last executing test programs: 39.221997127s ago: executing program 4 (id=301): r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0) read$FUSE(r0, &(0x7f0000000840)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x0) socket$inet(0xa, 0x801, 0x84) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000280)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r4 = accept4(r3, 0x0, 0x0, 0x80800) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000002b00)=ANY=[@ANYRESOCT=r2, @ANYBLOB="858931fc781120c0078d2c92f8b08a495d17183ab5668847363bd0784d8c133265233fc5aae14d3fbce2a5a2a5f6f043e4de6740a56c4ce49f9965f14ce525ff6ae952b66348bd2c912d6c02efe8496df7b926cc13535623e321f94809a976aef2112601158b5703e06a7d9dcc49fe8bc0ea91bd016efad8d63ab95ae7d0cf25de2aad4c721e85a1fee8a8209f94ee0eb131344f5052ad446513f231aa66ce33878025f5729de2e1ae959e8c4f42fc5c2faaefef47a1ad77160ea35a9d4a511907f1edbd282b04a4250f5ff82bcde3841558960338a8b5d962", @ANYBLOB="7000fcdbdf250600000000000002f495715e636728581a10bd4f128a75ff42c8ef225237b0ddb08864ea7f2dbb6efdb28420bea066c51298da2b0e01d0b9f97d73da0d69f1ab55fa9d66ffae410d0c9b8f16421d8726dc62ad1d50d9041ac9ee43ab4759edb0fed8a3196efd6b25ca01ee328f8d8e40381494b4ecc888b30757edae685d8e9f9664d44aa58437fdece7381ea1f6e4a0854460d078cfe2a0f994c0795273ac35c26d1c8e6800e7656f5f574c0278ed68db29970c2fcf8c168ccb6734d8081eb800f5ef32af79c0d0739419be48094aa81fc90aa34cb24efcb32df0fa9055f112d99c9290f20c626a6404a5ae44e02fcd1f47baf38eff08ee89128bf62f858357f11dfe78bb24cb05870fa657ce1586161534b37601934ef5a7af38de89752097ed38c98e676a7c943f9fffe25f43a72a332afd83758942d2df1664af43b910973488a7811980b2c39aec323df2221b6a12574abbc2d0bb3e855191494f714f3a2c2c62d1735909eeab0b59730824bc991f913e5727e55ea75849c8acf2836958c197f86ae3d7eb4db34a27336decff"], 0x14}, 0x1, 0x0, 0x0, 0x24000895}, 0x20010c00) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) socket$nl_xfrm(0x10, 0x3, 0x6) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1900000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) unshare(0x2a020480) pselect6(0x40, &(0x7f00000001c0)={0x1, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f0000000000)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x1, 0x7fffffff}, 0x0, 0x0) r6 = socket$inet(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r6, 0x4000000000000, 0x40, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xc, 0x80000100008b}, 0x0) sched_setscheduler(r1, 0x5, &(0x7f00000000c0)=0x8) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r7 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r7, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r8 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r8, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r8, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$sock_int(r7, 0x1, 0x8, &(0x7f0000000000), 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r7) sendmsg$netlink(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)=ANY=[@ANYBLOB="1c0000002d002100000000000000000004"], 0x1c}], 0x1}, 0x0) syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) 35.272619359s ago: executing program 4 (id=316): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000400)=0x7) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) mknod$loop(&(0x7f0000000180)='./file0\x00', 0x6000, 0x0) r1 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) dup2(r1, r1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=ANY=[@ANYBLOB="2c0000001900010900000000"], 0x2c}, 0x1, 0x0, 0x0, 0x40080}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) preadv(0xffffffffffffffff, &(0x7f00000007c0)=[{0x0}], 0x1, 0x100, 0x400005) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$inet6_tcp(0xa, 0x1, 0x0) r6 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) r7 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) r8 = dup3(r7, r6, 0x0) ioctl$DRM_IOCTL_SET_MASTER(r8, 0x641e) 34.128915248s ago: executing program 4 (id=319): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) syz_emit_ethernet(0xa5b, 0x0, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) openat$dir(0xffffffffffffff9c, 0x0, 0x313002, 0x49) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r2, 0xc0502100, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r2, 0xc0182101, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r2, 0xc0502100, &(0x7f0000000380)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r2, 0x40182103, &(0x7f0000000240)={r3, 0x1, r2, 0x6}) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r2, 0xc0182101, &(0x7f0000000280)={r3, 0x0, 0x5}) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd', @ANYRESHEX=r1, @ANYBLOB=',rootmode=0000000000000000010000', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r1, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r1, &(0x7f0000000040)={0xffffffffffffff97, 0x0, r4, {0x7, 0x1f, 0x4b8cf99a, 0xffffffffde498422, 0x2, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x40, 0x8008}}, 0x50) syz_fuse_handle_req(r1, &(0x7f0000004200)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d838aae8c05dd22d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20, 0x0, 0x3731, {0x0, 0x7f69ff17f1e1ab77}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0xc5001, 0x104) write$FUSE_CREATE_OPEN(r5, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="05000000040000000800000008"], 0x50) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) ioctl$SIOCX25SCUDMATCHLEN(r5, 0x89e7, &(0x7f0000000400)={0x78}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a40)={&(0x7f0000000980)='sys_enter\x00', r8}, 0x10) link(0x0, 0x0) r9 = timerfd_create(0x0, 0x800) timerfd_gettime(r9, &(0x7f0000000000)) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r6, 0x0, r10, 0x0, 0x7, 0x9) write$P9_RWRITE(r10, &(0x7f0000000040)={0xb, 0x77, 0x810}, 0x11000) 33.437865414s ago: executing program 2 (id=320): socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0b00000005000000020000000100000005"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r0, 0x2000000, 0xe, 0x0, &(0x7f0000000500)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 32.722911937s ago: executing program 1 (id=321): ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000100)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xbb3}}, './file0\x00'}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x1, 0x0, 0x0, 0x4}, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2, 0x0, 0xfffffffffffffffe}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='timerslack_ns\x00') setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f00000003c0)=@filter={'filter\x00', 0x42, 0x4, 0x338, 0xffffffff, 0x1a8, 0xb0, 0x1a8, 0xffffffff, 0xffffffff, 0x2a0, 0x2a0, 0x2a0, 0xffffffff, 0x5, 0x0, {[{{@ip={@rand_addr=0x64010102, @broadcast, 0x0, 0x0, 'wg1\x00', 'nr0\x00'}, 0x74, 0x70, 0xb0, 0x1ba, {0x46010000}}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x0, 0x0, "6bc128419cfb67daad5b4809088400ed0000000000000000000100040500"}}}, {{@uncond, 0x287, 0xd0, 0xf8, 0x0, {}, [@common=@unspec=@cpu={{0x28}, {0x0, 0xfffffffe}}, @common=@unspec=@statistic={{0x38}, {0x7400}}]}, @REJECT={0x28}}, {{@uncond, 0x0, 0x98, 0xf8, 0x0, {}, [@common=@inet=@set1={{0x28}}]}, @common=@SET={0x60}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x398) io_uring_setup(0x1f72, &(0x7f0000000080)={0x0, 0x762d, 0x8000, 0x2, 0x1d7}) mbind(&(0x7f0000bdc000/0x3000)=nil, 0x3000, 0x1, &(0x7f0000000140)=0x3ff, 0x3, 0x0) ioctl$VIDIOC_QUERYMENU(r0, 0xc02c5625, &(0x7f0000000180)={0x8000, 0xc5fb, @name="296a0ca054159e60478ab0f586f1aa785be6854a3e4fe8319ae5462ba53702b3"}) r6 = add_key$user(&(0x7f0000000040), &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000080)="bc5dfc7fbbbc5b58c2", 0x9, 0xfffffffffffffffe) r7 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r6, r7, r6}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0) 32.641445584s ago: executing program 2 (id=322): r0 = gettid() waitid(0x2, r0, 0xfffffffffffffffd, 0x8, 0x0) memfd_secret(0x80000) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000200)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r2, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f000001fb40)={0x1c, r1, 0xb97534d5fe9704cf, 0x0, 0x25dfdbff, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0) add_key(0x0, &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffc) socket$netlink(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x87}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x8000002000000, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000180)='rootcontext', &(0x7f0000000300)='5\xfd\x04\xc6\xc9]\v\xd6S9q\x0f#\x93\x9d\xeb\x00\xcf\xb2~9*\xa9\x1d:\x06u46N\xd93\xe1\xa2\x05\x83Z\xbc\xbeT\x16\xab\xfb=4\xa6\x10,\"\xee\xf8o+\x02\xd8\xaft_\r\x1d\"\xc8\\k\xcc4\x96\xdb\xb0\xadA\x02[\x16\xb4\xca\xa5n\x87\xdb\xb3\x1f\xbb\xc0\x9f\xc2\x9e\t[\xba\x9e\xfd\xc76#\x8f\xc6\xe7\x11\x8fL\xd970xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r6, &(0x7f00000bd000), 0x492492492492846, 0x0) fcntl$setstatus(r6, 0x4, 0x42000) ppoll(&(0x7f00000000c0)=[{r6, 0x200}], 0x1, 0x0, 0x0, 0x0) connect$unix(r5, &(0x7f00000002c0)=@file={0x0, './file0\x00'}, 0x6e) 31.666802378s ago: executing program 1 (id=323): r0 = socket$pppoe(0x18, 0x1, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000002a00)='./file0\x00', 0x40, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000100000,user_i', @ANYRESDEC=r1, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) llistxattr(&(0x7f00000006c0)='./file0\x00', &(0x7f0000000700)=""/121, 0x79) connect$pppoe(r0, &(0x7f0000000080)={0x18, 0x0, {0xfffe, @local, 'geneve0\x00'}}, 0x1e) socket$netlink(0x10, 0x3, 0x0) close(r0) socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f00000004c0)=[{0x28, 0x0, 0x5, 0xfffff034}, {0x80000006, 0x0, 0x3, 0xf9}]}, 0x10) 30.932154401s ago: executing program 2 (id=324): socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) pipe(0x0) iopl(0x3) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) mq_timedreceive(0xffffffffffffffff, &(0x7f0000000180)=""/196, 0xc4, 0x0, 0x0) mq_timedsend(0xffffffffffffffff, 0x0, 0x0, 0x100000000000000, 0x0) r2 = socket$inet_sctp(0x2, 0x1, 0x84) socket$inet6(0xa, 0x2, 0x0) getsockopt$ARPT_SO_GET_ENTRIES(r2, 0x0, 0x61, &(0x7f0000000040)={'filter\x00', 0x2e, "d3843a468bbc993bd4c7fce071bbcdad7b982c1c1958184a6a14ade259da94476ff5d4aecadb8dad7bc49b795f7b"}, &(0x7f00000000c0)=0x52) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7b, &(0x7f0000000100)={0x0, 0x2}, 0x8) bind$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) sendto$inet(r2, &(0x7f0000000300)="ab", 0xff04, 0x2404c090, &(0x7f0000000380)={0x2, 0x4e22, @local}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = creat(&(0x7f0000000340)='./file0\x00', 0x60) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000280)='GPL\x00', 0x4, 0x0, 0x0, 0x100, 0x34, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000180)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r4, 0x0, 0x30, 0xe1515f8735398fb, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000002c0)=[0xfffffffffffffffb], 0x0, 0x0, 0x100000, 0x1}}, 0x40) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) socket$inet_udp(0x2, 0x2, 0x0) sendmsg$NL80211_CMD_NEW_KEY(r3, 0x0, 0x800) r5 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc)) 30.33005534s ago: executing program 4 (id=326): syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000100)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) getpriority(0x2, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x2982, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000200)=ANY=[@ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB, @ANYRES64=0x0], 0x20) r1 = syz_open_dev$radio(0x0, 0x0, 0x2) syz_open_dev$radio(&(0x7f0000000000), 0x0, 0x2) preadv(r1, 0x0, 0x0, 0x6, 0x0) ioctl$VIDIOC_S_INPUT(0xffffffffffffffff, 0xc0045627, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000240)={0x1b, 0x0, 0x0, 0x4, 0x0, 0x1, 0x14145318, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x4, 0x3, 0x0, @void, @value, @void, @value}, 0x50) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000008c0)={'syztnl2\x00', &(0x7f0000000840)={'syztnl1\x00', 0x0, 0x2d, 0x9, 0xd, 0xbc2, 0x58, @empty, @remote, 0x8, 0x80, 0x35e7, 0xbea1}}) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000900)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000bc0)={0x18, 0x22, &(0x7f0000000980)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8000}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x401}, @alu={0x4, 0x1, 0x9, 0x0, 0x0, 0xffffffffffffffff, 0xfffffffffffffffc}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, 0x1}}, @tail_call, @map_val={0x18, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x6}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000ac0)='syzkaller\x00', 0xe1e, 0x0, 0x0, 0x40f00, 0x5, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000b00)={0x2, 0x1}, 0x8, 0x10, &(0x7f0000000b40)={0x2, 0x1, 0x4, 0x9}, 0x10, 0x0, 0x0, 0x3, 0x0, &(0x7f0000000b80)=[{0x4, 0x3, 0xd, 0x1}, {0x2, 0x2, 0x2, 0x9}, {0x5, 0x2, 0xd, 0xb}], 0x10, 0x80, @void, @value}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_ext={0x1c, 0x2b, &(0x7f00000005c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x6}, [@btf_id={0x18, 0x0, 0x3, 0x0, 0x5}, @ldst={0x0, 0x3, 0x3, 0x9, 0xc2da73c41a42d7a2, 0xfffffffffffffff8, 0xfffffffffffffffc}, @map_idx_val={0x18, 0x2, 0x6, 0x0, 0x10, 0x0, 0x0, 0x0, 0x20f9}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xc28}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r4}}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r3}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r3}}, @btf_id={0x18, 0x8, 0x3, 0x0, 0x3}, @cb_func={0x18, 0x8, 0x4, 0x0, 0x3}, @generic={0x1, 0x2, 0x5, 0xfffb}]}, &(0x7f00000003c0)='syzkaller\x00', 0xfffffc00, 0x2e, &(0x7f00000004c0)=""/46, 0x0, 0x10, '\x00', r2, 0x0, r3, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000940)={0x0, 0x3, 0x8, 0x7}, 0x10, 0x12820, r4, 0x0, &(0x7f0000000d80)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r3, 0x1, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000000dc0), 0x10, 0x0, @void, @value}, 0x94) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(0xffffffffffffffff, 0xc0845657, &(0x7f0000000040)={0x0, @bt={0xa00, 0x63c, 0x1, 0x3, 0xd59f83, 0x19f5, 0x3f, 0x7, 0x3, 0x6, 0x2800, 0x2800, 0x12, 0xba2, 0x5, 0x3e, {0x8, 0xffffffff}, 0xd0, 0x9}}) getsockopt$inet_buf(0xffffffffffffffff, 0x6, 0x29, 0x0, &(0x7f0000695ffc)) r5 = semget$private(0x0, 0x5, 0x0) semop(r5, &(0x7f0000000000)=[{0x3, 0xfff7, 0x1000}], 0x1) semtimedop(r5, 0x0, 0x0, &(0x7f0000000400)) syz_emit_ethernet(0x72, &(0x7f0000000440)={@local, @random="a1dbc14e96b3", @val={@void, {0x8100, 0x0, 0x0, 0x1}}, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x60, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x4, 0x0, 0x3, 0x0, 0x0, {0x11, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x32, 0x0, @broadcast, @rand_addr, {[@timestamp_addr={0x44, 0x1c, 0x0, 0x1, 0x0, [{@empty}, {@empty}, {@empty}]}, @cipso={0x86, 0x11, 0x0, [{0x0, 0x2}, {0x0, 0x9, "4ef661696b4014"}]}]}}}}}}}, 0x0) semtimedop(r5, 0x0, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) 30.281730885s ago: executing program 1 (id=328): r0 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x12, r0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prctl$PR_TASK_PERF_EVENTS_DISABLE(0x1f) sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0xffffffffffffff18, &(0x7f0000000100)=[{&(0x7f0000000000)="2f0000001c0005c5ffffff000d000000020000000b000000ec0091c913000180f0ffffeb", 0x1dd}], 0x1}, 0x0) r6 = socket(0x10, 0x80002, 0x0) write(0xffffffffffffffff, &(0x7f0000000000)="fc0000001c00071bab0925000900070007ab08000c000000f0007e93210001c000000000000000000000000000039915fa2c1ec28670e9889bb94b46fe0000000a0002", 0xff82) sendmmsg$alg(r6, &(0x7f0000000140)=[{0x3, 0x0, &(0x7f0000000100), 0x6, &(0x7f0000000100), 0xc}], 0x492492492492856, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000480)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)={0x24, r2, 0x100, 0x70bd25, 0x25dfdbfc, {}, [@NL80211_ATTR_WIPHY_TX_POWER_SETTING={0x8}, @NL80211_ATTR_WIPHY_COVERAGE_CLASS={0x5, 0x59, 0x1e}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x4004000) sendmsg$NL80211_CMD_SET_COALESCE(r1, &(0x7f0000000200)={0x0, 0xffffffffffffff8c, &(0x7f0000000b00)={&(0x7f0000000040)={0x28, r2, 0x1, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r7}, @void}}}, 0x28}}, 0x0) seccomp$SECCOMP_GET_ACTION_AVAIL(0x2, 0x0, 0x0) 26.54187716s ago: executing program 2 (id=332): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) syz_emit_ethernet(0xa5b, 0x0, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) openat$dir(0xffffffffffffff9c, 0x0, 0x313002, 0x49) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r2, 0xc0502100, &(0x7f0000000680)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r2, 0xc0182101, &(0x7f0000000200)={r3}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r2, 0xc0502100, &(0x7f0000000380)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r2, 0x40182103, &(0x7f0000000240)={r4, 0x1, r2, 0x6}) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r2, 0xc0182101, &(0x7f0000000280)={r4, 0x0, 0x5}) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r1, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r1, &(0x7f0000000040)={0xffffffffffffff97, 0x0, r5, {0x7, 0x1f, 0x4b8cf99a, 0xffffffffde498422, 0x2, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x40, 0x8008}}, 0x50) syz_fuse_handle_req(r1, &(0x7f0000004200)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d838aae8c05dd22d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20, 0x0, 0x3731, {0x0, 0x7f69ff17f1e1ab77}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0xc5001, 0x104) write$FUSE_CREATE_OPEN(r6, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="05000000040000000800000008"], 0x50) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) ioctl$SIOCX25SCUDMATCHLEN(r6, 0x89e7, &(0x7f0000000400)={0x78}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a40)={&(0x7f0000000980)='sys_enter\x00', r9}, 0x10) link(0x0, 0x0) r10 = timerfd_create(0x0, 0x800) timerfd_gettime(r10, &(0x7f0000000000)) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r7, 0x0, r11, 0x0, 0x7, 0x9) write$P9_RWRITE(r11, &(0x7f0000000040)={0xb, 0x77, 0x810}, 0x11000) 25.804774328s ago: executing program 0 (id=333): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a40000000060a0b040000000000000000020000001400048010000180090001006d617371000000000900010073797a30000000000900020073797a320000000014000000110001"], 0x68}}, 0x0) r1 = socket$kcm(0x2, 0x3, 0x84) r2 = socket(0x10, 0x803, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'team_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x4, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x1}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000002100)=@newtfilter={0x54, 0x2c, 0xd2b, 0x70bd2b, 0x35dfdbfb, {0x0, 0x0, 0x0, r4, {0xf}, {}, {0x7, 0x4}}, [@filter_kind_options=@f_fw={{0x7}, {0x28, 0x2, [@TCA_FW_CLASSID={0x8, 0x1, {0x10, 0xa}}, @TCA_FW_MASK={0x8, 0x5, 0x6}, @TCA_FW_INDEV={0x14, 0x3, 'veth1_virt_wifi\x00'}]}}]}, 0x54}}, 0x24040084) sendmsg$inet(r1, &(0x7f0000001000)={&(0x7f0000000000)={0x2, 0x1, @multicast2}, 0x10, &(0x7f0000000080)=[{&(0x7f0000000b00)="5676037de282e5b04364000000", 0xd}], 0x1, &(0x7f00000000c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r4, @dev={0xac, 0x14, 0x14, 0x18}, @multicast1}}}], 0x20}, 0x40d0) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a40000000060a0b040000000000000000020000001400048010000180090001006d617371000000000900010073797a30000000000900020073797a320000000014000000110001"], 0x68}}, 0x0) (async) socket$kcm(0x2, 0x3, 0x84) (async) socket(0x10, 0x803, 0x0) (async) socket$unix(0x1, 0x1, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'team_slave_1\x00'}) (async) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x4, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x1}}}]}, 0x38}}, 0x0) (async) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000002100)=@newtfilter={0x54, 0x2c, 0xd2b, 0x70bd2b, 0x35dfdbfb, {0x0, 0x0, 0x0, r4, {0xf}, {}, {0x7, 0x4}}, [@filter_kind_options=@f_fw={{0x7}, {0x28, 0x2, [@TCA_FW_CLASSID={0x8, 0x1, {0x10, 0xa}}, @TCA_FW_MASK={0x8, 0x5, 0x6}, @TCA_FW_INDEV={0x14, 0x3, 'veth1_virt_wifi\x00'}]}}]}, 0x54}}, 0x24040084) (async) sendmsg$inet(r1, &(0x7f0000001000)={&(0x7f0000000000)={0x2, 0x1, @multicast2}, 0x10, &(0x7f0000000080)=[{&(0x7f0000000b00)="5676037de282e5b04364000000", 0xd}], 0x1, &(0x7f00000000c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r4, @dev={0xac, 0x14, 0x14, 0x18}, @multicast1}}}], 0x20}, 0x40d0) (async) 25.713884325s ago: executing program 4 (id=335): syz_usb_connect(0x0, 0x10b, 0x0, 0x0) r0 = openat$dir(0xffffffffffffff9c, 0x0, 0x21c0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec85"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) socket$tipc(0x1e, 0x5, 0x0) ioctl$sock_bt_bnep_BNEPCONNADD(r0, 0x400442c8, &(0x7f00000000c0)=ANY=[@ANYRES32=r3]) r5 = socket$inet6_sctp(0xa, 0x801, 0x84) getsockopt$bt_hci(r5, 0x84, 0x7d, 0x0, 0x0) io_uring_register$IORING_REGISTER_CLOCK(0xffffffffffffffff, 0x1d, &(0x7f0000000040)={0x7}, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r6) r7 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_int(r6, 0x6, 0x1e, &(0x7f0000000180)=0x400000001, 0xc2) setsockopt$inet6_tcp_int(r6, 0x6, 0x2000000000000022, &(0x7f0000000140)=0x1, 0x4) connect$inet6(r6, &(0x7f0000000240)={0xa, 0x4e23, 0xa4e4, @remote, 0x3}, 0x1c) sendmsg$inet(r6, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x40814) setsockopt$inet6_tcp_TLS_TX(r7, 0x6, 0x1, &(0x7f0000000480)=@gcm_256={{0x304}, "4d65665883423c1b", "cc4b032abf282b1940457868dede8600b6b9c132314bdcfa5560babd93daa6fe", "8d07039a", "e1ac40b1896410c1"}, 0x38) 25.378224021s ago: executing program 1 (id=336): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) syz_emit_ethernet(0xa5b, 0x0, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) openat$dir(0xffffffffffffff9c, 0x0, 0x313002, 0x49) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r2, 0xc0502100, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r2, 0xc0182101, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r2, 0xc0502100, &(0x7f0000000380)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r2, 0x40182103, &(0x7f0000000240)={r3, 0x1, r2, 0x6}) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r2, 0xc0182101, &(0x7f0000000280)={r3, 0x0, 0x5}) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd', @ANYRESHEX=r1, @ANYBLOB=',rootmode=0000000000000000010000', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r1, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r1, &(0x7f0000000040)={0xffffffffffffff97, 0x0, r4, {0x7, 0x1f, 0x4b8cf99a, 0xffffffffde498422, 0x2, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x40, 0x8008}}, 0x50) syz_fuse_handle_req(r1, &(0x7f0000004200)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d838aae8c05dd22d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20, 0x0, 0x3731, {0x0, 0x7f69ff17f1e1ab77}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0xc5001, 0x104) write$FUSE_CREATE_OPEN(r5, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="05000000040000000800000008"], 0x50) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) ioctl$SIOCX25SCUDMATCHLEN(r5, 0x89e7, &(0x7f0000000400)={0x78}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a40)={&(0x7f0000000980)='sys_enter\x00', r8}, 0x10) link(0x0, 0x0) r9 = timerfd_create(0x0, 0x800) timerfd_gettime(r9, &(0x7f0000000000)) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r6, 0x0, r10, 0x0, 0x7, 0x9) write$P9_RWRITE(r10, &(0x7f0000000040)={0xb, 0x77, 0x810}, 0x11000) 25.342550557s ago: executing program 0 (id=337): iopl(0x3) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = openat$dsp(0xffffffffffffff9c, &(0x7f00000003c0), 0x101a02, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000080)) flistxattr(r0, &(0x7f0000000040)=""/5, 0x5) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'syz_tun\x00'}) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) r3 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000440)='.pending_reads\x00', 0x102, 0x40) r4 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000004c0)=@o_path={&(0x7f0000000480)='./file0\x00', 0x0, 0x10}, 0x18) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r7 = dup(r6) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000640)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r5, @ANYBLOB="2c7766bbc42abbb55967b4ded9dddc2a6d0a2c61cb9d8d92", @ANYRESHEX=r7, @ANYBLOB=',access=user,k']) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r9 = dup(r8) ioctl$KVM_SET_MSRS(r9, 0xc008ae88, &(0x7f0000000480)=ANY=[@ANYBLOB='s\x00\x00\x00\x00']) r10 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000500)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x7, '\x00', r2, 0xffffffffffffffff, 0x3, 0x3, 0x4, 0x0, @void, @value, @void, @value}, 0x50) r11 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) quotactl_fd$Q_SETINFO(r11, 0xffffffff80000600, 0x0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x3}) r12 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000580), 0x82800, 0x0) r13 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x1, 0xe, &(0x7f0000000900)=ANY=[@ANYBLOB="23fd980108786d6c9d40a0647fbc507c74375236e2c669b7523547256956be96d28b66fe6e9d27387fb98d57b96932bf1eec0b6985a94f9dce90c80bed2b52951423d9e58e1891f65315a0ee0424523acdd0e6401a9fa61cb0171eb474e3ab65ef0459d077e8f31121d8f81fa5cef11510891b84122e4711c9c2e3dd4f8ea982f950da32a928e55a7b1505366731da76e0b6f7e3ab992f0bfecc28750e4037db341dd2f3d514fc51871baf4e36b96725f555759605e33d64b940cf808d4e6a3db230a8d990db58f553b55cafb12197d387e91d9f864c371acbf3884d965bb582504241bb048a7d5204d45cb618c1ab19", @ANYRES32, @ANYBLOB="0000000000000000b703000000000000850000000c000000b700000000000000852000000300000018120000", @ANYRES32, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000000000000085000000d4000000185200000900"/56], &(0x7f0000000380)='syzkaller\x00', 0x3, 0x7e, &(0x7f00000003c0)=""/126, 0x41000, 0x10, '\x00', 0x0, @fallback=0x39, r13, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r3, 0x3, &(0x7f0000000700)=[r4, r9, r10, 0xffffffffffffffff, r11, r12, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000000740)=[{0x3, 0x3, 0x14}, {0x2, 0x3, 0x0, 0xa}, {0x5, 0x3, 0x8}], 0x10, 0x6, @void, @value}, 0x94) ioctl$I2C_SLAVE(r11, 0x703, 0x210) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000}, 0xfffffffffffffeb3, &(0x7f0000000240)={&(0x7f0000000100)=@ipmr_delroute={0x1c, 0x19, 0x300, 0x70bd2a, 0x25dfdbfe, {0x80, 0x14, 0x20, 0x0, 0xff, 0x3, 0xff, 0x5, 0x2000}}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x8804) read$midi(r11, &(0x7f0000000840)=""/165, 0xa5) writev(r0, &(0x7f0000000340)=[{&(0x7f0000000140)="3751f02b82f73ccfc7c431617753f5732f765c975ebce8947e5388c4ff26fa3893119fd147a1576d9456136ab5f15493d175754e4b666e989869d01d418adc376ca22d8077c1b54bea92b5977a41d70ebcc4735ce6c012a5fe5ab7fef98e864216699a235d615ded3292397894b34a794bc14a2edfdc6978c0c97bcb02de69264d", 0x81}, {&(0x7f0000000200)="d0f2c13a3028c25f419badebc5eba629dffd4c836f512ca2b57abe2b67a6665aedfeaa392d738e830b94958751bc4b3721b5f33c04933169a3c1dfb5534eee", 0x3f}, {&(0x7f0000000440)="da9a29b5c4e55510712d95361a525e4feffdd6e1735f3a14002feccade80675e32f507fb0a8ca53edf3338142370eb233ea91b088eda7a69c5c349131626f84695", 0x41}], 0x3) 24.227163084s ago: executing program 0 (id=338): r0 = socket$pppoe(0x18, 0x1, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000002a00)='./file0\x00', 0x40, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000100000,user_i', @ANYRESDEC=r1, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) llistxattr(&(0x7f00000006c0)='./file0\x00', &(0x7f0000000700)=""/121, 0x79) connect$pppoe(r0, &(0x7f0000000080)={0x18, 0x0, {0xfffe, @local, 'geneve0\x00'}}, 0x1e) socket$netlink(0x10, 0x3, 0x0) close(r0) socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f00000004c0)=[{0x28, 0x0, 0x5, 0xfffff034}, {0x80000006, 0x0, 0x3, 0xf9}]}, 0x10) 24.226415515s ago: executing program 3 (id=339): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000008b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000100)="88", 0xfdef}], 0x1) r0 = syz_open_dev$sg(&(0x7f00000002c0), 0x0, 0x2000) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000040)={0x53, 0xfffffffe, 0x6, 0x0, @buffer={0x2, 0x41001, &(0x7f00000000c0)=""/81}, &(0x7f0000000380)="259374c96ee3", 0x0, 0x3fb, 0x1000000, 0x0, 0x0}) 23.999801927s ago: executing program 3 (id=340): socket$inet(0x2, 0x4000000000000001, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) sched_setattr(0x0, 0x0, 0x0) open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) r0 = fanotify_init(0x4, 0x0) r1 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0) fanotify_mark(r0, 0xd, 0x8000029, r1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) socket$can_j1939(0x1d, 0x2, 0x7) r3 = syz_open_dev$dri(&(0x7f0000000140), 0x1, 0x0) r4 = syz_open_dev$dri(&(0x7f0000000180), 0x3ffffffffffffffd, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f0000000000)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0xfffffffffffffd7b, 0x1, 0xffffffffffffff2e}) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f00000005c0)={0x0, 0x0, r5, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r4, 0xc06864ce, &(0x7f0000000440)={r6, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0], [0x7, 0x0, 0x0, 0x7fffffff], [0x0, 0x0, 0x0, 0xfffffffc], [0x6, 0x4, 0x4]}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r4, 0xc00c642d, &(0x7f0000000200)={r7, 0x80000}) ioctl$DRM_IOCTL_GEM_OPEN(r3, 0xc010640b, &(0x7f0000000100)={0x0, 0x0}) r10 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r11 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r11, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0), 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETCRTC(r11, 0xc06864a1, &(0x7f0000000d40)={0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r11, 0xc06864ce, &(0x7f0000000340)={r12, 0x0, 0x0, 0x0, 0x1, [0x0], [0x0, 0x7], [0x0, 0x80000002, 0x2], [0x0, 0x0, 0x1, 0x1]}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r10, 0xc02064b2, &(0x7f0000000140)={0x3ff, 0x2, 0x806}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r10, 0xc00c642d, &(0x7f0000000080)={r13}) ioctl$DRM_IOCTL_MODE_ADDFB2(r3, 0xc06864b8, &(0x7f0000000580)={0x0, 0xc1, 0x80, 0x3432527d, 0x3, [r8, r13, 0x0, r9], [0x80ffff, 0x0, 0x3, 0x100], [0x3, 0x0, 0x10, 0x3], [0x1000, 0x3]}) mkdir(0x0, 0x9) 23.999082872s ago: executing program 0 (id=341): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x19) ioctl$TCFLSH(r0, 0x40085500, 0x2) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) r2 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_msfilter(r2, 0x0, 0x29, 0x0, 0x20000) sendmmsg$inet6(r1, &(0x7f0000006bc0)=[{{&(0x7f0000000000)={0xa, 0x4e23, 0x80, @local, 0x4}, 0x1c, &(0x7f0000000480)=[{&(0x7f0000000180)='L', 0x1}], 0x1}}, {{&(0x7f0000000500)={0xa, 0x4e22, 0x3ff, @private0, 0x6}, 0x1c, &(0x7f0000000ac0)=[{&(0x7f0000000540)="fa", 0x1}], 0x1}}], 0x2, 0x4040001) shutdown(r1, 0x1) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r1, 0x84, 0x10, &(0x7f0000000040)=@sack_info={0x0, 0x0, 0x1}, &(0x7f0000000080)=0xc) r3 = syz_open_dev$cec(&(0x7f0000000100), 0x0, 0x0) ioctl$CEC_ADAP_S_LOG_ADDRS(r3, 0xc05c6104, &(0x7f00000001c0)={"f2efe21e", 0x0, 0x6, 0x4d, 0x0, 0x1ff, "2179d46fd08e3c0ced34d4d0c7e6d7", "7ca24a13", "5161dc20", "a2d1d4a2", ["1af0b1ba1cb8fd54c9c9b587", "bed0f3d6ce7a5f7389827f04", "33af343c60abc64f2fdc9ddf", "9b3842fc63849f62b6eb1c3c"]}) ioctl$CEC_TRANSMIT(r3, 0xc0386105, &(0x7f0000000180)={0xfffffffffffffffd, 0xfffffffffffffffe, 0x1, 0x0, 0x10003, 0x0, "1e00169b6664e866326ac71ae7213059", 0x0, 0x4, 0xfe, 0x0, 0x1, 0x49, 0x7}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)=@gettaction={0x38, 0x32, 0x20, 0x0, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x1e, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x79}}]}, @action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0xfffffd0a}, @action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x1, 0x1}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000000}, 0x2c61248c61833480) 23.215858702s ago: executing program 3 (id=342): r0 = socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000680)=@newqdisc={0x24, 0x24, 0x4, 0x0, 0x4, {0x0, 0x0, 0x0, 0x0, {}, {}, {0x3, 0xe}}}, 0x24}}, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000540)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000014c0)=@newtfilter={0x98, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {}, {0x2}}, [@filter_kind_options=@f_matchall={{0xd}, {0x5c, 0x2, [@TCA_MATCHALL_ACT={0x58, 0x2, [@m_simple={0x54, 0x1, 0x0, 0x0, {{0xb}, {0x28, 0x2, 0x0, 0x1, [@TCA_DEF_DATA={0xb, 0x3, '.,\\-\\}d'}, @TCA_DEF_PARMS={0x18, 0x2, {0x55b, 0x2, 0x10000000, 0x7, 0x1}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x1, 0x3}}}}]}]}}, @TCA_RATE={0x6, 0x5, {0x7, 0xb}}]}, 0x98}}, 0x800) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(0x0, r3) waitid(0x3, 0x0, 0x0, 0x8, 0x0) sendmsg$ETHTOOL_MSG_WOL_SET(r2, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000040)={&(0x7f00000006c0)={0x26c, r4, 0x0, 0x70bd2b, 0x25dfdbfc, {}, [@ETHTOOL_A_WOL_MODES={0x1b8, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0xf192}, @ETHTOOL_A_BITSET_BITS={0x20, 0x3, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}]}, {0x4}]}, @ETHTOOL_A_BITSET_BITS={0x4c, 0x3, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, 'drr\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8c}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8000}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, '*%*//:/\x00'}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}]}]}, @ETHTOOL_A_BITSET_BITS={0x138, 0x3, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7fff}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}]}, {0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x10000}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x40}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4f}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}]}, {0x4}, {0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6}, @ETHTOOL_A_BITSET_BIT_NAME={0x18, 0x2, '\\%&\'/\'}}}\\!-/{\'((%%\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}]}, {0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xc}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xd, 0x2, 'matchall\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2e}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}, @ETHTOOL_A_BITSET_BIT_NAME={0xd, 0x2, 'matchall\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xd, 0x2, 'matchall\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, '!-/\xe0-\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '*\x04\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}]}, {0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}, @ETHTOOL_A_WOL_SOPASS={0x9d, 0x3, "c431116d2d6360ed82e88fad148f7545531e41dbd544c086de871ff910dd80186170b745a4185d473141db0b1f678f1f52d8f08d85bb122ae7cb0ded776e88e026fca72a64281cc7fe8224436648d463f98e2db4e80b7f6391479835b4c78397dc6c2ebdc414e437903543ae9361eed12fb96479cad7e88d79a3f53d4cf559d824360f833079680af30a90ffdfda55c9f761fb692b9223b1c6"}]}, 0x26c}, 0x1, 0x0, 0x0, 0x840}, 0x24000000) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) 23.213517383s ago: executing program 0 (id=343): r0 = add_key$user(&(0x7f00000003c0), &(0x7f0000000500), &(0x7f0000000640)="6f326f04", 0x4, 0xfffffffffffffffd) r1 = accept4$inet(0xffffffffffffffff, 0x0, &(0x7f0000000000), 0x80400) sendto$inet(r1, &(0x7f0000000040)="7ff35bf0540176ec9cbe3e9afc93ca86020a31f3cecc8be4740ad815c366ce7344c0dd49e7b8f736212704beb1777c2bbf8336704b4f45c78cec9be6a43b02d83a4326c55307192b5399beab86d1a0c6b067d82f14d47de3bcd9d7f03b", 0x5d, 0x4000, &(0x7f00000000c0)={0x2, 0x4e22, @loopback}, 0x10) keyctl$dh_compute(0x17, &(0x7f0000000200)={r0, r0, r0}, 0x0, 0x0, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="1801000001ffffeb00000000eb658e0d850000007b00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x18) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$XDP_RX_RING(r3, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r6}, 0x10) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f0000000300)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) setsockopt$XDP_UMEM_FILL_RING(r3, 0x11b, 0x5, &(0x7f0000000340)=0x8000, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000200)={'batadv_slave_1\x00', 0x0}) setsockopt$XDP_TX_RING(r3, 0x11b, 0x3, &(0x7f0000000180)=0x2, 0x4) bind$xdp(r3, &(0x7f0000000100)={0x2c, 0x0, r7}, 0x10) syz_emit_ethernet(0x3e, &(0x7f0000000180)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaca0086dd6070eae40008000800000000000000000000ffff0a030100fc02000000000400000000000000000100000577"], 0x0) 23.085039174s ago: executing program 3 (id=344): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000400)=0x7) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) mknod$loop(&(0x7f0000000180)='./file0\x00', 0x6000, 0x0) r1 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) dup2(r1, r1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=ANY=[@ANYBLOB="2c0000001900010900000000"], 0x2c}, 0x1, 0x0, 0x0, 0x40080}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) preadv(0xffffffffffffffff, &(0x7f00000007c0)=[{0x0}], 0x1, 0x100, 0x400005) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$inet6_tcp(0xa, 0x1, 0x0) r5 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) r6 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) r7 = dup3(r6, r5, 0x0) ioctl$DRM_IOCTL_SET_MASTER(r7, 0x641e) 22.50879916s ago: executing program 2 (id=345): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) syz_io_uring_setup(0x31c7, &(0x7f0000000140)={0x0, 0x0, 0x2}, &(0x7f00000012c0), &(0x7f00000005c0)) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x1c, 0x0, 0x7fff0005}]}) getxattr(0x0, 0x0, 0x0, 0x0) madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0xd) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000180), r0) sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=ANY=[@ANYBLOB="6584f9acc866ed421fc338f9c3c406c08d99033cf12d97c07feb46eb34a23b2d8249f7d5113ac245d3423732ccdfa019d3065dd1ed3462f502438573cd78980299bbde213854c5a7ba7cc7cdea96c1621d7b5f35008dc3d973fc3490d96d25170dcfa7aa2241e4cf99b19ba76af618a00f4102d4", @ANYRES16=r1, @ANYRES64=r0, @ANYRES8], 0x1c}, 0x1, 0x0, 0x0, 0x4100}, 0x6b628b5dbb614ecd) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff) bpf$MAP_CREATE(0x0, 0x0, 0x0) r2 = socket$inet6(0xa, 0x80002, 0x0) socket$nl_route(0x10, 0x3, 0x0) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @mcast1, 0x5}, 0x1c) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) setsockopt$bt_rfcomm_RFCOMM_LM(0xffffffffffffffff, 0x12, 0x3, &(0x7f0000000040)=0xbd, 0x4) socket$inet6_tcp(0xa, 0x1, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000002000)=""/102400, 0x19000) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x2d0, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x100, 0x130, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x330) setsockopt$inet6_IPV6_HOPOPTS(r2, 0x29, 0x36, &(0x7f0000001440)=ANY=[], 0xc0) sendmmsg$inet6(r2, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4000000) mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0), 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB='quota,grpquota_inode_hardlimit=3,noswap']) r5 = syz_open_procfs(0x0, &(0x7f00000001c0)='mountinfo\x00') read$FUSE(r5, &(0x7f0000003480)={0x2020}, 0x2020) 21.990205081s ago: executing program 3 (id=346): mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x8031, 0xffffffffffffffff, 0x209f0000) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820f", 0x6) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000000c0)=ANY=[], 0x0, 0x8, 0xb3, &(0x7f0000000140)=""/179, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r1, &(0x7f0000002540)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, 0x0) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000bc0000/0x400000)=nil, 0x400000, 0x9) syz_emit_ethernet(0x0, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x10) sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=ANY=[@ANYBLOB="2c0000001a00010000000000000000000a800020000000000000000008000300", @ANYRES32=0x0, @ANYBLOB="080001fb21d4d15c"], 0x2c}, 0x1, 0x0, 0x0, 0x4004840}, 0x0) r4 = socket(0x15, 0x5, 0x0) getsockopt(r4, 0x200000000114, 0x271f, &(0x7f0000c35fff)=""/1, &(0x7f0000000000)=0xf002) symlinkat(&(0x7f0000000000)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00') close(0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xe, 0xe, &(0x7f0000001300)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x143, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) 21.849846077s ago: executing program 1 (id=347): socket$packet(0x11, 0x2, 0x300) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000001000000000000000000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000100006608000000000000180000000000000000000000000000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a000000000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz1\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r2 = bpf$ITER_CREATE(0x21, &(0x7f00000001c0), 0x8) ioctl$KVM_CAP_MAX_VCPU_ID(r2, 0x4068aea3, &(0x7f0000000240)={0x80, 0x0, 0x69}) preadv(r0, &(0x7f0000000180)=[{&(0x7f0000000140)=""/13, 0xd}], 0x1, 0xcd8, 0x0) openat$cgroup_devices(r1, &(0x7f0000000080)='devices.deny\x00', 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6(0xa, 0x2, 0x0) socket$inet6(0xa, 0x1, 0xffff9c83) r3 = syz_open_procfs(0x0, &(0x7f0000002700)='net/ip_mr_cache\x00') pread64(r3, &(0x7f0000000000)=""/12, 0xfffffc64, 0x36) syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x284100) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r4, 0xc020f509, &(0x7f0000000080)={r4, 0xffffffffffffffff, 0x5, 0x2}) writev(r4, &(0x7f00000000c0)=[{&(0x7f0000000080), 0xfffffebe}], 0x1) 21.831310528s ago: executing program 0 (id=348): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/bus/input/handlers\x00', 0x0, 0x0) r2 = syz_io_uring_setup(0x17af, &(0x7f0000000380)={0x0, 0x0, 0x13290}, &(0x7f0000000300), &(0x7f0000000340)) io_uring_register$IORING_REGISTER_BUFFERS2(r2, 0xf, &(0x7f0000000280)={0x2, 0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)=""/75, 0x4b}, {0x0}], &(0x7f0000000240)=[0x1, 0xbc69]}, 0x20) preadv2(r1, &(0x7f00000004c0)=[{&(0x7f00000000c0)=""/139, 0x8b}], 0x1, 0x867, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) r5 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="01000000030000000200000004"], 0x48) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, r6, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0x80000000, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000008900000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000fdffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b702000000000000850000007500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.current\x00', 0x275a, 0x0) write$cgroup_int(r9, &(0x7f0000000100), 0x1001) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000b00)={&(0x7f0000000ac0)='mm_page_free_batched\x00', r8}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, &(0x7f0000000100)=@fd={0x6, 0x2, 0x4, 0xe000, 0x4, {r3, r4/1000+10000}, {0x4, 0x8, 0x8, 0xf, 0x1c, 0xfe, "11f43a22"}, 0x7, 0x4, {}, 0x3, 0x0, r5}) r10 = syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_SERVICE(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="18000000", @ANYRES16=r10, @ANYBLOB="010000000800000000005528f25da51d2cd5e2498eda25330400000004000180"], 0x18}}, 0x0) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r11, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000004300)=@newtaction={0x88, 0x30, 0xffff, 0xfffffffc, 0x0, {0x0, 0x0, 0x1300}, [{0x74, 0x1, [@m_mirred={0x70, 0x1, 0x0, 0x0, {{0xb}, {0x44, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x4, {{0x6}}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x0, 0x0, 0xffffffffffffffff}, 0x4}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x88}}, 0x0) 21.055193085s ago: executing program 4 (id=349): iopl(0x3) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = openat$dsp(0xffffffffffffff9c, &(0x7f00000003c0), 0x101a02, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000080)) flistxattr(r0, &(0x7f0000000040)=""/5, 0x5) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'syz_tun\x00'}) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) r3 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000440)='.pending_reads\x00', 0x102, 0x40) r4 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000004c0)=@o_path={&(0x7f0000000480)='./file0\x00', 0x0, 0x10}, 0x18) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r7 = dup(r6) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000640)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r5, @ANYBLOB="2c7766bbc42abbb55967b4ded9dddc2a6d0a2c61cb9d8d92", @ANYRESHEX=r7, @ANYBLOB=',access=user,k']) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r9 = dup(r8) ioctl$KVM_SET_MSRS(r9, 0xc008ae88, &(0x7f0000000480)=ANY=[@ANYBLOB='s\x00\x00\x00\x00']) r10 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000500)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x7, '\x00', r2, 0xffffffffffffffff, 0x3, 0x3, 0x4, 0x0, @void, @value, @void, @value}, 0x50) r11 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) quotactl_fd$Q_SETINFO(r11, 0xffffffff80000600, 0x0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x3}) r12 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000580), 0x82800, 0x0) r13 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x1, 0xe, &(0x7f0000000900)=ANY=[@ANYBLOB="23fd980108786d6c9d40a0647fbc507c74375236e2c669b7523547256956be96d28b66fe6e9d27387fb98d57b96932bf1eec0b6985a94f9dce90c80bed2b52951423d9e58e1891f65315a0ee0424523acdd0e6401a9fa61cb0171eb474e3ab65ef0459d077e8f31121d8f81fa5cef11510891b84122e4711c9c2e3dd4f8ea982f950da32a928e55a7b1505366731da76e0b6f7e3ab992f0bfecc28750e4037db341dd2f3d514fc51871baf4e36b96725f555759605e33d64b940cf808d4e6a3db230a8d990db58f553b55cafb12197d387e91d9f864c371acbf3884d965bb582504241bb048a7d5204d45cb618c1ab19", @ANYRES32, @ANYBLOB="0000000000000000b703000000000000850000000c000000b700000000000000852000000300000018120000", @ANYRES32, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000000000000085000000d4000000185200000900"/56], &(0x7f0000000380)='syzkaller\x00', 0x3, 0x7e, &(0x7f00000003c0)=""/126, 0x41000, 0x10, '\x00', 0x0, @fallback=0x39, r13, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r3, 0x3, &(0x7f0000000700)=[r4, r9, r10, 0xffffffffffffffff, r11, r12, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000000740)=[{0x3, 0x3, 0x14}, {0x2, 0x3, 0x0, 0xa}, {0x5, 0x3, 0x8}], 0x10, 0x6, @void, @value}, 0x94) ioctl$I2C_SLAVE(r11, 0x703, 0x210) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000}, 0xfffffffffffffeb3, &(0x7f0000000240)={&(0x7f0000000100)=@ipmr_delroute={0x1c, 0x19, 0x300, 0x70bd2a, 0x25dfdbfe, {0x80, 0x14, 0x20, 0x0, 0xff, 0x3, 0xff, 0x5, 0x2000}}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x8804) read$midi(r11, &(0x7f0000000840)=""/165, 0xa5) writev(r0, &(0x7f0000000340)=[{&(0x7f0000000140)="3751f02b82f73ccfc7c431617753f5732f765c975ebce8947e5388c4ff26fa3893119fd147a1576d9456136ab5f15493d175754e4b666e989869d01d418adc376ca22d8077c1b54bea92b5977a41d70ebcc4735ce6c012a5fe5ab7fef98e864216699a235d615ded3292397894b34a794bc14a2edfdc6978c0c97bcb02de69264d", 0x81}, {&(0x7f0000000200)="d0f2c13a3028c25f419badebc5eba629dffd4c836f512ca2b57abe2b67a6665aedfeaa392d738e830b94958751bc4b3721b5f33c04933169a3c1dfb5534eee", 0x3f}, {&(0x7f0000000440)="da9a29b5c4e55510712d95361a525e4feffdd6e1735f3a14002feccade80675e32f507fb0a8ca53edf3338142370eb233ea91b088eda7a69c5c349131626f84695", 0x41}], 0x3) 20.106922201s ago: executing program 3 (id=350): socket$kcm(0xf, 0x3, 0x2) r0 = socket(0x10, 0xa, 0x4) recvmsg(r0, &(0x7f0000000b80)={&(0x7f00000001c0)=@rc={0x1f, @fixed}, 0x80, &(0x7f0000000980)=[{0x0}, {&(0x7f0000000300)=""/178, 0xb2}, {0x0}, {0x0}, {&(0x7f0000000480)=""/29, 0x1d}, {0x0}, {&(0x7f0000000880)=""/35, 0x23}, {&(0x7f00000008c0)=""/181, 0xb5}], 0x8, &(0x7f0000000b00)=""/66, 0x42}, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000840), 0xffffffffffffffff) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a20000000000a0104000000000000000001000003090001007379ecf3ffff00002c000000030a01010000000000000000010000000900010073077a30000000000900030073797a320000000008000000060a010400008750867f6a5c42e60deb0000000000000100000008050040000000003c000480001400028008000340000000000800044000000022140001800c0001006269747769736500040002800900010073797a3021000000140000001100010000008b97d25a5ea97fbbfe1395ccc217cac06d0700"/231], 0xd8}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000380)='/proc/sysvipc/sem\x00', 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, &(0x7f0000000100)={'syztnl1\x00', &(0x7f0000000a00)={'sit0\x00', 0x0, 0x1, 0x8000, 0x8000, 0x8, {{0x1f, 0x4, 0x2, 0x5, 0x7c, 0x64, 0x0, 0xf9, 0x29, 0x0, @empty, @multicast1, {[@cipso={0x86, 0x51, 0x0, [{0x2, 0x11, "259a26ac2f3ad4cef309fb4d0d4a28"}, {0x6, 0xc, "20b8560ade82187d7023"}, {0x2, 0x7, "8bed5f013f"}, {0x2, 0x8, "616251af3e23"}, {0x7, 0x11, "2ec544ebc840759a8c1f11dc5b5158"}, {0x1, 0xe, "ba384e462cd79beb6f2fa18a"}]}, @noop, @ssrr={0x89, 0x13, 0x22, [@multicast2, @local, @remote, @loopback]}]}}}}}) syz_open_dev$sndpcmp(&(0x7f0000000240), 0x0, 0x100) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) unshare(0x20000400) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000040), 0x8002) r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000001c0)={r4, 0x58}, 0x10) r5 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r5, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mount(&(0x7f0000000040)=@loop={'/dev/loop', 0x0}, &(0x7f00000000c0)='./cgroup\x00', &(0x7f0000000080)='hfsplus\x00', 0x0, 0x0) mount(&(0x7f0000000040)=@nullb, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000080)='cramfs\x00', 0x2a00000, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000300), &(0x7f00000004c0), 0x83f}, 0x38) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000280)={0xffffffffffffffff, &(0x7f00000002c0), &(0x7f0000000200)=""/35}, 0x20) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) 19.973954854s ago: executing program 1 (id=351): bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000080)='.log\x00', 0x1812c1, 0x0) fchown(r0, 0xee01, 0x0) io_uring_register$IORING_REGISTER_PBUF_RING(r0, 0x16, &(0x7f00000003c0)={&(0x7f0000001000)={[{&(0x7f0000000100)="fb652fda950bab78165a76b57423813d4fde046fbea4dbc8d000799f23962b5fcb61fcc7cefddde5a7e89d6e108f725e0291b6bd78dc26a5d35841c838998aa696907b59fca2151c22b688b46f08972897009724eeb311442d66904755e0cb8061f2c5b48f77761e4e242ff8be1c4ba796432159f8708735effbc7adbbe90ff0f9d79219de0f25277946f899ac6e81f3521a2ab7ebdc5d7af6162f1e8de443e510ab94cab4492c6b1f33095a8d91265ddf677405458c626ebf4fdb301ddfc788c194f425b990fc835859754da6991184f0306fd011cdafe5dfa141398b04aaecd35cb97acfa436b737459e46816342734c5be2", 0xf3, 0x3}, {&(0x7f0000000200)="aa65e15adb5435865fd013d3d888782d36630c6b5dc7412309d7af5984cf4a7788ca6917ddf8a9e1b1e988b1328d5951a34c2932349bf54de5a6f8c081d30c839a989c1ae4a7fe03cf", 0x49, 0x3}, {&(0x7f0000000080)="a6b71807ce4dd51ab458f0edc873f77f5ce352c84667e91a859ea98b23e49abb7154fb725b202ae79eb1540ec0", 0x2d}, {&(0x7f0000000280)="62336adaded618b4c6eaa93a51515970dc8851a22eb70e8486fe3d4c5e32b15ba3aa72d2af", 0x25, 0x1}, {&(0x7f00000002c0)="7dcff85b80f5acbbda4993fe0adf0e802a2cc501824e895daa3708acb45a800316c84904686845a64e2f74dd7848f413feb8be7d5175a58030e4c2c42d06372caebeb54747865d6337b67899b74e5f45af5ec03d193ac8481840e0893c9b034bebd15fcc004f0ad4f7eb2152e7e3f8547e5ee377", 0x74, 0x3}, {&(0x7f0000000340)="1194f874dce67a872b01377a", 0xc, 0x2}, {&(0x7f0000000380)="05eb9c6678", 0x5}]}, 0x7}, 0x1) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=@newsa={0x10c, 0x16, 0x1, 0x0, 0x0, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@local}, {@in=@loopback, 0x0, 0x6c}, @in=@remote}, [@replay_esn_val={0x1c, 0x17, {0x400002e2}}]}, 0x10c}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) io_getevents(0x0, 0x4, 0x0, 0x0, 0x0) io_destroy(0x0) getsockopt$kcm_KCM_RECV_DISABLE(0xffffffffffffffff, 0x119, 0x1, 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r3, 0x4068aea3, &(0x7f0000000040)) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f00000002c0)={[0x8aba, 0x4, 0x1004, 0x804, 0x4, 0xf, 0x120000, 0xff, 0xffffffffffffffff, 0x9, 0x8000000000000005, 0x4, 0x0, 0x101, 0x400000000000006, 0x9], 0x8000000, 0x141200}) ioctl$KVM_SET_VCPU_EVENTS(r4, 0x4400ae8f, &(0x7f00000000c0)=@x86={0x40, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x8, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x2, 0x80, '\x00', 0x0, 0x5}) ioctl$KVM_RUN(r4, 0xae80, 0x0) getpeername(0xffffffffffffffff, 0x0, 0x0) socket(0x400000000010, 0x3, 0x0) r5 = syz_usb_connect(0x5, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000fdc01a40f30c74933bbc0000000109021b0001000000000904000001a7a00f00090582020002"], 0x0) syz_usb_ep_write$ath9k_ep1(r5, 0x82, 0x4, 0x0) 0s ago: executing program 2 (id=352): r0 = socket$nl_rdma(0x10, 0x3, 0x14) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x19, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sockopt=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000400)={r1, 0x3, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r2, 0x1, 0x2, 0x0, 0x2100) sendmsg$RDMA_NLDEV_CMD_RES_CM_ID_GET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000013b80)=ANY=[@ANYBLOB="280000001b14010000000000000000000800030001fc0000080001000000000008003f"], 0x28}, 0x1, 0x0, 0x0, 0xc0}, 0x0) kernel console output (not intermixed with test programs): : batadv0: Adding interface: batadv_slave_1 [ 95.593129][ T5831] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 95.619312][ T5831] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 95.644439][ T5835] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.651713][ T5835] bridge0: port 1(bridge_slave_0) entered disabled state [ 95.658951][ T5130] Bluetooth: hci3: command tx timeout [ 95.658960][ T5836] Bluetooth: hci2: command tx timeout [ 95.660195][ T5835] bridge_slave_0: entered allmulticast mode [ 95.678119][ T5835] bridge_slave_0: entered promiscuous mode [ 95.688585][ T5841] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 95.700399][ T5828] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 95.713318][ T5828] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 95.745540][ T5835] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.753106][ T5835] bridge0: port 2(bridge_slave_1) entered disabled state [ 95.760868][ T5835] bridge_slave_1: entered allmulticast mode [ 95.768427][ T5835] bridge_slave_1: entered promiscuous mode [ 95.777160][ T5841] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 95.827333][ T5130] Bluetooth: hci4: command tx timeout [ 95.906182][ T5825] hsr_slave_0: entered promiscuous mode [ 95.913778][ T5825] hsr_slave_1: entered promiscuous mode [ 95.938557][ T5841] team0: Port device team_slave_0 added [ 95.948253][ T5828] team0: Port device team_slave_0 added [ 95.959745][ T5831] hsr_slave_0: entered promiscuous mode [ 95.966206][ T5831] hsr_slave_1: entered promiscuous mode [ 95.972760][ T5831] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 95.980585][ T5831] Cannot create hsr debugfs directory [ 96.005756][ T5835] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 96.018105][ T5841] team0: Port device team_slave_1 added [ 96.027288][ T5828] team0: Port device team_slave_1 added [ 96.056259][ T5835] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 96.182052][ T5828] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 96.189086][ T5828] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 96.215553][ T5828] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 96.255663][ T5841] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 96.262777][ T5841] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 96.289881][ T5841] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 96.302710][ T5828] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 96.310253][ T5828] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 96.336550][ T5828] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 96.370167][ T5835] team0: Port device team_slave_0 added [ 96.376927][ T5841] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 96.384799][ T5841] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 96.411186][ T5841] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 96.445505][ T5835] team0: Port device team_slave_1 added [ 96.485805][ T5835] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 96.492954][ T5835] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 96.520420][ T5835] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 96.577112][ T5828] hsr_slave_0: entered promiscuous mode [ 96.584254][ T5828] hsr_slave_1: entered promiscuous mode [ 96.590719][ T5828] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 96.598441][ T5828] Cannot create hsr debugfs directory [ 96.617454][ T5835] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 96.624451][ T5835] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 96.650609][ T5835] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 96.749363][ T5841] hsr_slave_0: entered promiscuous mode [ 96.755894][ T5841] hsr_slave_1: entered promiscuous mode [ 96.762292][ T5841] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 96.770067][ T5841] Cannot create hsr debugfs directory [ 96.854589][ T5835] hsr_slave_0: entered promiscuous mode [ 96.861335][ T5835] hsr_slave_1: entered promiscuous mode [ 96.868336][ T5835] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 96.875941][ T5835] Cannot create hsr debugfs directory [ 97.226513][ T5825] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 97.260004][ T5825] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 97.294171][ T5825] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 97.304670][ T5825] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 97.360415][ T5831] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 97.374233][ T5831] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 97.390987][ T5831] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 97.403295][ T5831] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 97.496591][ T5828] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 97.509695][ T5828] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 97.521542][ T5828] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 97.532448][ T5828] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 97.593886][ T5130] Bluetooth: hci0: command tx timeout [ 97.658000][ T5130] Bluetooth: hci1: command tx timeout [ 97.675718][ T5835] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 97.705410][ T5835] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 97.737451][ T5130] Bluetooth: hci3: command tx timeout [ 97.742913][ T5130] Bluetooth: hci2: command tx timeout [ 97.748915][ T5835] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 97.761848][ T5835] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 97.841981][ T5825] 8021q: adding VLAN 0 to HW filter on device bond0 [ 97.873082][ T5841] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 97.899138][ T5130] Bluetooth: hci4: command tx timeout [ 97.899700][ T5841] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 97.932442][ T5825] 8021q: adding VLAN 0 to HW filter on device team0 [ 97.942844][ T5841] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 97.955158][ T5841] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 97.996504][ T3458] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.003853][ T3458] bridge0: port 1(bridge_slave_0) entered forwarding state [ 98.028353][ T5831] 8021q: adding VLAN 0 to HW filter on device bond0 [ 98.076395][ T3458] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.083598][ T3458] bridge0: port 2(bridge_slave_1) entered forwarding state [ 98.128892][ T5828] 8021q: adding VLAN 0 to HW filter on device bond0 [ 98.154083][ T5825] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 98.178913][ T5831] 8021q: adding VLAN 0 to HW filter on device team0 [ 98.251381][ T5835] 8021q: adding VLAN 0 to HW filter on device bond0 [ 98.263648][ T1009] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.270883][ T1009] bridge0: port 1(bridge_slave_0) entered forwarding state [ 98.284176][ T1009] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.291504][ T1009] bridge0: port 2(bridge_slave_1) entered forwarding state [ 98.316798][ T5828] 8021q: adding VLAN 0 to HW filter on device team0 [ 98.387757][ T1312] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.394964][ T1312] bridge0: port 1(bridge_slave_0) entered forwarding state [ 98.427543][ T1312] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.434736][ T1312] bridge0: port 2(bridge_slave_1) entered forwarding state [ 98.476461][ T5835] 8021q: adding VLAN 0 to HW filter on device team0 [ 98.516691][ T53] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.523893][ T53] bridge0: port 1(bridge_slave_0) entered forwarding state [ 98.563766][ T53] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.571015][ T53] bridge0: port 2(bridge_slave_1) entered forwarding state [ 98.654191][ T5841] 8021q: adding VLAN 0 to HW filter on device bond0 [ 98.674939][ T5825] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 98.778486][ T5841] 8021q: adding VLAN 0 to HW filter on device team0 [ 98.836738][ T3458] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.843943][ T3458] bridge0: port 1(bridge_slave_0) entered forwarding state [ 98.869283][ T3458] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.876470][ T3458] bridge0: port 2(bridge_slave_1) entered forwarding state [ 98.981689][ T5825] veth0_vlan: entered promiscuous mode [ 99.075169][ T5825] veth1_vlan: entered promiscuous mode [ 99.106098][ T5831] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 99.252565][ T5825] veth0_macvtap: entered promiscuous mode [ 99.300795][ T5825] veth1_macvtap: entered promiscuous mode [ 99.333552][ T5828] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 99.425929][ T5825] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 99.468472][ T5831] veth0_vlan: entered promiscuous mode [ 99.504233][ T5835] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 99.525196][ T5825] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 99.540811][ T5825] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.551904][ T5825] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.563690][ T5825] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.572545][ T5825] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.597102][ T5831] veth1_vlan: entered promiscuous mode [ 99.657811][ T5130] Bluetooth: hci0: command tx timeout [ 99.724802][ T5841] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 99.740572][ T5130] Bluetooth: hci1: command tx timeout [ 99.771167][ T5831] veth0_macvtap: entered promiscuous mode [ 99.803488][ T5831] veth1_macvtap: entered promiscuous mode [ 99.817699][ T5130] Bluetooth: hci3: command tx timeout [ 99.820610][ T5836] Bluetooth: hci2: command tx timeout [ 99.841062][ T1312] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.853066][ T1312] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.955198][ T5835] veth0_vlan: entered promiscuous mode [ 99.973592][ T5831] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 99.982595][ T3458] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.990751][ T5836] Bluetooth: hci4: command tx timeout [ 100.003857][ T3458] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.030888][ T5831] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 100.045290][ T5835] veth1_vlan: entered promiscuous mode [ 100.072492][ T5831] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.086321][ T5831] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.095884][ T5831] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.106302][ T5831] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.136648][ T5828] veth0_vlan: entered promiscuous mode [ 100.145350][ T5841] veth0_vlan: entered promiscuous mode [ 100.171672][ T5825] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 100.175135][ T5841] veth1_vlan: entered promiscuous mode [ 100.229970][ T5828] veth1_vlan: entered promiscuous mode [ 100.276431][ T5835] veth0_macvtap: entered promiscuous mode [ 100.364021][ T5835] veth1_macvtap: entered promiscuous mode [ 100.407089][ T53] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.418314][ T53] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.444546][ T5835] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 100.485434][ T5841] veth0_macvtap: entered promiscuous mode [ 100.502492][ T5835] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 100.511727][ T1009] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.521874][ T1009] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.529400][ T5841] veth1_macvtap: entered promiscuous mode [ 100.546591][ T5828] veth0_macvtap: entered promiscuous mode [ 100.556812][ T5835] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.566270][ T5835] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.575219][ T5835] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.591071][ T5835] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.606844][ T5828] veth1_macvtap: entered promiscuous mode [ 100.613543][ T5902] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 100.675189][ T5841] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 100.706181][ T5828] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 100.733162][ T5828] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 100.761003][ T5841] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 100.781064][ T5902] usb 1-1: Using ep0 maxpacket: 16 [ 100.800417][ T5828] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.806183][ T5902] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 100.830426][ T5902] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 100.832716][ T5828] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.841313][ T5902] usb 1-1: config 1 has no interface number 1 [ 100.860323][ T5828] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.861486][ T5902] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 100.886551][ T5902] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 247, changing to 7 [ 100.887769][ T5828] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.912450][ T5910] netlink: 232 bytes leftover after parsing attributes in process `syz.1.2'. [ 100.917945][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 100.927765][ T5841] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.939557][ T5841] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.950715][ T5902] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 100.950747][ T5902] usb 1-1: New USB device strings: Mfr=9, Product=2, SerialNumber=3 [ 100.950768][ T5902] usb 1-1: Product: syz [ 100.950783][ T5902] usb 1-1: Manufacturer: syz [ 100.950799][ T5902] usb 1-1: SerialNumber: syz [ 100.987079][ T5841] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.017246][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 101.023417][ T5841] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.077864][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 101.086836][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 101.591194][ T5902] usb 1-1: 2:1 : no or invalid class specific endpoint descriptor [ 101.610107][ T5902] usb 1-1: 2:1 : format type 23 is not supported yet [ 101.654709][ T53] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.682860][ T53] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.721492][ T5902] usb 1-1: USB disconnect, device number 2 [ 101.738306][ T5836] Bluetooth: hci0: command tx timeout [ 101.817719][ T5836] Bluetooth: hci1: command tx timeout [ 101.898075][ T5836] Bluetooth: hci2: command tx timeout [ 101.898552][ T5130] Bluetooth: hci3: command tx timeout [ 101.912208][ T1009] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.949287][ T1009] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.993018][ T1009] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 102.026889][ T1009] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 102.059368][ T5130] Bluetooth: hci4: command tx timeout [ 102.115978][ T1312] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 102.179401][ T1312] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 102.270469][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 102.297462][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 102.704115][ T64] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 102.724456][ T64] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 102.870581][ T5927] netlink: 52 bytes leftover after parsing attributes in process `syz.0.7'. [ 102.901394][ T1312] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 102.934075][ T1312] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 103.147349][ T978] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 103.357860][ T978] usb 2-1: Using ep0 maxpacket: 8 [ 103.375012][ T978] usb 2-1: config 0 has an invalid interface number: 63 but max is 0 [ 103.407401][ T978] usb 2-1: config 0 has no interface number 0 [ 103.434086][ T978] usb 2-1: New USB device found, idVendor=f65e, idProduct=3868, bcdDevice= 4.17 [ 103.478266][ T978] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 103.502390][ T978] usb 2-1: config 0 descriptor?? [ 103.533821][ T978] usb-storage 2-1:0.63: USB Mass Storage device detected [ 103.879350][ T978] usb 2-1: USB disconnect, device number 2 [ 103.936919][ T5953] syz.4.14 uses obsolete (PF_INET,SOCK_PACKET) [ 103.944277][ T5953] IPVS: set_ctl: invalid protocol: 98 100.1.1.1:19993 [ 104.037836][ T120] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 104.317364][ T5874] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 104.338909][ T120] usb 3-1: device descriptor read/64, error -71 [ 104.583357][ T5874] usb 1-1: Using ep0 maxpacket: 16 [ 105.040356][ T5874] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 105.058203][ T5874] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 105.072981][ T5874] usb 1-1: config 1 has no interface number 1 [ 105.084300][ T5874] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 105.117301][ T5874] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 247, changing to 7 [ 105.153455][ T5874] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 105.177634][ T120] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 105.227528][ T5874] usb 1-1: New USB device strings: Mfr=9, Product=2, SerialNumber=3 [ 105.235590][ T5874] usb 1-1: Product: syz [ 105.265487][ T5874] usb 1-1: Manufacturer: syz [ 105.282334][ T5874] usb 1-1: SerialNumber: syz [ 105.338618][ T120] usb 3-1: device descriptor read/64, error -71 [ 105.367408][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 105.397051][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 105.518250][ T5964] netlink: 8 bytes leftover after parsing attributes in process `syz.4.18'. [ 105.533068][ T120] usb usb3-port1: attempt power cycle [ 106.401511][ T5874] usb 1-1: 2:1 : no or invalid class specific endpoint descriptor [ 106.432167][ T5969] Driver unsupported XDP return value 0 on prog (id 3) dev N/A, expect packet loss! [ 106.437425][ T5874] usb 1-1: 2:1 : format type 23 is not supported yet [ 106.457535][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 106.458214][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 106.698063][ T120] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 106.850335][ T5874] usb 1-1: USB disconnect, device number 3 [ 106.861099][ T120] usb 3-1: device descriptor read/8, error -71 [ 107.070190][ T5972] udevd[5972]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 110.757912][ T6011] syz.3.30: attempt to access beyond end of device [ 110.757912][ T6011] loop3: rw=2048, sector=2, nr_sectors = 1 limit=0 [ 110.772382][ T6011] hfsplus: unable to find HFS+ superblock [ 110.786203][ T6011] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 110.804192][ T6011] cramfs: wrong magic [ 111.806973][ T6013] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 112.835552][ T6030] vivid-000: disconnect [ 113.237293][ T5902] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 113.531855][ T6029] netlink: 16 bytes leftover after parsing attributes in process `syz.1.35'. [ 113.548562][ T6030] netlink: 'syz.0.33': attribute type 13 has an invalid length. [ 113.571319][ T6030] vivid-000: reconnect [ 113.882833][ T5902] usb 4-1: Using ep0 maxpacket: 16 [ 114.031626][ T120] IPVS: starting estimator thread 0... [ 114.034865][ T5902] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 114.147421][ T6036] IPVS: using max 28 ests per chain, 67200 per kthread [ 114.159710][ T6040] input: syz0 as /devices/virtual/input/input5 [ 114.173087][ T5902] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 114.204960][ T5902] usb 4-1: config 1 has no interface number 1 [ 114.234000][ T5902] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 114.247817][ T6042] wireguard: wg1: Could not create IPv4 socket [ 114.274629][ T5902] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 247, changing to 7 [ 114.358656][ T5902] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 114.385010][ T5902] usb 4-1: New USB device strings: Mfr=9, Product=2, SerialNumber=3 [ 114.416344][ T5902] usb 4-1: Product: syz [ 114.427293][ T5902] usb 4-1: Manufacturer: syz [ 114.450903][ T5902] usb 4-1: SerialNumber: syz [ 114.733058][ T5902] usb 4-1: 2:1 : no or invalid class specific endpoint descriptor [ 114.753962][ T5902] usb 4-1: 2:1 : format type 23 is not supported yet [ 114.828171][ T5902] usb 4-1: USB disconnect, device number 2 [ 115.758160][ T5814] udevd[5814]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 115.835725][ T6050] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 116.266536][ T6067] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 117.349945][ T6058] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 118.235045][ T6077] netlink: 16 bytes leftover after parsing attributes in process `syz.2.48'. [ 119.485964][ T30] audit: type=1326 audit(1747918774.628:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6096 comm="syz.2.56" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0399b8e969 code=0x7fc00000 [ 119.587433][ T5952] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 119.597567][ T30] audit: type=1326 audit(1747918774.728:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6096 comm="syz.2.56" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f0399b85927 code=0x7fc00000 [ 119.791405][ T5952] usb 2-1: Using ep0 maxpacket: 16 [ 119.827775][ T5952] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 119.864685][ T5952] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 119.913933][ T5952] usb 2-1: config 1 has no interface number 1 [ 119.938563][ T5952] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 120.047969][ T30] audit: type=1804 audit(1747918775.098:4): pid=6104 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.4.51" name="/newroot/6/file0" dev="tmpfs" ino=49 res=1 errno=0 [ 120.179075][ T6110] syz.3.57: attempt to access beyond end of device [ 120.179075][ T6110] loop3: rw=2048, sector=2, nr_sectors = 1 limit=0 [ 120.220101][ T5952] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 247, changing to 7 [ 120.231643][ T6110] hfsplus: unable to find HFS+ superblock [ 120.237457][ T5952] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 120.237488][ T5952] usb 2-1: New USB device strings: Mfr=9, Product=2, SerialNumber=3 [ 120.237509][ T5952] usb 2-1: Product: syz [ 120.237525][ T5952] usb 2-1: Manufacturer: syz [ 120.237540][ T5952] usb 2-1: SerialNumber: syz [ 120.394024][ T6111] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 120.400550][ T6110] netlink: 156 bytes leftover after parsing attributes in process `syz.3.57'. [ 120.532204][ T6111] cramfs: wrong magic [ 120.572481][ T5952] usb 2-1: 2:1 : no or invalid class specific endpoint descriptor [ 120.876080][ T5952] usb 2-1: 2:1 : format type 23 is not supported yet [ 120.931734][ T5952] usb 2-1: USB disconnect, device number 3 [ 120.993754][ T5972] udevd[5972]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 121.014298][ T6113] netlink: 3664 bytes leftover after parsing attributes in process `syz.3.58'. [ 121.025349][ T6113] netlink: 1532 bytes leftover after parsing attributes in process `syz.3.58'. [ 121.173021][ T6113] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 121.733584][ T6113] binder: 6112:6113 ioctl 3b89 200000016f00 returned -22 [ 122.937794][ T30] audit: type=1326 audit(1747918778.078:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6096 comm="syz.2.56" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f0399b2ab39 code=0x7fc00000 [ 123.537404][ T120] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 123.699958][ T120] usb 1-1: config 0 has an invalid interface number: 252 but max is 0 [ 123.710505][ T120] usb 1-1: config 0 has no interface number 0 [ 123.728848][ T120] usb 1-1: New USB device found, idVendor=0458, idProduct=704a, bcdDevice=75.70 [ 123.741168][ T120] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 123.750710][ T120] usb 1-1: Product: syz [ 123.755604][ T120] usb 1-1: Manufacturer: syz [ 123.761401][ T120] usb 1-1: SerialNumber: syz [ 123.782261][ T120] usb 1-1: config 0 descriptor?? [ 123.947476][ T5952] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 124.331489][ T6151] netlink: 8 bytes leftover after parsing attributes in process `syz.0.66'. [ 124.977281][ T5952] usb 4-1: Using ep0 maxpacket: 16 [ 124.984722][ T5952] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 124.995379][ T5952] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 125.058634][ T5952] usb 4-1: config 1 has no interface number 1 [ 125.113537][ T5952] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 125.176445][ T5952] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 247, changing to 7 [ 125.211521][ T5952] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 125.239388][ T5952] usb 4-1: New USB device strings: Mfr=9, Product=2, SerialNumber=3 [ 125.248211][ T5875] usb 5-1: new full-speed USB device number 2 using dummy_hcd [ 125.253799][ T5952] usb 4-1: Product: syz [ 125.342782][ T5952] usb 4-1: Manufacturer: syz [ 125.392207][ T5952] usb 4-1: SerialNumber: syz [ 126.784356][ T120] gspca_main: gspca_sn9c20x-2.14.0 probing 0458:704a [ 126.860811][ T120] gspca_sn9c20x: Write register 1000 failed -71 [ 126.912744][ T120] gspca_sn9c20x: Device initialization failed [ 126.959134][ T120] gspca_sn9c20x 1-1:0.252: probe with driver gspca_sn9c20x failed with error -71 [ 127.109770][ T6166] FAULT_INJECTION: forcing a failure. [ 127.109770][ T6166] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 127.147639][ T6166] CPU: 1 UID: 0 PID: 6166 Comm: syz.0.73 Not tainted 6.15.0-rc7-syzkaller-00014-gd608703fcdd9 #0 PREEMPT(full) [ 127.147670][ T6166] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 127.147687][ T6166] Call Trace: [ 127.147696][ T6166] [ 127.147709][ T6166] dump_stack_lvl+0x189/0x250 [ 127.147753][ T6166] ? lockdep_hardirqs_on+0x9c/0x150 [ 127.147780][ T6166] ? __pfx_dump_stack_lvl+0x10/0x10 [ 127.147825][ T6166] should_fail_ex+0x414/0x560 [ 127.147853][ T6166] _copy_to_user+0x31/0xb0 [ 127.147885][ T6166] simple_read_from_buffer+0xe1/0x170 [ 127.147922][ T6166] proc_fail_nth_read+0x1df/0x250 [ 127.147947][ T6166] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 127.147972][ T6166] ? rw_verify_area+0x258/0x650 [ 127.147999][ T6166] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 127.148022][ T6166] vfs_read+0x200/0x980 [ 127.148055][ T6166] ? __pfx___mutex_lock+0x10/0x10 [ 127.148082][ T6166] ? __pfx_vfs_read+0x10/0x10 [ 127.148112][ T6166] ? __fget_files+0x2a/0x420 [ 127.148136][ T6166] ? __fget_files+0x3a0/0x420 [ 127.148153][ T6166] ? __fget_files+0x2a/0x420 [ 127.148182][ T6166] ksys_read+0x145/0x250 [ 127.148208][ T6166] ? __fget_files+0x2a/0x420 [ 127.148228][ T6166] ? __pfx_ksys_read+0x10/0x10 [ 127.148260][ T6166] ? do_syscall_64+0xba/0x210 [ 127.148291][ T6166] do_syscall_64+0xf6/0x210 [ 127.148318][ T6166] ? clear_bhb_loop+0x60/0xb0 [ 127.148351][ T6166] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 127.148371][ T6166] RIP: 0033:0x7f594c78d37c [ 127.148398][ T6166] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 127.148414][ T6166] RSP: 002b:00007f594d561030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 127.148443][ T6166] RAX: ffffffffffffffda RBX: 00007f594c9b5fa0 RCX: 00007f594c78d37c [ 127.148458][ T6166] RDX: 000000000000000f RSI: 00007f594d5610a0 RDI: 0000000000000004 [ 127.148471][ T6166] RBP: 00007f594d561090 R08: 0000000000000000 R09: 0000000000000000 [ 127.148483][ T6166] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 127.148494][ T6166] R13: 0000000000000000 R14: 00007f594c9b5fa0 R15: 00007fffe66796f8 [ 127.148527][ T6166] [ 127.439544][ T120] usb 1-1: USB disconnect, device number 4 [ 127.473684][ T5952] usb 4-1: 2:1 : no or invalid class specific endpoint descriptor [ 127.491687][ T5952] usb 4-1: 2:1 : format type 23 is not supported yet [ 127.689191][ T5875] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 127.702769][ T5875] usb 5-1: can't read configurations, error -71 [ 127.810741][ T5952] usb 4-1: USB disconnect, device number 3 [ 127.878903][ T30] audit: type=1326 audit(1747918783.028:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6169 comm="syz.3.75" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde6318e969 code=0x7fc00000 [ 127.983886][ T30] audit: type=1326 audit(1747918783.128:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6169 comm="syz.3.75" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fde63185927 code=0x7fc00000 [ 128.004902][ T6179] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 128.097962][ T6184] FAULT_INJECTION: forcing a failure. [ 128.097962][ T6184] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 128.153580][ T6184] CPU: 1 UID: 0 PID: 6184 Comm: syz.4.80 Not tainted 6.15.0-rc7-syzkaller-00014-gd608703fcdd9 #0 PREEMPT(full) [ 128.153610][ T6184] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 128.153622][ T6184] Call Trace: [ 128.153630][ T6184] [ 128.153639][ T6184] dump_stack_lvl+0x189/0x250 [ 128.153668][ T6184] ? __lock_acquire+0xaac/0xd20 [ 128.153695][ T6184] ? __pfx_dump_stack_lvl+0x10/0x10 [ 128.153718][ T6184] ? __pfx__printk+0x10/0x10 [ 128.153746][ T6184] ? __might_fault+0xb0/0x130 [ 128.153785][ T6184] should_fail_ex+0x414/0x560 [ 128.153809][ T6184] _copy_from_user+0x2d/0xb0 [ 128.153838][ T6184] ___sys_sendmsg+0x158/0x2a0 [ 128.153869][ T6184] ? __pfx____sys_sendmsg+0x10/0x10 [ 128.153934][ T6184] ? __fget_files+0x2a/0x420 [ 128.153953][ T6184] ? __fget_files+0x3a0/0x420 [ 128.153982][ T6184] __x64_sys_sendmsg+0x19b/0x260 [ 128.154014][ T6184] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 128.154059][ T6184] ? do_syscall_64+0xba/0x210 [ 128.154090][ T6184] do_syscall_64+0xf6/0x210 [ 128.154117][ T6184] ? clear_bhb_loop+0x60/0xb0 [ 128.154142][ T6184] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 128.154162][ T6184] RIP: 0033:0x7f521e38e969 [ 128.154179][ T6184] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 128.154195][ T6184] RSP: 002b:00007f521f16a038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 128.154217][ T6184] RAX: ffffffffffffffda RBX: 00007f521e5b5fa0 RCX: 00007f521e38e969 [ 128.154241][ T6184] RDX: 0000000000048004 RSI: 00002000000007c0 RDI: 0000000000000004 [ 128.154254][ T6184] RBP: 00007f521f16a090 R08: 0000000000000000 R09: 0000000000000000 [ 128.154266][ T6184] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 128.154278][ T6184] R13: 0000000000000000 R14: 00007f521e5b5fa0 R15: 00007ffd2ceb7ef8 [ 128.154310][ T6184] [ 128.415537][ T30] audit: type=1800 audit(1747918783.558:8): pid=6185 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.2.78" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0 [ 128.650098][ T5902] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 128.897299][ T5902] usb 1-1: device descriptor read/64, error -71 [ 128.904176][ T6185] Zero length message leads to an empty skb [ 129.209286][ T5902] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 129.349532][ T5902] usb 1-1: device descriptor read/64, error -71 [ 129.468132][ T5902] usb usb1-port1: attempt power cycle [ 130.180441][ T5902] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 130.210830][ T5902] usb 1-1: device descriptor read/8, error -71 [ 130.357515][ T5952] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 130.457352][ T5902] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 130.478290][ T5902] usb 1-1: device descriptor read/8, error -71 [ 130.487329][ T5952] usb 5-1: device descriptor read/64, error -71 [ 130.497351][ T120] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 130.587791][ T5902] usb usb1-port1: unable to enumerate USB device [ 130.647482][ T120] usb 3-1: Using ep0 maxpacket: 16 [ 130.654562][ T120] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 130.664872][ T120] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 130.674097][ T120] usb 3-1: config 1 has no interface number 1 [ 130.680806][ T120] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 130.695560][ T120] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 247, changing to 7 [ 130.710090][ T120] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 130.719354][ T120] usb 3-1: New USB device strings: Mfr=9, Product=2, SerialNumber=3 [ 130.727416][ T120] usb 3-1: Product: syz [ 130.731805][ T120] usb 3-1: Manufacturer: syz [ 130.736505][ T120] usb 3-1: SerialNumber: syz [ 130.741214][ T5952] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 130.885164][ T30] audit: type=1326 audit(1747918786.028:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6169 comm="syz.3.75" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fde6312ab39 code=0x7fc00000 [ 130.908174][ T5952] usb 5-1: device descriptor read/64, error -71 [ 130.975290][ T120] usb 3-1: 2:1 : no or invalid class specific endpoint descriptor [ 130.994541][ T6208] @: renamed from vlan0 (while UP) [ 131.005142][ T120] usb 3-1: 2:1 : format type 23 is not supported yet [ 131.027860][ T5952] usb usb5-port1: attempt power cycle [ 131.061296][ T120] usb 3-1: USB disconnect, device number 6 [ 131.133617][ T5972] udevd[5972]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 131.334305][ T6211] random: crng reseeded on system resumption [ 131.844575][ T5952] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 132.497383][ T30] audit: type=1326 audit(1747918787.438:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6209 comm="syz.0.87" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f594c78e969 code=0x7ffc0000 [ 132.518737][ T30] audit: type=1326 audit(1747918787.438:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6209 comm="syz.0.87" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f594c78e969 code=0x7ffc0000 [ 132.543826][ T5952] usb 5-1: device descriptor read/8, error -71 [ 132.550134][ T30] audit: type=1326 audit(1747918787.438:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6209 comm="syz.0.87" exe="/root/syz-executor" sig=0 arch=c000003e syscall=306 compat=0 ip=0x7f594c78e969 code=0x7ffc0000 [ 132.572174][ T30] audit: type=1326 audit(1747918787.438:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6209 comm="syz.0.87" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f594c78e969 code=0x7ffc0000 [ 132.593574][ T30] audit: type=1326 audit(1747918787.438:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6209 comm="syz.0.87" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f594c78e969 code=0x7ffc0000 [ 132.807322][ T5952] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 132.864230][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.876499][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.014125][ T5952] usb 5-1: device descriptor read/8, error -71 [ 133.109933][ T5873] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 134.668033][ T5952] usb usb5-port1: unable to enumerate USB device [ 134.709837][ T5873] usb 3-1: Using ep0 maxpacket: 16 [ 134.722528][ T5873] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 134.767390][ T5873] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 134.810783][ T5873] usb 3-1: New USB device found, idVendor=0c70, idProduct=f00a, bcdDevice= 0.00 [ 134.839349][ T5873] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 134.886301][ T5873] usb 3-1: config 0 descriptor?? [ 135.137655][ T5874] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 135.645029][ T30] audit: type=1326 audit(1747918790.788:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6237 comm="syz.0.96" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f594c78e969 code=0x7fc00000 [ 135.807269][ T30] audit: type=1326 audit(1747918790.938:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6237 comm="syz.0.96" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f594c785927 code=0x7fc00000 [ 135.842261][ T5874] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 135.914604][ T5874] usb 2-1: New USB device found, idVendor=1de1, idProduct=c102, bcdDevice=7d.08 [ 135.944199][ T5874] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 135.955565][ T6243] 9pnet_fd: Insufficient options for proto=fd [ 135.972279][ T5874] usb 2-1: Product: syz [ 135.976613][ T5874] usb 2-1: Manufacturer: syz [ 135.998472][ T5874] usb 2-1: SerialNumber: syz [ 136.021620][ T5874] usb 2-1: config 0 descriptor?? [ 136.044832][ T5874] gm12u320 2-1:0.0: [drm:gm12u320_set_ecomode] *ERROR* Misc. req. error -8 [ 136.063088][ T5874] gm12u320 2-1:0.0: probe with driver gm12u320 failed with error -5 [ 136.077868][ T5874] usb-storage 2-1:0.0: USB Mass Storage device detected [ 136.094395][ T5874] usb-storage 2-1:0.0: device ignored [ 136.146612][ T5873] aquacomputer_d5next 0003:0C70:F00A.0001: hidraw0: USB HID v0.00 Device [HID 0c70:f00a] on usb-dummy_hcd.2-1/input0 [ 136.227597][ T5902] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 136.528378][ T5875] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 136.757022][ T978] usb 3-1: USB disconnect, device number 7 [ 136.763042][ T5902] usb 4-1: Using ep0 maxpacket: 16 [ 136.784440][ T5902] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 136.813821][ T5902] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 136.841031][ T5902] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 136.862556][ T5902] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 136.872340][ T5902] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 136.891561][ T6251] fido_id[6251]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 136.895767][ T5902] usb 4-1: config 0 descriptor?? [ 136.937454][ T5875] usb 5-1: Using ep0 maxpacket: 16 [ 136.945428][ T5875] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 136.962813][ T5875] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 136.973145][ T5875] usb 5-1: config 1 has no interface number 1 [ 136.983668][ T5875] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 136.997908][ T5875] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 247, changing to 7 [ 137.015374][ T5875] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 137.026426][ T5875] usb 5-1: New USB device strings: Mfr=9, Product=2, SerialNumber=3 [ 137.035084][ T5875] usb 5-1: Product: syz [ 137.041412][ T5875] usb 5-1: Manufacturer: syz [ 137.046098][ T5875] usb 5-1: SerialNumber: syz [ 137.270300][ T5875] usb 5-1: 2:1 : no or invalid class specific endpoint descriptor [ 137.278539][ T5875] usb 5-1: 2:1 : format type 23 is not supported yet [ 137.341485][ T5902] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0 [ 137.359233][ T5875] usb 5-1: USB disconnect, device number 8 [ 137.384285][ T5902] input: HID 045e:07da as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:045E:07DA.0002/input/input6 [ 137.471239][ T5972] udevd[5972]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 137.530364][ T5902] microsoft 0003:045E:07DA.0002: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.3-1/input0 [ 137.534066][ T6246] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 137.593593][ T6246] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 137.841273][ T6258] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 137.850390][ T6258] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 137.982145][ T6260] netlink: 'syz.4.101': attribute type 3 has an invalid length. [ 137.997537][ T6260] netlink: 'syz.4.101': attribute type 3 has an invalid length. [ 138.005662][ T6260] netlink: 'syz.4.101': attribute type 3 has an invalid length. [ 138.016130][ T6260] netlink: 'syz.4.101': attribute type 3 has an invalid length. [ 138.032343][ T6260] netlink: 'syz.4.101': attribute type 3 has an invalid length. [ 138.040389][ T6260] netlink: 'syz.4.101': attribute type 3 has an invalid length. [ 138.053872][ T6260] netlink: 'syz.4.101': attribute type 3 has an invalid length. [ 138.074799][ T6260] netlink: 'syz.4.101': attribute type 3 has an invalid length. [ 138.084195][ T6260] netlink: 'syz.4.101': attribute type 3 has an invalid length. [ 138.096742][ T6260] netlink: 'syz.4.101': attribute type 3 has an invalid length. [ 138.123520][ T978] usb 2-1: USB disconnect, device number 4 [ 138.623331][ T30] audit: type=1326 audit(1747918793.768:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6237 comm="syz.0.96" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f594c72ab39 code=0x7fc00000 [ 138.651767][ T978] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 138.661746][ T5875] usb 4-1: reset high-speed USB device number 4 using dummy_hcd [ 138.861928][ T978] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 138.892596][ T978] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 138.944180][ T978] usb 5-1: New USB device found, idVendor=058f, idProduct=9410, bcdDevice= 0.00 [ 138.971276][ T978] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 139.033032][ T978] usb 5-1: config 0 descriptor?? [ 139.568176][ T978] maltron 0003:058F:9410.0003: hidraw1: USB HID v0.00 Device [HID 058f:9410] on usb-dummy_hcd.4-1/input0 [ 139.843037][ T5902] usb 4-1: USB disconnect, device number 4 [ 140.309937][ T5875] usb 5-1: USB disconnect, device number 9 [ 141.633605][ T6301] netlink: 232 bytes leftover after parsing attributes in process `syz.4.112'. [ 141.794218][ T5874] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 142.063389][ T5874] usb 1-1: Using ep0 maxpacket: 16 [ 142.075112][ T5874] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 142.086674][ T5874] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 142.098047][ T5874] usb 1-1: config 1 has no interface number 1 [ 142.104176][ T5874] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 142.152708][ T5874] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 247, changing to 7 [ 142.177913][ T5874] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 142.187381][ T5874] usb 1-1: New USB device strings: Mfr=9, Product=2, SerialNumber=3 [ 142.196009][ T5874] usb 1-1: Product: syz [ 142.205339][ T5874] usb 1-1: Manufacturer: syz [ 142.248741][ T5874] usb 1-1: SerialNumber: syz [ 142.284348][ T6309] fuse: Unknown parameter 'group_id00000000000000000000' [ 142.491458][ T5874] usb 1-1: 2:1 : no or invalid class specific endpoint descriptor [ 142.540366][ T5874] usb 1-1: 2:1 : format type 23 is not supported yet [ 142.635464][ T5874] usb 1-1: USB disconnect, device number 9 [ 142.729451][ T5972] udevd[5972]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 143.457467][ T5874] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 143.467615][ T5873] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 143.557360][ T24] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 143.612568][ T6328] netlink: 32 bytes leftover after parsing attributes in process `syz.3.120'. [ 143.621726][ T6328] netlink: 132 bytes leftover after parsing attributes in process `syz.3.120'. [ 143.630275][ T5874] usb 1-1: Using ep0 maxpacket: 16 [ 143.640159][ T5873] usb 2-1: Using ep0 maxpacket: 32 [ 143.648739][ T5874] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 143.677617][ T5873] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 143.688136][ T5874] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 143.705772][ T5874] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 143.721829][ T24] usb 3-1: Using ep0 maxpacket: 8 [ 143.733251][ T24] usb 3-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 143.744523][ T5873] usb 2-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 143.755026][ T5874] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 143.764572][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 143.773407][ T5873] usb 2-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 143.785747][ T5874] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 143.794740][ T5873] usb 2-1: Product: syz [ 143.826684][ T5873] usb 2-1: Manufacturer: syz [ 143.836321][ T24] usb 3-1: config 0 descriptor?? [ 143.853356][ T5873] usb 2-1: SerialNumber: syz [ 143.905917][ T5874] usb 1-1: config 0 descriptor?? [ 144.104530][ T5873] usb 2-1: config 0 descriptor?? [ 144.186837][ T6324] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 144.367031][ T5873] hub 2-1:0.0: bad descriptor, ignoring hub [ 144.409488][ T5873] hub 2-1:0.0: probe with driver hub failed with error -5 [ 144.518989][ T24] asix 3-1:0.0 (unnamed net_device) (uninitialized): invalid hw address, using random [ 144.564636][ T5874] microsoft 0003:045E:07DA.0004: unknown main item tag 0x0 [ 144.623296][ T5874] input: HID 045e:07da as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:045E:07DA.0004/input/input7 [ 144.728171][ T120] usb 2-1: USB disconnect, device number 5 [ 144.758814][ T5874] microsoft 0003:045E:07DA.0004: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.0-1/input0 [ 144.778571][ T6323] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 144.814228][ T6323] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 144.948853][ T6326] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 144.973306][ T6326] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 145.009768][ T6326] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 145.038859][ T6326] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 145.097411][ T120] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 145.186579][ T6347] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 145.197905][ T6347] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 145.227510][ T120] usb 2-1: device descriptor read/64, error -71 [ 145.467449][ T120] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 145.502263][ T24] asix 3-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 145.534323][ T30] audit: type=1326 audit(1747918800.668:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6312 comm="syz.4.115" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f521e385927 code=0x7fc00000 [ 145.575873][ T24] asix 3-1:0.0: probe with driver asix failed with error -71 [ 145.627727][ T120] usb 2-1: device descriptor read/64, error -71 [ 145.650656][ T24] usb 3-1: USB disconnect, device number 8 [ 145.768388][ T120] usb usb2-port1: attempt power cycle [ 145.814009][ T6355] netlink: 232 bytes leftover after parsing attributes in process `syz.4.124'. [ 145.827478][ T5874] usb 1-1: reset high-speed USB device number 10 using dummy_hcd [ 146.147343][ T120] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 146.191462][ T120] usb 2-1: device descriptor read/8, error -71 [ 146.403631][ T6362] syz.4.125: attempt to access beyond end of device [ 146.403631][ T6362] loop4: rw=2048, sector=2, nr_sectors = 1 limit=0 [ 146.417419][ T6362] hfsplus: unable to find HFS+ superblock [ 146.430375][ T6362] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 146.440258][ T6362] cramfs: wrong magic [ 146.455022][ T6362] netlink: 156 bytes leftover after parsing attributes in process `syz.4.125'. [ 147.478228][ T5873] usb 1-1: USB disconnect, device number 10 [ 150.495543][ T6396] netlink: 232 bytes leftover after parsing attributes in process `syz.3.136'. [ 152.489216][ T30] audit: type=1326 audit(1747918807.458:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6388 comm="syz.4.134" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f521e385927 code=0x7fc00000 [ 152.593774][ T6422] netlink: 28 bytes leftover after parsing attributes in process `syz.2.142'. [ 152.653934][ T6421] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 154.039610][ T6431] FAULT_INJECTION: forcing a failure. [ 154.039610][ T6431] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 154.087425][ T6431] CPU: 0 UID: 0 PID: 6431 Comm: syz.4.145 Not tainted 6.15.0-rc7-syzkaller-00014-gd608703fcdd9 #0 PREEMPT(full) [ 154.087454][ T6431] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 154.087466][ T6431] Call Trace: [ 154.087474][ T6431] [ 154.087482][ T6431] dump_stack_lvl+0x189/0x250 [ 154.087519][ T6431] ? __pfx_dump_stack_lvl+0x10/0x10 [ 154.087546][ T6431] ? __pfx__printk+0x10/0x10 [ 154.087590][ T6431] should_fail_ex+0x414/0x560 [ 154.087617][ T6431] strncpy_from_user+0x36/0x290 [ 154.087646][ T6431] getname_flags+0xf3/0x540 [ 154.087671][ T6431] __x64_sys_execve+0x7a/0xb0 [ 154.087700][ T6431] do_syscall_64+0xf6/0x210 [ 154.087728][ T6431] ? clear_bhb_loop+0x60/0xb0 [ 154.087752][ T6431] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 154.087771][ T6431] RIP: 0033:0x7f521e38e969 [ 154.087789][ T6431] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 154.087805][ T6431] RSP: 002b:00007f521f149038 EFLAGS: 00000246 ORIG_RAX: 000000000000003b [ 154.087826][ T6431] RAX: ffffffffffffffda RBX: 00007f521e5b6080 RCX: 00007f521e38e969 [ 154.087841][ T6431] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000080 [ 154.087853][ T6431] RBP: 00007f521f149090 R08: 0000000000000000 R09: 0000000000000000 [ 154.087865][ T6431] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 154.087876][ T6431] R13: 0000000000000001 R14: 00007f521e5b6080 R15: 00007ffd2ceb7ef8 [ 154.087904][ T6431] [ 154.250378][ C0] vkms_vblank_simulate: vblank timer overrun [ 155.396680][ T6454] process 'syz.4.149' launched './file0' with NULL argv: empty string added [ 156.125388][ T6467] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 156.343174][ T6471] openvswitch: netlink: Geneve opt len 126 is not a multiple of 4. [ 157.597357][ T6490] fuse: Bad value for 'fd' [ 158.564334][ T6518] capability: warning: `syz.0.162' uses 32-bit capabilities (legacy support in use) [ 158.653261][ T6523] validate_nla: 43 callbacks suppressed [ 158.653277][ T6523] netlink: 'syz.0.162': attribute type 1 has an invalid length. [ 158.853265][ T6523] bond1: entered promiscuous mode [ 158.861416][ T6523] bond1: entered allmulticast mode [ 158.867289][ T5902] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 159.008419][ T5902] usb 4-1: device descriptor read/64, error -71 [ 159.406908][ T6538] x_tables: duplicate underflow at hook 1 [ 159.413937][ T6538] syz.2.166 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 160.547382][ T5902] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 160.997558][ T6549] netlink: 16 bytes leftover after parsing attributes in process `syz.2.169'. [ 161.273805][ T5902] usb 4-1: device descriptor read/64, error -71 [ 161.654059][ T5902] usb usb4-port1: attempt power cycle [ 162.868136][ T978] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 164.631978][ T6567] netlink: 'syz.1.176': attribute type 1 has an invalid length. [ 164.657468][ T6567] netlink: 'syz.1.176': attribute type 6 has an invalid length. [ 164.665292][ T6567] netlink: 224 bytes leftover after parsing attributes in process `syz.1.176'. [ 164.918037][ T6567] 8021q: adding VLAN 0 to HW filter on device bond0 [ 164.990447][ T6572] ALSA: mixer_oss: invalid OSS volume '' [ 165.775827][ T6567] bond0: (slave rose0): Enslaving as an active interface with an up link [ 165.784514][ T978] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 165.822886][ T978] usb 3-1: can't read configurations, error -71 [ 166.482463][ T6587] netlink: 'syz.4.177': attribute type 23 has an invalid length. [ 167.420381][ T1338] Bluetooth: Error in BCSP hdr checksum [ 167.545483][ T120] IPVS: starting estimator thread 0... [ 167.703558][ T6599] IPVS: using max 24 ests per chain, 57600 per kthread [ 168.720048][ T6625] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.187'. [ 168.730160][ T6625] netlink: zone id is out of range [ 168.736479][ T6625] netlink: zone id is out of range [ 168.741787][ T6625] netlink: zone id is out of range [ 168.746943][ T6625] netlink: zone id is out of range [ 168.752325][ T6625] netlink: get zone limit has 8 unknown bytes [ 169.127436][ T5130] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 169.965836][ T6638] netlink: 'syz.2.192': attribute type 8 has an invalid length. [ 170.067333][ T978] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 170.228429][ T5875] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 170.250306][ T978] usb 5-1: config 0 has an invalid interface number: 185 but max is 0 [ 170.275121][ T978] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 170.299560][ T978] usb 5-1: config 0 has no interface number 0 [ 170.318848][ T978] usb 5-1: config 0 interface 185 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 170.342649][ T978] usb 5-1: config 0 interface 185 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 16 [ 170.414870][ T978] usb 5-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=d2.82 [ 170.425824][ T5875] usb 4-1: Using ep0 maxpacket: 32 [ 170.441761][ T5875] usb 4-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 170.455503][ T978] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 170.480121][ T5875] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 170.491503][ T978] usb 5-1: Product: syz [ 170.517009][ T978] usb 5-1: Manufacturer: syz [ 170.556003][ T978] usb 5-1: SerialNumber: syz [ 170.567412][ T5875] usb 4-1: config 0 descriptor?? [ 170.635056][ T978] usb 5-1: config 0 descriptor?? [ 170.649127][ T5875] gspca_main: sunplus-2.14.0 probing 041e:400b [ 170.695847][ T978] usb 5-1: bad CDC descriptors [ 170.718122][ T978] usb 5-1: unsupported MDLM descriptors [ 170.819600][ T6640] input: syz1 as /devices/virtual/input/input8 [ 171.127604][ T6655] netlink: 212408 bytes leftover after parsing attributes in process `syz.4.191'. [ 171.146681][ T6655] netlink: zone id is out of range [ 171.152595][ T6655] netlink: zone id is out of range [ 171.158240][ T6655] netlink: zone id is out of range [ 171.164065][ T6655] netlink: zone id is out of range [ 171.169766][ T6655] netlink: get zone limit has 8 unknown bytes [ 171.336733][ T5875] gspca_sunplus: reg_w_riv err -110 [ 171.476980][ T5875] sunplus 4-1:0.0: probe with driver sunplus failed with error -110 [ 172.503652][ T5873] usb 5-1: USB disconnect, device number 10 [ 173.602775][ T5875] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 173.931954][ T5875] usb 3-1: device descriptor read/64, error -71 [ 174.067619][ T59] usb 4-1: USB disconnect, device number 8 [ 174.280001][ T5875] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 174.291283][ T1009] Bluetooth: hci5: Frame reassembly failed (-84) [ 174.324268][ T1009] Bluetooth: hci5: received HCILL_GO_TO_SLEEP_ACK in state 0 [ 174.460653][ T5875] usb 3-1: device descriptor read/64, error -71 [ 174.567944][ T5875] usb usb3-port1: attempt power cycle [ 175.037515][ T5875] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 175.090265][ T5875] usb 3-1: device descriptor read/8, error -71 [ 175.927272][ T5875] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 175.959152][ T5875] usb 3-1: device descriptor read/8, error -71 [ 175.985648][ T6704] bridge0: port 3(veth0_to_bridge) entered blocking state [ 176.213791][ T5875] usb usb3-port1: unable to enumerate USB device [ 176.217550][ T6704] bridge0: port 3(veth0_to_bridge) entered disabled state [ 176.348378][ T5836] Bluetooth: hci5: command 0x1003 tx timeout [ 176.393414][ T5130] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 176.897515][ T6704] veth0_to_bridge: entered allmulticast mode [ 176.904998][ T6704] veth0_to_bridge: entered promiscuous mode [ 176.963877][ T6704] bridge0: adding interface veth0_to_bridge with same address as a received packet (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 177.010107][ T6718] netlink: 'syz.1.203': attribute type 21 has an invalid length. [ 177.071571][ T6704] bridge0: port 3(veth0_to_bridge) entered blocking state [ 177.079137][ T6704] bridge0: port 3(veth0_to_bridge) entered forwarding state [ 177.151203][ T6718] netlink: 8 bytes leftover after parsing attributes in process `syz.1.203'. [ 177.516962][ T6731] netfs: Couldn't get user pages (rc=-14) [ 179.301036][ T6751] program syz.2.215 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 179.301455][ T59] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 179.577425][ T59] usb 4-1: Using ep0 maxpacket: 32 [ 179.587604][ T59] usb 4-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 179.607273][ T59] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 179.743089][ T5875] usb 5-1: new full-speed USB device number 11 using dummy_hcd [ 179.752344][ T59] usb 4-1: config 0 descriptor?? [ 179.766656][ T59] gspca_main: sunplus-2.14.0 probing 041e:400b [ 179.976104][ T6748] input: syz1 as /devices/virtual/input/input10 [ 180.331172][ T59] gspca_sunplus: reg_w_riv err -110 [ 180.348601][ T59] sunplus 4-1:0.0: probe with driver sunplus failed with error -110 [ 180.409489][ T5875] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 180.523254][ T5875] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 180.550526][ T5875] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 10 [ 180.576412][ T5875] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 180.596781][ T5875] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 180.615323][ T6762] sd 0:0:1:0: device reset [ 180.632717][ T5875] usb 5-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 180.646013][ T5875] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 180.664308][ T5875] usb 5-1: Product: syz [ 180.669762][ T5875] usb 5-1: Manufacturer: syz [ 180.674756][ T5875] usb 5-1: SerialNumber: syz [ 180.701318][ T5875] usb 5-1: config 0 descriptor?? [ 181.157659][ T5875] radio-si470x 5-1:0.0: si470x_get_report: usb_control_msg returned -71 [ 181.175391][ T5875] radio-si470x 5-1:0.0: probe with driver radio-si470x failed with error -5 [ 181.407319][ T30] audit: type=1804 audit(1747918836.498:20): pid=6768 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.2.219" name="/newroot/47/file0" dev="tmpfs" ino=269 res=1 errno=0 [ 181.915509][ T5875] usb 5-1: USB disconnect, device number 11 [ 182.215835][ T6771] vivid-000: disconnect [ 182.238022][ T6771] netlink: 'syz.1.220': attribute type 13 has an invalid length. [ 182.252048][ T6771] vivid-000: reconnect [ 182.953533][ T5902] usb 4-1: USB disconnect, device number 9 [ 183.142124][ T5873] kernel read not supported for file /amidi2 (pid: 5873 comm: kworker/1:4) [ 183.331276][ T5875] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 184.262874][ T5875] usb 5-1: Using ep0 maxpacket: 16 [ 184.278882][ T5875] usb 5-1: config 4 has an invalid interface number: 163 but max is 0 [ 184.287635][ T5875] usb 5-1: config 4 has no interface number 0 [ 184.293771][ T5875] usb 5-1: config 4 interface 163 has no altsetting 0 [ 184.308210][ T5875] usb 5-1: New USB device found, idVendor=0baf, idProduct=00f6, bcdDevice=f4.c0 [ 184.345620][ T5875] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 184.361249][ T5875] usb 5-1: Product: syz [ 184.369373][ T5875] usb 5-1: Manufacturer: syz [ 184.391141][ T5875] usb 5-1: SerialNumber: syz [ 184.444522][ T5875] usb 5-1: [ueagle-atm] ADSL device founded vid (0XBAF) pid (0XF6) Rev (0XF4C0): Eagle I [ 184.518990][ T6791] syz.2.226: attempt to access beyond end of device [ 184.518990][ T6791] loop2: rw=2048, sector=2, nr_sectors = 1 limit=0 [ 184.532561][ T6791] hfsplus: unable to find HFS+ superblock [ 184.546185][ T6791] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 184.558407][ T6791] cramfs: wrong magic [ 186.481134][ T5875] usb 5-1: [ueagle-atm] pre-firmware device, uploading firmware [ 186.607338][ T5875] usb 5-1: [ueagle-atm] loading firmware ueagle-atm/eagleI.fw [ 186.624104][ T5902] usb 5-1: Direct firmware load for ueagle-atm/eagleI.fw failed with error -2 [ 186.634023][ T5875] usb 5-1: USB disconnect, device number 12 [ 186.754029][ T5902] usb 5-1: Falling back to sysfs fallback for: ueagle-atm/eagleI.fw [ 186.887143][ T6815] vivid-000: disconnect [ 186.961272][ T6815] netlink: 'syz.3.232': attribute type 13 has an invalid length. [ 187.436573][ T6810] vivid-000: reconnect [ 187.443789][ T5902] kobject: kobject_add_internal failed for firmware (error: -2 parent: 5-1) [ 187.614669][ T5902] firmware ueagle-atm!eagleI.fw: fw_load_sysfs_fallback: device_register failed [ 187.642554][ T5902] usb 5-1: [UEAGLE-ATM] firmware is not available [ 187.947356][ T24] usb 2-1: new full-speed USB device number 10 using dummy_hcd [ 188.097369][ T5873] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 188.116649][ T24] usb 2-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 188.136767][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 188.168330][ T24] usb 2-1: config 0 descriptor?? [ 188.309335][ T5873] usb 4-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 188.327323][ T5873] usb 4-1: New USB device strings: Mfr=0, Product=64, SerialNumber=0 [ 188.363617][ T5873] usb 4-1: Product: syz [ 188.388550][ T6817] netlink: 8 bytes leftover after parsing attributes in process `syz.1.233'. [ 188.425579][ T6817] netlink: 12 bytes leftover after parsing attributes in process `syz.1.233'. [ 188.446828][ T5873] usb 4-1: config 0 descriptor?? [ 188.480110][ T5873] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 188.510051][ T24] [drm] vendor descriptor length:e0 data:00 00 00 00 00 00 00 00 00 00 00 [ 188.518870][ T120] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 188.569967][ T24] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor [ 188.697341][ T120] usb 5-1: Using ep0 maxpacket: 32 [ 188.708447][ T24] [drm] Initialized udl 0.0.1 for 2-1:0.0 on minor 2 [ 188.721527][ T24] [drm] Initialized udl on minor 2 [ 188.728431][ T120] usb 5-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 188.745623][ T120] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 188.768280][ T120] usb 5-1: config 0 descriptor?? [ 188.779220][ T120] gspca_main: sunplus-2.14.0 probing 041e:400b [ 188.804451][ T24] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed [ 188.816729][ T6832] netlink: 20 bytes leftover after parsing attributes in process `syz.2.237'. [ 188.838704][ T24] udl 2-1:0.0: [drm] Cannot find any crtc or sizes [ 188.853023][ T6832] netlink: 32 bytes leftover after parsing attributes in process `syz.2.237'. [ 188.906643][ T6823] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 188.930476][ T6823] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 188.986839][ T6824] input: syz1 as /devices/virtual/input/input11 [ 189.014122][ T5875] usb 2-1: USB disconnect, device number 10 [ 189.018340][ T5874] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 189.049490][ T5874] udl 2-1:0.0: [drm] Cannot find any crtc or sizes [ 189.158707][ T5873] usb 4-1: USB disconnect, device number 10 [ 189.311296][ T120] gspca_sunplus: reg_w_riv err -110 [ 189.327066][ T120] sunplus 5-1:0.0: probe with driver sunplus failed with error -110 [ 189.795447][ T6842] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 189.802337][ T6848] syz.0.239: attempt to access beyond end of device [ 189.802337][ T6848] loop0: rw=2048, sector=2, nr_sectors = 1 limit=0 [ 189.802447][ T6848] hfsplus: unable to find HFS+ superblock [ 189.897110][ T6842] cramfs: wrong magic [ 191.120689][ T978] usb 5-1: USB disconnect, device number 13 [ 191.472918][ T6870] vivid-000: disconnect [ 191.554782][ T6870] netlink: 'syz.2.245': attribute type 13 has an invalid length. [ 192.024522][ T6866] vivid-000: reconnect [ 192.477072][ T6879] 9pnet_fd: Insufficient options for proto=fd [ 192.915708][ T6889] FAULT_INJECTION: forcing a failure. [ 192.915708][ T6889] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 192.931100][ T6889] CPU: 0 UID: 0 PID: 6889 Comm: syz.1.250 Not tainted 6.15.0-rc7-syzkaller-00014-gd608703fcdd9 #0 PREEMPT(full) [ 192.931128][ T6889] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 192.931141][ T6889] Call Trace: [ 192.931149][ T6889] [ 192.931158][ T6889] dump_stack_lvl+0x189/0x250 [ 192.931193][ T6889] ? __pfx_dump_stack_lvl+0x10/0x10 [ 192.931220][ T6889] ? __pfx__printk+0x10/0x10 [ 192.931264][ T6889] should_fail_ex+0x414/0x560 [ 192.931291][ T6889] strncpy_from_user+0x36/0x290 [ 192.931315][ T6889] getname_flags+0xf3/0x540 [ 192.931341][ T6889] user_path_at+0x24/0x60 [ 192.931366][ T6889] vfs_open_tree+0x251/0x7d0 [ 192.931396][ T6889] ? __pfx_vfs_open_tree+0x10/0x10 [ 192.931417][ T6889] ? ksys_write+0x1f0/0x250 [ 192.931458][ T6889] __x64_sys_open_tree+0x7d/0xf0 [ 192.931489][ T6889] do_syscall_64+0xf6/0x210 [ 192.931517][ T6889] ? asm_sysvec_call_function_single+0x1a/0x20 [ 192.931537][ T6889] ? clear_bhb_loop+0x60/0xb0 [ 192.931562][ T6889] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 192.931581][ T6889] RIP: 0033:0x7f4d72d8e969 [ 192.931599][ T6889] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 192.931616][ T6889] RSP: 002b:00007f4d73cb5038 EFLAGS: 00000246 ORIG_RAX: 00000000000001ac [ 192.931636][ T6889] RAX: ffffffffffffffda RBX: 00007f4d72fb6080 RCX: 00007f4d72d8e969 [ 192.931651][ T6889] RDX: 0000000000089901 RSI: 0000200000000100 RDI: ffffffffffffff9c [ 192.931665][ T6889] RBP: 00007f4d73cb5090 R08: 0000000000000000 R09: 0000000000000000 [ 192.931677][ T6889] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 192.931688][ T6889] R13: 0000000000000000 R14: 00007f4d72fb6080 R15: 00007fff4ca279e8 [ 192.931720][ T6889] [ 193.234112][ T6889] misc userio: Invalid payload size [ 193.339304][ T30] audit: type=1326 audit(1747918848.488:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6893 comm="syz.0.251" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f594c78e969 code=0x7fc00000 [ 193.506124][ T30] audit: type=1326 audit(1747918848.648:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6893 comm="syz.0.251" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f594c785927 code=0x7fc00000 [ 193.587636][ T30] audit: type=1326 audit(1747918848.648:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6893 comm="syz.0.251" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f594c72ab39 code=0x7fc00000 [ 193.670732][ T6899] syz.2.252: attempt to access beyond end of device [ 193.670732][ T6899] loop2: rw=2048, sector=2, nr_sectors = 1 limit=0 [ 193.684429][ T6899] hfsplus: unable to find HFS+ superblock [ 193.703299][ T6899] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 193.713154][ T6899] cramfs: wrong magic [ 193.742860][ T6899] netlink: 156 bytes leftover after parsing attributes in process `syz.2.252'. [ 194.332796][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.511690][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.967293][ T120] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 196.149232][ T120] usb 3-1: Using ep0 maxpacket: 8 [ 196.169807][ T120] usb 3-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 196.187341][ T120] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 196.203417][ T120] usb 3-1: Product: syz [ 196.218220][ T120] usb 3-1: Manufacturer: syz [ 196.229071][ T120] usb 3-1: SerialNumber: syz [ 196.259785][ T120] usb 3-1: config 0 descriptor?? [ 196.303377][ T120] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 196.319542][ T120] usb 3-1: setting power ON [ 196.328221][ T30] audit: type=1326 audit(1747918851.478:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6893 comm="syz.0.251" exe="/root/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7f594c72abff code=0x7fc00000 [ 196.358307][ T120] dvb-usb: bulk message failed: -22 (2/0) [ 196.403055][ T120] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 196.424650][ T120] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 196.451721][ T120] usb 3-1: media controller created [ 196.491912][ T6910] dvb-usb: bulk message failed: -22 (3/0) [ 196.527289][ T6910] usb 3-1: gpio_write failed. [ 196.551435][ T6910] dvb-usb: bulk message failed: -22 (3/0) [ 196.568905][ T120] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 196.662264][ T120] usb 3-1: selecting invalid altsetting 6 [ 196.690829][ T120] usb 3-1: digital interface selection failed (-22) [ 196.710104][ T120] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 196.751397][ T120] usb 3-1: setting power OFF [ 196.756305][ T120] dvb-usb: bulk message failed: -22 (2/0) [ 196.775139][ T120] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 196.808062][ T120] (NULL device *): no alternate interface [ 196.952155][ T120] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 197.007249][ T5875] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 197.047783][ T120] usb 3-1: USB disconnect, device number 15 [ 197.193095][ T5875] usb 1-1: Using ep0 maxpacket: 8 [ 197.230056][ T5875] usb 1-1: config 0 has no interfaces? [ 197.263919][ T6924] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 197.329679][ T5875] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 197.460527][ T5875] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 197.578327][ T978] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 197.745411][ T5875] usb 1-1: config 0 descriptor?? [ 197.849551][ T978] usb 2-1: config 0 has an invalid interface number: 69 but max is 0 [ 198.011210][ T978] usb 2-1: config 0 has no interface number 0 [ 198.113756][ T978] usb 2-1: config 0 interface 69 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 1023 [ 198.255862][ T978] usb 2-1: config 0 interface 69 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 198.783935][ T978] usb 2-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice=d7.ca [ 199.076492][ T978] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 199.221644][ T978] usb 2-1: Product: syz [ 199.285855][ T978] usb 2-1: Manufacturer: syz [ 199.349793][ T978] usb 2-1: SerialNumber: syz [ 199.649974][ T978] usb 2-1: config 0 descriptor?? [ 199.738886][ T6924] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 199.988641][ T978] cyberjack 2-1:0.69: Reiner SCT Cyberjack USB card reader converter detected [ 200.513800][ C0] cyberjack ttyUSB0: cyberjack_read_int_callback - failed resubmitting read urb, error -22 [ 201.069041][ T978] usb 2-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB0 [ 201.092304][ T59] usb 1-1: USB disconnect, device number 11 [ 201.219549][ T6932] 9pnet_fd: Insufficient options for proto=fd [ 201.249009][ T978] usb 2-1: USB disconnect, device number 11 [ 201.286487][ T978] cyberjack ttyUSB0: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB0 [ 201.363217][ T978] cyberjack 2-1:0.69: device disconnected [ 201.488618][ T6930] warning: `syz.2.261' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 201.602772][ T5873] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 201.626881][ T6937] fuse: Bad value for 'rootmode' [ 201.875075][ T5873] usb 3-1: device descriptor read/64, error -71 [ 201.893991][ T6947] netlink: 56 bytes leftover after parsing attributes in process `syz.0.265'. [ 202.917288][ T5873] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 203.507347][ T5873] usb 3-1: device descriptor read/64, error -71 [ 203.547313][ T30] audit: type=1326 audit(1747918858.688:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6950 comm="syz.3.268" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde6318e969 code=0x7fc00000 [ 203.603399][ T30] audit: type=1326 audit(1747918858.688:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6950 comm="syz.3.268" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fde6318e969 code=0x7fc00000 [ 203.636044][ T5873] usb usb3-port1: attempt power cycle [ 203.821542][ T6959] netlink: 4 bytes leftover after parsing attributes in process `syz.4.269'. [ 203.913187][ T5130] Bluetooth: hci0: command 0x0c1a tx timeout [ 203.920204][ T6939] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 203.997315][ T5873] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 204.041358][ T5873] usb 3-1: device descriptor read/8, error -71 [ 204.604074][ T6939] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 204.620225][ T6939] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 204.639367][ T6939] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 204.645528][ T6939] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 204.655245][ T6939] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 204.665304][ T6939] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 204.672957][ T6939] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 204.685068][ T6939] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 204.699343][ T6939] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 204.706506][ T6939] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 204.716972][ T6939] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 204.736228][ T6939] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 204.739305][ T6972] tipc: Started in network mode [ 204.742478][ T6939] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 204.747395][ T6972] tipc: Node identity 4, cluster identity 4711 [ 204.759719][ T6972] tipc: Node number set to 4 [ 204.773723][ T6939] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 204.975696][ T6978] lo speed is unknown, defaulting to 1000 [ 204.984055][ T6978] lo speed is unknown, defaulting to 1000 [ 205.005860][ T6978] lo speed is unknown, defaulting to 1000 [ 205.021501][ T6978] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 205.073837][ T6978] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 205.088375][ T120] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 205.138573][ T59] usb 1-1: new full-speed USB device number 12 using dummy_hcd [ 205.169898][ T6978] lo speed is unknown, defaulting to 1000 [ 205.189183][ T6978] lo speed is unknown, defaulting to 1000 [ 205.207696][ T6978] lo speed is unknown, defaulting to 1000 [ 205.223733][ T6978] lo speed is unknown, defaulting to 1000 [ 205.227345][ T120] usb 5-1: device descriptor read/64, error -71 [ 205.233845][ T6978] lo speed is unknown, defaulting to 1000 [ 205.300196][ T59] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xD has invalid wMaxPacketSize 0 [ 205.317913][ T59] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 205.335065][ T59] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xD has invalid wMaxPacketSize 0 [ 205.347311][ T5873] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 205.356304][ T59] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 205.372152][ T59] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xD has invalid wMaxPacketSize 0 [ 205.382294][ T59] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 205.397289][ T59] usb 1-1: New USB device found, idVendor=0451, idProduct=5152, bcdDevice=c0.b9 [ 205.416563][ T59] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 205.438246][ T59] usb 1-1: Product: syz [ 205.454792][ T59] usb 1-1: Manufacturer: syz [ 205.461097][ T59] usb 1-1: SerialNumber: syz [ 205.477458][ T59] usb 1-1: config 0 descriptor?? [ 205.487628][ T120] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 205.515212][ T59] ti_usb_3410_5052 1-1:0.0: TI USB 5052 2 port adapter converter detected [ 205.524590][ T59] ti_usb_3410_5052 1-1:0.0: missing endpoints [ 205.529252][ T5873] usb 3-1: unable to get BOS descriptor or descriptor too short [ 205.560325][ T5873] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 205.570344][ T5873] usb 3-1: config 1 interface 0 altsetting 247 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 205.584048][ T5873] usb 3-1: config 1 interface 0 has no altsetting 1 [ 205.594860][ T5873] usb 3-1: New USB device found, idVendor=2040, idProduct=b990, bcdDevice=f6.75 [ 205.604643][ T5873] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 205.612770][ T5873] usb 3-1: Product: syz [ 205.617328][ T5873] usb 3-1: Manufacturer: syz [ 205.622008][ T5873] usb 3-1: SerialNumber: syz [ 205.627402][ T120] usb 5-1: device descriptor read/64, error -71 [ 205.651527][ T5873] smsusb:smsusb_probe: board id=8, interface number 0 [ 205.723635][ T59] usb 1-1: USB disconnect, device number 12 [ 205.748876][ T120] usb usb5-port1: attempt power cycle [ 205.953697][ T5873] smsusb:smsusb_probe: usb_set_interface failed, rc -71 [ 205.972274][ T5873] smsusb 3-1:1.0: probe with driver smsusb failed with error -71 [ 205.982326][ T5130] Bluetooth: hci0: command 0x0c1a tx timeout [ 205.997627][ T5873] usb 3-1: USB disconnect, device number 20 [ 206.127275][ T120] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 206.148527][ T120] usb 5-1: device descriptor read/8, error -71 [ 206.149412][ T30] audit: type=1326 audit(1747918861.298:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6950 comm="syz.3.268" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde6318e969 code=0x7fc00000 [ 206.221363][ T6983] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 206.836181][ T5130] Bluetooth: hci2: command 0x0c1a tx timeout [ 206.848252][ T5130] Bluetooth: hci4: command 0x0c1a tx timeout [ 206.848413][ T5836] Bluetooth: hci1: command 0x0c1a tx timeout [ 206.855537][ T5130] Bluetooth: hci3: command 0x0c1a tx timeout [ 206.885806][ T120] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 207.414587][ T6983] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 207.448613][ T120] usb 5-1: device descriptor read/8, error -71 [ 207.559957][ T120] usb usb5-port1: unable to enumerate USB device [ 208.237330][ T5130] Bluetooth: hci0: command 0x0c1a tx timeout [ 208.986059][ T5130] Bluetooth: hci1: command 0x0c1a tx timeout [ 208.986084][ T5838] Bluetooth: hci4: command 0x0c1a tx timeout [ 208.986109][ T5130] Bluetooth: hci2: command 0x0c1a tx timeout [ 209.020341][ T5836] Bluetooth: hci3: command 0x0c1a tx timeout [ 209.148109][ T7020] program syz.3.282 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 209.870359][ T30] audit: type=1326 audit(1747918865.008:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7022 comm="syz.0.288" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f594c78e969 code=0x7fc00000 [ 209.968896][ T30] audit: type=1326 audit(1747918865.098:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7022 comm="syz.0.288" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f594c785927 code=0x7fc00000 [ 210.075789][ T30] audit: type=1326 audit(1747918865.108:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7022 comm="syz.0.288" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f594c72ab39 code=0x7fc00000 [ 210.923101][ T7045] binder: BINDER_SET_CONTEXT_MGR already set [ 210.948616][ T7045] binder: 7043:7045 ioctl 4018620d 200000000040 returned -16 [ 210.987340][ T978] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 211.017750][ T5836] Bluetooth: hci1: command 0x0c1a tx timeout [ 211.023945][ T5836] Bluetooth: hci4: command 0x0c1a tx timeout [ 211.034079][ T5838] Bluetooth: hci2: command 0x0c1a tx timeout [ 211.097518][ T5838] Bluetooth: hci3: command 0x0c1a tx timeout [ 211.177397][ T978] usb 5-1: Using ep0 maxpacket: 16 [ 211.395618][ T978] usb 5-1: config 5 has an invalid descriptor of length 0, skipping remainder of the config [ 211.406361][ T978] usb 5-1: config 5 has 0 interfaces, different from the descriptor's value: 1 [ 211.436501][ T978] usb 5-1: New USB device found, idVendor=04cc, idProduct=2533, bcdDevice=fc.58 [ 211.447736][ T978] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 211.455938][ T978] usb 5-1: Product: syz [ 211.460355][ T978] usb 5-1: Manufacturer: syz [ 211.465061][ T978] usb 5-1: SerialNumber: syz [ 211.553606][ T7055] netlink: 32 bytes leftover after parsing attributes in process `syz.2.296'. [ 212.245137][ T978] usb 5-1: USB disconnect, device number 18 [ 213.378633][ T30] audit: type=1326 audit(1747918868.488:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7022 comm="syz.0.288" exe="/root/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7f594c72abff code=0x7fc00000 [ 213.775834][ T7062] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 213.794780][ T7062] team0: Port device batadv1 added [ 213.842339][ T7064] netlink: 632 bytes leftover after parsing attributes in process `syz.1.300'. [ 214.272536][ T7075] netlink: 8 bytes leftover after parsing attributes in process `syz.4.301'. [ 216.039677][ T30] audit: type=1326 audit(1747918871.188:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7086 comm="syz.2.307" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f0399b8e969 code=0x0 [ 216.577355][ T7103] usb usb1: usbfs: process 7103 (syz.0.309) did not claim interface 0 before use [ 216.650891][ T7092] syz.3.308 (7092) used greatest stack depth: 16200 bytes left [ 216.878009][ T7107] fuse: Unknown parameter 'use00000000000000000005' [ 216.968036][ T30] audit: type=1326 audit(1747918872.088:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7108 comm="syz.1.312" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d72d8e969 code=0x7fc00000 [ 217.548874][ T30] audit: type=1326 audit(1747918872.148:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7108 comm="syz.1.312" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f4d72d85927 code=0x7fc00000 [ 217.624988][ T30] audit: type=1326 audit(1747918872.148:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7108 comm="syz.1.312" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f4d72d2ab39 code=0x7fc00000 [ 218.920535][ T7137] netlink: 8 bytes leftover after parsing attributes in process `syz.3.315'. [ 219.321929][ T7145] mmap: syz.3.315 (7145) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 219.525702][ T30] audit: type=1326 audit(1747918874.668:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7146 comm="syz.4.319" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f521e38e969 code=0x7fc00000 [ 220.217487][ T30] audit: type=1326 audit(1747918875.058:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7108 comm="syz.1.312" exe="/root/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7f4d72d2abff code=0x7fc00000 [ 220.260974][ T7150] fuse: Unknown parameter 'fd0x0000000000000004' [ 220.274937][ T30] audit: type=1326 audit(1747918875.408:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7146 comm="syz.4.319" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f521e385927 code=0x7fc00000 [ 222.365129][ T7170] fuse: Unknown parameter 'user_i00000000000000000005' [ 222.599067][ T30] audit: type=1326 audit(1747918877.708:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7146 comm="syz.4.319" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f521e32ab39 code=0x7fc00000 [ 222.889168][ T7179] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 223.437699][ T7188] tipc: Enabling of bearer rejected, failed to enable media [ 227.335281][ T30] audit: type=1326 audit(1747918882.478:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7203 comm="syz.2.332" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0399b8e969 code=0x7fc00000 [ 227.438889][ T30] audit: type=1326 audit(1747918882.528:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7203 comm="syz.2.332" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f0399b85927 code=0x7fc00000 [ 227.527695][ T30] audit: type=1326 audit(1747918882.528:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7203 comm="syz.2.332" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f0399b2ab39 code=0x7fc00000 [ 228.705762][ T7231] fuse: Unknown parameter 'fd0x0000000000000004' [ 228.753999][ T7232] 9pnet_fd: Insufficient options for proto=fd [ 228.963073][ T7239] fuse: Unknown parameter 'user_i00000000000000000005' [ 230.147698][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:22:7a:b6:96:13:be, vlan:0) [ 230.162874][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:22:7a:b6:96:13:be, vlan:0) [ 230.176489][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:22:7a:b6:96:13:be, vlan:0) [ 230.190329][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:22:7a:b6:96:13:be, vlan:0) [ 230.204101][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:22:7a:b6:96:13:be, vlan:0) [ 230.217918][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:22:7a:b6:96:13:be, vlan:0) [ 230.231715][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:22:7a:b6:96:13:be, vlan:0) [ 230.245462][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:22:7a:b6:96:13:be, vlan:0) [ 230.259237][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:22:7a:b6:96:13:be, vlan:0) [ 230.274357][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:22:7a:b6:96:13:be, vlan:0) [ 230.391477][ T30] audit: type=1326 audit(1747918885.528:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7203 comm="syz.2.332" exe="/root/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7f0399b2abff code=0x7fc00000 [ 230.864858][ T30] audit: type=1326 audit(1747918886.008:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7226 comm="syz.1.336" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f4d72d85927 code=0x7fc00000 [ 233.208135][ T7266] netlink: 'syz.0.348': attribute type 4 has an invalid length. [ 235.157334][ C1] net_ratelimit: 3452 callbacks suppressed [ 235.157352][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:22:7a:b6:96:13:be, vlan:0) [ 235.177336][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:22:7a:b6:96:13:be, vlan:0) [ 235.190472][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:22:7a:b6:96:13:be, vlan:0) [ 235.203593][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:22:7a:b6:96:13:be, vlan:0) [ 235.216627][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:22:7a:b6:96:13:be, vlan:0) [ 235.229637][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:22:7a:b6:96:13:be, vlan:0) [ 235.242640][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:22:7a:b6:96:13:be, vlan:0) [ 235.255583][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:22:7a:b6:96:13:be, vlan:0) [ 235.268742][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:22:7a:b6:96:13:be, vlan:0) [ 235.282169][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:22:7a:b6:96:13:be, vlan:0) [ 236.221395][ T7275] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 236.373929][ T7273] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 236.474038][ T7273] cramfs: wrong magic [ 236.531424][ T7275] cramfs: wrong magic [ 240.167550][ C0] net_ratelimit: 16355 callbacks suppressed [ 240.167571][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 240.167840][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:22:7a:b6:96:13:be, vlan:0) [ 240.174160][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 240.186076][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 240.198467][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 240.210211][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 240.222331][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 240.235739][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:22:7a:b6:96:13:be, vlan:0) [ 240.246452][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 240.258108][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 242.381123][ C0] sched: DL replenish lagged too much [ 245.177424][ C0] net_ratelimit: 17585 callbacks suppressed [ 245.177446][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 245.177821][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:22:7a:b6:96:13:be, vlan:0) [ 245.183961][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 245.195730][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 245.208050][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 245.220188][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 245.232351][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 245.245172][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:22:7a:b6:96:13:be, vlan:0) [ 245.256526][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 245.268539][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 250.187210][ C0] net_ratelimit: 17748 callbacks suppressed [ 250.187257][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 250.187561][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:22:7a:b6:96:13:be, vlan:0) [ 250.193765][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 250.205479][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 250.217931][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 250.229664][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 250.241895][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 250.254660][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:22:7a:b6:96:13:be, vlan:0) [ 250.265959][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 250.277676][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 255.197260][ C0] net_ratelimit: 17590 callbacks suppressed [ 255.197283][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 255.197374][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:22:7a:b6:96:13:be, vlan:0) [ 255.203804][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 255.215633][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 255.227851][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 255.240118][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 255.252081][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 255.265658][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:22:7a:b6:96:13:be, vlan:0) [ 255.276327][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 255.288108][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 257.171130][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 258.048665][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 260.207163][ C0] net_ratelimit: 17701 callbacks suppressed [ 260.207185][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 260.207350][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 260.213834][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 260.225782][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 260.237947][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 260.250850][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:22:7a:b6:96:13:be, vlan:0) [ 260.262087][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 260.273762][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 260.286267][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 260.298195][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 265.217407][ C1] net_ratelimit: 17567 callbacks suppressed [ 265.217430][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 265.217495][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 265.224972][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:22:7a:b6:96:13:be, vlan:0) [ 265.235992][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 265.247802][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 265.260338][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 265.272261][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 265.284251][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 265.297249][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:22:7a:b6:96:13:be, vlan:0) [ 265.308249][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 270.227264][ C1] net_ratelimit: 17650 callbacks suppressed [ 270.227285][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:22:7a:b6:96:13:be, vlan:0) [ 270.227598][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 270.233557][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 270.246047][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 270.257907][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 270.270047][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 270.282947][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:22:7a:b6:96:13:be, vlan:0) [ 270.294906][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 270.306436][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 270.318879][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 275.237410][ C0] net_ratelimit: 17776 callbacks suppressed [ 275.237433][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 275.238215][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:22:7a:b6:96:13:be, vlan:0) [ 275.244144][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 275.256044][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 275.268402][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 275.280426][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 275.292446][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 275.305518][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:22:7a:b6:96:13:be, vlan:0) [ 275.316459][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 275.328135][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 280.247302][ C0] net_ratelimit: 17782 callbacks suppressed [ 280.247324][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 280.247345][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 280.254032][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 280.266887][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:22:7a:b6:96:13:be, vlan:0) [ 280.277916][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 280.289681][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 280.301921][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 280.313769][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 280.325934][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 280.338869][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:22:7a:b6:96:13:be, vlan:0) [ 285.257413][ C1] net_ratelimit: 17947 callbacks suppressed [ 285.257436][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 285.257452][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 285.264044][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 285.275998][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 285.288916][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:22:7a:b6:96:13:be, vlan:0) [ 285.300060][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 285.311948][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 285.324327][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 285.336111][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 285.348514][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 290.267139][ C0] net_ratelimit: 18046 callbacks suppressed [ 290.267162][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 290.268140][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:22:7a:b6:96:13:be, vlan:0) [ 290.273621][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 290.285458][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 290.297709][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 290.309612][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 290.321631][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 290.334526][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:22:7a:b6:96:13:be, vlan:0) [ 290.345595][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 290.357423][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 295.277339][ C1] net_ratelimit: 17837 callbacks suppressed [ 295.277360][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 295.277484][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 295.283784][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 295.295931][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 295.309611][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:22:7a:b6:96:13:be, vlan:0) [ 295.319984][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 295.331730][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 295.344065][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 295.355907][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 295.368059][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 300.287342][ C0] net_ratelimit: 17532 callbacks suppressed [ 300.287365][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 300.288400][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:22:7a:b6:96:13:be, vlan:0) [ 300.293929][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 300.305591][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 300.318076][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 300.329761][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 300.341969][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 300.354623][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:22:7a:b6:96:13:be, vlan:0) [ 300.366007][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 300.377627][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 305.297229][ C1] net_ratelimit: 17486 callbacks suppressed [ 305.297252][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 305.297594][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 305.303865][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 305.316028][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 305.328774][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:22:7a:b6:96:13:be, vlan:0) [ 305.340022][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 305.351712][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 305.364882][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 305.375878][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 305.387959][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 310.307313][ C1] net_ratelimit: 17713 callbacks suppressed [ 310.307334][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 310.307433][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 310.314741][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:22:7a:b6:96:13:be, vlan:0) [ 310.325902][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 310.337663][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 310.349959][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 310.361814][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 310.373926][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 310.386740][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:22:7a:b6:96:13:be, vlan:0) [ 310.398042][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 315.317268][ C0] net_ratelimit: 17550 callbacks suppressed [ 315.317290][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 315.318367][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:22:7a:b6:96:13:be, vlan:0) [ 315.323765][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 315.335527][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 315.347920][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 315.359672][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 315.371821][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 315.384630][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:22:7a:b6:96:13:be, vlan:0) [ 315.395833][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 315.407575][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 317.629787][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 318.310977][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 320.327142][ C1] net_ratelimit: 17887 callbacks suppressed [ 320.327165][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 320.327479][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 320.334578][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:22:7a:b6:96:13:be, vlan:0) [ 320.345739][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 320.357457][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 320.369769][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 320.381615][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 320.393784][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 320.406631][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:22:7a:b6:96:13:be, vlan:0) [ 320.417832][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 325.337218][ C1] net_ratelimit: 17836 callbacks suppressed [ 325.337241][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 325.337560][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 325.344715][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:22:7a:b6:96:13:be, vlan:0) [ 325.356052][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 325.367948][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 325.380412][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 325.392255][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 325.404539][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 325.417357][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:22:7a:b6:96:13:be, vlan:0) [ 325.428693][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 330.347443][ C1] net_ratelimit: 17548 callbacks suppressed [ 330.347466][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 330.347895][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 330.354793][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:22:7a:b6:96:13:be, vlan:0) [ 330.366121][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 330.377772][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 330.390138][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 330.402019][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 330.414152][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 330.427003][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:22:7a:b6:96:13:be, vlan:0) [ 330.438217][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 335.357137][ C1] net_ratelimit: 17418 callbacks suppressed [ 335.357159][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:22:7a:b6:96:13:be, vlan:0) [ 335.357613][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 335.363433][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 335.375760][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 335.387594][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 335.399717][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 335.412570][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:22:7a:b6:96:13:be, vlan:0) [ 335.423903][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 335.435563][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 335.447913][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 340.367420][ C1] net_ratelimit: 17589 callbacks suppressed [ 340.367442][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 340.367586][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 340.374787][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:22:7a:b6:96:13:be, vlan:0) [ 340.386282][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 340.397760][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 340.410302][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 340.422041][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 340.434299][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 340.447074][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:22:7a:b6:96:13:be, vlan:0) [ 340.458594][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 345.377513][ C0] net_ratelimit: 17555 callbacks suppressed [ 345.377537][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 345.378134][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:22:7a:b6:96:13:be, vlan:0) [ 345.384029][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 345.395754][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 345.408115][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 345.419901][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 345.432026][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 345.444807][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:22:7a:b6:96:13:be, vlan:0) [ 345.456052][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 345.467708][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 350.387120][ C1] net_ratelimit: 17647 callbacks suppressed [ 350.387142][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 350.387506][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 350.393574][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 350.405856][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 350.418726][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:22:7a:b6:96:13:be, vlan:0) [ 350.430281][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 350.441734][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 350.453984][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 350.465864][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 350.477967][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 350.617113][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 350.624109][ C0] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P7270/1:b..l [ 350.632478][ C0] rcu: (detected by 0, t=10503 jiffies, g=20061, q=1635 ncpus=2) [ 350.640324][ C0] task:syz.3.350 state:R running task stack:26728 pid:7270 tgid:7269 ppid:5841 task_flags:0x40054c flags:0x00004002 [ 350.655117][ C0] Call Trace: [ 350.658443][ C0] [ 350.661418][ C0] __schedule+0x168f/0x4c70 [ 350.666081][ C0] ? preempt_schedule_irq+0xb5/0x150 [ 350.671420][ C0] ? __pfx___schedule+0x10/0x10 [ 350.676344][ C0] ? preempt_schedule_irq+0xaa/0x150 [ 350.681744][ C0] preempt_schedule_irq+0xb5/0x150 [ 350.686895][ C0] ? __pfx_preempt_schedule_irq+0x10/0x10 [ 350.692655][ C0] ? rcu_irq_exit_check_preempt+0xdf/0x210 [ 350.698505][ C0] irqentry_exit+0x6f/0x90 [ 350.702959][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 350.709060][ C0] RIP: 0010:unwind_next_frame+0xb13/0x2390 [ 350.714901][ C0] Code: 78 4d 8b 7e 08 49 8d 5e 10 49 89 dd 49 c1 ed 03 48 b8 00 00 00 00 00 fc ff df 41 80 7c 05 00 00 74 08 48 89 df e8 ed f1 ad 00 <48> 89 9c 24 88 00 00 00 49 8d 5c 24 f8 4d 8b 66 10 48 b8 00 00 00 [ 350.734551][ C0] RSP: 0018:ffffc9001acdf398 EFLAGS: 00000246 [ 350.740662][ C0] RAX: dffffc0000000000 RBX: ffffc9001acdf478 RCX: ffffffff8f91fc4c [ 350.748685][ C0] RDX: ffffffff900cd08e RSI: 0000000000000002 RDI: ffffffff8bc12060 [ 350.756682][ C0] RBP: 1ffff9200359be8e R08: 0000000000000001 R09: 0000000000000000 [ 350.764684][ C0] R10: 0000000000000000 R11: ffffffff8171ca05 R12: ffffc9001acdfc78 [ 350.772687][ C0] R13: 1ffff9200359be8f R14: ffffc9001acdf468 R15: ffffc9001acd8000 [ 350.780705][ C0] ? unwind_next_frame+0xa5/0x2390 [ 350.785955][ C0] ? unwind_next_frame+0xd4/0x2390 [ 350.791202][ C0] ? unwind_next_frame+0xa5/0x2390 [ 350.796352][ C0] ? do_exit+0x859/0x2550 [ 350.800733][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 350.806921][ C0] arch_stack_walk+0x11c/0x150 [ 350.811737][ C0] ? do_exit+0x859/0x2550 [ 350.816173][ C0] stack_trace_save+0x9c/0xe0 [ 350.820883][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 350.826287][ C0] ? __kasan_kmalloc+0x93/0xb0 [ 350.831085][ C0] ? __kmalloc_cache_noprof+0x230/0x3d0 [ 350.836664][ C0] ? kmem_cache_free+0x169/0x3f0 [ 350.841638][ C0] ? exit_mmap+0x593/0xba0 [ 350.846080][ C0] ? __mmput+0x118/0x410 [ 350.850357][ C0] ? exit_mm+0x1da/0x2c0 [ 350.854889][ C0] ? do_exit+0x859/0x2550 [ 350.859246][ C0] ? do_group_exit+0x21c/0x2d0 [ 350.864043][ C0] kasan_save_stack+0x3e/0x60 [ 350.868769][ C0] ? kasan_save_stack+0x3e/0x60 [ 350.874282][ C0] ? kasan_record_aux_stack+0xbc/0xd0 [ 350.879778][ C0] ? kmem_cache_free+0x2ee/0x3f0 [ 350.884767][ C0] ? exit_mmap+0x593/0xba0 [ 350.889215][ C0] ? __mmput+0x118/0x410 [ 350.893512][ C0] ? exit_mm+0x1da/0x2c0 [ 350.898131][ C0] ? do_exit+0x859/0x2550 [ 350.902556][ C0] ? __phys_addr+0xba/0x170 [ 350.907096][ C0] ? exit_mmap+0x593/0xba0 [ 350.911539][ C0] kasan_record_aux_stack+0xbc/0xd0 [ 350.916773][ C0] kmem_cache_free+0x2ee/0x3f0 [ 350.921588][ C0] exit_mmap+0x593/0xba0 [ 350.925867][ C0] ? __pfx_exit_mmap+0x10/0x10 [ 350.930745][ C0] ? __mutex_unlock_slowpath+0x1cd/0x700 [ 350.936430][ C0] ? __pfx_exit_aio+0x10/0x10 [ 350.941175][ C0] ? uprobe_clear_state+0x274/0x290 [ 350.946504][ C0] ? mm_update_next_owner+0xa7/0x870 [ 350.951827][ C0] __mmput+0x118/0x410 [ 350.955945][ C0] exit_mm+0x1da/0x2c0 [ 350.960139][ C0] ? __pfx_exit_mm+0x10/0x10 [ 350.964768][ C0] ? taskstats_exit+0x43c/0xa30 [ 350.969664][ C0] ? tty_audit_exit+0x153/0x200 [ 350.974557][ C0] do_exit+0x859/0x2550 [ 350.978770][ C0] ? do_raw_spin_lock+0x121/0x290 [ 350.983833][ C0] ? __pfx_do_exit+0x10/0x10 [ 350.988464][ C0] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 350.993894][ C0] do_group_exit+0x21c/0x2d0 [ 350.998520][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 351.003760][ C0] get_signal+0x125e/0x1310 [ 351.008414][ C0] arch_do_signal_or_restart+0x95/0x780 [ 351.014018][ C0] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 351.020235][ C0] ? local_irq_enable_exit_to_user+0x5/0x10 [ 351.026177][ C0] syscall_exit_to_user_mode+0x8b/0x120 [ 351.031806][ C0] do_syscall_64+0x103/0x210 [ 351.036436][ C0] ? clear_bhb_loop+0x60/0xb0 [ 351.041150][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 351.047080][ C0] RIP: 0033:0x7fde6318e969 [ 351.051524][ C0] RSP: 002b:00007fde63f33038 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 351.060058][ C0] RAX: 0000000000001113 RBX: 00007fde633b5fa0 RCX: 00007fde6318e969 [ 351.068064][ C0] RDX: 0000000000000002 RSI: 0000200000000840 RDI: 0000000000000009 [ 351.076061][ C0] RBP: 00007fde63210ab1 R08: 0000000000000000 R09: 0000000000000000 [ 351.084065][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 351.092064][ C0] R13: 0000000000000000 R14: 00007fde633b5fa0 R15: 00007ffe9e8adde8 [ 351.100142][ C0] [ 355.397381][ C1] net_ratelimit: 16399 callbacks suppressed [ 355.397405][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:22:7a:b6:96:13:be, vlan:0) [ 355.397882][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 355.403792][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:22:7a:b6:96:13:be, vlan:0) [ 355.416067][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 355.427736][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 355.440093][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 355.451907][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 355.464224][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 355.477461][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:22:7a:b6:96:13:be, vlan:0) [ 355.488466][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 360.407384][ C0] net_ratelimit: 17669 callbacks suppressed [ 360.407406][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 360.407996][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:22:7a:b6:96:13:be, vlan:0) [ 360.413851][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 360.425829][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:22:7a:b6:96:13:be, vlan:0) [ 360.438081][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 360.449980][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 360.462317][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 360.474154][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 360.486345][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 360.499273][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:22:7a:b6:96:13:be, vlan:0)