599][T11049] netlink: 'syz.0.1164': attribute type 1 has an invalid length. [ 577.176674][ T5924] usb 4-1: New USB device found, idVendor=0458, idProduct=0138, bcdDevice= 0.00 [ 577.260316][ T5924] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 577.273595][ T5924] usb 4-1: config 0 descriptor?? [ 577.927433][ T5924] kye 0003:0458:0138.000D: unknown main item tag 0x4 [ 577.958422][ T5924] kye 0003:0458:0138.000D: unexpected long global item [ 577.993673][ T5924] kye 0003:0458:0138.000D: parse failed [ 578.015565][ T5924] kye 0003:0458:0138.000D: probe with driver kye failed with error -22 [ 579.899309][T10029] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 579.909850][ T10] usb 4-1: USB disconnect, device number 23 [ 580.061285][T10029] usb 1-1: Using ep0 maxpacket: 16 [ 580.100687][T10029] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 580.149057][T10029] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 580.163269][T10029] usb 1-1: config 0 interface 0 has no altsetting 0 [ 580.170511][T10029] usb 1-1: New USB device found, idVendor=0458, idProduct=0138, bcdDevice= 0.00 [ 580.179872][T10029] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 580.207893][T10029] usb 1-1: config 0 descriptor?? [ 580.861711][T10029] kye 0003:0458:0138.000E: unknown main item tag 0x4 [ 581.172251][T10029] kye 0003:0458:0138.000E: unexpected long global item [ 582.316169][T10029] kye 0003:0458:0138.000E: parse failed [ 582.350171][T10029] kye 0003:0458:0138.000E: probe with driver kye failed with error -22 [ 582.382666][T10029] usb 1-1: USB disconnect, device number 19 [ 582.565062][T11089] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1176'. [ 582.949142][T11090] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1174'. [ 583.216439][T11093] syz.0.1175: attempt to access beyond end of device [ 583.216439][T11093] nbd0: rw=0, sector=0, nr_sectors = 1 limit=0 [ 583.229638][T11093] (syz.0.1175,11093,0):ocfs2_get_sector:1714 ERROR: status = -5 [ 583.237453][T11093] (syz.0.1175,11093,0):ocfs2_sb_probe:753 ERROR: status = -5 [ 583.245320][T11093] (syz.0.1175,11093,0):ocfs2_fill_super:989 ERROR: superblock probe failed! [ 583.254523][T11093] (syz.0.1175,11093,0):ocfs2_fill_super:1177 ERROR: status = -5 [ 585.241018][ T9296] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 585.509347][ T9296] usb 6-1: Using ep0 maxpacket: 16 [ 585.517274][ T9296] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 585.530063][ T9296] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 585.559114][ T9296] usb 6-1: config 0 interface 0 has no altsetting 0 [ 585.565820][ T9296] usb 6-1: New USB device found, idVendor=0458, idProduct=0138, bcdDevice= 0.00 [ 585.589160][ T9296] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 585.615074][ T9296] usb 6-1: config 0 descriptor?? [ 585.899924][T11094] netlink: 'syz.3.1177': attribute type 2 has an invalid length. [ 585.979143][T11094] netlink: 'syz.3.1177': attribute type 1 has an invalid length. [ 586.440181][T11119] Cannot find add_set index 0 as target [ 588.786198][ T51] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 588.798751][ T51] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 588.819222][ T51] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 588.851817][ T51] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 588.869440][ T51] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 589.500848][ T5910] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 589.659728][ T5910] usb 1-1: Using ep0 maxpacket: 16 [ 589.675439][ T5910] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 589.700253][ T5910] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 589.726342][ T5910] usb 1-1: config 0 interface 0 has no altsetting 0 [ 589.744976][ T6273] netdevsim netdevsim7 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 589.749202][ T5910] usb 1-1: New USB device found, idVendor=0458, idProduct=0138, bcdDevice= 0.00 [ 589.784572][T11129] lo speed is unknown, defaulting to 1000 [ 589.793995][ T5910] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 589.820149][ T5910] usb 1-1: config 0 descriptor?? [ 589.836273][ T6273] netdevsim netdevsim7 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 589.904105][T11145] IPVS: set_ctl: invalid protocol: 98 0.0.0.0:20000 [ 589.918629][ T9296] usbhid 6-1:0.0: can't add hid device: -71 [ 589.934606][ T9296] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 589.945146][ T30] audit: type=1326 audit(1753460999.785:425): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11143 comm="syz.3.1188" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f471c98e9a9 code=0x7ffc0000 [ 589.974618][ T30] audit: type=1326 audit(1753460999.785:426): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11143 comm="syz.3.1188" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f471c9908c7 code=0x7ffc0000 [ 590.014808][ T9296] usb 6-1: USB disconnect, device number 19 [ 590.042972][ T6273] netdevsim netdevsim7 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 590.076702][ T30] audit: type=1326 audit(1753460999.785:427): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11143 comm="syz.3.1188" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7f471c99083c code=0x7ffc0000 [ 590.112049][ T30] audit: type=1326 audit(1753460999.785:428): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11143 comm="syz.3.1188" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7f471c990774 code=0x7ffc0000 [ 590.139844][ T30] audit: type=1326 audit(1753460999.785:429): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11143 comm="syz.3.1188" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7f471c990774 code=0x7ffc0000 [ 590.166879][ T30] audit: type=1326 audit(1753460999.785:430): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11143 comm="syz.3.1188" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f471c98d60a code=0x7ffc0000 [ 591.348305][ T5851] Bluetooth: hci0: command tx timeout [ 591.406887][ T5910] kye 0003:0458:0138.000F: unknown main item tag 0x4 [ 591.430177][ T30] audit: type=1326 audit(1753460999.785:431): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11143 comm="syz.3.1188" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f471c98e9a9 code=0x7ffc0000 [ 591.452233][ T5910] kye 0003:0458:0138.000F: unexpected long global item [ 591.519870][ T5910] kye 0003:0458:0138.000F: parse failed [ 591.525597][ T5910] kye 0003:0458:0138.000F: probe with driver kye failed with error -22 [ 591.629823][ T30] audit: type=1326 audit(1753460999.785:432): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11143 comm="syz.3.1188" exe="/root/syz-executor" sig=0 arch=c000003e syscall=239 compat=0 ip=0x7f471c98e9a9 code=0x7ffc0000 [ 591.732478][ T6273] netdevsim netdevsim7 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 591.749266][ T5910] usb 1-1: USB disconnect, device number 20 [ 592.086810][ T30] audit: type=1326 audit(1753460999.785:433): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11143 comm="syz.3.1188" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f471c98e9a9 code=0x7ffc0000 [ 592.141481][ T30] audit: type=1326 audit(1753460999.785:434): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11143 comm="syz.3.1188" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f471c98e9a9 code=0x7ffc0000 [ 592.501311][T11160] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 593.359221][ T5851] Bluetooth: hci0: command tx timeout [ 594.175210][T11129] chnl_net:caif_netlink_parms(): no params data found [ 594.296191][ T6273] bridge_slave_1: left allmulticast mode [ 594.326886][ T6273] bridge_slave_1: left promiscuous mode [ 594.350955][ T6273] bridge0: port 2(bridge_slave_1) entered disabled state [ 594.375005][ T6273] bridge_slave_0: left allmulticast mode [ 594.383490][ T6273] bridge_slave_0: left promiscuous mode [ 594.400471][ T6273] bridge0: port 1(bridge_slave_0) entered disabled state [ 595.450361][ T5851] Bluetooth: hci0: command tx timeout [ 595.639706][ T5883] usb 9-1: new high-speed USB device number 14 using dummy_hcd [ 595.753054][ T6273] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 595.765172][ T6273] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 595.777223][ T6273] bond0 (unregistering): Released all slaves [ 595.795293][T11177] netlink: 96 bytes leftover after parsing attributes in process `syz.3.1197'. [ 595.804776][ T5883] usb 9-1: Using ep0 maxpacket: 16 [ 595.817095][ T5883] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 595.840834][ T5883] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 595.864030][ T5883] usb 9-1: config 0 interface 0 has no altsetting 0 [ 595.876640][ T5883] usb 9-1: New USB device found, idVendor=0458, idProduct=0138, bcdDevice= 0.00 [ 595.889865][ T5883] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 595.904145][ T5883] usb 9-1: config 0 descriptor?? [ 596.356143][ T5883] kye 0003:0458:0138.0010: unknown main item tag 0x4 [ 596.369302][ T5883] kye 0003:0458:0138.0010: unexpected long global item [ 596.377250][ T5883] kye 0003:0458:0138.0010: parse failed [ 596.398111][ T5883] kye 0003:0458:0138.0010: probe with driver kye failed with error -22 [ 596.434138][T11198] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1201'. [ 596.459363][T11198] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1201'. [ 596.490570][T11198] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1201'. [ 596.683612][T11198] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1201'. [ 596.708496][T11129] bridge0: port 1(bridge_slave_0) entered blocking state [ 596.722353][T11198] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1201'. [ 596.736163][T11129] bridge0: port 1(bridge_slave_0) entered disabled state [ 596.755736][T11129] bridge_slave_0: entered allmulticast mode [ 596.765086][T11198] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1201'. [ 596.780370][T11129] bridge_slave_0: entered promiscuous mode [ 596.824971][T11129] bridge0: port 2(bridge_slave_1) entered blocking state [ 596.882873][T11129] bridge0: port 2(bridge_slave_1) entered disabled state [ 596.909377][T11129] bridge_slave_1: entered allmulticast mode [ 596.935992][T11129] bridge_slave_1: entered promiscuous mode [ 597.071670][T11198] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1201'. [ 597.085197][T11198] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1201'. [ 597.100140][T11198] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1201'. [ 597.645456][ T5851] Bluetooth: hci0: command tx timeout [ 597.710479][ T5910] usb 9-1: USB disconnect, device number 14 [ 597.977361][ T6273] hsr_slave_0: left promiscuous mode [ 598.003826][ T6273] hsr_slave_1: left promiscuous mode [ 598.147774][ T6273] veth1_macvtap: left promiscuous mode [ 598.153959][ T6273] veth0_macvtap: left promiscuous mode [ 598.164719][ T6273] veth1_vlan: left promiscuous mode [ 598.176516][ T6273] veth0_vlan: left promiscuous mode [ 598.937836][T11238] siw: device registration error -23 [ 599.098925][ T5910] usb 1-1: new full-speed USB device number 21 using dummy_hcd [ 599.572633][ T5910] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 599.616337][ T5910] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 599.774384][ T5910] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.00 [ 599.783874][ T5910] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 599.792678][ T5910] usb 1-1: SerialNumber: syz [ 599.903451][ T5910] usb 1-1: 0:2 : does not exist [ 600.454366][ T6273] team0 (unregistering): Port device team_slave_1 removed [ 600.497475][ T6273] team0 (unregistering): Port device team_slave_0 removed [ 601.828133][T11129] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 601.841413][T11129] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 601.855336][T11235] __nla_validate_parse: 3 callbacks suppressed [ 601.855357][T11235] netlink: 17279 bytes leftover after parsing attributes in process `syz.3.1207'. [ 601.879286][T11237] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1204'. [ 601.946904][ T3089] usb 1-1: USB disconnect, device number 21 [ 601.998311][T11259] bpq0: entered allmulticast mode [ 603.112350][T11129] team0: Port device team_slave_0 added [ 603.144063][T11273] bpq0: left allmulticast mode [ 603.165524][T11280] netlink: 36 bytes leftover after parsing attributes in process `syz.8.1215'. [ 603.174864][T11280] netlink: 36 bytes leftover after parsing attributes in process `syz.8.1215'. [ 603.189011][T11280] netlink: 36 bytes leftover after parsing attributes in process `syz.8.1215'. [ 603.270605][T11129] team0: Port device team_slave_1 added [ 603.889932][T11129] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 603.896952][T11129] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 603.961200][T11129] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 604.010363][T11129] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 604.017477][T11129] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 604.077778][T11129] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 604.119918][ T5928] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 604.371838][ T5928] usb 6-1: Using ep0 maxpacket: 16 [ 604.389485][ T5928] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 604.421993][ T5928] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 604.454142][T11129] hsr_slave_0: entered promiscuous mode [ 604.494730][ T5928] usb 6-1: config 0 interface 0 has no altsetting 0 [ 604.511057][T11129] hsr_slave_1: entered promiscuous mode [ 604.517239][T11129] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 604.543058][ T5928] usb 6-1: New USB device found, idVendor=0458, idProduct=0138, bcdDevice= 0.00 [ 604.567331][T11129] Cannot create hsr debugfs directory [ 604.574236][ T5928] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 604.617611][ T5928] usb 6-1: config 0 descriptor?? [ 604.899314][ T5883] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 605.004928][T11302] Oops: general protection fault, probably for non-canonical address 0xdffffc001fffe000: 0000 [#1] SMP KASAN PTI [ 605.016875][T11302] KASAN: probably user-memory-access in range [0x00000000ffff0000-0x00000000ffff0007] [ 605.026450][T11302] CPU: 0 UID: 0 PID: 11302 Comm: dhcpcd-run-hook Not tainted 6.16.0-rc7-syzkaller-00105-g2942242dde89 #0 PREEMPT(full) [ 605.038975][T11302] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 605.049085][T11302] RIP: 0010:percpu_ref_get_many+0x8d/0x140 [ 605.054963][T11302] Code: 01 48 c7 c7 40 2b 98 8b be 4b 03 00 00 48 c7 c2 80 2b 98 8b e8 54 b8 75 ff 49 bc 00 00 00 00 00 fc ff df 4c 89 f8 48 c1 e8 03 <42> 80 3c 20 00 74 08 4c 89 ff e8 b4 60 f7 ff 49 8b 07 a8 03 75 62 [ 605.074648][T11302] RSP: 0018:ffffc9000b077398 EFLAGS: 00010206 [ 605.080751][T11302] RAX: 000000001fffe000 RBX: ffffffff8228abc9 RCX: f671a9bd7854ca00 [ 605.088745][T11302] RDX: 0000000000000000 RSI: ffffffff8be1ba60 RDI: ffffffff8be1ba20 [ 605.096739][T11302] RBP: 0000000000000078 R08: 0000000000000000 R09: ffffffff8228abc9 [ 605.104734][T11302] R10: dffffc0000000000 R11: fffffbfff1f4167f R12: dffffc0000000000 [ 605.112734][T11302] R13: ffff8880b863b3c0 R14: 0000000000000001 R15: 00000000ffff0000 [ 605.120721][T11302] FS: 0000000000000000(0000) GS:ffff888125c57000(0000) knlGS:0000000000000000 [ 605.129679][T11302] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 605.136277][T11302] CR2: 00007f8bfeaef286 CR3: 00000000252e4000 CR4: 00000000003526f0 [ 605.144271][T11302] Call Trace: [ 605.147566][T11302] [ 605.150512][T11302] refill_obj_stock+0x254/0x850 [ 605.155405][T11302] ? refill_obj_stock+0x116/0x850 [ 605.160462][T11302] __memcg_slab_free_hook+0x127/0x3d0 [ 605.165868][T11302] ? unlink_anon_vmas+0x614/0x670 [ 605.170937][T11302] kmem_cache_free+0x223/0x400 [ 605.175719][T11302] unlink_anon_vmas+0x614/0x670 [ 605.180591][T11302] free_pgtables+0x7bf/0xaf0 [ 605.185207][T11302] ? __pfx_free_pgtables+0x10/0x10 [ 605.190379][T11302] ? __pfx_down_write+0x10/0x10 [ 605.195255][T11302] ? __mas_set_range+0x12f/0x3c0 [ 605.200221][T11302] exit_mmap+0x444/0xb50 [ 605.204483][T11302] ? uprobe_clear_state+0x20f/0x290 [ 605.209711][T11302] ? __pfx_exit_mmap+0x10/0x10 [ 605.214492][T11302] ? __mutex_unlock_slowpath+0x1cd/0x700 [ 605.220156][T11302] ? __pfx_exit_aio+0x10/0x10 [ 605.224857][T11302] ? uprobe_clear_state+0x274/0x290 [ 605.230073][T11302] __mmput+0x118/0x410 [ 605.234159][T11302] exec_mmap+0x680/0x7a0 [ 605.238427][T11302] ? generic_permission+0x2e5/0x690 [ 605.243677][T11302] ? __pfx_exec_mmap+0x10/0x10 [ 605.248472][T11302] begin_new_exec+0x129c/0x2120 [ 605.253358][T11302] ? __pfx_load_elf_phdrs+0x10/0x10 [ 605.258578][T11302] load_elf_binary+0x96a/0x2790 [ 605.263477][T11302] ? load_elf_binary+0x861/0x2790 [ 605.268611][T11302] ? load_misc_binary+0x110/0xc40 [ 605.273657][T11302] ? __lock_acquire+0xab9/0xd20 [ 605.278530][T11302] ? __pfx_load_elf_binary+0x10/0x10 [ 605.283846][T11302] bprm_execve+0x999/0x1440 [ 605.288383][T11302] ? __pfx_bprm_execve+0x10/0x10 [ 605.293353][T11302] do_execveat_common+0x510/0x6a0 [ 605.298402][T11302] __x64_sys_execve+0x94/0xb0 [ 605.303109][T11302] do_syscall_64+0xfa/0x3b0 [ 605.307633][T11302] ? lockdep_hardirqs_on+0x9c/0x150 [ 605.312852][T11302] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 605.318959][T11302] ? clear_bhb_loop+0x60/0xb0 [ 605.323677][T11302] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 605.329594][T11302] RIP: 0033:0x7f8bfea35107 [ 605.334089][T11302] Code: Unable to access opcode bytes at 0x7f8bfea350dd. [ 605.341139][T11302] RSP: 002b:00007ffecf41dfb8 EFLAGS: 00000246 ORIG_RAX: 000000000000003b [ 605.349584][T11302] RAX: ffffffffffffffda RBX: 000055619c429078 RCX: 00007f8bfea35107 [ 605.357601][T11302] RDX: 000055619c4290a0 RSI: 000055619c429078 RDI: 000055619c429130 [ 605.365595][T11302] RBP: 000055619c429130 R08: 00007ffecf423ded R09: 0000000000000000 [ 605.373583][T11302] R10: 0000000000000008 R11: 0000000000000246 R12: 000055619c4290a0 [ 605.381921][T11302] R13: 00007f8bfebfae8b R14: 000055619c4290a0 R15: 0000000000000000 [ 605.389918][T11302] [ 605.392964][T11302] Modules linked in: [ 605.398142][T11302] ---[ end trace 0000000000000000 ]--- [ 605.404239][T11302] RIP: 0010:percpu_ref_get_many+0x8d/0x140 [ 605.410184][T11302] Code: 01 48 c7 c7 40 2b 98 8b be 4b 03 00 00 48 c7 c2 80 2b 98 8b e8 54 b8 75 ff 49 bc 00 00 00 00 00 fc ff df 4c 89 f8 48 c1 e8 03 <42> 80 3c 20 00 74 08 4c 89 ff e8 b4 60 f7 ff 49 8b 07 a8 03 75 62 [ 605.429936][T11302] RSP: 0018:ffffc9000b077398 EFLAGS: 00010206 [ 605.436183][T11302] RAX: 000000001fffe000 RBX: ffffffff8228abc9 RCX: f671a9bd7854ca00 [ 605.444279][T11302] RDX: 0000000000000000 RSI: ffffffff8be1ba60 RDI: ffffffff8be1ba20 [ 605.452463][T11302] RBP: 0000000000000078 R08: 0000000000000000 R09: ffffffff8228abc9 [ 605.460552][T11302] R10: dffffc0000000000 R11: fffffbfff1f4167f R12: dffffc0000000000 [ 605.468588][T11302] R13: ffff8880b863b3c0 R14: 0000000000000001 R15: 00000000ffff0000 [ 605.476685][T11302] FS: 0000000000000000(0000) GS:ffff888125c57000(0000) knlGS:0000000000000000 [ 605.485738][T11302] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 605.492583][T11302] CR2: 00007f8bfea350dd CR3: 00000000252e4000 CR4: 00000000003526f0 [ 605.501239][T11302] Kernel panic - not syncing: Fatal exception [ 605.507645][T11302] Kernel Offset: disabled [ 605.511989][T11302] Rebooting in 86400 seconds..